Function at 0x4dd540
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a0528
mov eax, dword fs:[0]
push eax
sub esp, 0x3bc
mov eax, dword [0x6d48e0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x3b4], ecx
mov eax, dword [ebp + 0x10]
mov esi, 0x85
mov edi, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp + 0x14]
movzx ecx, word [edi + 0xc]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x3bc], eax
xor eax, eax
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x3c4], eax
mov eax, ecx
mov dword [ebp - 0x3b0], 0x88
mov dword [ebp - 0x3a8], edx
mov dword [ebp - 0x3c0], 0x12c
cmp ax, word [ebp - 0x3b0]
je 0x4dd5f5
cmp cx, si
je 0x4dd5f5
mov eax, dword [ebp - 0x3c0]
cmp word [edx + 0x28], ax
je 0x4dd5f5
mov eax, ecx
mov ecx, 0x8e
cmp ax, cx
je 0x4dd5f5
mov dword [ebp - 0x3c4], edi
jmp 0x4dd5fb
mov dword [ebp - 0x3c8], edi
movzx eax, word [edx + 0x28]
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
add eax, 0xfffff7ff
cmp eax, 0x33
ja case.0x4dd61a.2050
movzx eax, byte [eax + 0x4e00ec]
jmp dword [eax*4 + 0x4e00c0]
movzx eax, word [edx + 0x6c]
push eax
push 0x871
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
push 0x86c
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
jmp 0x4dd78e
movzx eax, word [edx + 0x6c]
push eax
push 0x872
jmp 0x4dd62b
movzx eax, word [edx + 0x6c]
push eax
push 0x873
jmp 0x4dd62b
movzx eax, word [edx + 0x6c]
push eax
push 0x874
jmp 0x4dd62b
movzx eax, word [edx + 0x6c]
push eax
push 0x876
jmp 0x4dd62b
movzx eax, word [edx + 0x6c]
push eax
push 0x875
jmp 0x4dd62b
movzx eax, word [edx + 0x6c]
push eax
push 0x878
jmp 0x4dd62b
movzx eax, word [edx + 0x6c]
push eax
push 0x877
jmp 0x4dd62b
movzx eax, word [edx + 0x6c]
push eax
push 0x87a
jmp 0x4dd62b
movzx eax, word [edx + 0x38]
cmp eax, 7
ja case.default.0x4dd6b4
jmp dword [eax*4 + 0x4e0120]
push 0x197
jmp 0x4dd6e3
push 0x198
jmp 0x4dd6e3
push 0x199
jmp 0x4dd6e3
push 0x19a
jmp 0x4dd6e3
push 0x19b
jmp 0x4dd6e3
push 0x196
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x2a0]
push eax
call esi
mov edx, dword [ebp - 0x3a8]
add esp, 8
mov eax, 0xc54d
cmp word [edx], ax
jne 0x4dd72c
push 0x9f4
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x2a0]
push eax
call esi
mov edx, dword [ebp - 0x3a8]
add esp, 8
mov eax, 0xc54c
cmp word [edx], ax
jne 0x4dd758
push 0x9f5
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x2a0]
push eax
call esi
mov edx, dword [ebp - 0x3a8]
add esp, 8
movzx eax, word [edx + 0x78]
sub eax, 0
je 0x4dd772
dec eax
jne case.0x4dd61a.2050
lea eax, [ebp - 0x2a0]
push eax
push 0x111
jmp 0x4dd77e
lea eax, [ebp - 0x2a0]
push eax
push 0x110
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
push str.___________s___s
lea eax, [ebp - 0x140]
push eax
call esi
add esp, 0x10
push 1
push 0
push 0
push 0xffffc8
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00464cc0
push dword [ebp - 0x3a8]
mov ecx, dword [ebp - 0x3b4]
xorps xmm1, xmm1
push edi
movss dword [ebp - 0x3b0], xmm1
call fcn.004e0990
mov ecx, dword [ebp - 0x3a8]
movzx eax, word [ecx + 0x6a]
dec eax
je 0x4dd7ef
dec eax
jne 0x4dd811
push eax
push eax
push eax
push 0xf83232
push 0xed
jmp 0x4dd7ff
push 0
push 0
push 0
push 0xf83232
push 0xec
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
mov ecx, edi
call fcn.00464cc0
mov eax, dword [ebp - 0x3a8]
movzx eax, word [eax + 0x6c]
test ax, ax
je 0x4dd875
push eax
push 0xee
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push eax
call esi
mov eax, dword [0x6fe4dc]
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov ax, word [eax + 0x45c]
cmp ax, word [ecx + 0x6c]
lea eax, [ebp - 0x140]
push 0
push 0
push 0
mov ecx, edi
jae 0x4dd86a
push 0xf83232
jmp 0x4dd86f
push 0xffffff
push eax
call fcn.00464cc0
push 0
push 0
push 0
push 0xffffff
push str.
