Function at 0x48b738
Capabilities:
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffcc
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x2c], eax
xor eax, eax
push ebp
push 0x59baf2
push dword fs:[eax]
mov dword fs:[eax], esp
mov ebx, dword [ebp + 8]
xor edx, edx
push ebp
push 0x59bab9
push dword fs:[edx]
mov dword fs:[edx], esp
lea esi, [ebx + ebx*8]
mov eax, dword [0x5d1250]
mov eax, dword [eax + esi*8]
cmp eax, 0x141
jne 0x48b77a
inc ebx
jmp 0x48b765
cmp eax, 0x1e2
jne 0x48b859
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.0048b6cc
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 1
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1e4
jne 0x48b943
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.0048b648
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 0
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x13
jne 0x48b9ee
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov dl, byte [eax + esi*8 + 0x19]
mov eax, dword [ebp - 0x1c]
call fcn.0048b5f4
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xcd
jne 0x48bbba
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48ba56
sub al, 8
je 0x48bab4
jmp 0x48bb2c
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x15
call fcn.0048a570
mov dword [ebp - 0x20], eax
movsx eax, word [ebp - 0x20]
movsx edx, byte [ebp - 0x1c]
mov ecx, edx
cdq
idiv ecx
mov byte [ebp - 0x28], al
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 1
call fcn.0048a8c4
movsx eax, word [ebp - 0x20]
movsx edx, byte [ebp - 0x1c]
mov ecx, edx
cdq
idiv ecx
mov byte [ebp - 0x28], dl
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 5
call fcn.0048a8c4
jmp 0x48bbb4
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x17
call fcn.0048a570
mov esi, eax
shl esi, 0x10
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x15
call fcn.0048a570
add esi, eax
mov dword [ebp - 0x20], esi
movsx eax, word [ebp - 0x1c]
push eax
mov eax, esi
pop edx
mov ecx, edx
cdq
idiv ecx
mov word [ebp - 0x28], ax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x15
call fcn.0048a8c4
movsx eax, word [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x20]
pop edx
mov ecx, edx
cdq
idiv ecx
mov word [ebp - 0x28], dx
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x17
call fcn.0048a8c4
jmp 0x48bbb4
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x27
call fcn.0048a570
xor edx, edx
mov edx, eax
xor eax, eax
push edx
push eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x25
call fcn.0048a570
xor edx, edx
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x1c]
cdq
push edx
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.00405bc8
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x25
call fcn.0048a8c4
mov eax, dword [ebp - 0x1c]
cdq
push edx
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.00405c44
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x27
call fcn.0048a8c4
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x5f
jne 0x48bd8c
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48bc1f
sub al, 8
je 0x48bc81
jmp 0x48bcfc
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x15
call fcn.0048a570
mov dword [ebp - 0x20], eax
movzx eax, word [ebp - 0x20]
xor edx, edx
mov dl, byte [ebp - 0x1c]
mov ecx, edx
xor edx, edx
div ecx
mov byte [ebp - 0x28], al
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 1
call fcn.0048a8c4
movzx eax, word [ebp - 0x20]
xor edx, edx
mov dl, byte [ebp - 0x1c]
mov ecx, edx
xor edx, edx
div ecx
mov byte [ebp - 0x28], dl
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 5
call fcn.0048a8c4
jmp 0x48bd86
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x17
call fcn.0048a570
mov esi, eax
shl esi, 0x10
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x15
call fcn.0048a570
add esi, eax
mov dword [ebp - 0x20], esi
movzx eax, word [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x20]
pop edx
mov ecx, edx
xor edx, edx
div ecx
mov word [ebp - 0x28], ax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x15
call fcn.0048a8c4
movzx eax, word [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x20]
pop edx
mov ecx, edx
xor edx, edx
div ecx
mov word [ebp - 0x28], dx
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x17
call fcn.0048a8c4
jmp 0x48bd86
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x27
call fcn.0048a570
xor edx, edx
mov edx, eax
xor eax, eax
push edx
push eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x25
call fcn.0048a570
xor edx, edx
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x1c]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.00405bc8
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x25
call fcn.0048a8c4
mov eax, dword [ebp - 0x1c]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.00405c44
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x27
call fcn.0048a8c4
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xce
jne 0x48c2e1
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48bdf8
sub al, 8
je 0x48becb
jmp 0x48c0bc
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0xc], 0x8c
jne 0x48be73
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0x20], 0
jne 0x48be73
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0x34], 0
jne 0x48be73
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048a570
mov dword [ebp - 0x20], eax
movsx eax, byte [ebp - 0x1c]
movsx edx, byte [ebp - 0x20]
imul dx
mov word [ebp - 0x28], ax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x15
call fcn.0048a8c4
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 5
call fcn.0048a570
mov dword [ebp - 0x28], eax
cmp byte [ebp - 0x28], 0
jbe 0x48bea2
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov cl, 1
mov edx, 1
call fcn.0048b550
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov cl, 1
mov edx, 0x800
call fcn.0048b550
jmp 0x48c2db
mov eax, dword [ebp + 0xc]
add eax, 0x10
xor ecx, ecx
mov edx, 1
call fcn.0048b550
mov eax, dword [ebp + 0xc]
add eax, 0x10
xor ecx, ecx
mov edx, 0x800
call fcn.0048b550
jmp 0x48c2db
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0xc], 0
je 0x48bf58
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0x20], 0
jne 0x48bf58
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0x34], 0
jne 0x48bf58
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x15
call fcn.0048a570
mov dword [ebp - 0x20], eax
movsx eax, word [ebp - 0x1c]
movsx edx, word [ebp - 0x20]
imul edx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x15
call fcn.0048a8c4
shr dword [ebp - 0x28], 0x10
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x17
