Function at 0x4fdd20
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x66
push 0
push 0
dec ecx
jne 0x4fdd29
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x501234
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp + 8]
dec eax
je 0x4fdd58
dec eax
je 0x4fdd79
jmp 0x4fdd98
mov eax, dword [0x57382c]
cmp dword [eax], 0
je case.0x4fe8db.0
mov eax, dword [0x573c68]
mov esi, eax
lea edi, [ebp - 0x54]
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
jmp 0x4fdd98
mov eax, dword [0x57414c]
cmp dword [eax], 0
je case.0x4fe8db.0
mov eax, dword [0x573d68]
mov esi, eax
lea edi, [ebp - 0x54]
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 8]
call fcn.00404bec
mov eax, dword [ebp - 0xc]
call fcn.00404bec
mov eax, dword [ebp + 0x14]
call fcn.00404bec
mov eax, dword [ebp + 0x10]
call fcn.00404bec
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
cmp byte [ebp - 0x54], 0
je case.0x4fe8db.0
lea edx, [ebp - 0x54]
lea eax, [ebp - 0x64]
call fcn.0040349c
mov edx, 0x501244
lea eax, [ebp - 0x64]
mov cl, 0xf
call fcn.0040346c
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 8]
call fcn.00404e50
lea eax, [ebp - 0x10]
mov edx, 0x501250
call fcn.00404c84
xor eax, eax
mov al, byte [ebp - 0x45]
cmp eax, 0x40
ja case.0x4fde0e.0
mov al, byte [eax + 0x4fde15]
jmp dword [eax*4 + 0x4fde56]
cmp byte [ebp - 0x44], 3
je 0x4fdf07
cmp dword [ebp - 0x38], 0
jle 0x4fded7
push 0x501260
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 0x38]
call fcn.004096c8
push dword [ebp - 0x68]
push 0x50126c
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
cmp dword [ebp - 0x34], 0
jle 0x4fdf07
mov eax, dword [ebp - 0xc]
push dword [eax]
push 0x501260
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 0x34]
call fcn.004096c8
push dword [ebp - 0x6c]
push 0x501278
mov eax, dword [ebp - 0xc]
mov edx, 4
call fcn.00404f6c
mov eax, dword [ebp - 0xc]
push dword [eax]
push 0x501250
lea edx, [ebp - 0x70]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x70]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov al, byte [ebp - 0x42]
sub al, 9
je 0x4fdf4b
sub al, 0xc
je 0x4fdfb0
dec al
je 0x4fe06a
jmp 0x4fe0c1
mov eax, dword [ebp - 0xc]
push dword [eax]
push 0x501250
lea edx, [ebp - 0x74]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x74]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
push 0x501284
movzx eax, word [ebp - 0x14]
mov dword [ebp - 0x7c], eax
fild dword [ebp - 0x7c]
fdiv dword [0x501294]
call fcn.00403038
push edx
push eax
lea eax, [ebp - 0x78]
call fcn.004097b4
push dword [ebp - 0x78]
push 0x5012a0
mov eax, dword [ebp + 0x14]
mov edx, 3
call fcn.00404f6c
jmp 0x4fe0ee
cmp byte [ebp - 0x45], 2
jne 0x4fe010
cmp byte [ebp - 0x40], 0x38
jne 0x4fe010
mov eax, dword [ebp - 0xc]
push dword [eax]
push 0x501250
lea edx, [ebp - 0x80]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x80]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
push ebp
lea ecx, [ebp - 0x84]
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
call fcn.004fdc50
pop ecx
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp + 0x14]
mov edx, 0x5012ac
call fcn.00404ef8
jmp 0x4fe0ee
mov eax, dword [ebp - 0xc]
push dword [eax]
push 0x501250
lea edx, [ebp - 0x88]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x88]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
push ebp
lea ecx, [ebp - 0x8c]
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
call fcn.004fdb80
pop ecx
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp + 0x14]
mov edx, 0x5012ac
call fcn.00404ef8
jmp 0x4fe0ee
mov eax, dword [ebp - 0xc]
push dword [eax]
push 0x501250
lea edx, [ebp - 0x90]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x90]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
push ebp
lea ecx, [ebp - 0x94]
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
call fcn.004fdb80
pop ecx
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp + 0x14]
mov edx, 0x5012ac
call fcn.00404ef8
jmp 0x4fe0ee
mov eax, dword [ebp - 0xc]
push dword [eax]
push 0x501250
lea edx, [ebp - 0x98]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x98]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
cmp byte [ebp - 0x45], 2
jne case.0x4fe8db.0
cmp byte [ebp - 0x40], 0x38
je case.0x4fe8db.0
mov al, byte [ebp - 0x44]
sub al, 3
jae case.0x4fe8db.0
push 0x5012bc
push ebp
lea ecx, [ebp - 0x9c]
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
call fcn.004fdb80
pop ecx
push dword [ebp - 0x9c]
push 0x5012cc
mov eax, dword [ebp + 0x14]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push 0x501250
lea edx, [ebp - 0xa0]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0xa0]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
mov ax, word [ebp - 0x14]
cmp ax, word [ebp - 0x12]
jne 0x4fe1ac
push 0x5012d8
lea edx, [ebp - 0xa4]
movzx eax, word [ebp - 0x12]
call fcn.004096c8
push dword [ebp - 0xa4]
push 0x5012f0
mov eax, dword [ebp + 0x14]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
cmp dword [ebp - 0x24], 0
jne 0x4fe226
push 0x501308
lea edx, [ebp - 0xa8]
movzx eax, word [ebp - 0x14]
call fcn.004096c8
push dword [ebp - 0xa8]
push 0x50131c
lea edx, [ebp - 0xac]
movzx eax, word [ebp - 0x12]
call fcn.004096c8
push dword [ebp - 0xac]
push 0x501328
mov eax, dword [ebp + 0x14]
mov edx, 5
call fcn.00404f6c
lea edx, [ebp - 0xb0]
xor eax, eax
mov al, byte [ebp - 0x42]
shl eax, 3
lea eax, [eax + eax*2]
call fcn.004096c8
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp + 0x10]
mov ecx, 0x501334
call fcn.00404ef8
jmp case.0x4fe8db.0
push 0x501308
movzx eax, word [ebp - 0x14]
mov edx, dword [0x573ac8]
movzx edx, word [edx]
add eax, edx
lea edx, [ebp - 0xb4]
call fcn.004096c8
push dword [ebp - 0xb4]
push 0x50131c
lea edx, [ebp - 0xb8]
movzx eax, word [ebp - 0x12]
call fcn.004096c8
push dword [ebp - 0xb8]
push 0x501328
mov eax, dword [ebp + 0x14]
mov edx, 5
call fcn.00404f6c
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 0x24]
call fcn.004096c8
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp + 0x10]
mov ecx, 0x501334
call fcn.00404ef8
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push 0x501250
lea edx, [ebp - 0xc0]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
mov al, byte [ebp - 0x42]
sub al, 1
jb 0x4fe2dc
je 0x4fe4f8
jmp case.0x4fe8db.0
lea edx, [ebp - 0xc4]
movzx eax, word [ebp - 0x3c]
call fcn.004096c8
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ebp + 0x10]
mov edx, 0x501350
call fcn.00404ef8
mov eax, dword [ebp + 0xc]
mov byte [eax], 0
mov al, byte [ebp - 0x44]
sub al, 1
jb 0x4fe326
je 0x4fe3a3
dec al
je 0x4fe420
dec al
je 0x4fe49d
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x501364
call fcn.00404c40
mov eax, dword [ebp + 8]
dec eax