mov ecx, edi
call fcn.00464cc0
mov eax, dword [ebp - 0x3a8]
movzx eax, word [eax + 0x6e]
test ax, ax
je 0x4dd8f0
push eax
push 0xef
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push eax
call esi
mov eax, dword [0x6fe4dc]
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov ax, word [eax + 0x66c]
cmp ax, word [ecx + 0x6e]
lea eax, [ebp - 0x140]
push 0
push 0
push 0
mov ecx, edi
jae 0x4dd8e5
push 0xe61414
jmp 0x4dd8ea
push 0xffffff
push eax
call fcn.00464cc0
mov eax, dword [ebp - 0x3a8]
movzx eax, word [eax + 0x70]
test ax, ax
je 0x4dd954
push eax
push 0xf0
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push eax
call esi
mov eax, dword [0x6fe4dc]
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov ax, word [eax + 0x66e]
cmp ax, word [ecx + 0x70]
lea eax, [ebp - 0x140]
push 0
push 0
push 0
mov ecx, edi
jae 0x4dd949
push 0xe61414
jmp 0x4dd94e
push 0xffffff
push eax
call fcn.00464cc0
mov eax, dword [ebp - 0x3a8]
movzx eax, word [eax + 0x72]
test ax, ax
je 0x4dd9b8
push eax
push 0xf1
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push eax
call esi
mov eax, dword [0x6fe4dc]
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov ax, word [eax + 0x670]
cmp ax, word [ecx + 0x72]
lea eax, [ebp - 0x140]
push 0
push 0
push 0
mov ecx, edi
jae 0x4dd9ad
push 0xe61414
jmp 0x4dd9b2
push 0xffffff
push eax
call fcn.00464cc0
mov eax, dword [ebp - 0x3a8]
movzx eax, word [eax + 0x74]
test ax, ax
je 0x4dda1c
push eax
push 0xf2
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push eax
call esi
mov eax, dword [0x6fe4dc]
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov ax, word [eax + 0x672]
cmp ax, word [ecx + 0x74]
lea eax, [ebp - 0x140]
push 0
push 0
push 0
mov ecx, edi
jae 0x4dda11
push 0xe61414
jmp 0x4dda16
push 0xffffff
push eax
call fcn.00464cc0
push 0
push 0
push 0
push 0xffffff
push 0x5b0c00
mov ecx, edi
call fcn.00464cc0
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4dda4a
movzx eax, word [eax + 8]
test ax, ax
je 0x4dda4a
mov ecx, eax
jmp 0x4dda4c
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
movzx edx, word [eax + 0x3a]
test dx, dx
je 0x4ddae4
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4dda9a
movzx eax, word [eax + 8]
test ax, ax
je 0x4dda9a
push eax
lea eax, [ecx + edx]
mov ecx, 0x7014c8
push eax
push 0x17e
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call esi
add esp, 0x14
jmp 0x4ddabf
lea eax, [ecx + edx]
mov ecx, 0x7014c8
push eax
push 0x17e
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5b6c74
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ddad4
cmp word [eax + 8], 0
jne 0x4ddb91
push 0
push 0
push 0
push 0x87cefa
jmp 0x4ddb9c
mov edx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4ddb20
test edx, edx
je 0x4ddb5c
movzx eax, word [edx + 8]
test ax, ax
je 0x4ddb20
push eax
push ecx
push 0x17e
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call esi
add esp, 0x14
jmp 0x4ddb91
test edx, edx
je 0x4ddb5c
movzx eax, word [edx + 8]
test ax, ax
je 0x4ddb5c
push eax
push 0x17e
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4ddb9c
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ddbc1
movzx eax, word [eax + 8]
test ax, ax
je 0x4ddbaa
push eax
push 0x17e
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00464cc0
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ddbc1
movzx eax, word [eax + 0xa]
test ax, ax
je 0x4ddbc1
mov ecx, eax
jmp 0x4ddbc3
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
movzx edx, word [eax + 0x3c]
test dx, dx
je 0x4ddc5b
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4ddc11
movzx eax, word [eax + 0xa]
test ax, ax
je 0x4ddc11
push eax
lea eax, [ecx + edx]
mov ecx, 0x7014c8
push eax
push 0x17f
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call esi
add esp, 0x14
jmp 0x4ddc36
lea eax, [ecx + edx]
mov ecx, 0x7014c8
push eax
push 0x17f
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5b6c74
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ddc4b
cmp word [eax + 0xa], 0
jne 0x4ddd08
push 0
push 0
push 0
push 0x87cefa
jmp 0x4ddd13
mov edx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4ddc97
test edx, edx
je 0x4ddcd3
movzx eax, word [edx + 0xa]
test ax, ax
je 0x4ddc97
push eax
push ecx
push 0x17f
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call esi
add esp, 0x14
jmp 0x4ddd08
test edx, edx
je 0x4ddcd3
movzx eax, word [edx + 0xa]
test ax, ax
je 0x4ddcd3
push eax
push 0x17f
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4ddd13
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ddd38
movzx eax, word [eax + 0xa]
test ax, ax
je 0x4ddd21
push eax
push 0x17f
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00464cc0
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ddd38
movzx eax, word [eax + 0xc]
test ax, ax
je 0x4ddd38
mov ecx, eax
jmp 0x4ddd3a
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
movzx edx, word [eax + 0x3e]
test dx, dx
je 0x4dddd2
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4ddd88
movzx eax, word [eax + 0xc]
test ax, ax
je 0x4ddd88
push eax
lea eax, [ecx + edx]
mov ecx, 0x7014c8
push eax