call fcn.0048a8c4
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x17
call fcn.0048a570
mov dword [ebp - 0x28], eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0xc], 0
je 0x48bfda
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0x20], 0
je 0x48bfda
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0x34], 0
jne 0x48bfda
movsx edx, word [ebp - 0x1c]
movsx ecx, word [ebp - 0x20]
imul edx, ecx
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x20]
push edx
mov edx, dword [ebp - 0x24]
push edx
push 1
push 0
push 0
mov edx, dword [0x5d1250]
mov dl, byte [edx + eax*8 + 0x19]
push edx
mov edx, dword [0x5d1250]
mov dl, byte [edx + eax*8 + 0x2d]
push edx
mov edx, dword [0x5d1250]
mov dl, byte [edx + eax*8 + 0x41]
push edx
mov edx, dword [0x5d1250]
lea edx, [edx + eax*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
shr dword [ebp - 0x28], 0x10
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0xc], 0
je 0x48c05c
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0x20], 0
je 0x48c05c
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0x34], 0
je 0x48c05c
movsx edx, word [ebp - 0x20]
movsx ecx, word [ebp - 0x24]
imul edx, ecx
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x20]
push edx
mov edx, dword [ebp - 0x24]
push edx
push 1
push 0
push 0
mov edx, dword [0x5d1250]
mov dl, byte [edx + eax*8 + 0x19]
push edx
mov edx, dword [0x5d1250]
mov dl, byte [edx + eax*8 + 0x2d]
push edx
mov edx, dword [0x5d1250]
mov dl, byte [edx + eax*8 + 0x41]
push edx
mov edx, dword [0x5d1250]
lea edx, [edx + eax*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
shr dword [ebp - 0x28], 0x10
cmp word [ebp - 0x28], 0
je 0x48c093
cmp word [ebp - 0x28], 0xffff
je 0x48c093
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov cl, 1
mov edx, 1
call fcn.0048b550
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov cl, 1
mov edx, 0x800
call fcn.0048b550
jmp 0x48c2db
mov eax, dword [ebp + 0xc]
add eax, 0x10
xor ecx, ecx
mov edx, 1
call fcn.0048b550
mov eax, dword [ebp + 0xc]
add eax, 0x10
xor ecx, ecx
mov edx, 0x800
call fcn.0048b550
jmp 0x48c2db
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0xc], 0
je 0x48c155
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0x20], 0
jne 0x48c155
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0x34], 0
jne 0x48c155
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x25
call fcn.0048a570
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cdq
push edx
push eax
mov eax, dword [ebp - 0x1c]
cdq
call fcn.00405ba4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x25
call fcn.0048a8c4
mov eax, dword [ebp - 0x14]
xor edx, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x27
call fcn.0048a8c4
lea esi, [ebx + ebx*8]
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8 + 0xc], 0
je 0x48c1ed
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8 + 0x20], 0
je 0x48c1ed
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8 + 0x34], 0
jne 0x48c1ed
mov eax, dword [ebp - 0x20]
cdq
push edx
push eax
mov eax, dword [ebp - 0x1c]
cdq
call fcn.00405ba4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
shrd eax, edx, 0x10
shr edx, 0x10
mov dword [ebp - 0x28], eax
lea esi, [ebx + ebx*8]
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8 + 0xc], 0
je 0x48c285
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8 + 0x20], 0
je 0x48c285
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8 + 0x34], 0
je 0x48c285
mov eax, dword [ebp - 0x24]
cdq
push edx
push eax
mov eax, dword [ebp - 0x20]
cdq
call fcn.00405ba4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
shrd eax, edx, 0x10
shr edx, 0x10
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x48c2b7
cmp dword [ebp - 0x28], 0xffffffff
je 0x48c2b7
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov cl, 1
mov edx, 1
call fcn.0048b550
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov cl, 1
mov edx, 0x800
call fcn.0048b550
jmp 0x48c2db
mov eax, dword [ebp + 0xc]
add eax, 0x10
xor ecx, ecx
mov edx, 1
call fcn.0048b550
mov eax, dword [ebp + 0xc]
add eax, 0x10
xor ecx, ecx
mov edx, 0x800
call fcn.0048b550
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x13b
jne 0x48c566
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48c34d
sub al, 8
je 0x48c3ea
jmp 0x48c49b
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048a570
mov dword [ebp - 0x20], eax
xor eax, eax
mov al, byte [ebp - 0x1c]
xor edx, edx
mov dl, byte [ebp - 0x20]
imul dx
mov word [ebp - 0x28], ax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x15
call fcn.0048a8c4
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 5
call fcn.0048a570
test al, al
jbe 0x48c3c1
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov cl, 1
mov edx, 1
call fcn.0048b550
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov cl, 1
mov edx, 0x800
call fcn.0048b550
jmp 0x48c560
mov eax, dword [ebp + 0xc]
add eax, 0x10
xor ecx, ecx
mov edx, 1
call fcn.0048b550
mov eax, dword [ebp + 0xc]
add eax, 0x10
xor ecx, ecx
mov edx, 0x800
call fcn.0048b550
jmp 0x48c560
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x15
call fcn.0048a570
mov dword [ebp - 0x20], eax
movzx eax, word [ebp - 0x1c]
movzx edx, word [ebp - 0x20]
imul edx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x15
call fcn.0048a8c4
shr dword [ebp - 0x28], 0x10
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x17
call fcn.0048a8c4
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x17
call fcn.0048a570
test ax, ax
jbe 0x48c472
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov cl, 1
mov edx, 1
call fcn.0048b550
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov cl, 1
mov edx, 0x800
call fcn.0048b550
jmp 0x48c560
mov eax, dword [ebp + 0xc]
add eax, 0x10
xor ecx, ecx
mov edx, 1
call fcn.0048b550
mov eax, dword [ebp + 0xc]
add eax, 0x10
xor ecx, ecx
mov edx, 0x800
call fcn.0048b550
jmp 0x48c560
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x25
call fcn.0048a570
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 0x1c]
xor edx, edx
call fcn.00405ba4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x25
call fcn.0048a8c4
mov eax, dword [ebp - 0x14]
xor edx, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, 0x27
call fcn.0048a8c4
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x27
call fcn.0048a570
test eax, eax
jbe 0x48c53c
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov cl, 1
mov edx, 1
call fcn.0048b550
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov cl, 1
mov edx, 0x800
call fcn.0048b550
jmp 0x48c560
mov eax, dword [ebp + 0xc]
add eax, 0x10
xor ecx, ecx
