Function at 0x4a84d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x64a7e0
mov eax, dword fs:[0]
push eax
sub esp, 0x730
mov eax, dword [0x6a56e8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x11c], ecx
mov ecx, dword [ebp - 0x11c]
call fcn.004989d0
mov ecx, dword [ebp - 0x11c]
add ecx, 8
call fcn.004989d0
mov ecx, dword [ebp - 0x11c]
add ecx, 0xc
call fcn.004989d0
mov ecx, dword [ebp - 0x11c]
add ecx, 0x78
call fcn.004a4bf0
mov eax, dword [ebp - 0x11c]
mov dword [eax + 0x84], 0xffffffff
mov ecx, dword [ebp - 0x11c]
mov byte [ecx + 0x10], 0
mov edx, dword [ebp - 0x11c]
mov dword [edx + 0xd8], 0
mov dword [edx + 0xdc], 0
mov eax, dword [ebp - 0x11c]
add eax, 0x18
push eax
lea ecx, [ebp - 0x190]
push ecx
call fcn.00509750
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00499a00
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x190]
call fcn.00498a80
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0
jl 0x4a85d2
mov edx, dword [ebp - 0x334]
add edx, 1
push edx
lea ecx, [ebp - 0x190]
call fcn.00494ad0
push eax
lea ecx, [ebp - 0x178]
call fcn.00499cf0
lea ecx, [ebp - 0x140]
call fcn.0040d8f0
mov byte [ebp - 4], 2
mov byte [ebp - 0x17b], 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 8
call fcn.0048d370
push eax
lea ecx, [ebp - 0x120]
call fcn.004a2d90
mov byte [ebp - 4], 3
mov dword [ebp - 0x2cc], 0
jmp 0x4a8620
mov ecx, dword [ebp - 0x2cc]
add ecx, 1
mov dword [ebp - 0x2cc], ecx
mov edx, dword [ebp + 8]
mov ecx, dword [edx]
add ecx, 8
call fcn.0048d370
cmp dword [ebp - 0x2cc], eax
jae 0x4a864c
lea ecx, [ebp - 0x120]
call fcn.0040b0c0
mov ecx, dword [ebp - 0x2cc]
mov byte [eax + ecx], 0
jmp 0x4a8611
mov edx, dword [ebp + 8]
movzx eax, byte [edx + 0x1e]
test eax, eax
je 0x4a866e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x20]
mov dword [ebp - 0x454], edx
mov eax, dword [ecx + 0x24]
mov dword [ebp - 0x450], eax
jmp 0x4a8682
mov dword [ebp - 0x454], 0x800000
mov dword [ebp - 0x450], 0
mov ecx, dword [ebp - 0x454]
mov dword [ebp - 0x318], ecx
mov edx, dword [ebp - 0x450]
mov dword [ebp - 0x314], edx
mov byte [ebp - 0x17e], 0
mov byte [ebp - 0x17f], 0
mov dword [ebp - 0x22c], 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1c4], ecx
cmp dword [ebp - 0x1c4], 0
jl 0x4a870b
mov byte [ebp - 0x17f], 1
mov edx, dword [ebp - 0x1c4]
push edx
lea ecx, [ebp - 0x140]
call fcn.00491620
mov dword [ebp - 0x22c], 1
lea ecx, [ebp - 0x120]
call fcn.0040b0c0
mov ecx, dword [ebp - 0x1c4]
mov byte [eax + ecx], 1
mov byte [ebp - 0x17b], 1
jmp 0x4a9108
mov dword [ebp - 0x1a8], 0
mov byte [ebp - 0x1b3], 0
mov byte [ebp - 0x1b1], 0
mov byte [ebp - 0x1b2], 0
lea ecx, [ebp - 0x178]
call fcn.0040b0c0
mov edx, 2
imul ecx, edx, 0
mov dx, word [eax + ecx]
mov word [ebp - 0x1a4], dx
movzx eax, word [ebp - 0x1a4]
cmp eax, 0x7a
je 0x4a877c
movzx ecx, word [ebp - 0x1a4]
cmp ecx, 0x5a
je 0x4a877c
movzx edx, word [ebp - 0x1a4]
cmp edx, 0x72
je 0x4a877c
movzx eax, word [ebp - 0x1a4]
cmp eax, 0x52
jne 0x4a8824
mov byte [ebp - 0x195], 0
mov dword [ebp - 0x2d0], 1
jmp 0x4a879e
mov ecx, dword [ebp - 0x2d0]
add ecx, 1
mov dword [ebp - 0x2d0], ecx
lea ecx, [ebp - 0x178]
call fcn.0040b0c0
mov edx, dword [ebp - 0x2d0]
mov ax, word [eax + edx*2]
mov word [ebp - 0x224], ax
movzx ecx, word [ebp - 0x224]
test ecx, ecx
jne 0x4a87c7
jmp 0x4a87f1
movzx edx, word [ebp - 0x224]
cmp edx, 0x30
jl 0x4a87df
movzx eax, word [ebp - 0x224]
cmp eax, 0x39
jle 0x4a87e8
mov byte [ebp - 0x195], 0
jmp 0x4a87f1
mov byte [ebp - 0x195], 1
jmp 0x4a878f
movzx ecx, byte [ebp - 0x195]
test ecx, ecx
je 0x4a8824
movzx edx, word [ebp - 0x1a4]
cmp edx, 0x7a
je 0x4a8814
movzx eax, word [ebp - 0x1a4]
cmp eax, 0x5a
jne 0x4a881d
mov byte [ebp - 0x1b1], 1
jmp 0x4a8824
mov byte [ebp - 0x1b2], 1
mov dword [ebp - 0x1f4], 0
jmp 0x4a883f
mov ecx, dword [ebp - 0x1f4]
add ecx, 1
mov dword [ebp - 0x1f4], ecx
mov edx, dword [ebp + 8]
mov ecx, dword [edx]
add ecx, 8
call fcn.0048d370
cmp dword [ebp - 0x1f4], eax
jae 0x4a8986
mov eax, dword [ebp - 0x1f4]
push eax
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
add ecx, 8
call fcn.00487170
mov dword [ebp - 0x244], eax
mov edx, dword [ebp - 0x11c]
movzx eax, byte [edx + 0x17]
test eax, eax
jne 0x4a888b
mov ecx, dword [ebp + 8]
movzx edx, byte [ecx + 0x19]
test edx, edx
jne 0x4a889f
mov ecx, dword [ebp - 0x244]
call fcn.004a75c0
movzx eax, al
test eax, eax
je 0x4a889f
jmp 0x4a8830
mov ecx, dword [ebp - 0x1f4]
push ecx
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x2c]
call fcn.004a5950
test eax, eax
jl 0x4a88ba
jmp 0x4a8830
mov eax, dword [ebp - 0x244]
push eax
call fcn.004a7570
movzx ecx, al
test ecx, ecx
je 0x4a88d4
mov byte [ebp - 0x1b3], 1
lea edx, [ebp - 0x178]
push edx
mov ecx, dword [ebp - 0x244]
call fcn.004a2530
test eax, eax
jge 0x4a8924
movzx eax, byte [ebp - 0x1b1]
test eax, eax
je 0x4a8907
mov ecx, dword [ebp - 0x244]
call fcn.004a75e0
movzx ecx, al
test ecx, ecx
jne 0x4a8924
movzx edx, byte [ebp - 0x1b2]
test edx, edx
je 0x4a896f
mov ecx, dword [ebp - 0x244]
call fcn.004a75a0
movzx eax, al
test eax, eax
je 0x4a896f
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x4f4], ecx
mov edx, dword [ebp - 0x1f4]
push edx
mov eax, dword [ebp - 0x4f4]
push eax
lea ecx, [ebp - 0x140]
call fcn.0048aba0
mov ecx, dword [ebp - 0x1a8]
add ecx, 1
mov dword [ebp - 0x1a8], ecx
lea ecx, [ebp - 0x120]
call fcn.0040b0c0
mov edx, dword [ebp - 0x1f4]
mov byte [eax + edx], 1
jmp 0x4a8981
mov eax, dword [ebp - 0x1f4]
push eax
lea ecx, [ebp - 0x140]
call fcn.00491620
jmp 0x4a8830
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x30], 0
jne 0x4a89f9
cmp dword [ebp - 0x1a8], 1
je 0x4a89ec
mov dword [ebp - 0x54c], 0x80004001
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x54c]
jmp 0x4ae250
push 1
lea ecx, [ebp - 0x140]
call fcn.004a4f20
mov edx, dword [ebp + 8]
cmp dword [edx + 0x30], 0
je 0x4a8fc1
lea ecx, [ebp - 0x140]
call fcn.00417590
cmp eax, 2
jb 0x4a8fc1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x30]
push ecx
call fcn.004e82e0
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0
je 0x4a8a8b
mov edx, dword [ebp - 0x338]
mov dword [ebp - 0x550], edx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x550]
jmp 0x4ae250
lea ecx, [ebp - 0x284]
call fcn.00418f20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x328]
call fcn.0040d8f0
mov byte [ebp - 4], 5
cmp dword [ebp - 0x1a8], 0
je 0x4a8ac5
lea eax, [ebp - 0x178]
push eax
call fcn.004a74d0
movzx ecx, al
test ecx, ecx
je 0x4a8aca
jmp 0x4a8f2c
push 0x661b74
lea ecx, [ebp - 0x178]
call fcn.0049bf60
movzx edx, al
test edx, edx
jne 0x4a8afc
push 0x661b78
lea ecx, [ebp - 0x178]
call fcn.0049bf60
movzx eax, al
test eax, eax
je 0x4a8ce7
push 0x661988
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x6cc], esp
lea edx, [ebp - 0x140]
push edx
call fcn.004a2dd0
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
call fcn.004a5870
mov dword [ebp - 0x554], eax
mov edx, dword [ebp - 0x554]
mov dword [ebp - 0x294], edx
cmp dword [ebp - 0x294], 0
jl 0x4a8ce2
mov dword [ebp - 0x6ac], 0x400
push 0x400
lea ecx, [ebp - 0x284]
call fcn.00491810
mov dword [ebp - 0x340], 0x400
lea eax, [ebp - 0x340]
push eax
lea ecx, [ebp - 0x284]
call fcn.0040b0c0
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x30]
push edx
call fcn.004e8300
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0
je 0x4a8c08
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x558], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x328]
call fcn.00485d80
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x284]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x558]
jmp 0x4ae250
cmp dword [ebp - 0x340], 0x10
jb 0x4a8ce2
lea ecx, [ebp - 0x284]
call fcn.0040b0c0
mov dword [ebp - 0x2d4], eax
mov byte [ebp - 0x18], 0x52
mov byte [ebp - 0x17], 0x61
mov byte [ebp - 0x16], 0x72
mov byte [ebp - 0x15], 0x21
mov byte [ebp - 0x14], 0x1a
mov byte [ebp - 0x13], 7
mov byte [ebp - 0x12], 0
push 7
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x2d4]
push edx
call fcn.004b0230
movzx eax, al
test eax, eax
je 0x4a8ce2
mov ecx, 1
imul edx, ecx, 9
mov eax, dword [ebp - 0x2d4]
movzx ecx, byte [eax + edx]
cmp ecx, 0x73
jne 0x4a8ce2
mov edx, 1
imul eax, edx, 0xa
mov ecx, dword [ebp - 0x2d4]
movzx edx, byte [ecx + eax]
and edx, 1
je 0x4a8ce2
mov eax, dword [ebp - 0x294]
push eax
lea ecx, [ebp - 0x140]
call fcn.00487190
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x328]
call fcn.00491620
mov edx, dword [ebp - 0x294]
push edx
lea ecx, [ebp - 0x140]
call fcn.00487190
mov dword [eax], 0xffffffff
mov eax, dword [ebp - 0x294]
cmp eax, dword [ebp - 0x1a8]
jl 0x4a8ce2
mov ecx, dword [ebp - 0x1a8]
add ecx, 1
mov dword [ebp - 0x1a8], ecx
jmp 0x4a8f2c
mov dword [ebp - 0x6b0], 0x400
push 0x400
lea ecx, [ebp - 0x284]
call fcn.00491810
mov dword [ebp - 0x31c], 0x400
lea edx, [ebp - 0x31c]
push edx
lea ecx, [ebp - 0x284]
call fcn.0040b0c0
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x30]
push ecx
call fcn.004e8300
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0
je 0x4a8dad
mov edx, dword [ebp - 0x344]
mov dword [ebp - 0x55c], edx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x328]
call fcn.00485d80
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x284]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x55c]
jmp 0x4ae250
cmp dword [ebp - 0x31c], 0
jne 0x4a8e28
mov dword [ebp - 0x560], 1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x328]
call fcn.00485d80
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x284]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x560]
jmp 0x4ae250
mov dword [ebp - 0x248], 0
jmp 0x4a8e43
mov eax, dword [ebp - 0x248]
add eax, 1
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x248]
cmp ecx, dword [ebp - 0x1a8]
jae 0x4a8ed5
mov edx, dword [ebp - 0x248]
push edx
lea ecx, [ebp - 0x140]
call fcn.00487190
mov eax, dword [eax]
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0
jge 0x4a8e7a
jmp 0x4a8e34