je 0x4fe341
dec eax
je 0x4fe372
jmp case.0x4fe8db.0
mov eax, dword [0x57382c]
mov eax, dword [eax]
cmp byte [eax + 0x17], 0
jne case.0x4fe8db.0
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov ax, word [eax + 0x3d]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
mov eax, dword [0x57414c]
mov eax, dword [eax]
cmp byte [eax + 0x17], 0
jne case.0x4fe8db.0
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov ax, word [eax + 0x3d]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x501378
call fcn.00404c40
mov eax, dword [ebp + 8]
dec eax
je 0x4fe3be
dec eax
je 0x4fe3ef
jmp case.0x4fe8db.0
mov eax, dword [0x57382c]
mov eax, dword [eax]
cmp byte [eax + 0x17], 1
jne case.0x4fe8db.0
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov ax, word [eax + 0x3d]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
mov eax, dword [0x57414c]
mov eax, dword [eax]
cmp byte [eax + 0x17], 1
jne case.0x4fe8db.0
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov ax, word [eax + 0x3d]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x501388
call fcn.00404c40
mov eax, dword [ebp + 8]
dec eax
je 0x4fe43b
dec eax
je 0x4fe46c
jmp case.0x4fe8db.0
mov eax, dword [0x57382c]
mov eax, dword [eax]
cmp byte [eax + 0x17], 2
jne case.0x4fe8db.0
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov ax, word [eax + 0x3d]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
mov eax, dword [0x57414c]
mov eax, dword [eax]
cmp byte [eax + 0x17], 2
jne case.0x4fe8db.0
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov ax, word [eax + 0x3d]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x50139c
call fcn.00404c40
mov eax, dword [ebp + 8]
dec eax
je 0x4fe4b8
dec eax
je 0x4fe4d8
jmp case.0x4fe8db.0
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov ax, word [eax + 0x3d]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov ax, word [eax + 0x3d]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
lea edx, [ebp - 0xc8]
movzx eax, word [ebp - 0x3c]
call fcn.004096c8
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ebp + 0x10]
mov edx, 0x5013b0
call fcn.00404ef8
mov eax, dword [ebp + 0xc]
mov byte [eax], 0
mov al, byte [ebp - 0x44]
sub al, 1
jb 0x4fe542
je 0x4fe5b9
dec al
je 0x4fe630
sub al, 0x61
je 0x4fe6a7
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x5013c8
call fcn.00404c40
mov eax, dword [ebp + 8]
dec eax
je 0x4fe55d
dec eax
je 0x4fe58b
jmp case.0x4fe8db.0
mov eax, dword [0x57382c]
mov eax, dword [eax]
cmp byte [eax + 0x17], 0
jne case.0x4fe8db.0
mov eax, dword [0x573ad0]
movzx eax, byte [eax]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
mov eax, dword [0x57414c]
mov eax, dword [eax]
cmp byte [eax + 0x17], 0
jne case.0x4fe8db.0
mov eax, dword [0x573ba4]
movzx eax, byte [eax]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x501378
call fcn.00404c40
mov eax, dword [ebp + 8]
dec eax
je 0x4fe5d4
dec eax
je 0x4fe602
jmp case.0x4fe8db.0
mov eax, dword [0x57382c]
mov eax, dword [eax]
cmp byte [eax + 0x17], 1
jne case.0x4fe8db.0
mov eax, dword [0x573ad0]
movzx eax, byte [eax]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
mov eax, dword [0x57414c]
mov eax, dword [eax]
cmp byte [eax + 0x17], 1
jne case.0x4fe8db.0
mov eax, dword [0x573ba4]
movzx eax, byte [eax]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x5013dc
call fcn.00404c40
mov eax, dword [ebp + 8]
dec eax
je 0x4fe64b
dec eax
je 0x4fe679
jmp case.0x4fe8db.0
mov eax, dword [0x57382c]
mov eax, dword [eax]
cmp byte [eax + 0x17], 2
jne case.0x4fe8db.0
mov eax, dword [0x573ad0]
movzx eax, byte [eax]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
mov eax, dword [0x57414c]
mov eax, dword [eax]
cmp byte [eax + 0x17], 2
jne case.0x4fe8db.0
mov eax, dword [0x573ba4]
movzx eax, byte [eax]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x5013f0
call fcn.00404c40
mov eax, dword [ebp + 8]
dec eax
je 0x4fe6c2
dec eax
je 0x4fe6df
jmp case.0x4fe8db.0
mov eax, dword [0x573ad0]
movzx eax, byte [eax]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
mov eax, dword [0x573ba4]
movzx eax, byte [eax]
cmp ax, word [ebp - 0x3c]
jb case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp case.0x4fe8db.0
mov al, byte [ebp - 0x44]
sub al, 1
jb 0x4fe71a
je 0x4fe77c
dec al
je 0x4fe7de
dec al
je 0x4fe840
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0xcc]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0xcc]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
push 0x501414
push ebp
lea ecx, [ebp - 0xd0]
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
call fcn.004fdb80
pop ecx
push dword [ebp - 0xd0]
push 0x5012cc
mov eax, dword [ebp + 0x14]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0xd4]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0xd4]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
push 0x50126c
push ebp
lea ecx, [ebp - 0xd8]
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
call fcn.004fdb80
pop ecx
push dword [ebp - 0xd8]
push 0x501424
mov eax, dword [ebp + 0x14]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0xdc]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0xdc]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
push 0x501430
push ebp
lea ecx, [ebp - 0xe0]
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
call fcn.004fdb80
pop ecx
push dword [ebp - 0xe0]
push 0x501424
mov eax, dword [ebp + 0x14]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0xe4]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0xe4]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
push 0x50143c
push ebp
lea ecx, [ebp - 0xe8]
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
call fcn.004fdb80
pop ecx
push dword [ebp - 0xe8]
push 0x501424
mov eax, dword [ebp + 0x14]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push 0x50144c
lea edx, [ebp - 0xec]
mov eax, dword [ebp - 0x38]
call fcn.004096c8
push dword [ebp - 0xec]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
xor eax, eax
mov al, byte [ebp - 0x44]
cmp eax, 0xe
ja case.0x4fe8db.0
jmp dword [eax*4 + 0x4fe8e2]
mov eax, dword [ebp + 0x14]
mov edx, 0x50145c
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x50148c
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x5014a8
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x5014d8
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x5014f8
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x501524
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x501554
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x501584
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x5015b4
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x5015c4
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x50148c