mov edx, 1
call fcn.0048b550
mov eax, dword [ebp + 0xc]
add eax, 0x10
xor ecx, ecx
mov edx, 0x800
call fcn.0048b550
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x140
jne 0x48c673
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x20]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
xor eax, eax
mov dword [ebp - 0x1c], eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48c5d0
sub al, 8
je 0x48c5db
jmp 0x48c5e9
mov al, byte [ebp - 0x1c]
sub al, byte [ebp - 0x20]
mov byte [ebp - 0x28], al
jmp 0x48c5f2
mov ax, word [ebp - 0x1c]
sub ax, word [ebp - 0x20]
mov word [ebp - 0x28], ax
jmp 0x48c5f2
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 0
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x142
jne 0x48c743
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48c6d8
sub al, 8
je 0x48c6e2
jmp 0x48c6ef
mov al, byte [ebp - 0x1c]
not al
mov byte [ebp - 0x28], al
jmp 0x48c6f7
mov ax, word [ebp - 0x1c]
not ax
mov word [ebp - 0x28], ax
jmp 0x48c6f7
mov eax, dword [ebp - 0x1c]
not eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea esi, [ebx + ebx*8]
mov eax, dword [0x5d1250]
mov eax, dword [eax + esi*8]
cmp eax, 0x131
je 0x48c7b5
cmp eax, 0x135
je 0x48c7b5
cmp eax, 0x132
je 0x48c7b5
cmp eax, 0x1f3
je 0x48c7b5
cmp eax, 0x1f4
je 0x48c7b5
cmp eax, 0x1f5
je 0x48c7b5
cmp eax, 0x100
je 0x48c7b5
cmp eax, 0x103
je 0x48c7b5
cmp eax, 0x101
je 0x48c7b5
cmp eax, 0x35
je 0x48c7b5
cmp eax, 0x39
je 0x48c7b5
cmp eax, 0x36
je 0x48c7b5
cmp eax, 0x1cb
je 0x48c7b5
cmp eax, 0x1ce
je 0x48c7b5
cmp eax, 0x1cc
jne 0x48cd1c
mov edi, 1
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 8]
add al, 0xe
sub al, 2
jae 0x48c7cf
mov eax, dword [ebp + 0xc]
mov edi, dword [eax + 0x14]
test edi, edi
jbe 0x48cd16
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov eax, dword [edx + eax*8]
cmp eax, 0x131
je 0x48c804
cmp eax, 0x1f3
je 0x48c804
cmp eax, 0x100
je 0x48c804
cmp eax, 0x35
je 0x48c804
cmp eax, 0x1cb
jne 0x48c80b
mov dword [ebp - 0xc], 1
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov eax, dword [edx + eax*8]
cmp eax, 0x135
je 0x48c838
cmp eax, 0x1f4
je 0x48c838
cmp eax, 0x103
je 0x48c838
cmp eax, 0x39
je 0x48c838
cmp eax, 0x1ce
jne 0x48c83f
mov dword [ebp - 0xc], 2
lea esi, [ebx + ebx*8]
mov eax, dword [0x5d1250]
mov eax, dword [eax + esi*8]
cmp eax, 0x132
je 0x48c86b
cmp eax, 0x1f5
je 0x48c86b
cmp eax, 0x101
je 0x48c86b
cmp eax, 0x36
je 0x48c86b
cmp eax, 0x1cc
jne 0x48c872
mov dword [ebp - 0xc], 4
mov edx, dword [ebp - 0xc]
dec edx
je 0x48c88d
dec edx
je 0x48c990
sub edx, 2
je 0x48ca9f
jmp 0x48cb84
cmp eax, 0x131
jne 0x48c8a4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x28]
mov al, byte [eax]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x2c]
mov byte [edx], al
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8], 0x1f3
jne 0x48c8c0
mov eax, dword [ebp + 0xc]
mov al, byte [eax + 0x10]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x2c]
mov byte [edx], al
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8], 0x100
jne 0x48c8ee
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x28]
xor ecx, ecx
mov cl, byte [eax]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048a8c4
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8], 0x35
jne 0x48c93a
push 8
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x28]
movzx eax, byte [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
push 8
push 0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x28]
xor ecx, ecx
mov cl, byte [eax]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x2c]
movzx eax, byte [eax]
sub ecx, eax
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x9f
call fcn.0048b12c
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8], 0x1cb
jne 0x48cb84
push 8
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x2c]
movzx eax, byte [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
push 8
push 0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x2c]
xor ecx, ecx
mov cl, byte [eax]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax + 0x10]
sub ecx, eax
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x9f
call fcn.0048b12c
jmp 0x48cb84
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x135
jne 0x48c9b4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x28]
mov ax, word [eax]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x2c]
mov word [edx], ax
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8], 0x1f4
jne 0x48c9d2
mov eax, dword [ebp + 0xc]
mov ax, word [eax + 0x10]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x2c]
mov word [edx], ax
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8], 0x103
jne 0x48c9ff
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x28]
movzx ecx, word [eax]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x15
call fcn.0048a8c4
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8], 0x39
jne 0x48ca4a
push 0x10
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x28]
movzx eax, word [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
push 0x10
push 0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x28]
movzx ecx, word [eax]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x2c]
movzx eax, word [eax]
sub ecx, eax
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x9f
call fcn.0048b12c
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8], 0x1ce
jne 0x48cb84
push 0x10
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x2c]
movzx eax, word [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
push 0x10
push 0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x2c]
movzx ecx, word [eax]
mov eax, dword [ebp + 0xc]
movzx eax, word [eax + 0x10]
sub ecx, eax
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x9f
call fcn.0048b12c
jmp 0x48cb84
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x132
jne 0x48cac1
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x28]
mov eax, dword [eax]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x2c]
mov dword [edx], eax
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8], 0x1f5
jne 0x48cadd
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x10]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x2c]
mov dword [edx], eax
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8], 0x101
jne 0x48cb03
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x25
call fcn.0048a8c4
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8], 0x36
jne 0x48cb43
push 0x20
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x28]
mov eax, dword [eax]
push eax
push 0x20
push 0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x2c]