mov ecx, dword [ebp - 0x310]
push ecx
mov edx, dword [ebp + 8]
mov ecx, dword [edx]
add ecx, 8
call fcn.00487170
mov dword [ebp - 0x564], eax
mov ecx, dword [ebp - 0x564]
call fcn.004a5ae0
movzx eax, al
test eax, eax
je 0x4a8ed0
mov ecx, dword [ebp - 0x310]
push ecx
lea ecx, [ebp - 0x328]
call fcn.00491620
mov edx, dword [ebp - 0x248]
push edx
lea ecx, [ebp - 0x140]
call fcn.00487190
mov dword [eax], 0xffffffff
jmp 0x4a8e34
push 0
push 0
lea eax, [ebp - 0x328]
push eax
mov ecx, dword [ebp - 0x1a8]
push ecx
lea edx, [ebp - 0x140]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
call fcn.004a7600
mov edx, dword [ebp - 0x31c]
push edx
lea ecx, [ebp - 0x284]
call fcn.0040b0c0
push eax
lea eax, [ebp - 0x328]
push eax
mov ecx, dword [ebp - 0x1a8]
push ecx
lea edx, [ebp - 0x140]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
call fcn.004a7600
mov dword [ebp - 0x298], 0
jmp 0x4a8f47
mov edx, dword [ebp - 0x298]
add edx, 1
mov dword [ebp - 0x298], edx
lea ecx, [ebp - 0x140]
call fcn.00417590
cmp dword [ebp - 0x298], eax
jae 0x4a8f91
mov eax, dword [ebp - 0x298]
push eax
lea ecx, [ebp - 0x140]
call fcn.00487190
mov ecx, dword [eax]
mov dword [ebp - 0x348], ecx
cmp dword [ebp - 0x348], 0xffffffff
je 0x4a8f8f
mov edx, dword [ebp - 0x348]
push edx
lea ecx, [ebp - 0x328]
call fcn.00491620
jmp 0x4a8f38
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x140]
call fcn.004a3d40
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x328]
call fcn.00485d80
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x284]
call fcn.00485d80
lea ecx, [ebp - 0x140]
call fcn.00417590
cmp eax, 2
jb 0x4a90c6
push 0x661b7c
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x6b4], esp
lea edx, [ebp - 0x140]
push edx
call fcn.004a2dd0
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
call fcn.004a5870
mov dword [ebp - 0x568], eax
mov edx, dword [ebp - 0x568]
mov dword [ebp - 0x29c], edx
push 0x661b80
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x6b8], esp
lea eax, [ebp - 0x140]
push eax
call fcn.004a2dd0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
call fcn.004a5870
mov dword [ebp - 0x56c], eax
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x2d8], eax
mov ecx, dword [ebp - 0x2d8]
cmp ecx, dword [ebp - 0x29c]
jle 0x4a90c6
cmp dword [ebp - 0x29c], 0
jl 0x4a90c6
mov edx, dword [ebp - 0x29c]
push edx
lea ecx, [ebp - 0x140]
call fcn.00487190
mov eax, dword [eax]
mov dword [ebp - 0x570], eax
mov ecx, dword [ebp - 0x2d8]
push ecx
lea ecx, [ebp - 0x140]
call fcn.00487190
mov edx, dword [eax]
mov dword [ebp - 0x574], edx
mov eax, dword [ebp - 0x2d8]
push eax
lea ecx, [ebp - 0x140]
call fcn.00487190
mov ecx, dword [ebp - 0x570]
mov dword [eax], ecx
mov edx, dword [ebp - 0x29c]
push edx
lea ecx, [ebp - 0x140]
call fcn.00487190
mov ecx, dword [ebp - 0x574]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x22c], edx
cmp dword [ebp - 0x22c], 0
je 0x4a90f2
movzx eax, byte [ebp - 0x1b3]
test eax, eax
jne 0x4a90f2
mov dword [ebp - 0x34c], 0
jmp 0x4a90fc
mov dword [ebp - 0x34c], 1
mov cl, byte [ebp - 0x34c]
mov byte [ebp - 0x17e], cl
xorps xmm0, xmm0
movlpd qword [ebp - 0x1d4], xmm0
mov edx, dword [ebp + 8]
cmp dword [edx + 0x30], 0
je 0x4a9194
lea eax, [ebp - 0x1d4]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x30]
push edx
call fcn.004a71f0
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0
je 0x4a9194
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x578], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x578]
jmp 0x4ae250
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x1d4]
mov dword [ecx + 0x68], edx
mov eax, dword [ebp - 0x1d0]
mov dword [ecx + 0x6c], eax
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
add ecx, 8
call fcn.0048d370
push eax
lea ecx, [ebp - 0x124]
call fcn.004a2d90
mov byte [ebp - 4], 6
mov dword [ebp - 0x2a0], 0
jmp 0x4a91e4
mov edx, dword [ebp - 0x2a0]
add edx, 1
mov dword [ebp - 0x2a0], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 8
call fcn.0048d370
cmp dword [ebp - 0x2a0], eax
jae 0x4a9210
lea ecx, [ebp - 0x124]
call fcn.0040b0c0
mov ecx, dword [ebp - 0x2a0]
mov byte [eax + ecx], 0
jmp 0x4a91d5
mov edx, dword [ebp + 8]
add edx, 8
mov dword [ebp - 0x148], edx
mov eax, dword [ebp - 0x148]
movzx ecx, byte [eax + 0x11]
test ecx, ecx
je 0x4a9c8d
lea ecx, [ebp - 0x140]
call fcn.00417590
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x1c4], 0
jl 0x4a9254
mov edx, dword [ebp - 0x22c]
mov dword [ebp - 0x354], edx
mov dword [ebp - 0x238], 0
jmp 0x4a926f
mov eax, dword [ebp - 0x238]
add eax, 1
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x238]
cmp ecx, dword [ebp - 0x354]
jae 0x4a9c8d
mov edx, dword [ebp - 0x238]
push edx
lea ecx, [ebp - 0x140]
call fcn.00487190
mov ecx, dword [ebp - 0x11c]
mov edx, dword [eax]
mov dword [ecx + 0x3c], edx
mov byte [ebp - 0x179], 0
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax + 0x3c]
push ecx
mov edx, dword [ebp + 8]
mov ecx, dword [edx]
add ecx, 8
call fcn.00487170
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x238]
cmp eax, dword [ebp - 0x22c]
jb 0x4a92ee
mov ecx, dword [ebp - 0x2e0]
call fcn.004a5ae0
movzx ecx, al
test ecx, ecx
jne 0x4a92e7
jmp 0x4a9260
mov byte [ebp - 0x179], 1
mov edx, dword [ebp + 8]
cmp dword [edx + 0x38], 0
je 0x4a938c
lea eax, [ebp - 0x1d4]
push eax
push 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x38]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x38]
mov edx, dword [edx]
push ecx
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0
je 0x4a938c
mov ecx, dword [ebp - 0x358]
mov dword [ebp - 0x57c], ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x57c]
jmp 0x4ae250
mov edx, dword [ebp + 8]
cmp dword [edx + 0x30], 0
je 0x4a9419
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x30]
push ecx
call fcn.004e82e0
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0
je 0x4a9419
mov edx, dword [ebp - 0x35c]
mov dword [ebp - 0x580], edx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x580]
jmp 0x4ae250
lea ecx, [ebp - 0x16c]
call fcn.004079a0
mov byte [ebp - 4], 7
lea eax, [ebp - 0x16c]
push eax
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ecx + 0x3c]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x11c]
call fcn.004aee00
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0
je 0x4a94cb
mov ecx, dword [ebp - 0x360]
mov dword [ebp - 0x584], ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16c]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x584]
jmp 0x4ae250
lea ecx, [ebp - 0x16c]
call fcn.004914a0
movzx edx, al
test edx, edx
je 0x4a94f1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16c]
call fcn.00485dd0
jmp 0x4a9260
mov eax, dword [ebp + 8]
cmp dword [eax + 0x30], 0
je 0x4a9596
movzx ecx, byte [ebp - 0x179]
test ecx, ecx
jne 0x4a952e
movzx edx, byte [ebp - 0x17b]
test edx, edx
je 0x4a952e
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x314]
mov dword [ebp - 0x490], ecx
jmp 0x4a9539
xorps xmm0, xmm0
movlpd qword [ebp - 0x494], xmm0
mov edx, dword [ebp - 0x494]
mov dword [ebp - 0x698], edx
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x694], eax
lea ecx, [ebp - 0x16c]
call fcn.0040b0c0
mov dword [ebp - 0x364], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x38]
push edx
lea eax, [ebp - 0x698]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x30]
push edx
mov eax, dword [ebp - 0x364]
push eax
mov ecx, dword [ebp - 0x364]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x2a4], eax
jmp 0x4a9699
lea ecx, [ebp - 0x24c]
call fcn.004079a0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x24c]
call fcn.00405260
push eax
push 0x65ffa0
lea ecx, [ebp - 0x16c]
call fcn.004a2d20
lea ecx, [ebp - 0x24c]
call fcn.004914a0
movzx ecx, al
test ecx, ecx
je 0x4a9658
mov dword [ebp - 0x588], 0x80004001
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x24c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16c]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x588]
jmp 0x4ae250
lea ecx, [ebp - 0x24c]
call fcn.0040b0c0
mov dword [ebp - 0x368], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x34]
push eax
mov ecx, dword [ebp - 0x368]
push ecx
mov edx, dword [ebp - 0x368]
mov eax, dword [edx]
mov ecx, dword [eax + 0xc]
call ecx
mov dword [ebp - 0x2a4], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x24c]
call fcn.00485dd0
mov edx, dword [ebp - 0x2a4]
push edx
push 0
push 0
lea ecx, [ebp - 0x16c]
call fcn.0040b0c0
push eax
mov ecx, dword [ebp - 0x11c]
call fcn.004af490
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0
je 0x4a973e
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x58c], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16c]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x58c]
jmp 0x4ae250
cmp dword [ebp - 0x2a4], 1
jne 0x4a98b3
mov ecx, dword [ebp - 0x11c]
add ecx, 0x78
call fcn.004a7490
mov byte [ebp - 0x1b6], al
mov ecx, dword [ebp - 0x148]
movzx edx, byte [ecx + 0x12]
test edx, edx
je 0x4a9778
movzx eax, byte [ebp - 0x1b6]
test eax, eax
jne 0x4a9790
lea ecx, [ebp - 0x124]
call fcn.0040b0c0
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ecx + 0x3c]
mov byte [eax + edx], 1
movzx eax, byte [ebp - 0x179]
test eax, eax
je 0x4a97af
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16c]
call fcn.00485dd0
jmp 0x4a9260
cmp dword [ebp - 0x238], 0
jne 0x4a989f
cmp dword [ebp - 0x22c], 1
jne 0x4a989f
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x11c]
mov eax, dword [edx + 0x3c]
mov dword [ecx + 0x84], eax
mov ecx, dword [ebp - 0x11c]
add ecx, 0x78
push ecx
mov ecx, dword [ebp - 0x11c]
add ecx, 0xa8
call fcn.004a3e10
mov edx, dword [ebp - 0x148]
movzx eax, byte [edx + 0x12]
test eax, eax
jne 0x4a989f
movzx ecx, byte [ebp - 0x1b6]
test ecx, ecx
je 0x4a989f
mov edx, dword [ebp - 0x2e0]
push edx
call fcn.004a7570
movzx eax, al
test eax, eax
jne 0x4a989f
mov dword [ebp - 0x590], 1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16c]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x590]