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x5015f4
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x501624
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x50163c
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x501624
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x50166c
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x50169c
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x5016b4
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x50148c
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x5016e4
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x501624
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x501714
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x50169c
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x501744
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x50169c
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0xf0]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0xf0]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
mov al, byte [ebp - 0x44]
sub al, 1
jb 0x4feae2
je 0x4feaf4
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x501774
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x50179c
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0xf4]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
mov al, byte [ebp - 0x44]
sub al, 1
jb 0x4feb3f
je 0x4feb51
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x5017c8
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x5017f0
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0xf8]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0xf8]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
xor eax, eax
mov al, byte [ebp - 0x44]
cmp eax, 7
ja case.0x4fe8db.0
jmp dword [eax*4 + 0x4feba3]
mov eax, dword [ebp + 0x14]
mov edx, 0x501814
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x501840
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x50186c
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x501898
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x5018c4
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x5018f0
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x50191c
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0xfc]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0xfc]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
xor eax, eax
mov al, byte [ebp - 0x44]
cmp eax, 5
ja case.0x4fe8db.0
jmp dword [eax*4 + 0x4fec81]
mov eax, dword [ebp + 0x14]
mov edx, 0x501948
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x501978
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x501994
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x5019c4
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x5019dc
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x501a0c
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x501a28
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x501a58
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x14]
mov edx, 0x501a7c
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x501aac
call fcn.00404c40
jmp case.0x4fe8db.0
cmp byte [ebp - 0x44], 0
je 0x4fedd4
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0x100]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x100]
push 0x501ac8
push ebp
lea ecx, [ebp - 0x104]
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
call fcn.004fdb80
pop ecx
push dword [ebp - 0x104]
mov eax, dword [ebp - 0xc]
mov edx, 5
call fcn.00404f6c
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x50144c
lea edx, [ebp - 0x108]
mov eax, dword [ebp - 0x38]
call fcn.004096c8
push dword [ebp - 0x108]
push 0x501ad8
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0x34]
call fcn.004096c8
push dword [ebp - 0x10c]
push 0x501ae8
mov eax, dword [ebp + 0x14]
mov edx, 6
call fcn.00404f6c
jmp 0x4fedff
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0x110]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x110]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
xor eax, eax
mov al, byte [ebp - 0x44]
cmp eax, 0xc
ja case.0x4fe8db.0
jmp dword [eax*4 + 0x4fee14]
mov eax, dword [ebp + 0x10]
mov edx, 0x501af4
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x10]
mov edx, 0x501b24
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x10]
mov edx, 0x5014f8
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x10]
mov edx, 0x501524
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x10]
mov edx, 0x501554
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x10]
mov edx, 0x501b50
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0x10]
mov edx, 0x501b80
call fcn.00404c40
jmp case.0x4fe8db.0
push 0x501bb0
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x24]
call fcn.004096c8
push dword [ebp - 0x114]
push 0x501bd0
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
push 0x501be4
lea edx, [ebp - 0x118]
mov eax, dword [ebp - 0x24]
call fcn.004096c8
push dword [ebp - 0x118]
push 0x501bd0
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
push 0x501c04
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 0x24]
call fcn.004096c8
push dword [ebp - 0x11c]
push 0x501bd0
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
push 0x501c28
lea edx, [ebp - 0x120]
mov eax, dword [ebp - 0x24]
call fcn.004096c8
push dword [ebp - 0x120]
push 0x501bd0
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
push 0x501c4c
lea edx, [ebp - 0x124]
mov eax, dword [ebp - 0x24]
call fcn.004096c8
push dword [ebp - 0x124]
push 0x501bd0
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 0
test byte [ebp - 0x40], 1
je 0x4fefd4
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx]
mov eax, dword [ebp - 8]
mov edx, 0x501c68
call fcn.00404ef8
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0x128]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x128]
push 0x501c74
push ebp
lea ecx, [ebp - 0x12c]
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
call fcn.004fdb80
pop ecx
push dword [ebp - 0x12c]
mov eax, dword [ebp - 0xc]
mov edx, 5
call fcn.00404f6c
cmp dword [ebp - 0x30], 0
jle 0x4ff06d
push 0x501c84
lea edx, [ebp - 0x130]
movzx eax, word [ebp - 0x30]
call fcn.004096c8
push dword [ebp - 0x130]
push 0x501c94
mov eax, dword [ebp - 0x30]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x134]
call fcn.004096c8
push dword [ebp - 0x134]
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
cmp dword [ebp - 0x2c], 0
jle 0x4ff0c0
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501ca0
lea edx, [ebp - 0x138]
movzx eax, word [ebp - 0x2c]
call fcn.004096c8
push dword [ebp - 0x138]
push 0x501c94
mov eax, dword [ebp - 0x2c]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x13c]
call fcn.004096c8
push dword [ebp - 0x13c]