push 0x180
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call esi
add esp, 0x14
jmp 0x4dddad
lea eax, [ecx + edx]
mov ecx, 0x7014c8
push eax
push 0x180
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5b6c74
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4dddc2
cmp word [eax + 0xc], 0
jne 0x4dde7f
push 0
push 0
push 0
push 0x87cefa
jmp 0x4dde8a
mov edx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4dde0e
test edx, edx
je 0x4dde4a
movzx eax, word [edx + 0xc]
test ax, ax
je 0x4dde0e
push eax
push ecx
push 0x180
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call esi
add esp, 0x14
jmp 0x4dde7f
test edx, edx
je 0x4dde4a
movzx eax, word [edx + 0xc]
test ax, ax
je 0x4dde4a
push eax
push 0x180
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4dde8a
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ddeaf
movzx eax, word [eax + 0xc]
test ax, ax
je 0x4dde98
push eax
push 0x180
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00464cc0
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ddeaf
movzx eax, word [eax + 0xe]
test ax, ax
je 0x4ddeaf
mov ecx, eax
jmp 0x4ddeb1
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
movzx edx, word [eax + 0x40]
test dx, dx
je 0x4ddf49
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4ddeff
movzx eax, word [eax + 0xe]
test ax, ax
je 0x4ddeff
push eax
lea eax, [ecx + edx]
mov ecx, 0x7014c8
push eax
push 0x181
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call esi
add esp, 0x14
jmp 0x4ddf24
lea eax, [ecx + edx]
mov ecx, 0x7014c8
push eax
push 0x181
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5b6c74
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ddf39
cmp word [eax + 0xe], 0
jne 0x4ddff6
push 0
push 0
push 0
push 0x87cefa
jmp 0x4de001
mov edx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4ddf85
test edx, edx
je 0x4ddfc1
movzx eax, word [edx + 0xe]
test ax, ax
je 0x4ddf85
push eax
push ecx
push 0x181
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call esi
add esp, 0x14
jmp 0x4ddff6
test edx, edx
je 0x4ddfc1
movzx eax, word [edx + 0xe]
test ax, ax
je 0x4ddfc1
push eax
push 0x181
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4de001
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4de026
movzx eax, word [eax + 0xe]
test ax, ax
je 0x4de015
push eax
push 0x181
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00464cc0
mov edx, dword [ebp - 0x3ac]
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4de026
mov eax, dword [eax + 0x10]
test eax, eax
jne 0x4de028
xor eax, eax
mov ecx, dword [ebp - 0x3a8]
mov ecx, dword [ecx + 0x44]
test ecx, ecx
je 0x4de0af
test edx, edx
je 0x4de067
mov edx, dword [edx + 0x10]
test edx, edx
je 0x4de067
push edx
add eax, ecx
mov ecx, 0x7014c8
push eax
push 0x182
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call esi
add esp, 0x14
jmp 0x4de08b
add eax, ecx
mov ecx, 0x7014c8
push eax
push 0x182
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5b6c74
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4de09f
cmp dword [eax + 0x10], 0
jne 0x4de150
push 0
push 0
push 0
push 0x87cefa
jmp 0x4de15b
test eax, eax
je 0x4de0e3
test edx, edx
je 0x4de11d
mov ecx, dword [edx + 0x10]
test ecx, ecx
je 0x4de0e3
push ecx
push eax
push 0x182
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call esi
add esp, 0x14
jmp 0x4de150
test edx, edx
je 0x4de11d
mov eax, dword [edx + 0x10]
test eax, eax
je 0x4de11d
push eax
push 0x182
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4de15b
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4de180
mov eax, dword [eax + 0x10]
test eax, eax
je 0x4de169
push eax
push 0x182
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00464cc0
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4de180
movzx eax, word [eax + 0x14]
test ax, ax
je 0x4de180
mov ecx, eax
jmp 0x4de182
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
movzx edx, word [eax + 0x4c]
test dx, dx
je 0x4de21a
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4de1d0
movzx eax, word [eax + 0x14]
test ax, ax
je 0x4de1d0
push eax
lea eax, [ecx + edx]
mov ecx, 0x7014c8
push eax
push 0x183
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call esi
add esp, 0x14
jmp 0x4de1f5
lea eax, [ecx + edx]
mov ecx, 0x7014c8
push eax
push 0x183
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5b6c74
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4de20a
cmp word [eax + 0x14], 0
jne 0x4de2cd
push 0
push 0
push 0
push 0x87cefa
jmp 0x4de2d8
test ecx, ecx
je 0x4de256
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4de298
movzx eax, word [eax + 0x14]
test ax, ax
je 0x4de256
push eax
push ecx
push 0x183
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call esi
add esp, 0x14
jmp 0x4de2cd
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4de298
movzx eax, word [eax + 0x14]
test ax, ax
je 0x4de298
push eax
push 0x183
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4de2d8
mov edx, dword [ebp - 0x3a4]
test edx, edx
je 0x4de2f7
movzx eax, word [edx + 0x14]
test ax, ax
je 0x4de2ec
push eax
push 0x183