sub ecx, dword [eax]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x9f
call fcn.0048b12c
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8], 0x1cc
jne 0x48cb84
push 0x20
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x2c]
mov eax, dword [eax]
push eax
push 0x20
push 0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x2c]
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
sub ecx, dword [eax + 0x10]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x9f
call fcn.0048b12c
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x400
call fcn.0048b56c
test al, al
je 0x48cc13
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov eax, dword [edx + eax*8]
cmp eax, 0x100
je 0x48cbc2
cmp eax, 0x103
je 0x48cbc2
cmp eax, 0x101
je 0x48cbc2
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
sub dword [eax + 0x2c], edx
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov eax, dword [edx + eax*8]
cmp eax, 0x1f3
je 0x48cc7c
cmp eax, 0x1f4
je 0x48cc7c
cmp eax, 0x1f5
je 0x48cc7c
cmp eax, 0x1cb
je 0x48cc7c
cmp eax, 0x1ce
je 0x48cc7c
cmp eax, 0x1cc
je 0x48cc7c
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
sub dword [eax + 0x28], edx
jmp 0x48cc7c
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov eax, dword [edx + eax*8]
cmp eax, 0x100
je 0x48cc3d
cmp eax, 0x103
je 0x48cc3d
cmp eax, 0x101
je 0x48cc3d
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
add dword [eax + 0x2c], edx
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov eax, dword [edx + eax*8]
cmp eax, 0x1f3
je 0x48cc7c
cmp eax, 0x1f4
je 0x48cc7c
cmp eax, 0x1f5
je 0x48cc7c
cmp eax, 0x1cb
je 0x48cc7c
cmp eax, 0x1ce
je 0x48cc7c
cmp eax, 0x1cc
je 0x48cc7c
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
add dword [eax + 0x28], edx
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 8]
add al, 0xe
sub al, 2
jae 0x48cd0d
mov eax, dword [ebp + 0xc]
dec dword [eax + 0x14]
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov eax, dword [edx + eax*8]
cmp eax, 0x35
je 0x48ccc5
cmp eax, 0x39
je 0x48ccc5
cmp eax, 0x36
je 0x48ccc5
cmp eax, 0x1cb
je 0x48ccc5
cmp eax, 0x1ce
je 0x48ccc5
cmp eax, 0x1cc
jne 0x48cd0d
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp byte [edx + eax*8 + 8], 0xf3
jne 0x48cce9
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x40
call fcn.0048b56c
test al, al
je 0x48cd16
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp byte [edx + eax*8 + 8], 0xf2
jne 0x48cd0d
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x40
call fcn.0048b56c
test al, al
jne 0x48cd16
dec edi
test edi, edi
ja 0x48c7d7
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1ee
jne 0x48cd46
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov cl, 1
mov edx, 1
call fcn.0048b550
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1b
jne 0x48cd6d
mov eax, dword [ebp + 0xc]
add eax, 0x10
xor ecx, ecx
mov edx, 1
call fcn.0048b550
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1ef
jne 0x48cd97
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov cl, 1
mov edx, 0x400
call fcn.0048b550
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1c
jne 0x48cdbe
mov eax, dword [ebp + 0xc]
add eax, 0x10
xor ecx, ecx
mov edx, 0x400
call fcn.0048b550
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x5b
jne 0x48cdf0
mov eax, dword [ebp + 0xc]
test byte [eax + 0x13], 0x80
je 0x48cde2
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x18], 0xffffffff
jmp 0x48cdea
mov eax, dword [ebp + 0xc]
xor edx, edx
mov dword [eax + 0x18], edx
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x20
jne 0x48ce2a
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
mov ecx, eax
xor cl, 1
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b550
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1b7
jne 0x48cfac
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
cmp byte [ebp - 0x20], 0
jbe 0x48cfa6
movzx esi, byte [ebp - 0x20]
dec esi
test esi, esi
jb 0x48cf54
inc esi
lea edi, [ebx + ebx*8]
mov eax, dword [0x5d1250]
mov al, byte [eax + edi*8 + 0x19]
sub al, 8
je 0x48ceb0
sub al, 8
je 0x48ced4
jmp 0x48cefa
xor eax, eax
mov al, byte [ebp - 0x28]
shr eax, 1
mov byte [ebp - 0x28], al
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
je 0x48cf18
add byte [ebp - 0x28], 0x80
jmp 0x48cf18
movzx eax, word [ebp - 0x28]
shr eax, 1
mov word [ebp - 0x28], ax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
je 0x48cf18
add word [ebp - 0x28], 0x8000
jmp 0x48cf18
shr dword [ebp - 0x28], 1
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
je 0x48cf18
add dword [ebp - 0x28], 0x80000000
mov eax, dword [0x5d1250]
mov al, byte [eax + edi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 0
mov eax, dword [0x5d1250]
mov edx, dword [eax + edi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
dec esi
jne 0x48ce9a
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x2d]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x41]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
lea edx, [edx + eax*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1b4
jne 0x48d11a
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
cmp byte [ebp - 0x20], 0
jbe 0x48d114
movzx esi, byte [ebp - 0x20]
dec esi
test esi, esi
jb 0x48d0c2
inc esi
lea edi, [ebx + ebx*8]
mov eax, dword [0x5d1250]
mov al, byte [eax + edi*8 + 0x19]
sub al, 8
je 0x48d032
sub al, 8
je 0x48d04e
jmp 0x48d06c
shl byte [ebp - 0x28], 1
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
je 0x48d086
inc byte [ebp - 0x28]
jmp 0x48d086
shl word [ebp - 0x28], 1
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
je 0x48d086
inc word [ebp - 0x28]
jmp 0x48d086
shl dword [ebp - 0x28], 1
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
je 0x48d086
inc dword [ebp - 0x28]
mov eax, dword [0x5d1250]
mov al, byte [eax + edi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 1
mov eax, dword [0x5d1250]
mov edx, dword [eax + edi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
dec esi
jne 0x48d01c
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x2d]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x41]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
lea edx, [edx + eax*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1c6
jne 0x48d229
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48d17f
sub al, 8
je 0x48d18c
jmp 0x48d19d
mov cl, byte [ebp - 0x20]
mov al, byte [ebp - 0x1c]
shl al, cl
mov byte [ebp - 0x28], al
jmp 0x48d1a8
mov cx, word [ebp - 0x20]
mov ax, word [ebp - 0x1c]
shl ax, cl
mov word [ebp - 0x28], ax
jmp 0x48d1a8