mov eax, dword [ebp + 0x14]
mov edx, 5
call fcn.00404f6c
cmp dword [ebp - 0x28], 0
jle 0x4ff113
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501cb0
lea edx, [ebp - 0x140]
movzx eax, word [ebp - 0x28]
call fcn.004096c8
push dword [ebp - 0x140]
push 0x501c94
mov eax, dword [ebp - 0x28]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x144]
call fcn.004096c8
push dword [ebp - 0x144]
mov eax, dword [ebp + 0x14]
mov edx, 5
call fcn.00404f6c
movsx eax, byte [ebp - 0x41]
dec eax
sub eax, 0xa
jns 0x4ff14f
cmp byte [ebp - 0x41], 0
jle 0x4ff14f
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501cc0
lea edx, [ebp - 0x148]
movsx eax, byte [ebp - 0x41]
call fcn.004096c8
push dword [ebp - 0x148]
mov eax, dword [ebp + 0x14]
mov edx, 3
call fcn.00404f6c
cmp byte [ebp - 0x41], 0xff
jg 0x4ff189
cmp byte [ebp - 0x41], 0xce
jl 0x4ff189
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501cd0
lea edx, [ebp - 0x14c]
movsx eax, byte [ebp - 0x41]
neg eax
call fcn.004096c8
push dword [ebp - 0x14c]
mov eax, dword [ebp + 0x14]
mov edx, 3
call fcn.00404f6c
cmp byte [ebp - 0x41], 0xcd
jg 0x4ff1c6
cmp byte [ebp - 0x41], 0x9c
jl 0x4ff1c6
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501ce0
lea edx, [ebp - 0x150]
movsx eax, byte [ebp - 0x41]
neg eax
sub eax, 0x32
call fcn.004096c8
push dword [ebp - 0x150]
mov eax, dword [ebp + 0x14]
mov edx, 3
call fcn.00404f6c
mov eax, dword [ebp - 0x38]
call fcn.00407cac
test ax, ax
jbe 0x4ff206
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501cf0
mov eax, dword [ebp - 0x38]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x154]
call fcn.004096c8
push dword [ebp - 0x154]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
mov eax, dword [ebp - 0x34]
call fcn.00407cac
test ax, ax
jbe 0x4ff29a
mov eax, dword [ebp - 0x34]
call fcn.00407cac
cmp ax, 0xa
jbe 0x4ff262
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d00
mov eax, dword [ebp - 0x34]
call fcn.00407cac
movzx eax, ax
sub eax, 0xa
lea edx, [ebp - 0x158]
call fcn.004096c8
push dword [ebp - 0x158]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
jmp 0x4ff29a
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d20
mov eax, dword [ebp - 0x34]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x15c]
call fcn.004096c8
push dword [ebp - 0x15c]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
cmp word [ebp - 0x38], 0
jbe 0x4ff2d2
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d34
lea edx, [ebp - 0x160]
movzx eax, word [ebp - 0x38]
call fcn.004096c8
push dword [ebp - 0x160]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
cmp word [ebp - 0x34], 0
jbe 0x4ff30a
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d44
lea edx, [ebp - 0x164]
movzx eax, word [ebp - 0x34]
call fcn.004096c8
push dword [ebp - 0x164]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
mov eax, dword [ebp - 0x24]
cmp eax, 0x52
ja case.0x4fe8db.0
mov al, byte [eax + 0x4ff323]
jmp dword [eax*4 + 0x4ff376]
mov eax, dword [ebp + 8]
dec eax
je 0x4ff3cd
dec eax
je 0x4ff3e5
jmp 0x4ff3fb
mov eax, dword [0x57382c]
mov eax, dword [eax]
movzx eax, word [eax + 0x3d]
cmp eax, dword [ebp - 0x20]
jl 0x4ff3fb
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp 0x4ff3fb
mov eax, dword [0x57414c]
mov eax, dword [eax]
movzx eax, word [eax + 0x3d]
cmp eax, dword [ebp - 0x20]
jl 0x4ff3fb
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501350
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x168]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 8]
dec eax
je 0x4ff43b
dec eax
je 0x4ff45a
jmp 0x4ff477
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 0x47]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x4ff477
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp 0x4ff477
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov eax, dword [eax + 0x47]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x4ff477
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d54
lea edx, [ebp - 0x16c]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x16c]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 8]
dec eax
je 0x4ff4b7
dec eax
je 0x4ff4d6
jmp 0x4ff4f3
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 0x4b]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x4ff4f3
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp 0x4ff4f3
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov eax, dword [eax + 0x4b]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x4ff4f3
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d68
lea edx, [ebp - 0x170]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x170]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 8]
dec eax
je 0x4ff533
dec eax
je 0x4ff552
jmp 0x4ff56f
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 0x4f]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x4ff56f
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp 0x4ff56f
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov eax, dword [eax + 0x4f]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x4ff56f
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d7c
lea edx, [ebp - 0x174]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x174]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d90
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x178]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501da8
lea edx, [ebp - 0x17c]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x17c]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501dc0
lea edx, [ebp - 0x180]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x180]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501dd8
lea edx, [ebp - 0x184]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x184]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501df0
lea edx, [ebp - 0x188]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x188]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501e08
lea edx, [ebp - 0x18c]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x18c]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501e20
lea edx, [ebp - 0x190]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x190]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501e34
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501e4c
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501e64
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
mov edx, 0x501e7c
call fcn.00404eb4
mov eax, dword [ebp + 0x10]
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501e94
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501ea8
lea edx, [ebp - 0x194]
movzx eax, word [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x194]
push 0x501ebc