jmp 0x4ae250
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16c]
call fcn.00485dd0
jmp 0x4a9260
mov ecx, dword [ebp - 0x2a4]
mov dword [ebp - 0x370], ecx
cmp dword [ebp - 0x370], 0
je 0x4a993c
mov edx, dword [ebp - 0x370]
mov dword [ebp - 0x594], edx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16c]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x594]
jmp 0x4ae250
lea ecx, [ebp - 0x120]
call fcn.0040b0c0
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ecx + 0x3c]
mov al, byte [eax + edx]
mov byte [ebp - 0x228], al
movzx ecx, byte [ebp - 0x17e]
push ecx
movzx edx, byte [ebp - 0x228]
push edx
movzx eax, byte [ebp - 0x17f]
push eax
mov ecx, dword [ebp - 0x148]
call fcn.004a7040
mov dword [ebp - 0x2dc], eax
mov ecx, dword [ebp - 0x11c]
mov dl, byte [ecx + 0x78]
mov byte [ebp - 0x17a], dl
movzx eax, byte [ebp - 0x17a]
test eax, eax
je 0x4a9a73
mov ecx, dword [ebp - 0x148]
movzx edx, byte [ecx + 0x15]
test edx, edx
je 0x4a9a73
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x11c]
mov edx, dword [eax + 0x50]
add edx, dword [ecx + 0x58]
mov eax, dword [eax + 0x54]
adc eax, dword [ecx + 0x5c]
push eax
push edx
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x11c]
call fcn.004a49d0
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0
je 0x4a9a5e
mov edx, dword [ebp - 0x374]
mov dword [ebp - 0x604], edx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16c]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x604]
jmp 0x4ae250
mov eax, dword [ebp - 0x11c]
movzx ecx, byte [eax + 0x7a]
test ecx, ecx
je 0x4a9a73
mov byte [ebp - 0x17a], 0
mov edx, dword [ebp - 0x11c]
mov dword [ebp - 0x378], edx
mov eax, dword [ebp - 0x378]
cmp dword [eax + 0x54], 0
jl 0x4a9b2d
jg 0x4a9aa1
mov ecx, dword [ebp - 0x378]
cmp dword [ecx + 0x50], 0
jbe 0x4a9b2d
movzx edx, byte [ebp - 0x179]
test edx, edx
jne 0x4a9b19
movzx eax, byte [ebp - 0x17b]
test eax, eax
je 0x4a9b19
mov ecx, dword [ebp - 0x2dc]
call fcn.004a4990
movzx ecx, al
test ecx, ecx
je 0x4a9b19
mov edx, dword [ebp - 0x148]
movzx eax, byte [edx + 0x16]
test eax, eax
je 0x4a9b2d
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x148]
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0x380], edx
mov eax, dword [ebp - 0x37c]
mov ecx, dword [ebp - 0x380]
mov edx, dword [eax + 0x54]
cmp edx, dword [ecx + 0x1c]
jb 0x4a9b2d
ja 0x4a9b19
mov eax, dword [ebp - 0x37c]
mov ecx, dword [ebp - 0x380]
mov edx, dword [eax + 0x50]
cmp edx, dword [ecx + 0x18]
jbe 0x4a9b2d
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16c]
call fcn.00485dd0
jmp 0x4a9260
movzx eax, byte [ebp - 0x17a]
test eax, eax
je 0x4a9ba3
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x384], ecx
mov edx, dword [ebp - 0x384]
cmp dword [edx + 0x54], 0
jl 0x4a9b82
jg 0x4a9b5e
mov eax, dword [ebp - 0x384]
cmp dword [eax + 0x50], 0
jbe 0x4a9b82
mov ecx, dword [ebp - 0x2dc]
movzx edx, byte [ecx + 2]
test edx, edx
jne 0x4a9b80
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16c]
call fcn.00485dd0
jmp 0x4a9260
jmp 0x4a9ba3
mov eax, dword [ebp - 0x2dc]
movzx ecx, byte [eax]
test ecx, ecx
jne 0x4a9ba3
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16c]
call fcn.00485dd0
jmp 0x4a9260
mov edx, dword [ebp - 0x11c]
mov dword [ebp - 0x388], edx
mov eax, dword [ebp - 0x388]
cmp dword [eax + 0x54], 0
jg 0x4a9bd4
jl 0x4a9bc9
mov ecx, dword [ebp - 0x388]
cmp dword [ecx + 0x50], 0
ja 0x4a9bd4
movzx edx, byte [ebp - 0x17a]
test edx, edx
je 0x4a9c04
cmp dword [ebp - 0x1c4], 0
jge 0x4a9c04
mov eax, dword [ebp - 0x2e0]
push eax
call fcn.004a7570
movzx ecx, al
test ecx, ecx
je 0x4a9c04
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16c]
call fcn.00485dd0
jmp 0x4a9260
lea edx, [ebp - 0x16c]
push edx
mov ecx, dword [ebp - 0x11c]
call fcn.00491370
mov dword [ebp - 0x608], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x16c]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x608]
jmp 0x4ae250
mov eax, dword [ebp + 8]
cmp dword [eax + 0x30], 0
jne 0x4a9cf9
mov dword [ebp - 0x60c], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x60c]
jmp 0x4ae250
cmp dword [ebp - 0x1c4], 0
jl 0x4a9e66
mov ecx, dword [ebp - 0x148]
movzx edx, byte [ecx + 0x12]
test edx, edx
jne 0x4a9e66
mov eax, dword [ebp - 0x148]
movzx ecx, byte [eax + 0x16]
test ecx, ecx
je 0x4a9db2
mov edx, dword [ebp - 0x148]
mov dword [ebp - 0x38c], edx
mov eax, dword [ebp - 0x38c]
mov ecx, dword [ebp - 0x38c]
mov edx, dword [eax + 0x18]
or edx, dword [ecx + 0x1c]
jne 0x4a9dad
mov dword [ebp - 0x610], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x610]
jmp 0x4ae250
jmp 0x4a9e66
mov eax, dword [ebp - 0x1c4]
push eax
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
add ecx, 8
call fcn.00487170
mov dword [ebp - 0x390], eax
lea edx, [ebp - 0x178]
push edx
mov ecx, dword [ebp - 0x390]
call fcn.004a2530
test eax, eax
jl 0x4a9e66
mov ecx, dword [ebp - 0x390]
call fcn.004a5b40
movzx eax, al
test eax, eax
je 0x4a9e66
movzx ecx, byte [ebp - 0x17b]
test ecx, ecx
je 0x4a9e66
mov dword [ebp - 0x614], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x614]
jmp 0x4ae250
push 0x28
call fcn.00615b07
add esp, 4
mov dword [ebp - 0x394], eax
mov byte [ebp - 4], 9
cmp dword [ebp - 0x394], 0
je 0x4a9e96
mov ecx, dword [ebp - 0x394]
call fcn.004a3440
mov dword [ebp - 0x484], eax
jmp 0x4a9ea0
mov dword [ebp - 0x484], 0
mov edx, dword [ebp - 0x484]
mov dword [ebp - 0x618], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x184], eax
mov ecx, dword [ebp - 0x184]
push ecx
lea ecx, [ebp - 0x130]
call fcn.00483f10
mov byte [ebp - 4], 0xa
push 0x20
call fcn.00615b07
add esp, 4
mov dword [ebp - 0x448], eax
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x448], 0
je 0x4a9f02
mov ecx, dword [ebp - 0x448]
call fcn.004a33f0
mov dword [ebp - 0x444], eax
jmp 0x4a9f0c
mov dword [ebp - 0x444], 0
mov edx, dword [ebp - 0x444]
mov dword [ebp - 0x61c], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x61c]
mov dword [ebp - 0x2c4], eax
mov ecx, dword [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x12c]
call fcn.00483f10
mov byte [ebp - 4], 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x38]
push eax
mov ecx, dword [ebp - 0x2c4]
call fcn.004a7220
lea ecx, [ebp - 0x214]
call fcn.00418f20
mov byte [ebp - 4], 0xd
mov byte [ebp - 0x17c], 0
mov dword [ebp - 0x250], 0x100000
mov ecx, dword [ebp - 0x250]
xor edx, edx
mov dword [ebp - 0x5a0], ecx
mov dword [ebp - 0x59c], edx
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x1d0]
jb 0x4a9fb5
ja 0x4a9fa2
mov ecx, dword [ebp - 0x5a0]
cmp ecx, dword [ebp - 0x1d4]
jbe 0x4a9fb5
mov edx, dword [ebp - 0x1d4]
mov dword [ebp - 0x250], edx
mov byte [ebp - 0x17c], 1
mov eax, dword [ebp - 0x250]
push eax
lea ecx, [ebp - 0x214]
call fcn.00491810
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x30]
push edx
call fcn.004e82e0
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 0
je 0x4aa078
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x620], eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x214]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x620]
jmp 0x4ae250
mov ecx, dword [ebp - 0x250]
mov dword [ebp - 0x254], ecx
lea edx, [ebp - 0x254]
push edx
lea ecx, [ebp - 0x214]
call fcn.0040b0c0
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x30]
push ecx
call fcn.004e8300
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 0
je 0x4aa148
mov edx, dword [ebp - 0x44c]
mov dword [ebp - 0x4b0], edx
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x214]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x4b0]
jmp 0x4ae250
cmp dword [ebp - 0x254], 0
jne 0x4aa1e5
mov dword [ebp - 0x4b4], 1
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x214]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x4b4]
jmp 0x4ae250
mov eax, dword [ebp - 0x254]
cmp eax, dword [ebp - 0x250]
jae 0x4aa1fa
mov byte [ebp - 0x17c], 1
lea ecx, [ebp - 0x290]
call fcn.0040d8f0
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x2e8], 0xffffffff
mov dword [ebp - 0x1f0], 0
jmp 0x4aa22e
mov ecx, dword [ebp - 0x1f0]
add ecx, 1
mov dword [ebp - 0x1f0], ecx
lea ecx, [ebp - 0x140]
call fcn.00417590
cmp dword [ebp - 0x1f0], eax
jae 0x4aa501
mov edx, dword [ebp - 0x1f0]
push edx
lea ecx, [ebp - 0x140]
call fcn.00487190
mov eax, dword [eax]
mov dword [ebp - 0x230], eax
lea ecx, [ebp - 0x124]
call fcn.0040b0c0
mov ecx, dword [ebp - 0x230]
movzx edx, byte [eax + ecx]
test edx, edx
je 0x4aa27a
jmp 0x4aa21f
mov eax, dword [ebp - 0x230]
push eax
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
add ecx, 8
call fcn.00487170
mov dword [ebp - 0x1a0], eax
mov ecx, dword [ebp - 0x1a0]
call fcn.004a75c0
movzx edx, al
test edx, edx
je 0x4aa2b7
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x2e8], eax
jmp 0x4aa21f
mov ecx, dword [ebp - 0x1a0]
call fcn.004a5b10
movzx ecx, al
test ecx, ecx
je 0x4aa2ce
jmp 0x4aa21f
mov edx, dword [ebp - 0x1a0]
cmp dword [edx + 0xc], 0
je 0x4aa33e
mov eax, dword [ebp - 0x254]
push eax
lea ecx, [ebp - 0x214]
call fcn.0040b0c0
push eax
mov ecx, dword [ebp - 0x1a0]
mov edx, dword [ecx + 0xc]
call edx
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0
jne 0x4aa30c
jmp 0x4aa21f
cmp dword [ebp - 0x398], 2
jne 0x4aa325
movzx eax, byte [ebp - 0x17c]
test eax, eax
je 0x4aa325
jmp 0x4aa21f
mov ecx, dword [ebp - 0x230]
push ecx
push 0
lea ecx, [ebp - 0x290]
call fcn.0048aba0
jmp 0x4aa21f
mov edx, dword [ebp - 0x1a0]
push edx
call fcn.004a7540
mov byte [ebp - 0x1b5], al
movzx eax, byte [ebp - 0x1b5]
test eax, eax
je 0x4aa3b2
mov ecx, dword [ebp - 0x1a0]
add ecx, 0x34
call fcn.0048abf0
movzx ecx, al
test ecx, ecx
jne 0x4aa3b2
mov ecx, dword [ebp - 0x1a0]
call fcn.004a5ba0
movzx edx, al
test edx, edx
jne 0x4aa3b2
mov ecx, dword [ebp - 0x1a0]
call fcn.004a5bd0
movzx eax, al
test eax, eax
jne 0x4aa3b2
mov ecx, dword [ebp - 0x1a0]
call fcn.004a5ae0
movzx ecx, al
test ecx, ecx
jne 0x4aa3b2
mov dword [ebp - 0x39c], 0
jmp 0x4aa3bc
mov dword [ebp - 0x39c], 1