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
shl eax, cl
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 1
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1c8
jne 0x48d35c
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48d28e
sub al, 8
je 0x48d2a8
jmp 0x48d2c4
mov cl, byte [ebp - 0x20]
mov eax, 1
shl eax, cl
push eax
movsx eax, byte [ebp - 0x1c]
pop edx
mov ecx, edx
cdq
idiv ecx
mov byte [ebp - 0x28], al
jmp 0x48d2db
mov cx, word [ebp - 0x20]
mov eax, 1
shl eax, cl
push eax
movsx eax, word [ebp - 0x1c]
pop edx
mov ecx, edx
cdq
idiv ecx
mov word [ebp - 0x28], ax
jmp 0x48d2db
mov ecx, dword [ebp - 0x20]
mov eax, 1
shl eax, cl
push eax
mov eax, dword [ebp - 0x1c]
pop edx
mov ecx, edx
cdq
idiv ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 0
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1c0
jne 0x48d442
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov cl, byte [eax + esi*8 + 0x19]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.0048b5b4
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 1
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1c1
jne 0x48d528
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov cl, byte [eax + esi*8 + 0x19]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.0048b574
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 0
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1e1
jne 0x48d637
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48d58d
sub al, 8
je 0x48d59a
jmp 0x48d5ab
mov cl, byte [ebp - 0x20]
mov al, byte [ebp - 0x1c]
shl al, cl
mov byte [ebp - 0x28], al
jmp 0x48d5b6
mov cx, word [ebp - 0x20]
mov ax, word [ebp - 0x1c]
shl ax, cl
mov word [ebp - 0x28], ax
jmp 0x48d5b6
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
shl eax, cl
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 1
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1e3
jne 0x48d747
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48d69c
sub al, 8
je 0x48d6ab
jmp 0x48d6bb
mov cl, byte [ebp - 0x20]
xor eax, eax
mov al, byte [ebp - 0x1c]
shr eax, cl
mov byte [ebp - 0x28], al
jmp 0x48d6c6
mov cx, word [ebp - 0x20]
movzx eax, word [ebp - 0x1c]
shr eax, cl
mov word [ebp - 0x28], ax
jmp 0x48d6c6
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
shr eax, cl
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 0
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x104
jne 0x48d77c
mov eax, dword [ebp + 0xc]
dec dword [eax + 0x14]
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0x14], 0
je 0x48d776
mov eax, dword [0x5d1250]
mov ebx, dword [eax + esi*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xde
jne 0x48d7f2
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8 + 0xc], 0x90
je 0x48d7e4
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
jmp 0x48f6af
mov eax, dword [0x5d1250]
mov ebx, dword [eax + esi*8 + 0x1c]
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xe4
jne 0x48d82c
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x40
call fcn.0048b56c
test al, al
je 0x48d826
mov eax, dword [0x5d1250]
mov ebx, dword [eax + esi*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xe5
jne 0x48d866
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x40
call fcn.0048b56c
test al, al
jne 0x48d860
mov eax, dword [0x5d1250]
mov ebx, dword [eax + esi*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xe8
jne 0x48d8a0
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x80
call fcn.0048b56c
test al, al
je 0x48d89a
mov eax, dword [0x5d1250]
mov ebx, dword [eax + esi*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xe9
jne 0x48d8da
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x80
call fcn.0048b56c
test al, al
jne 0x48d8d4
mov eax, dword [0x5d1250]
mov ebx, dword [eax + esi*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xea
jne 0x48d914
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 4
call fcn.0048b56c
test al, al
je 0x48d90e
mov eax, dword [0x5d1250]
mov ebx, dword [eax + esi*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xeb
jne 0x48d94e
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 4
call fcn.0048b56c
test al, al
jne 0x48d948
mov eax, dword [0x5d1250]
mov ebx, dword [eax + esi*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xe0
jne 0x48d988
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x800
call fcn.0048b56c
test al, al
je 0x48d982
mov eax, dword [0x5d1250]
mov ebx, dword [eax + esi*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xe1
jne 0x48d9c2
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x800
call fcn.0048b56c
test al, al
jne 0x48d9bc
mov eax, dword [0x5d1250]
mov ebx, dword [eax + esi*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xec
jne 0x48da0e
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x80
call fcn.0048b56c
push eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x800
call fcn.0048b56c
pop edx
cmp dl, al
je 0x48da08
mov eax, dword [0x5d1250]
mov ebx, dword [eax + esi*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xed
jne 0x48da5a
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x80
call fcn.0048b56c
push eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x800
call fcn.0048b56c
pop edx
cmp dl, al
jne 0x48da54
mov eax, dword [0x5d1250]
mov ebx, dword [eax + esi*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xee
jne 0x48dabe
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x40
call fcn.0048b56c
test al, al
jne 0x48daa6
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x80
call fcn.0048b56c
push eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x800
call fcn.0048b56c
pop edx
cmp dl, al
je 0x48dab8
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov ebx, dword [edx + eax*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xef
jne 0x48db22
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x40
call fcn.0048b56c
test al, al
jne 0x48db1c
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x80
call fcn.0048b56c
push eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x800
call fcn.0048b56c
pop edx
cmp dl, al
jne 0x48db1c
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov ebx, dword [edx + eax*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xe2
jne 0x48db5c
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
je 0x48db56
mov eax, dword [0x5d1250]
mov ebx, dword [eax + esi*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xe3
jne 0x48db96
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
jne 0x48db90
mov eax, dword [0x5d1250]
mov ebx, dword [eax + esi*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xe6