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00464cc0
mov edx, dword [ebp - 0x3a4]
test edx, edx
je 0x4de2f7
mov eax, dword [edx + 0x16]
test eax, eax
jne 0x4de2f9
xor eax, eax
mov ecx, dword [ebp - 0x3a8]
mov ecx, dword [ecx + 0x48]
test ecx, ecx
je 0x4de38a
mov edx, dword [ebp - 0x3ac]
test edx, edx
je 0x4de342
mov edx, dword [edx + 0x16]
test edx, edx
je 0x4de342
push edx
add eax, ecx
mov ecx, 0x7014c8
push eax
push 0x184
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call esi
add esp, 0x14
jmp 0x4de366
add eax, ecx
mov ecx, 0x7014c8
push eax
push 0x184
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5b6c74
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4de37a
cmp dword [eax + 0x16], 0
jne 0x4de431
push 0
push 0
push 0
push 0x87cefa
jmp 0x4de43c
test eax, eax
je 0x4de3c4
mov ecx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4de404
mov ecx, dword [ecx + 0x16]
test ecx, ecx
je 0x4de3c4
push ecx
push eax
push 0x184
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call esi
add esp, 0x14
jmp 0x4de431
mov ecx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4de404
mov eax, dword [ecx + 0x16]
test eax, eax
je 0x4de404
push eax
push 0x184
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4de43c
test edx, edx
je 0x4de450
mov eax, dword [edx + 0x16]
test eax, eax
je 0x4de450
push eax
push 0x184
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00464cc0
mov edx, dword [ebp - 0x3a4]
movss xmm4, dword [0x5b2314]
mov esi, 1
jmp 0x4de466
mov edx, dword [ebp - 0x3a4]
movzx ecx, si
xorps xmm2, xmm2
test cx, cx
jne 0x4de476
movaps xmm1, xmm2
jmp 0x4de48a
mov edx, dword [ebp - 0x3a8]
mov eax, ecx
movss xmm1, dword [edx + eax*4 + 0x4c]
mov edx, dword [ebp - 0x3a4]
cmp dword [ebp - 0x3ac], 0
mulss xmm1, xmm4
je 0x4de4cf
test cx, cx
jne 0x4de4ad
movaps xmm3, xmm2
mulss xmm3, xmm4
movss dword [ebp - 0x3b0], xmm3
jmp 0x4de4d7
mov edx, dword [ebp - 0x3ac]
mov eax, ecx
movss xmm3, dword [edx + eax*4 + 0x16]
mov edx, dword [ebp - 0x3a4]
mulss xmm3, xmm4
movss dword [ebp - 0x3b0], xmm3
jmp 0x4de4d7
movss xmm3, dword [ebp - 0x3b0]
test edx, edx
je 0x4de4f5
test cx, cx
jne 0x4de4e9
movaps xmm0, xmm2
mulss xmm0, xmm4
jmp 0x4de4f8
movss xmm0, dword [edx + ecx*4 + 0x1a]
mulss xmm0, xmm4
jmp 0x4de4f8
movaps xmm0, xmm2
cvttss2si eax, xmm1
movss dword [ebp - 0x3b8], xmm0
test eax, eax
je 0x4de5a4
cvttss2si eax, xmm3
mov ecx, 0x7014c8
addss xmm0, xmm1
test eax, eax
je 0x4de547
push eax
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x108]
push eax
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4de56e
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x108]
push eax
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5b6c7c
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4de65f
movss xmm0, dword [ebp - 0x3b8]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x4de65f
push 0
push 0
push 0
push 0x55fc55
jmp 0x4de66a
cvttss2si ecx, xmm3
test ecx, ecx
je 0x4de5f8
ucomiss xmm0, xmm2
push ecx
mov ecx, 0x7014c8
lahf
test ah, 0x44
jnp 0x4de5e4
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x108]
push eax
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4de62d
lea eax, [esi + 0x108]
push eax
call fcn.004f82a0
push eax
push str._s___d___
jmp 0x4de61d
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x4de656
cvttss2si eax, xmm0
mov ecx, 0x7014c8
push eax
lea eax, [esi + 0x108]
push eax
call fcn.004f82a0
push eax
push 0x5b6c7c
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
movss xmm0, dword [ebp - 0x3b8]
xorps xmm2, xmm2
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x4de64e
push 0
push 0
push 0
push 0x55fc55
jmp 0x4de66a
movss xmm3, dword [ebp - 0x3b0]
ucomiss xmm3, xmm2
lahf
test ah, 0x44
jnp 0x4de678
push 0
push 0
push 0
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00464cc0
movss xmm4, dword [0x5b2314]
inc esi
cmp esi, 5
jle 0x4de460
mov esi, dword [ebp - 0x3a4]
test esi, esi
je 0x4de6a1
movzx eax, word [esi + 0x1a]
test ax, ax
je 0x4de6a1
mov ecx, eax
jmp 0x4de6a3
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
mov esi, 0x80a
mov dword [ebp - 0x3b8], ecx
movzx edx, word [eax + 0x80]
test dx, dx
jne 0x4de6cd
cmp word [eax + 0x82], dx
je 0x4de8c0
cmp word [eax + 0x28], si
je 0x4de7e9
movzx esi, word [eax + 0x82]
mov eax, dword [ebp - 0x3ac]
cmp dx, si
jne 0x4de750
test eax, eax
je 0x4de71d
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4de71d
push eax
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x185
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
push str._s__d___d_
jmp 0x4de7b0
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x185
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5b6c88
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
jmp 0x4de7c0
test eax, eax
je 0x4de790
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4de790
movzx ecx, cx
push eax
lea eax, [ecx + esi]
push eax
lea eax, [ecx + edx]
mov ecx, 0x7014c8
push eax
push 0x185
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d___d___d_
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x18
jmp 0x4de7c0
movzx ecx, cx