mov dl, byte [ebp - 0x39c]
mov byte [ebp - 0x1b4], dl
movzx eax, byte [ebp - 0x1b5]
test eax, eax
je 0x4aa4df
mov ecx, dword [ebp - 0x1a0]
add ecx, 0x34
call fcn.0048abf0
movzx ecx, al
test ecx, ecx
jne 0x4aa4df
mov dword [ebp - 0x258], 0
jmp 0x4aa40b
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x258], edx
mov ecx, dword [ebp - 0x1a0]
add ecx, 0x34
call fcn.0048d370
cmp dword [ebp - 0x258], eax
jae 0x4aa4b0
mov eax, dword [ebp - 0x258]
push eax
mov ecx, dword [ebp - 0x1a0]
add ecx, 0x34
call fcn.00487170
mov dword [ebp - 0x2e4], eax
mov ecx, dword [ebp - 0x2e4]
call fcn.00417590
mov ecx, dword [ebp - 0x1a0]
add eax, dword [ecx + 0x30]
cmp dword [ebp - 0x254], eax
jae 0x4aa470
movzx edx, byte [ebp - 0x17c]
test edx, edx
jne 0x4aa46e
mov byte [ebp - 0x1b4], 1
jmp 0x4aa4ab
mov ecx, dword [ebp - 0x2e4]
call fcn.00417590
push eax
lea ecx, [ebp - 0x214]
call fcn.0040b0c0
mov ecx, dword [ebp - 0x1a0]
add eax, dword [ecx + 0x30]
push eax
mov ecx, dword [ebp - 0x2e4]
call fcn.0040b0c0
push eax
call fcn.004b0230
movzx edx, al
test edx, edx
je 0x4aa4ab
jmp 0x4aa4b0
jmp 0x4aa3fc
mov ecx, dword [ebp - 0x1a0]
add ecx, 0x34
call fcn.0048d370
cmp dword [ebp - 0x258], eax
je 0x4aa4df
mov eax, dword [ebp - 0x230]
push eax
push 0
lea ecx, [ebp - 0x290]
call fcn.0048aba0
jmp 0x4aa21f
movzx ecx, byte [ebp - 0x1b4]
test ecx, ecx
je 0x4aa4fc
mov edx, dword [ebp - 0x230]
push edx
lea ecx, [ebp - 0x290]
call fcn.00491620
jmp 0x4aa21f
cmp dword [ebp - 0x2e8], 0
jl 0x4aa51e
mov eax, dword [ebp - 0x2e8]
push eax
push 0
lea ecx, [ebp - 0x290]
call fcn.0048aba0
mov dword [ebp - 0x1f0], 0
jmp 0x4aa539
mov ecx, dword [ebp - 0x1f0]
add ecx, 1
mov dword [ebp - 0x1f0], ecx
lea ecx, [ebp - 0x290]
call fcn.00417590
cmp dword [ebp - 0x1f0], eax
jae 0x4aaf99
mov edx, dword [ebp - 0x1f0]
push edx
lea ecx, [ebp - 0x290]
call fcn.00487190
mov ecx, dword [ebp - 0x11c]
mov edx, dword [eax]
mov dword [ecx + 0x3c], edx
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax + 0x3c]
push ecx
mov edx, dword [ebp + 8]
mov ecx, dword [edx]
add ecx, 8
call fcn.00487170
mov dword [ebp - 0x434], eax
mov eax, dword [ebp + 8]
cmp dword [eax + 0x38], 0
je 0x4aa668
lea ecx, [ebp - 0x1d4]
push ecx
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x38]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x38]
mov eax, dword [eax]
push edx
mov ecx, dword [eax + 0xc]
call ecx
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 0
je 0x4aa668
mov edx, dword [ebp - 0x480]
mov dword [ebp - 0x4b8], edx
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x290]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x214]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x4b8]
jmp 0x4ae250
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x30]
push ecx
call fcn.004e82e0
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 0
je 0x4aa728
mov edx, dword [ebp - 0x47c]
mov dword [ebp - 0x4bc], edx
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x290]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x214]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x4bc]
jmp 0x4ae250
lea ecx, [ebp - 0x194]
call fcn.004079a0
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x194]
push eax
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ecx + 0x3c]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x11c]
call fcn.004aee00
mov dword [ebp - 0x478], eax
cmp dword [ebp - 0x478], 0
je 0x4aa81a
mov ecx, dword [ebp - 0x478]
mov dword [ebp - 0x4c0], ecx
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x194]
call fcn.00485dd0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x290]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x214]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x4c0]
jmp 0x4ae250
lea ecx, [ebp - 0x194]
call fcn.004914a0
movzx edx, al
test edx, edx
je 0x4aa840
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x194]
call fcn.00485dd0
jmp 0x4aa52a
xorps xmm0, xmm0
movlpd qword [ebp - 0x6a0], xmm0
mov eax, dword [ebp - 0x148]
movzx ecx, byte [eax + 0x11]
test ecx, ecx
jne 0x4aa862
mov byte [ebp - 0x1d5], 1
jmp 0x4aa869
mov byte [ebp - 0x1d5], 0
lea ecx, [ebp - 0x12c]
call fcn.0040b0c0
push eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x38]
push eax
lea ecx, [ebp - 0x6a0]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x30]
push eax
movzx ecx, byte [ebp - 0x1d5]
push ecx
lea ecx, [ebp - 0x194]
call fcn.0040b0c0
push eax
call fcn.004a83f0
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 1
jne 0x4aa8de
lea ecx, [ebp - 0x124]
call fcn.0040b0c0
mov edx, dword [ebp - 0x11c]
mov ecx, dword [edx + 0x3c]
mov byte [eax + ecx], 1
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x194]
call fcn.00485dd0
jmp 0x4aa52a
mov edx, dword [ebp - 0x2ec]
mov dword [ebp - 0x474], edx
cmp dword [ebp - 0x474], 0
je 0x4aa9a7
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x4c4], eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x194]
call fcn.00485dd0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x290]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x214]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x4c4]
jmp 0x4ae250
mov ecx, dword [ebp - 0x2ec]
push ecx
push 0
push 0
lea ecx, [ebp - 0x194]
call fcn.0040b0c0
push eax
mov ecx, dword [ebp - 0x11c]
call fcn.004af490
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 0
je 0x4aaa8c
mov edx, dword [ebp - 0x470]
mov dword [ebp - 0x4c8], edx
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x194]
call fcn.00485dd0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x290]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x214]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x4c8]
jmp 0x4ae250
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x46c], eax
mov ecx, dword [ebp - 0x46c]
cmp dword [ecx + 0x54], 0
jl 0x4aaac6
jg 0x4aaab2
mov edx, dword [ebp - 0x46c]
cmp dword [edx + 0x50], 0
jbe 0x4aaac6
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x194]
call fcn.00485dd0
jmp 0x4aa52a
lea ecx, [ebp - 0x73c]
call fcn.004a3900
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax + 0x50]
mov dword [ebp - 0x73c], ecx
mov edx, dword [eax + 0x54]
mov dword [ebp - 0x738], edx
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax + 0x70]
mov dword [ebp - 0x734], ecx
mov edx, dword [eax + 0x74]
mov dword [ebp - 0x730], edx
mov eax, dword [ebp - 0x11c]
movzx ecx, byte [eax + 0x60]
test ecx, ecx
jne 0x4aab1a
mov byte [ebp - 0x6d0], 1
lea ecx, [ebp - 0x73c]
call fcn.004a7720
mov edx, dword [ebp - 0x148]
movzx eax, byte [edx + 0x11]
test eax, eax
je 0x4aadef
lea ecx, [ebp - 0x120]
call fcn.0040b0c0
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ecx + 0x3c]
mov al, byte [eax + edx]
mov byte [ebp - 0x227], al
movzx ecx, byte [ebp - 0x17e]
push ecx
movzx edx, byte [ebp - 0x227]
push edx
movzx eax, byte [ebp - 0x17f]
push eax
mov ecx, dword [ebp - 0x148]
call fcn.004a7040
mov dword [ebp - 0x4d0], eax
mov byte [ebp - 0x131], 0
mov ecx, dword [ebp - 0x11c]
movzx edx, byte [ecx + 0x78]
test edx, edx
jne 0x4aab9e
mov byte [ebp - 0x131], 1
jmp 0x4aacfc
mov eax, dword [ebp - 0x148]
movzx ecx, byte [eax + 0x15]
test ecx, ecx
je 0x4aacc0
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x11c]
mov ecx, dword [edx + 0x50]
add ecx, dword [eax + 0x58]
mov edx, dword [edx + 0x54]
adc edx, dword [eax + 0x5c]
push edx
push ecx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x11c]
call fcn.004a49d0
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 0
je 0x4aacab
mov ecx, dword [ebp - 0x43c]
mov dword [ebp - 0x4cc], ecx
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x73c]
call fcn.004a3ce0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x194]
call fcn.00485dd0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x290]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x214]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x4cc]
jmp 0x4ae250
mov edx, dword [ebp - 0x11c]
movzx eax, byte [edx + 0x7a]
test eax, eax
je 0x4aacc0
mov byte [ebp - 0x131], 1
movzx ecx, byte [ebp - 0x131]
test ecx, ecx
jne 0x4aacfc
mov edx, dword [ebp - 0x4d0]
mov al, byte [edx]
mov byte [ebp - 0x131], al
cmp dword [ebp - 0x1c4], 0
jge 0x4aacfc
mov ecx, dword [ebp - 0x434]
push ecx
call fcn.004a7570
movzx edx, al
test edx, edx
je 0x4aacfc
mov byte [ebp - 0x131], 0
movzx eax, byte [ebp - 0x131]
test eax, eax
je 0x4aadef
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x30]
push edx
mov ecx, dword [ebp - 0x11c]
add ecx, 4
call fcn.00491390
lea eax, [ebp - 0x194]
push eax
mov ecx, dword [ebp - 0x11c]
call fcn.00491370
mov dword [ebp - 0x4d4], 0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x73c]
call fcn.004a3ce0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x194]
call fcn.00485dd0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x290]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x214]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x4d4]
jmp 0x4ae250
lea ecx, [ebp - 0x124]
call fcn.0040b0c0
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ecx + 0x3c]
mov byte [eax + edx], 1
mov eax, dword [ebp - 0x73c]
or eax, dword [ebp - 0x738]
jne 0x4aae73
movzx ecx, byte [ebp - 0x6d0]
test ecx, ecx
jne 0x4aae73
mov edx, dword [ebp - 0x11c]
mov dword [ebp - 0x438], edx
mov eax, dword [ebp - 0x438]
mov ecx, dword [ebp - 0x730]
cmp ecx, dword [eax + 0x6c]
jb 0x4aae73
ja 0x4aae50
mov edx, dword [ebp - 0x438]
mov eax, dword [ebp - 0x734]
cmp eax, dword [edx + 0x68]
jb 0x4aae73
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x73c]
call fcn.004a3ce0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x194]
call fcn.00485dd0
jmp 0x4aa52a
lea ecx, [ebp - 0x73c]
push ecx
mov edx, dword [ebp - 0x434]
push edx
lea ecx, [ebp - 0x194]
call fcn.0040b0c0
push eax
call fcn.004af860
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x430], 0
je 0x4aaf64
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x4d8], eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x73c]