jne 0x48dbe8
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
jne 0x48dbd0
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x40
call fcn.0048b56c
test al, al
je 0x48dbe2
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov ebx, dword [edx + eax*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xe7
jne 0x48dc3a
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
jne 0x48dc34
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x40
call fcn.0048b56c
test al, al
jne 0x48dc34
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov ebx, dword [edx + eax*8 + 0x1c]
jmp 0x48b765
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1d3
jne 0x48dcb2
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x40
call fcn.0048b56c
test al, al
je 0x48dc66
mov byte [ebp - 0x28], 1
jmp 0x48dc6a
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1d4
jne 0x48dd2a
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x40
call fcn.0048b56c
test al, al
jne 0x48dcde
mov byte [ebp - 0x28], 1
jmp 0x48dce2
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1d7
jne 0x48dda2
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x80
call fcn.0048b56c
test al, al
je 0x48dd56
mov byte [ebp - 0x28], 1
jmp 0x48dd5a
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1d8
jne 0x48de1a
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x80
call fcn.0048b56c
test al, al
jne 0x48ddce
mov byte [ebp - 0x28], 1
jmp 0x48ddd2
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1d9
jne 0x48de92
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 4
call fcn.0048b56c
test al, al
je 0x48de46
mov byte [ebp - 0x28], 1
jmp 0x48de4a
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1da
jne 0x48df0a
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 4
call fcn.0048b56c
test al, al
jne 0x48debe
mov byte [ebp - 0x28], 1
jmp 0x48dec2
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1cf
jne 0x48df82
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x800
call fcn.0048b56c
test al, al
je 0x48df36
mov byte [ebp - 0x28], 1
jmp 0x48df3a
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1d0
jne 0x48dffa
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x800
call fcn.0048b56c
test al, al
jne 0x48dfae
mov byte [ebp - 0x28], 1
jmp 0x48dfb2
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1db
jne 0x48e084
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x80
call fcn.0048b56c
push eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x800
call fcn.0048b56c
pop edx
cmp dl, al
je 0x48e038
mov byte [ebp - 0x28], 1
jmp 0x48e03c
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1dc
jne 0x48e10e
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x80
call fcn.0048b56c
push eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x800
call fcn.0048b56c
pop edx
cmp dl, al
jne 0x48e0c2
mov byte [ebp - 0x28], 1
jmp 0x48e0c6
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1dd
jne 0x48e1c0
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x40
call fcn.0048b56c
test al, al
jne 0x48e15e
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x80
call fcn.0048b56c
push eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x800
call fcn.0048b56c
pop edx
cmp dl, al
je 0x48e164
mov byte [ebp - 0x28], 1
jmp 0x48e168
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x2d]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x41]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
lea edx, [edx + eax*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1de
jne 0x48e272
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x40
call fcn.0048b56c
test al, al
jne 0x48e216
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x80
call fcn.0048b56c
push eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x800
call fcn.0048b56c
pop edx
cmp dl, al
jne 0x48e216
mov byte [ebp - 0x28], 1
jmp 0x48e21a
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x2d]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x41]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
lea edx, [edx + eax*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1d1
jne 0x48e2ea
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
je 0x48e29e
mov byte [ebp - 0x28], 1
jmp 0x48e2a2
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1d2
jne 0x48e362
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
jne 0x48e316
mov byte [ebp - 0x28], 1
jmp 0x48e31a
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1d5
jne 0x48e402
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
jne 0x48e3a0
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x40
call fcn.0048b56c
test al, al
je 0x48e3a6
mov byte [ebp - 0x28], 1
jmp 0x48e3aa
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x2d]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x41]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
lea edx, [edx + eax*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1d6
jne 0x48e4a2
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
jne 0x48e446
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 0x40
call fcn.0048b56c
test al, al
jne 0x48e446
mov byte [ebp - 0x28], 1
jmp 0x48e44a
mov byte [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x2d]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x41]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
lea edx, [edx + eax*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 4
jne 0x48e5be
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
je 0x48e508
inc dword [ebp - 0x20]
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48e51b
sub al, 8
je 0x48e526
jmp 0x48e534
mov al, byte [ebp - 0x1c]
add al, byte [ebp - 0x20]
mov byte [ebp - 0x28], al
jmp 0x48e53d
mov ax, word [ebp - 0x1c]
add ax, word [ebp - 0x20]
mov word [ebp - 0x28], ax
jmp 0x48e53d
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 1
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 5
jne 0x48e6c3
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48e620
sub al, 8
je 0x48e62b
jmp 0x48e639
mov al, byte [ebp - 0x1c]
add al, byte [ebp - 0x20]
mov byte [ebp - 0x28], al
jmp 0x48e642
mov ax, word [ebp - 0x1c]
add ax, word [ebp - 0x20]
mov word [ebp - 0x28], ax
jmp 0x48e642
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 1
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1c9
jne 0x48e7e2
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, 1
call fcn.0048b56c
test al, al
je 0x48e72c
inc dword [ebp - 0x20]
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48e73f
sub al, 8
je 0x48e74a
jmp 0x48e758
mov al, byte [ebp - 0x1c]
sub al, byte [ebp - 0x20]