lea eax, [ecx + esi]
push eax
lea eax, [ecx + edx]
mov ecx, 0x7014c8
push eax
push 0x185
call fcn.004f82a0
push eax
push str._s__d___d
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
mov esi, dword [ebp - 0x3a4]
test esi, esi
je 0x4de8a7
cmp word [esi + 0x1a], 0
je 0x4de8a7
push 0
push 0
push 0
push 0x55fc55
jmp 0x4de8b2
movzx ecx, word [eax + 0x82]
mov eax, dword [ebp - 0x3ac]
cmp dx, cx
jne 0x4de849
test eax, eax
je 0x4de821
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4de821
push eax
push edx
push 0x185
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
push str._s__d_____d_
jmp 0x4de897
push edx
push 0x185
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d__
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
jmp 0x4de8a7
test eax, eax
je 0x4de880
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4de880
push eax
push ecx
push edx
push 0x185
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d_____d_
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x18
jmp 0x4de8a7
push ecx
push edx
push 0x185
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
push str._s__d_____d__
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
push 0
push 0
push 0
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00464cc0
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4de916
movzx eax, word [eax + 0x34]
test ax, ax
je 0x4de916
push eax
push 0x186
mov ecx, 0x7014c8
call fcn.004f82a0
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x140]
mov ecx, edi
push 0
push 0
push 0
push 0x87cefa
push eax
call fcn.00464cc0
jmp 0x4de91c
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
mov ecx, dword [ebp - 0x3a8]
movzx edx, word [ecx + 0x84]
test dx, dx
jne 0x4de93b
cmp word [ecx + 0x86], dx
je 0x4deb36
mov eax, 0x80a
cmp word [ecx + 0x28], ax
mov eax, dword [ebp - 0x3ac]
je 0x4dea6b
movzx esi, word [ecx + 0x86]
cmp dx, si
jne 0x4de9c6
test eax, eax
je 0x4de990
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4de990
push eax
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x187
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
push str._s__d___d_
jmp 0x4dea32
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x187
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5b6c88
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
jmp 0x4dea42
test eax, eax
je 0x4dea0c
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4dea0c
mov ecx, dword [ebp - 0x3b8]
movzx ecx, cx
push eax
lea eax, [ecx + esi]
push eax
lea eax, [ecx + edx]
mov ecx, 0x7014c8
push eax
push 0x187
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d___d___d_
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x18
jmp 0x4dea42
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
lea eax, [ecx + esi]
push eax
lea eax, [ecx + edx]
mov ecx, 0x7014c8
push eax
push 0x187
call fcn.004f82a0
push eax
push str._s__d___d
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4deb17
cmp word [eax + 0x1a], 0
je 0x4deb17
push 0
push 0
push 0
push 0x55fc55
jmp 0x4deb22
movzx ecx, word [ecx + 0x86]
cmp dx, cx
jne 0x4deac1
test eax, eax
je 0x4dea9d
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4dea9d
push eax
push ecx
push 0x187
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
push str._s__d_____d_
jmp 0x4deb0b
push ecx
push 0x187
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d__
push eax
call esi
add esp, 0x10
jmp 0x4deb17
test eax, eax
je 0x4deaf4
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4deaf4
push eax
push ecx
push edx
push 0x187
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d_____d_
push eax
call esi
add esp, 0x18
jmp 0x4deb17
push ecx
push edx
push 0x187
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
push str._s__d_____d__
lea eax, [ebp - 0x140]
push eax
call esi
add esp, 0x14
push 0
push 0
push 0
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00464cc0
mov ecx, dword [ebp - 0x3a8]
cmp word [ecx + 0x80], 0
mov edx, dword [ebp - 0x3a4]
jne 0x4dec5c
cmp word [ecx + 0x82], 0
jne 0x4dec5c
cmp word [ecx + 0x84], 0
jne 0x4dec5c
cmp word [ecx + 0x86], 0
jne 0x4dec5c
test edx, edx
je 0x4debc4
movzx ecx, word [edx + 0x1a]
test cx, cx
je 0x4debc4
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4dec0a
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4debc4
push eax
push ecx
push 0x2a9
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d__d_
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4dec3d
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4dec0a
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4dec0a
push eax
push 0x2a9
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4dec48
test edx, edx
je 0x4dec5c
movzx eax, word [edx + 0x1a]
test ax, ax
je 0x4dec5c
push eax
push 0x2a9
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00464cc0
mov edx, dword [ebp - 0x3a4]
mov esi, 1
jmp 0x4dec69
mov edx, dword [ebp - 0x3a4]
movzx ecx, si
xorps xmm2, xmm2
test cx, cx
jne 0x4dec79
movaps xmm1, xmm2
jmp 0x4dec90
mov edx, dword [ebp - 0x3a8]
mov eax, ecx
movss xmm1, dword [edx + eax*4 + 0x88]
mov edx, dword [ebp - 0x3a4]