mov eax, dword [ebp - 0x20]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x198]
call fcn.004096c8
push dword [ebp - 0x198]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 6
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501ed0
lea edx, [ebp - 0x19c]
movzx eax, word [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x19c]
push 0x501ebc
mov eax, dword [ebp - 0x20]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x1a0]
call fcn.004096c8
push dword [ebp - 0x1a0]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 6
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0x1a4]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x1a4]
push 0x501c74
push ebp
lea ecx, [ebp - 0x1a8]
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
call fcn.004fdb80
pop ecx
push dword [ebp - 0x1a8]
mov eax, dword [ebp - 0xc]
mov edx, 5
call fcn.00404f6c
cmp dword [ebp - 0x38], 0
jle 0x4ff956
push 0x501ee4
lea edx, [ebp - 0x1ac]
movzx eax, word [ebp - 0x38]
call fcn.004096c8
push dword [ebp - 0x1ac]
push 0x501c94
mov eax, dword [ebp - 0x38]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x1b0]
call fcn.004096c8
push dword [ebp - 0x1b0]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 5
call fcn.00404f6c
cmp dword [ebp - 0x34], 0
jle 0x4ff9ae
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501ef4
lea edx, [ebp - 0x1b4]
movzx eax, word [ebp - 0x34]
call fcn.004096c8
push dword [ebp - 0x1b4]
push 0x501c94
mov eax, dword [ebp - 0x34]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x1b8]
call fcn.004096c8
push dword [ebp - 0x1b8]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 6
call fcn.00404f6c
cmp dword [ebp - 0x30], 0
jle 0x4ffa06
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501c84
lea edx, [ebp - 0x1bc]
movzx eax, word [ebp - 0x30]
call fcn.004096c8
push dword [ebp - 0x1bc]
push 0x501c94
mov eax, dword [ebp - 0x30]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x1c0]
call fcn.004096c8
push dword [ebp - 0x1c0]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 6
call fcn.00404f6c
cmp dword [ebp - 0x2c], 0
jle 0x4ffa5e
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501ca0
lea edx, [ebp - 0x1c4]
movzx eax, word [ebp - 0x2c]
call fcn.004096c8
push dword [ebp - 0x1c4]
push 0x501c94
mov eax, dword [ebp - 0x2c]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x1c8]
call fcn.004096c8
push dword [ebp - 0x1c8]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 6
call fcn.00404f6c
cmp dword [ebp - 0x28], 0
jle 0x4ffab1
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501cb0
lea edx, [ebp - 0x1cc]
movzx eax, word [ebp - 0x28]
call fcn.004096c8
push dword [ebp - 0x1cc]
push 0x501c94
mov eax, dword [ebp - 0x28]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x1d0]
call fcn.004096c8
push dword [ebp - 0x1d0]
mov eax, dword [ebp + 0x14]
mov edx, 5
call fcn.00404f6c
cmp byte [ebp - 0x41], 0
jbe 0x4ffae9
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d34
lea edx, [ebp - 0x1d4]
xor eax, eax
mov al, byte [ebp - 0x41]
call fcn.004096c8
push dword [ebp - 0x1d4]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
movsx eax, byte [ebp - 0x41]
call fcn.00407cb0
test al, al
jbe 0x4ffb31
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d44
movsx eax, byte [ebp - 0x41]
call fcn.00407cb0
and eax, 0xff
lea edx, [ebp - 0x1d8]
call fcn.004096c8
push dword [ebp - 0x1d8]
push 0x501d14
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
mov eax, dword [ebp - 0x24]
cmp eax, 0x52
ja case.0x4fe8db.0
mov al, byte [eax + 0x4ffb4a]
jmp dword [eax*4 + 0x4ffb9d]
mov eax, dword [ebp + 8]
dec eax
je 0x4ffbf4
dec eax
je 0x4ffc0c
jmp 0x4ffc22
mov eax, dword [0x57382c]
mov eax, dword [eax]
movzx eax, word [eax + 0x3d]
cmp eax, dword [ebp - 0x20]
jl 0x4ffc22
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp 0x4ffc22
mov eax, dword [0x57414c]
mov eax, dword [eax]
movzx eax, word [eax + 0x3d]
cmp eax, dword [ebp - 0x20]
jl 0x4ffc22
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501350
lea edx, [ebp - 0x1dc]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x1dc]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 8]
dec eax
je 0x4ffc5d
dec eax
je 0x4ffc7c
jmp 0x4ffc99
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 0x47]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x4ffc99
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp 0x4ffc99
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov eax, dword [eax + 0x47]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x4ffc99
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d54
lea edx, [ebp - 0x1e0]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x1e0]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 8]
dec eax
je 0x4ffcd4
dec eax
je 0x4ffcf3
jmp 0x4ffd10
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 0x4b]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x4ffd10
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp 0x4ffd10
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov eax, dword [eax + 0x4b]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x4ffd10
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d68
lea edx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x1e4]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 8]
dec eax
je 0x4ffd4b
dec eax
je 0x4ffd6a
jmp 0x4ffd87
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 0x4f]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x4ffd87
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp 0x4ffd87
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov eax, dword [eax + 0x4f]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x4ffd87
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d7c
lea edx, [ebp - 0x1e8]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x1e8]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d90
lea edx, [ebp - 0x1ec]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x1ec]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501da8
lea edx, [ebp - 0x1f0]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x1f0]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501f04
lea edx, [ebp - 0x1f4]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x1f4]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501dd8
lea edx, [ebp - 0x1f8]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x1f8]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501df0
lea edx, [ebp - 0x1fc]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x1fc]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501e08
lea edx, [ebp - 0x200]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x200]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501e20