mov byte [ebp - 0x28], al
jmp 0x48e761
mov ax, word [ebp - 0x1c]
sub ax, word [ebp - 0x20]
mov word [ebp - 0x28], ax
jmp 0x48e761
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 0
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1f7
jne 0x48e8ea
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48e847
sub al, 8
je 0x48e852
jmp 0x48e860
mov al, byte [ebp - 0x1c]
sub al, byte [ebp - 0x20]
mov byte [ebp - 0x28], al
jmp 0x48e869
mov ax, word [ebp - 0x1c]
sub ax, word [ebp - 0x20]
mov word [ebp - 0x28], ax
jmp 0x48e869
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 0
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x31
jne 0x48e9ad
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48e94c
sub al, 8
je 0x48e957
jmp 0x48e965
mov al, byte [ebp - 0x1c]
sub al, byte [ebp - 0x20]
mov byte [ebp - 0x28], al
jmp 0x48e96e
mov ax, word [ebp - 0x1c]
sub ax, word [ebp - 0x20]
mov word [ebp - 0x28], ax
jmp 0x48e96e
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
push 0
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xf4
jne 0x48ea4d
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x1c]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x118
jne 0x48ec5b
mov eax, dword [0x5d1250]
cmp byte [eax + esi*8 + 9], 0
je 0x48ebd1
lea esi, [ebx + ebx*8]
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8 + 0xc], 0x8c
jne 0x48eb10
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8 + 0x20], 0x8d
jne 0x48eb10
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 0x24]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048a570
mov edi, eax
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 0x28]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048a570
mov edx, dword [0x5d1250]
movzx edx, byte [edx + esi*8 + 0x2f]
imul edx
add edi, eax
mov eax, dword [0x5d1250]
add edi, dword [eax + esi*8 + 0x30]
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], 0
jne 0x48eaee
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x1c], eax
jmp 0x48eaf9
mov eax, dword [ebp - 0x1c]
call fcn.0048a424
mov dword [ebp - 0x1c], eax
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 0x10]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x1c]
call fcn.0048a8c4
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0xc], 0x8d
jne 0x48ec55
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8 + 0x20], 0x8c
jne 0x48ec55
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov edx, dword [edx + eax*8 + 0x10]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048a570
mov esi, eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov edx, dword [edx + eax*8 + 0x14]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048a570
lea edx, [ebx + ebx*8]
mov ecx, dword [0x5d1250]
movzx edx, byte [ecx + edx*8 + 0x1b]
imul edx
add esi, eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
add esi, dword [edx + eax*8 + 0x1c]
mov dword [ebp - 0x1c], esi
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov edx, dword [edx + eax*8 + 0x24]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048a570
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x1c], 0
jne 0x48ebc1
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [eax + 0x50], edx
jmp 0x48ec55
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.0048a428
jmp 0x48ec55
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x1c]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x13a
jne 0x48ed48
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 0x10
je 0x48ecc0
sub al, 0x10
je 0x48ecd8
jmp 0x48ecfc
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
sub al, 8
jne 0x48ecfc
xor eax, eax
mov al, byte [ebp - 0x20]
mov word [ebp - 0x1c], ax
jmp 0x48ecfc
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
sub al, 8
je 0x48eceb
sub al, 8
je 0x48ecf5
jmp 0x48ecfc
xor eax, eax
mov al, byte [ebp - 0x20]
mov dword [ebp - 0x1c], eax
jmp 0x48ecfc
movzx eax, word [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x1c]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x136
jne 0x48ee33
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 0x10
je 0x48edad
sub al, 0x10
je 0x48edc4
jmp 0x48ede7
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
sub al, 8
jne 0x48ede7
movsx eax, byte [ebp - 0x20]
mov word [ebp - 0x1c], ax
jmp 0x48ede7
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
sub al, 8
je 0x48edd7
sub al, 8
je 0x48ede0
jmp 0x48ede7
movsx eax, byte [ebp - 0x20]
mov dword [ebp - 0x1c], eax
jmp 0x48ede7
movsx eax, word [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x1c]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x20f
jne 0x48eecd
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 1
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x20]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x212
jne 0x48efc7
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48ef32
sub al, 8
je 0x48ef3a
jmp 0x48ef44
mov al, byte [ebp - 0x20]
xor byte [ebp - 0x1c], al
jmp 0x48ef4a
mov ax, word [ebp - 0x20]
xor word [ebp - 0x1c], ax
jmp 0x48ef4a
mov eax, dword [ebp - 0x20]
xor dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x1c]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
push 0
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x1c]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0xa
jne 0x48f0be
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48f029
sub al, 8
je 0x48f031
jmp 0x48f03b
mov al, byte [ebp - 0x20]
and byte [ebp - 0x1c], al
jmp 0x48f041
mov ax, word [ebp - 0x20]
and word [ebp - 0x1c], ax
jmp 0x48f041
mov eax, dword [ebp - 0x20]
and dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x1c]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
push 0
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x1c]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x201
jne 0x48f176
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48f123
sub al, 8
je 0x48f12b
jmp 0x48f135
mov al, byte [ebp - 0x20]
and byte [ebp - 0x1c], al
jmp 0x48f13b
mov ax, word [ebp - 0x20]
and word [ebp - 0x1c], ax
jmp 0x48f13b
mov eax, dword [ebp - 0x20]
and dword [ebp - 0x1c], eax
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
push 0
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x1c]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x143
jne 0x48f270
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48f1db
sub al, 8
je 0x48f1e3
jmp 0x48f1ed
mov al, byte [ebp - 0x20]
or byte [ebp - 0x1c], al
jmp 0x48f1f3
mov ax, word [ebp - 0x20]
or word [ebp - 0x1c], ax
jmp 0x48f1f3
mov eax, dword [ebp - 0x20]
or dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