cmp dword [ebp - 0x3ac], 0
movss xmm4, dword [0x5b2314]
mulss xmm1, xmm4
je 0x4decdd
test cx, cx
jne 0x4decbb
movaps xmm3, xmm2
mulss xmm3, xmm4
movss dword [ebp - 0x3b0], xmm3
jmp 0x4dece5
mov edx, dword [ebp - 0x3ac]
mov eax, ecx
movss xmm3, dword [edx + eax*4 + 0x32]
mov edx, dword [ebp - 0x3a4]
mulss xmm3, xmm4
movss dword [ebp - 0x3b0], xmm3
jmp 0x4dece5
movss xmm3, dword [ebp - 0x3b0]
test edx, edx
je 0x4ded03
test cx, cx
jne 0x4decf7
movaps xmm0, xmm2
mulss xmm0, xmm4
jmp 0x4ded06
movss xmm0, dword [edx + ecx*4 + 0x32]
mulss xmm0, xmm4
jmp 0x4ded06
movaps xmm0, xmm2
cvttss2si eax, xmm1
movss dword [ebp - 0x3b8], xmm0
test eax, eax
je 0x4dedb2
cvttss2si eax, xmm3
mov ecx, 0x7014c8
addss xmm0, xmm1
test eax, eax
je 0x4ded55
push eax
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x187]
push eax
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4ded7c
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x187]
push eax
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5b6c7c
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4dee6d
movss xmm0, dword [ebp - 0x3b8]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x4dee6d
push 0
push 0
push 0
push 0x55fc55
jmp 0x4dee78
cvttss2si ecx, xmm3
test ecx, ecx
je 0x4dee06
ucomiss xmm0, xmm2
push ecx
mov ecx, 0x7014c8
lahf
test ah, 0x44
jnp 0x4dedf2
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x187]
push eax
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4dee3b
lea eax, [esi + 0x187]
push eax
call fcn.004f82a0
push eax
push str._s___d___
jmp 0x4dee2b
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x4dee64
cvttss2si eax, xmm0
mov ecx, 0x7014c8
push eax
lea eax, [esi + 0x187]
push eax
call fcn.004f82a0
push eax
push 0x5b6c7c
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
movss xmm0, dword [ebp - 0x3b8]
xorps xmm2, xmm2
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x4dee5c
push 0
push 0
push 0
push 0x55fc55
jmp 0x4dee78
movss xmm3, dword [ebp - 0x3b0]
ucomiss xmm3, xmm2
lahf
test ah, 0x44
jnp 0x4dee86
push 0
push 0
push 0
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00464cc0
inc esi
cmp esi, 5
jle 0x4dec63
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4deea7
movzx eax, word [eax + 0x1c]
test ax, ax
je 0x4deea7
mov esi, eax
jmp 0x4deea9
xor esi, esi
mov eax, dword [ebp - 0x3a8]
movzx ecx, word [eax + 0xa4]
test cx, cx
je 0x4df014
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4def00
movzx eax, word [eax + 0x4e]
test ax, ax
je 0x4def00
push eax
movzx eax, si
add ecx, eax
push ecx
push 0x18d
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4def2b
movzx eax, si
add ecx, eax
push ecx
push 0x18d
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push 0x5b6c74
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4df004
test si, si
je 0x4df004
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00464cc0
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
mov ecx, dword [ebp - 0x3a8]
movzx eax, word [ecx + 0xa8]
test ax, ax
je 0x4defad
push eax
lea eax, [ecx + 2]
mov ecx, 0x7014c8
push eax
push 0x18e
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x140]
mov ecx, edi
push 0
push 0
push 0
push 0x87cefa
push eax
call fcn.00464cc0
mov eax, dword [ebp - 0x3a8]
cmp word [eax + 0xac], 0
je 0x4df2fa
movzx eax, word [eax + 0xaa]
test ax, ax
je 0x4df2fa
xorps xmm0, xmm0
mov byte [ebp - 0x34], 0
dec eax
movq qword [ebp - 0x23], xmm0
mov dword [ebp - 0x1b], 0
mov word [ebp - 0x17], 0
mov byte [ebp - 0x15], 0
movdqu xmmword [ebp - 0x33], xmm0
cmp eax, 0xa
ja case.default.0x4deffd
jmp dword [eax*4 + 0x4e0140]
push 0
push 0
push 0
push 0x87cefa
jmp 0x4def4d
test si, si
je 0x4df07a
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4df0d3
movzx eax, word [eax + 0x4e]
test ax, ax
je 0x4df07a
push eax
movzx eax, si
mov ecx, 0x7014c8
push eax
push 0x18d
call fcn.004f82a0
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
push eax
lea eax, [ebp - 0x140]
push 0x5ba77c
push eax
call esi
add esp, 0x14
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00464cc0
jmp 0x4def61
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4df0d3
movzx eax, word [eax + 0x4e]
test ax, ax
je 0x4df0d3
push eax
push 0x18d
mov ecx, 0x7014c8
call fcn.004f82a0
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x140]
mov ecx, edi
push 0
push 0
push 0
push 0x87cefa
push eax
call fcn.00464cc0
jmp 0x4def61
test si, si
je 0x4def5b
movzx eax, si
mov ecx, 0x7014c8
push eax
push 0x18d
call fcn.004f82a0
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
jmp 0x4df05c
push 0x196
mov ecx, 0x7014c8
call fcn.004f82a0
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4df120
jmp case.default.0x4deffd
push 0x197
mov ecx, 0x7014c8
call fcn.004f82a0
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4df146
jmp case.default.0x4deffd
push 0x198
mov ecx, 0x7014c8
call fcn.004f82a0
lea edx, [ebp - 0x34]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4df170
jmp case.default.0x4deffd
push 0x199
mov ecx, 0x7014c8
call fcn.004f82a0
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4df196
jmp case.default.0x4deffd