call fcn.004a3ce0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x194]
call fcn.00485dd0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x290]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x214]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x4d8]
jmp 0x4ae250
lea ecx, [ebp - 0x73c]
push ecx
mov ecx, dword [ebp - 0x184]
call fcn.004a42d0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x73c]
call fcn.004a3ce0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x194]
call fcn.00485dd0
jmp 0x4aa52a
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x290]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x214]
call fcn.00485d80
lea ecx, [ebp - 0x200]
call fcn.0040d8f0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.0040d8f0
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x25c], 0
jmp 0x4aaffa
mov edx, dword [ebp - 0x25c]
add edx, 1
mov dword [ebp - 0x25c], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 8
call fcn.0048d370
cmp dword [ebp - 0x25c], eax
jae 0x4ab0a0
mov ecx, dword [ebp - 0x2f0]
push ecx
lea ecx, [ebp - 0x200]
call fcn.00491620
mov edx, dword [ebp - 0x25c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 8
call fcn.00487170
add eax, 0x34
mov dword [ebp - 0x42c], eax
mov ecx, dword [ebp - 0x42c]
call fcn.0048d370
add eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2f4], 0
jmp 0x4ab074
mov ecx, dword [ebp - 0x2f4]
add ecx, 1
mov dword [ebp - 0x2f4], ecx
mov ecx, dword [ebp - 0x42c]
call fcn.0048d370
cmp dword [ebp - 0x2f4], eax
jae 0x4ab09b
mov edx, dword [ebp - 0x25c]
push edx
lea ecx, [ebp - 0x20c]
call fcn.00491620
jmp 0x4ab065
jmp 0x4aafeb
mov dword [ebp - 0x6bc], 0x10000
mov dword [ebp - 0x6c0], 0x100000
mov dword [ebp - 0x6c4], 0x400000
mov dword [ebp - 0x6c8], 0x10000
push 0x10000
lea ecx, [ebp - 0x160]
call fcn.004a2d90
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x160]
call fcn.0040b0c0
mov dword [ebp - 0x270], eax
push 0x10000
push 0xff
mov eax, dword [ebp - 0x270]
push eax
call fcn.00619ac0
add esp, 0xc
push 0x100
push 0xff
lea ecx, [ebp - 0x118]
push ecx
call fcn.00619ac0
add esp, 0xc
lea ecx, [ebp - 0x20c]
call fcn.00417590
cmp eax, 0xff
jb 0x4ab1e3
mov dword [ebp - 0x4dc], 1
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x4dc]
jmp 0x4ae250
lea ecx, [ebp - 0x220]
call fcn.0040d8f0
mov byte [ebp - 4], 0x14
push 0x100
lea ecx, [ebp - 0x150]
call fcn.004a2d90
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x2a8], 0
jmp 0x4ab221
mov edx, dword [ebp - 0x2a8]
add edx, 1
mov dword [ebp - 0x2a8], edx
cmp dword [ebp - 0x2a8], 0x100
jae 0x4ab244
lea ecx, [ebp - 0x150]
call fcn.0040b0c0
mov ecx, dword [ebp - 0x2a8]
mov byte [eax + ecx], 0
jmp 0x4ab212
mov byte [ebp - 0x1c9], 0
mov dword [ebp - 0x2ac], 0
jmp 0x4ab266
mov edx, dword [ebp - 0x2ac]
add edx, 1
mov dword [ebp - 0x2ac], edx
lea ecx, [ebp - 0x140]
call fcn.00417590
cmp dword [ebp - 0x2ac], eax
jae 0x4ab419
mov eax, dword [ebp - 0x2ac]
push eax
lea ecx, [ebp - 0x140]
call fcn.00487190
mov ecx, dword [eax]
mov dword [ebp - 0x268], ecx
cmp dword [ebp - 0x268], 0
jge 0x4ab2a2
jmp 0x4ab257
mov edx, dword [ebp - 0x268]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 8
call fcn.00487170
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x260]
call fcn.004a5b10
movzx ecx, al
test ecx, ecx
je 0x4ab2d0
jmp 0x4ab257
mov byte [ebp - 0x17d], 0
mov edx, dword [ebp - 0x260]
movzx eax, byte [edx + 0x2d]
test eax, eax
jne 0x4ab2f1
mov byte [ebp - 0x17d], 1
jmp 0x4ab3e2
mov ecx, dword [ebp - 0x260]
call fcn.004a5bd0
movzx ecx, al
test ecx, ecx
je 0x4ab30a
mov byte [ebp - 0x17d], 1
mov dword [ebp - 0x264], 0
jmp 0x4ab325
mov edx, dword [ebp - 0x264]
add edx, 1
mov dword [ebp - 0x264], edx
mov ecx, dword [ebp - 0x260]
add ecx, 0x34
call fcn.0048d370
cmp dword [ebp - 0x264], eax
jae 0x4ab3e2
mov eax, dword [ebp - 0x264]
push eax
mov ecx, dword [ebp - 0x260]
add ecx, 0x34
call fcn.00487170
mov dword [ebp - 0x428], eax
mov ecx, dword [ebp - 0x428]
call fcn.00417590
cmp eax, 2
jae 0x4ab373
mov byte [ebp - 0x17d], 1
jmp 0x4ab316
mov byte [ebp - 0x1c9], 1
mov ecx, dword [ebp - 0x428]
call fcn.0040b0c0
movzx ecx, word [eax]
mov dword [ebp - 0x424], ecx
mov edx, dword [ebp - 0x268]
push edx
lea ecx, [ebp - 0x200]
call fcn.00487190
mov eax, dword [eax]
add eax, dword [ebp - 0x264]
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0x270]
add ecx, dword [ebp - 0x424]
mov edx, dword [ebp - 0x420]
mov al, byte [ecx]
mov byte [ebp + edx - 0x118], al
mov ecx, dword [ebp - 0x270]
add ecx, dword [ebp - 0x424]
mov dl, byte [ebp - 0x420]
mov byte [ecx], dl
jmp 0x4ab316
movzx eax, byte [ebp - 0x17d]
test eax, eax
je 0x4ab414
mov ecx, dword [ebp - 0x268]
push ecx
lea ecx, [ebp - 0x220]
call fcn.00491620
lea ecx, [ebp - 0x150]
call fcn.0040b0c0
mov edx, dword [ebp - 0x268]
mov byte [eax + edx], 1
jmp 0x4ab257
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x30]
push edx
call fcn.004e82e0
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0
je 0x4ab506
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x4e0], eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x4e0]
jmp 0x4ae250
push 0x48
call fcn.00615b07
add esp, 4
mov dword [ebp - 0x3a0], eax
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x3a0], 0
je 0x4ab536
mov ecx, dword [ebp - 0x3a0]
call fcn.004a34e0
mov dword [ebp - 0x3a4], eax
jmp 0x4ab540
mov dword [ebp - 0x3a4], 0
mov ecx, dword [ebp - 0x3a4]
mov dword [ebp - 0x4e4], ecx
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x4e4]
mov dword [ebp - 0x234], edx
mov eax, dword [ebp - 0x234]
push eax
lea ecx, [ebp - 0x164]
call fcn.00483f10
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x30]
push edx
mov ecx, dword [ebp - 0x234]
call fcn.004b0170
mov dword [ebp - 0x1c0], 0
lea ecx, [ebp - 0x144]
call fcn.004079a0
mov byte [ebp - 4], 0x18
mov eax, dword [ebp + 8]
cmp dword [eax + 0x38], 0
je 0x4ab66b
push 0x30
call fcn.00615b07
add esp, 4
mov dword [ebp - 0x3a8], eax
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x3a8], 0
je 0x4ab5da
mov ecx, dword [ebp - 0x3a8]
call fcn.004a3330
mov dword [ebp - 0x3ac], eax
jmp 0x4ab5e4
mov dword [ebp - 0x3ac], 0
mov ecx, dword [ebp - 0x3ac]
mov dword [ebp - 0x4e8], ecx
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x1c0], edx
mov eax, dword [ebp - 0x1c0]
push eax
lea ecx, [ebp - 0x144]
call fcn.00491390
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x38]
push edx
mov ecx, dword [ebp - 0x1c0]
add ecx, 0x10
call fcn.00491390
mov ecx, dword [ebp - 0x1c0]
add ecx, 0x14
call fcn.00405260
push eax
push 0x65ff40
mov ecx, dword [ebp - 0x1c0]
add ecx, 0x10
call fcn.004a2d20
mov ecx, dword [ebp - 0x1c0]
add ecx, 0x28
call fcn.00405260
push eax
push 0x660090
mov ecx, dword [ebp - 0x1c0]
add ecx, 0x10
call fcn.004a2d20
mov eax, dword [ebp + 8]
cmp dword [eax + 0x38], 0
je 0x4ab794
lea ecx, [ebp - 0x1d4]
push ecx
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x38]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x38]
mov eax, dword [eax]
push edx
mov ecx, dword [eax + 0xc]
call ecx
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 0
je 0x4ab794
mov edx, dword [ebp - 0x3b0]
mov dword [ebp - 0x4ec], edx
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x4ec]
jmp 0x4ae250
mov eax, dword [ebp - 0x234]
add eax, 0x3c
mov dword [ebp - 0x1e8], eax
push 0x400000
mov ecx, dword [ebp - 0x1e8]
call fcn.00491810
xorps xmm0, xmm0
movlpd qword [ebp - 0x4a4], xmm0
mov byte [ebp - 0x180], 1
mov byte [ebp - 0x197], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x1e0], xmm0
mov dword [ebp - 0x168], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x158], xmm0
mov ecx, dword [ebp - 0x148]
movzx edx, byte [ecx + 0x14]
test edx, edx
jne 0x4ab868
mov ecx, dword [ebp - 0x184]
add ecx, 0xc
call fcn.0048d370
cmp eax, 1
jne 0x4ab868
push 0
mov ecx, dword [ebp - 0x184]
add ecx, 0xc
call fcn.00487170
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f8]
movzx ecx, byte [eax + 0x6c]
test ecx, ecx
jne 0x4ab868
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x3b4], edx
mov eax, dword [ebp - 0x3b4]
mov ecx, dword [ebp - 0x3b4]
mov edx, dword [eax]
or edx, dword [ecx + 4]
jne 0x4ab868
mov eax, dword [ebp - 0x2f8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x158], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x154], edx
mov eax, dword [ebp - 0x158]
sub eax, dword [ebp - 0x1e0]
mov ecx, dword [ebp - 0x154]
sbb ecx, dword [ebp - 0x1dc]
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x23c], ecx
movzx edx, byte [ebp - 0x197]
test edx, edx
jne 0x4abd4f
cmp dword [ebp - 0x168], 0x400000
jae 0x4abb7b
mov eax, 0x400000
sub eax, dword [ebp - 0x168]
mov dword [ebp - 0x2b0], eax
mov ecx, dword [ebp - 0x168]
xor edx, edx
add ecx, dword [ebp - 0x1e0]
adc edx, dword [ebp - 0x1dc]
mov dword [ebp - 0x5a8], ecx
mov dword [ebp - 0x5a4], edx
mov eax, dword [ebp - 0x168]
xor ecx, ecx
add eax, dword [ebp - 0x1e0]
adc ecx, dword [ebp - 0x1dc]
push ecx
push eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x30]
push eax
call fcn.00493540
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0
je 0x4ab9fd
mov ecx, dword [ebp - 0x3b8]
mov dword [ebp - 0x4f0], ecx
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x4f0]
jmp 0x4ae250
lea edx, [ebp - 0x2b0]
push edx
mov ecx, dword [ebp - 0x1e8]
call fcn.0040b0c0
add eax, dword [ebp - 0x168]
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x30]
push ecx
call fcn.004e8300
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0
je 0x4abb21
mov edx, dword [ebp - 0x3bc]
mov dword [ebp - 0x598], edx
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x598]
jmp 0x4ae250
cmp dword [ebp - 0x2b0], 0
jne 0x4abb4b
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x1d4], eax
mov ecx, dword [ebp - 0x5a4]
mov dword [ebp - 0x1d0], ecx
mov byte [ebp - 0x197], 1
jmp 0x4abb76
mov edx, dword [ebp - 0x168]
add edx, dword [ebp - 0x2b0]
mov dword [ebp - 0x168], edx