mov al, byte [edx + eax*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x1c]
call fcn.0048af7c
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
push 0
mov eax, dword [0x5d1250]
mov edx, dword [eax + esi*8 + 4]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x1c]
call fcn.0048b12c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1ad
jne 0x48f33c
mov eax, dword [0x5d1250]
cmp byte [eax + esi*8 + 9], 0
je 0x48f2ac
mov eax, dword [ebp + 0xc]
sub dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x50]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x20]
mov dword [edx], eax
jmp 0x48f336
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48f2fb
sub al, 8
je 0x48f30e
jmp 0x48f324
mov eax, dword [ebp + 0xc]
dec dword [eax + 0x20]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov dl, byte [ebp - 0x1c]
mov byte [eax], dl
jmp 0x48f336
mov eax, dword [ebp + 0xc]
sub dword [eax + 0x20], 2
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov dx, word [ebp - 0x1c]
mov word [eax], dx
jmp 0x48f336
mov eax, dword [ebp + 0xc]
sub dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [eax], edx
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x184
jne 0x48f40e
mov eax, dword [0x5d1250]
cmp byte [eax + esi*8 + 9], 0
je 0x48f378
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov eax, dword [eax]
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x50], eax
mov eax, dword [ebp + 0xc]
add dword [eax + 0x20], 4
jmp 0x48f408
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
sub al, 8
je 0x48f38b
sub al, 8
je 0x48f39e
jmp 0x48f3b4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov al, byte [eax]
mov byte [ebp - 0x1c], al
mov eax, dword [ebp + 0xc]
inc dword [eax + 0x20]
jmp 0x48f3c6
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov ax, word [eax]
mov word [ebp - 0x1c], ax
mov eax, dword [ebp + 0xc]
add dword [eax + 0x20], 2
jmp 0x48f3c6
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
add dword [eax + 0x20], 4
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
push 1
push 0
push 0
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov ecx, dword [ebp - 0x1c]
call fcn.0048af7c
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1b1
jne 0x48f43b
mov eax, dword [ebp + 0xc]
sub dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x60]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x20]
mov dword [edx], eax
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x188
jne 0x48f468
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov eax, dword [eax]
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x60], eax
mov eax, dword [ebp + 0xc]
add dword [eax + 0x20], 4
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x1af
jne 0x48f532
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
sub dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x10]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x20]
mov dword [edx], eax
mov eax, dword [ebp + 0xc]
sub dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x20]
mov dword [edx], eax
mov eax, dword [ebp + 0xc]
sub dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x20]
mov dword [edx], eax
mov eax, dword [ebp + 0xc]
sub dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x1c]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x20]
mov dword [edx], eax
mov eax, dword [ebp + 0xc]
sub dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x28]
mov dword [eax], edx
mov eax, dword [ebp + 0xc]
sub dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x24]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x20]
mov dword [edx], eax
mov eax, dword [ebp + 0xc]
sub dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x28]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x20]
mov dword [edx], eax
mov eax, dword [ebp + 0xc]
sub dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x2c]
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x20]
mov dword [edx], eax
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x186
jne 0x48f5fc
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov eax, dword [eax]
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x2c], eax
mov eax, dword [ebp + 0xc]
add dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov eax, dword [eax]
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x28], eax
mov eax, dword [ebp + 0xc]
add dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov eax, dword [eax]
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x24], eax
mov eax, dword [ebp + 0xc]
add dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
add dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov eax, dword [eax]
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x1c], eax
mov eax, dword [ebp + 0xc]
add dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov eax, dword [eax]
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x18], eax
mov eax, dword [ebp + 0xc]
add dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov eax, dword [eax]
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x14], eax
mov eax, dword [ebp + 0xc]
add dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov eax, dword [eax]
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x10], eax
mov eax, dword [ebp + 0xc]
add dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x28]
mov dword [eax + 0x20], edx
inc ebx
jmp 0x48b765
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x18
jne 0x48f685
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x19]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x2d]
push eax
mov eax, dword [0x5d1250]
mov al, byte [eax + esi*8 + 0x41]
push eax
mov eax, dword [0x5d1250]
lea edx, [eax + esi*8]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, 0x10
call fcn.0048adb4
mov eax, dword [0x5d1250]
cmp dword [eax + esi*8 + 0xc], 0x90
jne 0x48f665
mov eax, dword [0x5bffdc]
mov eax, dword [eax]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
jmp 0x48f66b
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
sub dword [eax + 0x20], 4
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x20]
mov dword [eax], edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 4], eax
jmp 0x48f6af
lea eax, [ebx + ebx*8]
mov edx, dword [0x5d1250]
cmp dword [edx + eax*8], 0x233
jne 0x48b765
mov eax, dword [0x5d1250]
mov eax, dword [eax + esi*8 + 0x1c]
mov edx, dword [0x5bffdc]
add eax, dword [edx]
mov dword [ebp - 4], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48f6dc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x59baf9
lea eax, [ebp - 0x2c]
call fcn.00404c6c
ret