lea edx, [ebp - 0x204]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x204]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
mov edx, 0x501e34
call fcn.00404eb4
mov eax, dword [ebp + 0x10]
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
mov edx, 0x501e4c
call fcn.00404eb4
mov eax, dword [ebp + 0x10]
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
mov edx, 0x501e64
call fcn.00404eb4
mov eax, dword [ebp + 0x10]
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
mov edx, 0x501e7c
call fcn.00404eb4
mov eax, dword [ebp + 0x10]
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
mov edx, 0x501e94
call fcn.00404eb4
mov eax, dword [ebp + 0x10]
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501ea8
lea edx, [ebp - 0x208]
movzx eax, word [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x208]
push 0x501ebc
mov eax, dword [ebp - 0x20]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x20c]
call fcn.004096c8
push dword [ebp - 0x20c]
mov eax, dword [ebp + 0x10]
mov edx, 5
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501ed0
lea edx, [ebp - 0x210]
movzx eax, word [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x210]
push 0x501ebc
mov eax, dword [ebp - 0x20]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x214]
call fcn.004096c8
push dword [ebp - 0x214]
mov eax, dword [ebp + 0x10]
mov edx, 5
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 0
cmp byte [ebp - 0x44], 0xbc
jne 0x5000a1
push 0x501f1c
lea edx, [ebp - 0x218]
xor eax, eax
mov al, byte [ebp - 0x40]
call fcn.004096c8
push dword [ebp - 0x218]
push 0x501d14
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0x21c]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x21c]
push 0x501c74
push ebp
lea ecx, [ebp - 0x220]
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
call fcn.004fdb80
pop ecx
push dword [ebp - 0x220]
mov eax, dword [ebp - 0xc]
mov edx, 5
call fcn.00404f6c
xor eax, eax
mov al, byte [ebp - 0x45]
add eax, 0xffffffed
cmp eax, 0x2c
ja case.0x500103.19
mov al, byte [eax + 0x50010a]
jmp dword [eax*4 + 0x500137]
cmp dword [ebp - 0x38], 0
jle 0x500195
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501f2c
mov eax, dword [ebp - 0x38]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x224]
call fcn.004096c8
push dword [ebp - 0x224]
push 0x501f40
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
cmp word [ebp - 0x34], 0
jbe 0x5001cd
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501d44
lea edx, [ebp - 0x228]
movzx eax, word [ebp - 0x34]
call fcn.004096c8
push dword [ebp - 0x228]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
mov eax, dword [ebp - 0x34]
call fcn.00407cac
test ax, ax
jbe 0x500803
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501d34
mov eax, dword [ebp - 0x34]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x22c]
call fcn.004096c8
push dword [ebp - 0x22c]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
jmp 0x500803
cmp dword [ebp - 0x38], 0
jle 0x500259
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501cf0
mov eax, dword [ebp - 0x38]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x230]
call fcn.004096c8
push dword [ebp - 0x230]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
cmp dword [ebp - 0x34], 0
jle 0x500803
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501f4c
mov eax, dword [ebp - 0x34]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x234]
call fcn.004096c8
push dword [ebp - 0x234]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
jmp 0x500803
mov eax, dword [ebp - 0x38]
call fcn.00407cac
test ax, ax
jbe 0x5002e5
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501f5c
mov eax, dword [ebp - 0x38]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x238]
call fcn.004096c8
push dword [ebp - 0x238]
push 0x501f40
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
mov eax, dword [ebp - 0x34]
call fcn.00407cac
test ax, ax
jbe 0x50032a
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501f70
mov eax, dword [ebp - 0x34]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x23c]
call fcn.004096c8
push dword [ebp - 0x23c]
push 0x501f40
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
cmp word [ebp - 0x38], 0
jbe 0x500362
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501d00
lea edx, [ebp - 0x240]
movzx eax, word [ebp - 0x38]
call fcn.004096c8
push dword [ebp - 0x240]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
cmp word [ebp - 0x34], 0
jbe 0x500803
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501d20
lea edx, [ebp - 0x244]
movzx eax, word [ebp - 0x34]
call fcn.004096c8
push dword [ebp - 0x244]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
jmp 0x500803
mov eax, dword [ebp - 0x38]
call fcn.00407cac
test ax, ax
jbe 0x5003e8
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501f84
mov eax, dword [ebp - 0x38]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x248]
call fcn.004096c8
push dword [ebp - 0x248]
push 0x501f40
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
mov eax, dword [ebp - 0x34]
call fcn.00407cac
test ax, ax
jbe 0x50042d
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501f98
mov eax, dword [ebp - 0x34]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x24c]
call fcn.004096c8
push dword [ebp - 0x24c]
push 0x501f40
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
cmp word [ebp - 0x38], 0
jbe 0x500465
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501d00
lea edx, [ebp - 0x250]
movzx eax, word [ebp - 0x38]
call fcn.004096c8
push dword [ebp - 0x250]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
cmp word [ebp - 0x34], 0
jbe 0x500803
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501d20
lea edx, [ebp - 0x254]
movzx eax, word [ebp - 0x34]
call fcn.004096c8
push dword [ebp - 0x254]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
jmp 0x500803
cmp dword [ebp - 0x38], 0
jle 0x5004fe
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501ee4
lea edx, [ebp - 0x258]
movzx eax, word [ebp - 0x38]
call fcn.004096c8
push dword [ebp - 0x258]
push 0x501c94
mov eax, dword [ebp - 0x38]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x25c]
call fcn.004096c8
push dword [ebp - 0x25c]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 6
call fcn.00404f6c
cmp dword [ebp - 0x34], 0
jle 0x500803
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501ef4
lea edx, [ebp - 0x260]
movzx eax, word [ebp - 0x34]
call fcn.004096c8
push dword [ebp - 0x260]
push 0x501c94
mov eax, dword [ebp - 0x34]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x264]
call fcn.004096c8
push dword [ebp - 0x264]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 6
call fcn.00404f6c
jmp 0x500803
cmp dword [ebp - 0x38], 0
jle 0x5005b7