mov eax, dword [ebp - 0x1e0]
push eax
mov ecx, dword [ebp - 0x2b0]
push ecx
mov ecx, dword [ebp - 0x234]
call fcn.004b0050
jmp 0x4ab868
mov edx, dword [ebp - 0x168]
xor eax, eax
mov dword [ebp - 0x5b0], edx
mov dword [ebp - 0x5ac], eax
mov ecx, dword [ebp - 0x5ac]
cmp ecx, dword [ebp - 0x23c]
ja 0x4abc98
jb 0x4abbb5
mov edx, dword [ebp - 0x5b0]
cmp edx, dword [ebp - 0x240]
jae 0x4abc98
xor eax, eax
mov ecx, dword [ebp - 0x240]
sub ecx, dword [ebp - 0x168]
mov edx, dword [ebp - 0x23c]
sbb edx, eax
mov dword [ebp - 0x4ac], ecx
mov dword [ebp - 0x4a8], edx
cmp dword [ebp - 0x4a8], 0
ja 0x4abc69
jb 0x4abbf2
cmp dword [ebp - 0x4ac], 0x10000
ja 0x4abc69
mov eax, 0x10000
sub eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x2b4], eax
mov ecx, dword [ebp - 0x2b4]
push ecx
mov ecx, dword [ebp - 0x1e8]
call fcn.0040b0c0
add eax, dword [ebp - 0x168]
sub eax, dword [ebp - 0x2b4]
push eax
mov ecx, dword [ebp - 0x1e8]
call fcn.0040b0c0
push eax
call fcn.0061a390
add esp, 0xc
mov edx, dword [ebp - 0x2b4]
mov dword [ebp - 0x168], edx
xor eax, eax
mov ecx, dword [ebp - 0x158]
sub ecx, dword [ebp - 0x2b4]
mov edx, dword [ebp - 0x154]
sbb edx, eax
mov dword [ebp - 0x1e0], ecx
mov dword [ebp - 0x1dc], edx
jmp 0x4ab868
mov dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x158]
sub eax, 0x10000
mov ecx, dword [ebp - 0x154]
sbb ecx, 0
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1dc], ecx
jmp 0x4ab868
mov edx, dword [ebp - 0x168]
xor eax, eax
sub edx, dword [ebp - 0x240]
sbb eax, dword [ebp - 0x23c]
mov dword [ebp - 0x5b8], edx
mov dword [ebp - 0x5b4], eax
cmp dword [ebp - 0x5b4], 0
ja 0x4abd4f
jb 0x4abcd3
cmp dword [ebp - 0x5b8], 0x100000
jae 0x4abd4f
mov ecx, dword [ebp - 0x240]
sub ecx, 0x10000
mov dword [ebp - 0x2b8], ecx
mov edx, dword [ebp - 0x168]
sub edx, dword [ebp - 0x2b8]
push edx
mov ecx, dword [ebp - 0x1e8]
call fcn.0040b0c0
add eax, dword [ebp - 0x2b8]
push eax
mov ecx, dword [ebp - 0x1e8]
call fcn.0040b0c0
push eax
call fcn.0061a390
add esp, 0xc
mov eax, dword [ebp - 0x2b8]
xor ecx, ecx
add eax, dword [ebp - 0x1e0]
adc ecx, dword [ebp - 0x1dc]
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1dc], ecx
mov edx, dword [ebp - 0x168]
sub edx, dword [ebp - 0x2b8]
mov dword [ebp - 0x168], edx
jmp 0x4ab868
mov eax, dword [ebp - 0x240]
cmp dword [ebp - 0x168], eax
ja 0x4abd62
jmp 0x4addea
mov byte [ebp - 0x1b9], 0
lea ecx, [ebp - 0x144]
call fcn.0040b0c0
test eax, eax
je 0x4abf76
mov ecx, dword [ebp - 0x184]
add ecx, 0xc
call fcn.0048d370
xor ecx, ecx
mov edx, dword [ebp - 0x1c0]
mov dword [edx + 0x18], eax
mov dword [edx + 0x1c], ecx
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x158]
mov dword [eax + 0x20], ecx
mov edx, dword [ebp - 0x154]
mov dword [eax + 0x24], edx
mov eax, dword [ebp + 8]
movzx ecx, byte [eax + 0x19]
test ecx, ecx
je 0x4abdda
mov ecx, dword [ebp - 0x184]
add ecx, 0xc
call fcn.0048d370
cmp eax, 1
ja 0x4abdda
mov dword [ebp - 0x3c0], 0
jmp 0x4abde4
mov dword [ebp - 0x3c0], 1
mov dl, byte [ebp - 0x3c0]
mov byte [ebp - 0x1b9], dl
mov eax, dword [ebp - 0x4a4]
add eax, 0x800000
mov ecx, dword [ebp - 0x4a0]
adc ecx, 0
mov dword [ebp - 0x5c0], eax
mov dword [ebp - 0x5bc], ecx
mov edx, dword [ebp - 0x154]
cmp edx, dword [ebp - 0x5bc]
jb 0x4abf76
ja 0x4abe36
mov eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x5c0]
jb 0x4abf76
lea ecx, [ebp - 0x144]
call fcn.0040b0c0
mov dword [ebp - 0x3c4], eax
push 0
push 0
mov ecx, dword [ebp - 0x3c4]
push ecx
mov edx, dword [ebp - 0x3c4]
mov eax, dword [edx]
mov ecx, dword [eax + 0x10]
call ecx
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x4abf5e
mov edx, dword [ebp - 0x3c8]
mov dword [ebp - 0x4f8], edx
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x4f8]
jmp 0x4ae250
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x4a4], eax
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x4a0], ecx
mov edx, dword [ebp - 0x168]
xor eax, eax
add edx, dword [ebp - 0x1e0]
adc eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x45c], edx
mov dword [ebp - 0x458], eax
mov ecx, dword [ebp - 0x1d0]
cmp ecx, dword [ebp - 0x458]
ja 0x4abfe4
jb 0x4abfb4
mov edx, dword [ebp - 0x1d4]
cmp edx, dword [ebp - 0x45c]
jae 0x4abfe4
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x1d4]
mov dword [eax + 0x68], ecx
mov edx, dword [ebp - 0x1d0]
mov dword [eax + 0x6c], edx
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x1d4], eax
mov ecx, dword [ebp - 0x458]
mov dword [ebp - 0x1d0], ecx
mov edx, dword [ebp - 0x168]
sub edx, dword [ebp - 0x240]
mov dword [ebp - 0x2c0], edx
cmp dword [ebp - 0x2c0], 2
jae 0x4ac004
jmp 0x4addea
cmp dword [ebp - 0x2c0], 0x100000
jb 0x4ac01c
mov dword [ebp - 0x3cc], 0x100000
jmp 0x4ac026
mov dword [ebp - 0x3cc], 2
mov eax, dword [ebp - 0x2c0]
sub eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x148]
movzx edx, byte [ecx + 0x12]
test edx, edx
jne 0x4ac0cf
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x314]
jb 0x4ac06d
ja 0x4ac068
mov ecx, dword [ebp - 0x158]
cmp ecx, dword [ebp - 0x318]
jbe 0x4ac06d
jmp 0x4addea
mov edx, dword [ebp - 0x318]
sub edx, dword [ebp - 0x158]
mov eax, dword [ebp - 0x314]
sbb eax, dword [ebp - 0x154]
mov dword [ebp - 0x48c], edx
mov dword [ebp - 0x488], eax
mov ecx, dword [ebp - 0x26c]
xor edx, edx
mov dword [ebp - 0x5c8], ecx
mov dword [ebp - 0x5c4], edx
mov eax, dword [ebp - 0x5c4]
cmp eax, dword [ebp - 0x488]
jb 0x4ac0cf
ja 0x4ac0c3
mov ecx, dword [ebp - 0x5c8]
cmp ecx, dword [ebp - 0x48c]
jbe 0x4ac0cf
mov edx, dword [ebp - 0x48c]
mov dword [ebp - 0x26c], edx
mov eax, dword [ebp - 0x26c]
add eax, 1
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x1e8]
call fcn.0040b0c0
add eax, dword [ebp - 0x240]
mov dword [ebp - 0x1e4], eax
mov ecx, dword [ebp - 0x1e4]
add ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x3d0], ecx
mov dword [ebp - 0x2fc], 0
movzx edx, byte [ebp - 0x180]
test edx, edx
jne 0x4ac1ae
jmp 0x4ac131
mov eax, dword [ebp - 0x1e4]
add eax, 1
mov dword [ebp - 0x1e4], eax
mov ecx, dword [ebp - 0x1e4]
cmp ecx, dword [ebp - 0x3d0]
jae 0x4ac15c
mov edx, dword [ebp - 0x1e4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x270]
movzx edx, byte [ecx + eax]
cmp edx, 0xff
jne 0x4ac15c
jmp 0x4ac122
mov ecx, dword [ebp - 0x1e8]
call fcn.0040b0c0
add eax, dword [ebp - 0x240]
mov ecx, dword [ebp - 0x1e4]
sub ecx, eax
mov dword [ebp - 0x2fc], ecx
mov edx, dword [ebp - 0x2fc]
xor eax, eax
add edx, dword [ebp - 0x158]
adc eax, dword [ebp - 0x154]
mov dword [ebp - 0x158], edx
mov dword [ebp - 0x154], eax
mov ecx, dword [ebp - 0x1e4]
cmp ecx, dword [ebp - 0x3d0]
jne 0x4ac1ae
jmp 0x4ab868
mov edx, dword [ebp - 0x1e4]
movzx eax, word [edx]
mov dword [ebp - 0x4fc], eax
mov byte [ebp - 0x1b7], 1
mov ecx, dword [ebp - 0x270]
add ecx, dword [ebp - 0x4fc]
movzx edx, byte [ecx]
mov dword [ebp - 0x274], edx
mov dword [ebp - 0x2bc], 0
mov byte [ebp - 0x19a], 0
movzx eax, byte [ebp - 0x180]
test eax, eax
je 0x4ac249
lea ecx, [ebp - 0x220]
call fcn.00417590
cmp dword [ebp - 0x2bc], eax
jae 0x4ac249
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp - 0x500], ecx
mov edx, dword [ebp - 0x500]
push edx
lea ecx, [ebp - 0x220]
call fcn.00487190
mov eax, dword [eax]
mov dword [ebp - 0x1c8], eax
mov ecx, dword [ebp - 0x2bc]
add ecx, 1
mov dword [ebp - 0x2bc], ecx
mov byte [ebp - 0x196], 1
jmp 0x4ac390
cmp dword [ebp - 0x274], 0xff
jne 0x4ac25a
jmp 0x4add84
mov edx, dword [ebp - 0x274]
push edx
lea ecx, [ebp - 0x20c]
call fcn.00487190
mov eax, dword [eax]
mov dword [ebp - 0x1c8], eax
mov ecx, dword [ebp - 0x1c8]
push ecx
lea ecx, [ebp - 0x200]
call fcn.00487190
mov edx, dword [ebp - 0x274]
sub edx, dword [eax]
mov dword [ebp - 0x504], edx
mov eax, dword [ebp - 0x274]
movzx ecx, byte [ebp + eax - 0x118]
mov dword [ebp - 0x274], ecx
movzx edx, byte [ebp - 0x180]
test edx, edx
je 0x4ac2d1
lea ecx, [ebp - 0x150]
call fcn.0040b0c0
mov ecx, dword [ebp - 0x1c8]
movzx edx, byte [eax + ecx]
test edx, edx
je 0x4ac2d1
jmp 0x4ac1ea
mov eax, dword [ebp - 0x1c8]
push eax
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
add ecx, 8
call fcn.00487170
mov dword [ebp - 0x3d4], eax
mov edx, dword [ebp - 0x3d4]
mov eax, dword [edx + 0x30]
xor ecx, ecx
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5cc], ecx
mov edx, dword [ebp - 0x154]
cmp edx, dword [ebp - 0x5cc]
ja 0x4ac325
jb 0x4ac320
mov eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x5d0]
jae 0x4ac325
jmp 0x4ac1ea
mov ecx, dword [ebp - 0x504]
push ecx
mov ecx, dword [ebp - 0x3d4]
add ecx, 0x34
call fcn.00487170
mov dword [ebp - 0x300], eax
mov ecx, dword [ebp - 0x300]
call fcn.00417590
add eax, dword [ebp - 0x2fc]
cmp eax, dword [ebp - 0x2c0]
ja 0x4ac384
mov ecx, dword [ebp - 0x300]
call fcn.00417590
push eax
mov ecx, dword [ebp - 0x300]
call fcn.0040b0c0
push eax
mov edx, dword [ebp - 0x1e4]
push edx
call fcn.004b0230
movzx eax, al
test eax, eax
jne 0x4ac389
jmp 0x4ac1ea
mov byte [ebp - 0x196], 0
mov ecx, dword [ebp - 0x1c8]
push ecx
mov edx, dword [ebp + 8]
mov ecx, dword [edx]
add ecx, 8
call fcn.00487170
mov dword [ebp - 0x1ec], eax
movzx eax, byte [ebp - 0x196]
test eax, eax
je 0x4ac3c3
mov ecx, dword [ebp - 0x158]
or ecx, dword [ebp - 0x154]
je 0x4ac3f6
mov edx, dword [ebp - 0x1ec]
mov eax, dword [edx + 0x30]
xor ecx, ecx
mov dword [ebp - 0x5d8], eax
mov dword [ebp - 0x5d4], ecx
mov edx, dword [ebp - 0x5d8]
cmp edx, dword [ebp - 0x158]
jne 0x4ac414
mov eax, dword [ebp - 0x5d4]
cmp eax, dword [ebp - 0x154]
jne 0x4ac414
lea ecx, [ebp - 0x124]
call fcn.0040b0c0
mov ecx, dword [ebp - 0x1c8]
movzx edx, byte [eax + ecx]
test edx, edx
je 0x4ac414
jmp 0x4ac1ea
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x1ac], ecx
movzx edx, byte [ebp - 0x196]
test edx, edx
jne 0x4ac496
mov eax, dword [ebp - 0x1ec]
mov ecx, dword [eax + 0x30]
xor edx, edx
mov dword [ebp - 0x5e0], ecx
mov dword [ebp - 0x5dc], edx
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x5dc]
ja 0x4ac471
jb 0x4ac46c
mov ecx, dword [ebp - 0x158]