push 0x19a
mov ecx, 0x7014c8
call fcn.004f82a0
lea edx, [ebp - 0x34]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4df1c0
jmp case.default.0x4deffd
push 0x19b
mov ecx, 0x7014c8
call fcn.004f82a0
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4df1e6
jmp case.default.0x4deffd
push 0x19c
mov ecx, 0x7014c8
call fcn.004f82a0
lea edx, [ebp - 0x34]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4df210
jmp case.default.0x4deffd
push 0x19d
mov ecx, 0x7014c8
call fcn.004f82a0
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4df236
jmp case.default.0x4deffd
push 0x19e
mov ecx, 0x7014c8
call fcn.004f82a0
lea edx, [ebp - 0x34]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4df260
jmp case.default.0x4deffd
push 0x19f
mov ecx, 0x7014c8
call fcn.004f82a0
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4df283
jmp case.default.0x4deffd
push 0x1a0
mov ecx, 0x7014c8
call fcn.004f82a0
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4df2a6
mov eax, dword [ebp - 0x3a8]
mov ecx, 0x7014c8
movzx eax, word [eax + 0xac]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x1a1
call fcn.004f82a0
push eax
lea eax, [ebp - 0x140]
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x140]
mov ecx, edi
push 0
push 0
push 0
push 0x87cefa
push eax
call fcn.00464cc0
mov eax, dword [ebp - 0x3bc]
test eax, eax
je 0x4df93e
cmp dword [eax], 0
je 0x4df93e
push 0
push 0
push 0
push 0xffffff
push 0x5b0c00
mov ecx, edi
call fcn.00464cc0
push dword [0x6ff52c]
mov ecx, 0x7014c8
push dword [0x6ff528]
push 0xa6a
call fcn.004f82a0
push eax
lea eax, [ebp - 0x3a0]
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x3a0]
mov ecx, edi
push 0
push 0
push 0
push 0xffffff
push eax
call fcn.00464cc0
lea ecx, [ebp - 0x34]
call fcn.00452b10
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp - 4], 0
mov eax, dword [ecx + 8]
cmp eax, 1
jne 0x4df3c1
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x6f8178
push eax
push 0x93
call fcn.0045cfe0
cmp dword [ebp - 0x30], 0
je 0x4df490
push 0
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00464ca0
mov dword [0x6ff52c], 1
jmp 0x4df490
jbe 0x4df490
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx esi, ax
mov eax, esi
div dword [ecx + 0x30]
mov eax, dword [ecx + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4df490
cmp dword [eax], esi
je 0x4df3f5
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4df3e5
jmp 0x4df490
mov esi, dword [eax + 4]
test esi, esi
je 0x4df490
push 1
lea eax, [ebp - 0x34]
mov ecx, 0x6f8178
push eax
movzx eax, word [esi + 0x26]
push eax
call fcn.0045cfe0
cmp dword [ebp - 0x30], 0
je 0x4df432
push 0
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00464ca0
mov dword [0x6ff528], 1
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx eax, word [esi + 0x24]
mov dword [ebp - 0x3b0], eax
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4df46f
mov eax, dword [ebp - 0x3b0]
lea ecx, [ecx]
cmp dword [esi], eax
je 0x4df4d9
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4df460
xor esi, esi
test esi, esi
je 0x4df490
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.00464cc0
mov esi, dword [esi + 4]
test esi, esi
jne 0x4df475
mov eax, dword [ebp - 0x3bc]
mov eax, dword [eax + 0xc]
cmp eax, 1
jne 0x4df4de
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x6f8178
push eax
push 0x93
call fcn.0045cfe0
cmp dword [ebp - 0x30], 0
je 0x4df5bb
push 1
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00464ca0
mov dword [0x6ff52c], 2
jmp 0x4df5bb
mov esi, dword [esi + 4]
jmp 0x4df471
jbe 0x4df5bb
mov eax, dword [ebp - 0x3bc]
xor edx, edx
mov ecx, dword [ebp - 0x3b4]
movzx esi, word [eax + 0xc]
mov eax, esi
div dword [ecx + 0x30]
mov eax, dword [ecx + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4df5bb
lea esp, [esp]
cmp dword [eax], esi
je 0x4df520
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4df510
jmp 0x4df5bb
mov esi, dword [eax + 4]
test esi, esi
je 0x4df5bb
push 1
lea eax, [ebp - 0x34]
mov ecx, 0x6f8178
push eax
movzx eax, word [esi + 0x26]
push eax
call fcn.0045cfe0
cmp dword [ebp - 0x30], 0
je 0x4df55d
push 1
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00464ca0
mov dword [0x6ff528], 2
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx eax, word [esi + 0x24]
mov dword [ebp - 0x3b0], eax
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4df597
mov eax, dword [ebp - 0x3b0]
cmp dword [esi], eax
je 0x4df604
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4df588
xor esi, esi
test esi, esi
je 0x4df5bb
lea ecx, [ecx]
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.00464cc0
mov esi, dword [esi + 4]
test esi, esi
jne 0x4df5a0
mov eax, dword [ebp - 0x3bc]
mov eax, dword [eax + 0x10]
cmp eax, 1
jne 0x4df609
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x6f8178
push eax
push 0x93
call fcn.0045cfe0
cmp dword [ebp - 0x30], 0
je 0x4df6dc
push 2
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00464ca0
mov dword [0x6ff52c], 3
jmp 0x4df6dc
mov esi, dword [esi + 4]
jmp 0x4df599
jbe 0x4df6dc
mov eax, dword [ebp - 0x3bc]
xor edx, edx
mov ecx, dword [ebp - 0x3b4]