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501ee4
lea edx, [ebp - 0x268]
movzx eax, word [ebp - 0x38]
call fcn.004096c8
push dword [ebp - 0x268]
push 0x501c94
mov eax, dword [ebp - 0x38]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x26c]
call fcn.004096c8
push dword [ebp - 0x26c]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 6
call fcn.00404f6c
cmp dword [ebp - 0x34], 0
jle 0x50060f
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501ef4
lea edx, [ebp - 0x270]
movzx eax, word [ebp - 0x34]
call fcn.004096c8
push dword [ebp - 0x270]
push 0x501c94
mov eax, dword [ebp - 0x34]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x274]
call fcn.004096c8
push dword [ebp - 0x274]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 6
call fcn.00404f6c
cmp byte [ebp - 0x42], 0
jbe 0x500803
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501fac
lea edx, [ebp - 0x278]
xor eax, eax
mov al, byte [ebp - 0x42]
call fcn.004096c8
push dword [ebp - 0x278]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
jmp 0x500803
cmp word [ebp - 0x38], 0
jbe 0x500688
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501fbc
lea edx, [ebp - 0x27c]
movzx eax, word [ebp - 0x38]
call fcn.004096c8
push dword [ebp - 0x27c]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
mov eax, dword [ebp - 0x38]
call fcn.00407cac
test ax, ax
jbe 0x5006cd
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501fc8
mov eax, dword [ebp - 0x38]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x280]
call fcn.004096c8
push dword [ebp - 0x280]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
cmp word [ebp - 0x34], 0
jbe 0x500705
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501d44
lea edx, [ebp - 0x284]
movzx eax, word [ebp - 0x34]
call fcn.004096c8
push dword [ebp - 0x284]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
mov eax, dword [ebp - 0x34]
call fcn.00407cac
test ax, ax
jbe 0x500803
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501d34
mov eax, dword [ebp - 0x34]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x288]
call fcn.004096c8
push dword [ebp - 0x288]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
jmp 0x500803
cmp dword [ebp - 0x38], 0
jle 0x5007ab
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501ee4
lea edx, [ebp - 0x28c]
movzx eax, word [ebp - 0x38]
call fcn.004096c8
push dword [ebp - 0x28c]
push 0x501c94
mov eax, dword [ebp - 0x38]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x290]
call fcn.004096c8
push dword [ebp - 0x290]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 6
call fcn.00404f6c
cmp dword [ebp - 0x34], 0
jle 0x500803
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501ef4
lea edx, [ebp - 0x294]
movzx eax, word [ebp - 0x34]
call fcn.004096c8
push dword [ebp - 0x294]
push 0x501c94
mov eax, dword [ebp - 0x34]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x298]
call fcn.004096c8
push dword [ebp - 0x298]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 6
call fcn.00404f6c
cmp dword [ebp - 0x30], 0
jle 0x50085b
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501c84
lea edx, [ebp - 0x29c]
movzx eax, word [ebp - 0x30]
call fcn.004096c8
push dword [ebp - 0x29c]
push 0x501c94
mov eax, dword [ebp - 0x30]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x2a0]
call fcn.004096c8
push dword [ebp - 0x2a0]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 6
call fcn.00404f6c
cmp dword [ebp - 0x2c], 0
jle 0x5008b3
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501ca0
lea edx, [ebp - 0x2a4]
movzx eax, word [ebp - 0x2c]
call fcn.004096c8
push dword [ebp - 0x2a4]
push 0x501c94
mov eax, dword [ebp - 0x2c]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x2a8]
call fcn.004096c8
push dword [ebp - 0x2a8]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 6
call fcn.00404f6c
cmp dword [ebp - 0x28], 0
jle 0x50090b
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501cb0
lea edx, [ebp - 0x2ac]
movzx eax, word [ebp - 0x28]
call fcn.004096c8
push dword [ebp - 0x2ac]
push 0x501c94
mov eax, dword [ebp - 0x28]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x2b0]
call fcn.004096c8
push dword [ebp - 0x2b0]
push 0x501d14
mov eax, dword [ebp + 0x14]
mov edx, 6
call fcn.00404f6c
cmp byte [ebp - 0x41], 0xff
jg 0x500945
cmp byte [ebp - 0x41], 0xce
jl 0x500945
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501cd0
lea edx, [ebp - 0x2b4]
movsx eax, byte [ebp - 0x41]
neg eax
call fcn.004096c8
push dword [ebp - 0x2b4]
mov eax, dword [ebp + 0x14]
mov edx, 3
call fcn.00404f6c
cmp byte [ebp - 0x41], 0xcd
jg 0x500982
cmp byte [ebp - 0x41], 0x9c
jl 0x500982
mov eax, dword [ebp + 0x14]
push dword [eax]
push 0x501ce0
lea edx, [ebp - 0x2b8]
movsx eax, byte [ebp - 0x41]
neg eax
sub eax, 0x32
call fcn.004096c8
push dword [ebp - 0x2b8]
mov eax, dword [ebp + 0x14]
mov edx, 3
call fcn.00404f6c
mov eax, dword [ebp - 0x24]
cmp eax, 0x52
ja case.0x4fe8db.0
mov al, byte [eax + 0x50099b]
jmp dword [eax*4 + 0x5009ee]
mov eax, dword [ebp + 8]
dec eax
je 0x500a45
dec eax
je 0x500a5d
jmp 0x500a73
mov eax, dword [0x57382c]
mov eax, dword [eax]
movzx eax, word [eax + 0x3d]
cmp eax, dword [ebp - 0x20]
jl 0x500a73
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp 0x500a73
mov eax, dword [0x57414c]
mov eax, dword [eax]
movzx eax, word [eax + 0x3d]
cmp eax, dword [ebp - 0x20]
jl 0x500a73
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501350
lea edx, [ebp - 0x2bc]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x2bc]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
cmp byte [ebp - 0x44], 0xbc
jne case.0x4fe8db.0
cmp byte [ebp - 0x41], 0
jle case.0x4fe8db.0
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501fd4
lea edx, [ebp - 0x2c0]
movsx eax, byte [ebp - 0x41]
call fcn.004096c8
push dword [ebp - 0x2c0]
push 0x501fe8
mov eax, dword [ebp + 0x10]
mov edx, 4
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 8]
dec eax
je 0x500af3
dec eax
je 0x500b12
jmp 0x500b2f
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 0x47]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x500b2f
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp 0x500b2f
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov eax, dword [eax + 0x47]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x500b2f
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501ff4
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x2c4]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 8]
dec eax
je 0x500b6a
dec eax
je 0x500b89
jmp 0x500ba6
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 0x4b]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x500ba6
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp 0x500ba6