cmp ecx, dword [ebp - 0x5e0]
jae 0x4ac471
jmp 0x4ac1ea
mov edx, dword [ebp - 0x1ec]
xor eax, eax
mov ecx, dword [ebp - 0x158]
sub ecx, dword [edx + 0x30]
mov edx, dword [ebp - 0x154]
sbb edx, eax
mov dword [ebp - 0x1b0], ecx
mov dword [ebp - 0x1ac], edx
mov eax, dword [ebp - 0x1ec]
cmp dword [eax + 0xc], 0
je 0x4ac53f
mov ecx, dword [ebp - 0x1ac]
cmp ecx, dword [ebp - 0x1dc]
jb 0x4ac53f
ja 0x4ac4c8
mov edx, dword [ebp - 0x1b0]
cmp edx, dword [ebp - 0x1e0]
jb 0x4ac53f
mov eax, dword [ebp - 0x1b0]
sub eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x304], eax
mov ecx, dword [ebp - 0x304]
cmp ecx, dword [ebp - 0x168]
jae 0x4ac53f
mov edx, dword [ebp - 0x168]
sub edx, dword [ebp - 0x304]
push edx
mov ecx, dword [ebp - 0x1e8]
call fcn.0040b0c0
add eax, dword [ebp - 0x304]
push eax
mov eax, dword [ebp - 0x1ec]
mov ecx, dword [eax + 0xc]
call ecx
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 0
jne 0x4ac526
jmp 0x4ac1ea
cmp dword [ebp - 0x3d8], 2
jne 0x4ac53f
movzx edx, byte [ebp - 0x197]
test edx, edx
je 0x4ac53f
jmp 0x4ac1ea
lea ecx, [ebp - 0x120]
call fcn.0040b0c0
mov ecx, dword [ebp - 0x1c8]
mov dl, byte [eax + ecx]
mov byte [ebp - 0x226], dl
movzx eax, byte [ebp - 0x17e]
push eax
movzx ecx, byte [ebp - 0x226]
push ecx
movzx edx, byte [ebp - 0x17f]
push edx
mov ecx, dword [ebp - 0x148]
call fcn.004a7040
mov dword [ebp - 0x2c8], eax
lea ecx, [ebp - 0x14c]
call fcn.004079a0
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x14c]
push eax
mov ecx, dword [ebp - 0x1c8]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x11c]
call fcn.004aee00
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 0
je 0x4ac6bc
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x508], eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x508]
jmp 0x4ae250
lea ecx, [ebp - 0x14c]
call fcn.004914a0
movzx ecx, al
test ecx, ecx
je 0x4ac7cb
mov dword [ebp - 0x50c], 0x80004005
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x50c]
jmp 0x4ae250
mov edx, dword [ebp - 0x1d4]
sub edx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x1d0]
sbb eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x5e8], edx
mov dword [ebp - 0x5e4], eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x330], xmm0
mov ecx, dword [ebp - 0x1ec]
call fcn.004a5c00
movzx ecx, al
test ecx, ecx
je 0x4aca6d
mov edx, dword [ebp - 0x1d0]
push edx
mov eax, dword [ebp - 0x1d4]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x234]
call fcn.004a72d0
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 0
je 0x4ac93b
mov ecx, dword [ebp - 0x3e0]
mov dword [ebp - 0x510], ecx
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x510]
jmp 0x4ae250
mov edx, dword [ebp - 0x1ac]
push edx
mov eax, dword [ebp - 0x1b0]
push eax
lea ecx, [ebp - 0x164]
call fcn.0040b0c0
push eax
call fcn.00493540
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 0
je 0x4aca68
mov ecx, dword [ebp - 0x3e4]
mov dword [ebp - 0x514], ecx
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x514]
jmp 0x4ae250
jmp 0x4acbba
mov edx, dword [ebp - 0x5e4]
push edx
mov eax, dword [ebp - 0x5e8]
push eax
mov ecx, dword [ebp - 0x1ac]
push ecx
mov edx, dword [ebp - 0x1b0]
push edx
mov ecx, dword [ebp - 0x234]
call fcn.004a72d0
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 0
je 0x4acba2
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x518], eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x518]
jmp 0x4ae250
mov ecx, dword [ebp - 0x1b0]
mov dword [ebp - 0x330], ecx
mov edx, dword [ebp - 0x1ac]
mov dword [ebp - 0x32c], edx
xorps xmm0, xmm0
movlpd qword [ebp - 0x6a8], xmm0
lea ecx, [ebp - 0x144]
call fcn.0040b0c0
test eax, eax
je 0x4acc08
mov ecx, dword [ebp - 0x184]
add ecx, 0xc
call fcn.0048d370
xor ecx, ecx
mov edx, dword [ebp - 0x1c0]
mov dword [edx + 0x18], eax
mov dword [edx + 0x1c], ecx
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x1b0]
mov dword [eax + 0x20], ecx
mov edx, dword [ebp - 0x1ac]
mov dword [eax + 0x24], edx
mov eax, dword [ebp - 0x2c4]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov ecx, dword [ebp - 0x2c4]
mov edx, dword [ebp - 0x1b0]
mov dword [ecx + 0x18], edx
mov eax, dword [ebp - 0x1ac]
mov dword [ecx + 0x1c], eax
movzx ecx, byte [ebp - 0x1b9]
test ecx, ecx
je 0x4acc52
lea ecx, [ebp - 0x144]
call fcn.0040b0c0
mov dword [ebp - 0x3ec], eax
jmp 0x4acc5e
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x38]
mov dword [ebp - 0x3ec], eax
lea ecx, [ebp - 0x12c]
call fcn.0040b0c0
push eax
mov ecx, dword [ebp - 0x3ec]
push ecx
lea edx, [ebp - 0x6a8]
push edx
lea ecx, [ebp - 0x164]
call fcn.0040b0c0
push eax
push 1
lea ecx, [ebp - 0x14c]
call fcn.0040b0c0
push eax
call fcn.004a83f0
mov dword [ebp - 0x308], eax
mov ecx, dword [ebp - 0x1ec]
call fcn.004a5c00
movzx eax, al
test eax, eax
je 0x4accbc
xorps xmm0, xmm0
movlpd qword [ebp - 0x49c], xmm0
jmp 0x4accd4
mov ecx, dword [ebp - 0x1b0]
mov dword [ebp - 0x49c], ecx
mov edx, dword [ebp - 0x1ac]
mov dword [ebp - 0x498], edx
mov eax, dword [ebp - 0x308]
push eax
mov ecx, dword [ebp - 0x498]
push ecx
mov edx, dword [ebp - 0x49c]
push edx
lea ecx, [ebp - 0x14c]
call fcn.0040b0c0
push eax
mov ecx, dword [ebp - 0x11c]
call fcn.004af490
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0
je 0x4ace0e
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x51c], eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x51c]
jmp 0x4ae250
mov byte [ebp - 0x198], 0
cmp dword [ebp - 0x308], 1
jne 0x4acff0
mov ecx, dword [ebp - 0x148]
movzx edx, byte [ecx + 0x12]
test edx, edx
jne 0x4acf94
cmp dword [ebp - 0x1c4], 0
jge 0x4acf80
mov ecx, dword [ebp - 0x11c]
add ecx, 0x78
call fcn.004a7490
movzx eax, al
test eax, eax
je 0x4acf80
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x1c8]
mov dword [ecx + 0x84], edx
mov eax, dword [ebp - 0x11c]
add eax, 0x78
push eax
mov ecx, dword [ebp - 0x11c]
add ecx, 0xa8
call fcn.004a3e10
mov dword [ebp - 0x520], 1
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x520]
jmp 0x4ae250
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
jmp 0x4ac1ea
mov ecx, dword [ebp - 0x11c]
add ecx, 0x78
call fcn.004a7490
movzx ecx, al
test ecx, ecx
je 0x4acfd7
mov edx, dword [ebp - 0x11c]
movzx eax, byte [edx + 0x60]
test eax, eax
je 0x4acfd7
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x3f4], ecx
mov edx, dword [ebp - 0x3f4]
mov eax, dword [ebp - 0x3f4]
mov ecx, dword [edx + 0x58]
or ecx, dword [eax + 0x5c]
jne 0x4acfeb
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
jmp 0x4ac1ea
jmp 0x4ad14d
mov edx, dword [ebp - 0x11c]
movzx eax, byte [edx + 0x60]
test eax, eax
je 0x4ad032
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x3f8], ecx
mov edx, dword [ebp - 0x3f8]
mov eax, dword [ebp - 0x3f8]
mov ecx, dword [edx + 0x58]
or ecx, dword [eax + 0x5c]
jne 0x4ad032
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
jmp 0x4ac1ea
mov byte [ebp - 0x198], 1
mov edx, dword [ebp - 0x308]
mov dword [ebp - 0x3fc], edx
cmp dword [ebp - 0x3fc], 0
je 0x4ad14d
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x524], eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x524]
jmp 0x4ae250
lea ecx, [ebp - 0x690]
call fcn.004a3900
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x1b0]
mov dword [ebp - 0x690], ecx
mov edx, dword [ebp - 0x1ac]
mov dword [ebp - 0x68c], edx
mov ecx, dword [ebp - 0x1ec]
call fcn.004a5c00
movzx eax, al
test eax, eax
je 0x4ad1a3
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ecx + 0x50]
mov dword [ebp - 0x690], edx
mov eax, dword [ecx + 0x54]
mov dword [ebp - 0x68c], eax
jmp 0x4ad2cf
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x400], ecx
mov edx, dword [ebp - 0x400]
mov eax, dword [ebp - 0x400]
mov ecx, dword [edx + 0x50]
or ecx, dword [eax + 0x54]
je 0x4ad2cf
mov dword [ebp - 0x528], 0x80004005
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x690]
call fcn.004a3ce0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x528]
jmp 0x4ae250
mov edx, dword [ebp - 0x11c]
mov eax, dword [edx + 0x68]
sub eax, dword [ebp - 0x690]
mov ecx, dword [edx + 0x6c]
sbb ecx, dword [ebp - 0x68c]
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], ecx
mov edx, dword [ebp - 0x464]
mov dword [ebp - 0x27c], edx
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x11c]
mov dl, byte [ecx + 0x60]
mov byte [ebp - 0x199], dl
movzx eax, byte [ebp - 0x199]
test eax, eax
je 0x4ad3b9
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x690]
add edx, dword [ecx + 0x58]
mov eax, dword [ebp - 0x68c]
adc eax, dword [ecx + 0x5c]
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x5f0], edx
mov dword [ebp - 0x5ec], eax
mov dword [ebp - 0x404], ecx
mov edx, dword [ebp - 0x404]
mov eax, dword [ebp - 0x5ec]
cmp eax, dword [edx + 0x6c]
jb 0x4ad3a1
ja 0x4ad37d
mov ecx, dword [ebp - 0x404]
mov edx, dword [ebp - 0x5f0]
cmp edx, dword [ecx + 0x68]
jbe 0x4ad3a1
mov eax, dword [ebp - 0x11c]
mov ecx, dword [eax + 0x68]
sub ecx, dword [ebp - 0x690]
mov edx, dword [eax + 0x6c]
sbb edx, dword [ebp - 0x68c]
mov eax, dword [ebp - 0x11c]
mov dword [eax + 0x58], ecx
mov dword [eax + 0x5c], edx
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ecx + 0x58]
mov dword [ebp - 0x27c], edx
mov eax, dword [ecx + 0x5c]
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x27c]
or ecx, dword [ebp - 0x278]
je 0x4ad3e6
cmp dword [ebp - 0x278], 0x80000000
jb 0x4ad4ee
ja 0x4ad3e6
cmp dword [ebp - 0x27c], 0
jbe 0x4ad4ee
mov dword [ebp - 0x52c], 0x80004005
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x690]
call fcn.004a3ce0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x52c]
jmp 0x4ae250
mov byte [ebp - 0x1b8], 0
movzx edx, byte [ebp - 0x198]
test edx, edx
je 0x4ad538
movzx eax, byte [ebp - 0x199]
test eax, eax
jne 0x4ad538
mov byte [ebp - 0x624], 1
mov byte [ebp - 0x1b8], 1
mov ecx, dword [ebp - 0x464]
mov dword [ebp - 0x27c], ecx
mov edx, dword [ebp - 0x460]
mov dword [ebp - 0x278], edx
mov byte [ebp - 0x1b7], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x688], eax