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov eax, dword [eax + 0x4b]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x500ba6
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d68
lea edx, [ebp - 0x2c8]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x2c8]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 8]
dec eax
je 0x500be1
dec eax
je 0x500c00
jmp 0x500c1d
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 0x4f]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x500c1d
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp 0x500c1d
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov eax, dword [eax + 0x4f]
call fcn.00407cac
movzx eax, ax
cmp eax, dword [ebp - 0x20]
jl 0x500c1d
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d7c
lea edx, [ebp - 0x2cc]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x2cc]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501d90
lea edx, [ebp - 0x2d0]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x2d0]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501da8
lea edx, [ebp - 0x2d4]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x2d4]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501dc0
lea edx, [ebp - 0x2d8]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x2d8]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501dd8
lea edx, [ebp - 0x2dc]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x2dc]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501df0
lea edx, [ebp - 0x2e0]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x2e0]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501e08
lea edx, [ebp - 0x2e4]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x2e4]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x501e20
lea edx, [ebp - 0x2e8]
mov eax, dword [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x2e8]
mov eax, dword [ebp + 0x10]
mov edx, 3
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
mov edx, 0x501e34
call fcn.00404eb4
mov eax, dword [ebp + 0x10]
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
mov edx, 0x501e4c
call fcn.00404eb4
mov eax, dword [ebp + 0x10]
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
mov edx, 0x501e64
call fcn.00404eb4
mov eax, dword [ebp + 0x10]
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
mov edx, 0x501e7c
call fcn.00404eb4
mov eax, dword [ebp + 0x10]
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
mov edx, 0x501e94
call fcn.00404eb4
mov eax, dword [ebp + 0x10]
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x502008
lea edx, [ebp - 0x2ec]
movzx eax, word [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x2ec]
push 0x501ebc
mov eax, dword [ebp - 0x20]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x2f0]
call fcn.004096c8
push dword [ebp - 0x2f0]
mov eax, dword [ebp + 0x10]
mov edx, 5
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp + 0x10]
push dword [eax]
push 0x50201c
lea edx, [ebp - 0x2f4]
movzx eax, word [ebp - 0x20]
call fcn.004096c8
push dword [ebp - 0x2f4]
push 0x501ebc
mov eax, dword [ebp - 0x20]
call fcn.00407cac
movzx eax, ax
lea edx, [ebp - 0x2f8]
call fcn.004096c8
push dword [ebp - 0x2f8]
mov eax, dword [ebp + 0x10]
mov edx, 5
call fcn.00404f6c
jmp case.0x4fe8db.0
mov al, byte [ebp - 0x44]
sub al, 9
je 0x500f0f
dec eax
sub al, 2
jb 0x500f80
jmp 0x500fd8
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0x2fc]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x2fc]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
push 0x5012ac
lea edx, [ebp - 0x300]
movzx eax, word [ebp - 0x14]
call fcn.004096c8
push dword [ebp - 0x300]
push 0x50131c
lea edx, [ebp - 0x304]
movzx eax, word [ebp - 0x12]
call fcn.004096c8
push dword [ebp - 0x304]
mov eax, dword [ebp + 0x14]
mov edx, 4
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0x308]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x308]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
push ebp
lea ecx, [ebp - 0x30c]
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
call fcn.004fdc50
pop ecx
mov ecx, dword [ebp - 0x30c]
mov eax, dword [ebp + 0x14]
mov edx, 0x502030
call fcn.00404ef8
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0x310]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x310]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
push ebp
lea ecx, [ebp - 0x314]
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
call fcn.004fdc50
pop ecx
mov ecx, dword [ebp - 0x314]
mov eax, dword [ebp + 0x14]
mov edx, 0x502040
call fcn.00404ef8
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0x318]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x318]
push 0x502050
push ebp
lea ecx, [ebp - 0x31c]
movzx edx, word [ebp - 0x12]
movzx eax, word [ebp - 0x14]
call fcn.004fdb80
pop ecx
push dword [ebp - 0x31c]
mov eax, dword [ebp - 0xc]
mov edx, 5
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0x320]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x320]
push 0x502060
mov eax, dword [ebp - 0xc]
mov edx, 4
call fcn.00404f6c
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0x324]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x324]
push 0x502070
movzx eax, word [ebp - 0x14]
mov dword [ebp - 0x7c], eax
fild dword [ebp - 0x7c]
fdiv dword [0x502078]
call fcn.00403038
push edx
push eax
lea eax, [ebp - 0x328]
call fcn.004097b4
push dword [ebp - 0x328]
mov eax, dword [ebp - 0xc]
mov edx, 5
call fcn.00404f6c
jmp case.0x4fe8db.0
mov al, byte [ebp - 0x45]
sub al, 0x30
je 0x501122
dec al
je 0x501169
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0x32c]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x32c]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
mov eax, dword [ebp + 0x14]
mov edx, 0x501d14
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x502084
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0x330]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x330]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
mov eax, dword [ebp + 0x14]
mov edx, 0x501d14
call fcn.00404c40
mov eax, dword [ebp + 0x10]
mov edx, 0x50209c
call fcn.00404c40
jmp case.0x4fe8db.0
mov eax, dword [ebp - 0xc]
push dword [eax]
push dword [ebp - 0x10]
lea edx, [ebp - 0x334]
xor eax, eax
mov al, byte [ebp - 0x43]
call fcn.004096c8
push dword [ebp - 0x334]
mov eax, dword [ebp - 0xc]
mov edx, 3
call fcn.00404f6c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x50123b
lea eax, [ebp - 0x334]
mov edx, 0x63
call fcn.00404c10
lea eax, [ebp - 0x1a4]
call fcn.00404bec
lea eax, [ebp - 0x1a8]
call fcn.00404bec
lea eax, [ebp - 0x1a0]
mov edx, 0x49
call fcn.00404c10
lea eax, [ebp - 0x78]
mov edx, 5
call fcn.00404c10
lea eax, [ebp - 0x10]
call fcn.00404bec
ret