mov ecx, dword [ebp - 0x278]
mov dword [ebp - 0x684], ecx
lea ecx, [ebp - 0x690]
call fcn.004a7720
mov edx, dword [ebp - 0x690]
or edx, dword [ebp - 0x68c]
jne 0x4ad5d5
movzx eax, byte [ebp - 0x624]
test eax, eax
jne 0x4ad5d5
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x408], ecx
mov edx, dword [ebp - 0x408]
mov eax, dword [ebp - 0x684]
cmp eax, dword [edx + 0x6c]
jb 0x4ad5d5
ja 0x4ad5a4
mov ecx, dword [ebp - 0x408]
mov edx, dword [ebp - 0x688]
cmp edx, dword [ecx + 0x68]
jb 0x4ad5d5
mov eax, dword [ebp - 0x148]
movzx ecx, byte [eax + 0x11]
test ecx, ecx
jne 0x4ad5d5
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x690]
call fcn.004a3ce0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
jmp 0x4ac1ea
mov edx, dword [ebp - 0x148]
movzx eax, byte [edx + 0x14]
test eax, eax
je 0x4ad603
mov ecx, dword [ebp - 0x158]
add ecx, 1
mov edx, dword [ebp - 0x154]
adc edx, 0
mov dword [ebp - 0x158], ecx
mov dword [ebp - 0x154], edx
jmp 0x4ad652
movzx eax, byte [ebp - 0x1b8]
test eax, eax
je 0x4ad62e
mov ecx, dword [ebp - 0x158]
add ecx, 1
mov edx, dword [ebp - 0x154]
adc edx, 0
mov dword [ebp - 0x158], ecx
mov dword [ebp - 0x154], edx
jmp 0x4ad652
mov eax, dword [ebp - 0x690]
add eax, dword [ebp - 0x688]
mov ecx, dword [ebp - 0x68c]
adc ecx, dword [ebp - 0x684]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], ecx
lea edx, [ebp - 0x690]
push edx
mov eax, dword [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x14c]
call fcn.0040b0c0
push eax
call fcn.004af860
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0
je 0x4ad78e
mov ecx, dword [ebp - 0x40c]
mov dword [ebp - 0x530], ecx
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x690]
call fcn.004a3ce0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x530]
jmp 0x4ae250
mov edx, dword [ebp - 0x68c]
cmp edx, dword [ebp - 0x1ac]
ja 0x4ad89e
jb 0x4ad7b4
mov eax, dword [ebp - 0x690]
cmp eax, dword [ebp - 0x1b0]
jae 0x4ad89e
mov ecx, dword [ebp - 0x148]
movzx edx, byte [ecx + 0x14]
test edx, edx
jne 0x4ad89e
mov ecx, dword [ebp - 0x184]
add ecx, 0xc
call fcn.0048abf0
movzx eax, al
test eax, eax
jne 0x4ad89e
mov ecx, dword [ebp - 0x184]
add ecx, 0xc
call fcn.00491b00
mov dword [ebp - 0x30c], eax
mov ecx, dword [ebp - 0x30c]
mov dword [ebp - 0x410], ecx
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 4]
cmp eax, dword [ebp - 0x68c]
ja 0x4ad824
jb 0x4ad822
mov ecx, dword [ebp - 0x410]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x690]
jae 0x4ad824
jmp 0x4ad89e
mov eax, dword [ebp - 0x30c]
mov ecx, dword [ebp - 0x30c]
mov edx, dword [eax]
add edx, dword [ecx + 8]
mov eax, dword [eax + 4]
adc eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x690]
add ecx, dword [ebp - 0x688]
mov esi, dword [ebp - 0x68c]
adc esi, dword [ebp - 0x684]
mov dword [ebp - 0x5f8], edx
mov dword [ebp - 0x5f4], eax
mov dword [ebp - 0x600], ecx
mov dword [ebp - 0x5fc], esi
mov edx, dword [ebp - 0x5f4]
cmp edx, dword [ebp - 0x5fc]
jb 0x4ad88b
ja 0x4ad889
mov eax, dword [ebp - 0x5f8]
cmp eax, dword [ebp - 0x600]
jbe 0x4ad88b
jmp 0x4ad89e
mov ecx, dword [ebp - 0x184]
add ecx, 0xc
call fcn.004a4e80
jmp 0x4ad7c6
movzx ecx, byte [ebp - 0x198]
test ecx, ecx
je 0x4add1c
mov edx, dword [ebp - 0x148]
movzx eax, byte [edx + 0x11]
test eax, eax
je 0x4add1c
movzx ecx, byte [ebp - 0x199]
test ecx, ecx
je 0x4add1c
mov byte [ebp - 0x125], 0
mov edx, dword [ebp - 0x11c]
mov al, byte [edx + 0x78]
mov byte [ebp - 0x159], al
movzx ecx, byte [ebp - 0x159]
test ecx, ecx
je 0x4ada6c
mov edx, dword [ebp - 0x148]
movzx eax, byte [edx + 0x15]
test eax, eax
je 0x4ada6c
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x330]
add edx, dword [ecx + 0x50]
mov eax, dword [ebp - 0x32c]
adc eax, dword [ecx + 0x54]
mov ecx, dword [ebp - 0x11c]
add edx, dword [ecx + 0x58]
adc eax, dword [ecx + 0x5c]
push eax
push edx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x11c]
call fcn.004a49d0
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0
je 0x4ada57
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x534], eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x690]
call fcn.004a3ce0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x534]
jmp 0x4ae250
mov ecx, dword [ebp - 0x11c]
movzx edx, byte [ecx + 0x7a]
test edx, edx
je 0x4ada6c
mov byte [ebp - 0x159], 0
mov eax, dword [ebp - 0x690]
or eax, dword [ebp - 0x68c]
je 0x4adab2
movzx ecx, byte [ebp - 0x643]
test ecx, ecx
jne 0x4adab0
movzx edx, byte [ebp - 0x159]
test edx, edx
je 0x4adaa1
mov eax, dword [ebp - 0x2c8]
mov cl, byte [eax + 2]
mov byte [ebp - 0x125], cl
jmp 0x4adab0
mov edx, dword [ebp - 0x2c8]
mov al, byte [edx + 1]
mov byte [ebp - 0x125], al
jmp 0x4adae4
movzx ecx, byte [ebp - 0x159]
test ecx, ecx
jne 0x4adac6
mov byte [ebp - 0x125], 1
jmp 0x4adad4
mov edx, dword [ebp - 0x2c8]
mov al, byte [edx]
mov byte [ebp - 0x125], al
cmp dword [ebp - 0x1c4], 0xfffffffe
jl 0x4adae4
mov byte [ebp - 0x125], 1
cmp dword [ebp - 0x1c4], 0
jge 0x4adaff
movzx ecx, byte [ebp - 0x644]
test ecx, ecx
je 0x4adaff
mov byte [ebp - 0x125], 0
movzx edx, byte [ebp - 0x125]
test edx, edx
jne 0x4adbb1
movzx eax, byte [ebp - 0x644]
test eax, eax
jne 0x4adbb1
movzx ecx, byte [ebp - 0x159]
test ecx, ecx
jne 0x4adbb1
movzx edx, byte [ebp - 0x643]
test edx, edx
je 0x4adb45
mov eax, dword [ebp - 0x690]
or eax, dword [ebp - 0x68c]
jne 0x4adbb1
mov ecx, dword [ebp - 0x184]
add ecx, 0xc
call fcn.0048abf0
movzx ecx, al
test ecx, ecx
je 0x4adb71
mov edx, dword [ebp - 0x2c8]
movzx eax, byte [edx + 1]
test eax, eax
je 0x4adb6f
mov byte [ebp - 0x125], 1
jmp 0x4adbb1
mov ecx, dword [ebp - 0x184]
add ecx, 0xc
call fcn.0048d370
cmp eax, 1
jne 0x4adbb1
push 0
mov ecx, dword [ebp - 0x184]
add ecx, 0xc
call fcn.00487170
movzx ecx, byte [eax + 0x4c]
test ecx, ecx
je 0x4adbb1
mov edx, dword [ebp - 0x148]
movzx eax, byte [edx + 0xe]
test eax, eax
je 0x4adbb1
mov byte [ebp - 0x125], 1
movzx ecx, byte [ebp - 0x125]
test ecx, ecx
je 0x4add1c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x30]
push eax
mov ecx, dword [ebp - 0x11c]
add ecx, 4
call fcn.00491390
lea ecx, [ebp - 0x14c]
push ecx
mov ecx, dword [ebp - 0x11c]
call fcn.00491370
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x1c8]
mov dword [edx + 0x3c], eax
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x330]
mov dword [ecx + 0xd8], edx
mov eax, dword [ebp - 0x32c]
mov dword [ecx + 0xdc], eax
mov dword [ebp - 0x538], 0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x690]
call fcn.004a3ce0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x538]
jmp 0x4ae250
mov ecx, dword [ebp - 0x1c8]
mov dword [ebp - 0x628], ecx
lea edx, [ebp - 0x690]
push edx
mov ecx, dword [ebp - 0x184]
call fcn.004a42d0
mov byte [ebp - 0x19a], 1
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x690]
call fcn.004a3ce0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14c]
call fcn.00485dd0
jmp 0x4add84
movzx eax, byte [ebp - 0x19a]
test eax, eax
jne 0x4addad
mov ecx, dword [ebp - 0x158]
add ecx, 1
mov edx, dword [ebp - 0x154]
adc edx, 0
mov dword [ebp - 0x158], ecx
mov dword [ebp - 0x154], edx
movzx eax, byte [ebp - 0x1b7]
test eax, eax
je 0x4addcf
movzx ecx, byte [ebp - 0x19a]
test ecx, ecx
je 0x4addcf
mov dword [ebp - 0x418], 1
jmp 0x4addd9
mov dword [ebp - 0x418], 0
mov dl, byte [ebp - 0x418]
mov byte [ebp - 0x180], dl
jmp 0x4ab868
mov eax, dword [ebp - 0x148]
movzx ecx, byte [eax + 0x12]
test ecx, ecx
je 0x4ae0b6
mov ecx, dword [ebp - 0x184]
add ecx, 0xc
call fcn.0048d370
cmp eax, 1
jne 0x4ade1b
mov dword [ebp - 0x41c], 1
jmp 0x4ade25
mov dword [ebp - 0x41c], 0
mov dl, byte [ebp - 0x41c]
mov byte [ebp - 0x225], dl
mov eax, dword [ebp - 0x1d0]
push eax
mov ecx, dword [ebp - 0x1d4]
push ecx
mov ecx, dword [ebp - 0x184]
call fcn.004a4360
mov ecx, dword [ebp - 0x184]
add ecx, 0xc
call fcn.0048d370
test eax, eax
jne 0x4adf4a
mov dword [ebp - 0x53c], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x53c]
jmp 0x4ae250
movzx edx, byte [ebp - 0x225]
test edx, edx
jne 0x4adf6c
mov ecx, dword [ebp - 0x184]
add ecx, 0xc
call fcn.0048d370
cmp eax, 1
je 0x4ae0b6
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x30]
push ecx
mov ecx, dword [ebp - 0x184]
add ecx, 0x20
call fcn.00491390
lea edx, [ebp - 0x130]
push edx
mov ecx, dword [ebp - 0x11c]
call fcn.00491370
mov ecx, dword [ebp - 0x11c]
add ecx, 0x78
call fcn.004a4bf0
mov eax, dword [ebp - 0x11c]
mov byte [eax + 0x10], 1
mov ecx, dword [ebp - 0x11c]
mov dword [ecx + 0x3c], 0xffffffff
mov edx, dword [ebp - 0x11c]
mov dword [edx + 0x50], 0
mov dword [edx + 0x54], 0
mov dword [ebp - 0x540], 0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x540]
jmp 0x4ae250
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
call fcn.00485dd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x164]
call fcn.00485dd0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x150]
call fcn.00485d80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
call fcn.00485d80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00485d80
mov ecx, dword [ebp - 0x11c]
call fcn.004914a0
movzx eax, al
test eax, eax
je 0x4ae1b6
mov dword [ebp - 0x544], 1
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x544]
jmp 0x4ae250
mov dword [ebp - 0x548], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20c]
call fcn.00485d80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00485d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x12c]
call fcn.00485dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x130]
call fcn.00485dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x124]
call fcn.00485d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x120]
call fcn.00485d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x140]
call fcn.00485d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00485d80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.00485d80
mov eax, dword [ebp - 0x548]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006158c5
mov esp, ebp
pop ebp
ret 4