movzx esi, word [eax + 0x10]
mov eax, esi
div dword [ecx + 0x30]
mov eax, dword [ecx + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4df6dc
cmp dword [eax], esi
je 0x4df644
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4df634
jmp 0x4df6dc
mov esi, dword [eax + 4]
test esi, esi
je 0x4df6dc
push 1
lea eax, [ebp - 0x34]
mov ecx, 0x6f8178
push eax
movzx eax, word [esi + 0x26]
push eax
call fcn.0045cfe0
cmp dword [ebp - 0x30], 0
je 0x4df681
push 2
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00464ca0
mov dword [0x6ff528], 3
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx eax, word [esi + 0x24]
mov dword [ebp - 0x3b0], eax
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4df6bb
mov eax, dword [ebp - 0x3b0]
lea esp, [esp]
cmp dword [esi], eax
je 0x4df723
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4df6b0
xor esi, esi
test esi, esi
je 0x4df6dc
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.00464cc0
mov esi, dword [esi + 4]
test esi, esi
jne 0x4df6c1
mov esi, dword [ebp - 0x3bc]
cmp dword [esi + 0x14], 1
jne 0x4df728
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x6f8178
push eax
push 0x93
call fcn.0045cfe0
cmp dword [ebp - 0x30], 0
je 0x4df802
push 3
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00464ca0
mov dword [0x6ff52c], 4
jmp 0x4df802
mov esi, dword [esi + 4]
jmp 0x4df6bd
cmp dword [esi + 8], 3
jbe 0x4df802
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx esi, word [esi + 0x14]
mov eax, esi
div dword [ecx + 0x30]
mov eax, dword [ecx + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4df7fc
cmp dword [eax], esi
je 0x4df761
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4df751
jmp 0x4df7fc
mov esi, dword [eax + 4]
test esi, esi
je 0x4df7fc
push 1
lea eax, [ebp - 0x34]
mov ecx, 0x6f8178
push eax
movzx eax, word [esi + 0x26]
push eax
call fcn.0045cfe0
cmp dword [ebp - 0x30], 0
je 0x4df79e
push 3
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00464ca0
mov dword [0x6ff528], 4
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx eax, word [esi + 0x24]
mov dword [ebp - 0x3b0], eax
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4df7db
mov eax, dword [ebp - 0x3b0]
lea esp, [esp]
cmp dword [esi], eax
je 0x4df845
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4df7d0
xor esi, esi
test esi, esi
je 0x4df7fc
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.00464cc0
mov esi, dword [esi + 4]
test esi, esi
jne 0x4df7e1
mov esi, dword [ebp - 0x3bc]
mov eax, dword [esi + 0x18]
cmp eax, 1
jne 0x4df84a
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x6f8178
push eax
push 0x93
call fcn.0045cfe0
cmp dword [ebp - 0x30], 0
je 0x4df920
push 4
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00464ca0
mov dword [0x6ff52c], 5
jmp 0x4df920
mov esi, dword [esi + 4]
jmp 0x4df7dd
jbe 0x4df920
mov eax, dword [ebp - 0x3bc]
xor edx, edx
mov ecx, dword [ebp - 0x3b4]
movzx esi, word [eax + 0x18]
mov eax, esi
div dword [ecx + 0x30]
mov eax, dword [ecx + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4df920
cmp dword [eax], esi
je 0x4df885
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4df875
jmp 0x4df920
mov esi, dword [eax + 4]
test esi, esi
je 0x4df920
push 1
lea eax, [ebp - 0x34]
mov ecx, 0x6f8178
push eax
movzx eax, word [esi + 0x26]
push eax
call fcn.0045cfe0
cmp dword [ebp - 0x30], 0
je 0x4df8c2
push 4
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00464ca0
mov dword [0x6ff528], 5
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx eax, word [esi + 0x24]
mov dword [ebp - 0x3b0], eax
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4df8ff
mov eax, dword [ebp - 0x3b0]
lea ecx, [ecx]
cmp dword [esi], eax
je 0x4dfab6
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4df8f0
xor esi, esi
test esi, esi
je 0x4df920
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.00464cc0
mov esi, dword [esi + 4]
test esi, esi
jne 0x4df905
lea ecx, [ebp - 0x3a0]
mov al, byte [ecx]
lea ecx, [ecx + 1]
test al, al
jne 0x4df926
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0xffffffff
call fcn.00452b20
mov esi, dword [ebp - 0x3a8]
mov eax, 0x100
test word [esi + 0x28], ax
je 0x4df95c
mov ecx, dword [ebp - 0x3b4]
push esi
push edi
call fcn.004cd370
cmp word [esi + 0xca], 0
je 0x4df973
mov ecx, dword [ebp - 0x3b4]
push esi
push edi
call fcn.004cd260
mov ecx, 0x834
cmp word [esi + 0x28], cx
jne 0x4df990
mov ecx, dword [ebp - 0x3b4]
push esi
push edi
call fcn.004ce840
mov ecx, 0x834
movzx eax, word [esi + 0x28]
mov edx, dword [ebp - 0x3a4]
test eax, 0x800
je 0x4df9dc
cmp ax, cx
jae 0x4df9dc
test edx, edx
je 0x4df9b0
cmp dword [edx + 4], 0
jne 0x4df9bf
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4df9dc
cmp dword [eax], 0
je 0x4df9dc
push 0
push 0
push 0
push 0xffffff
push 0x5b0c00
mov ecx, edi
call fcn.00464cc0
mov edx, dword [ebp - 0x3a4]
movzx ecx, word [esi + 0x28]
test ecx, 0x800
je 0x4dfc66
mov eax, 0x834
cmp cx, ax
jae 0x4dfc66
movzx eax, word [edi + 0xc]
mov esi, 0x88
cmp ax, si
je 0x4dfc66
mov esi, 0x85
cmp ax, si
je 0x4dfc66
cmp cx, word [ebp - 0x3c0]
je 0x4dfc66
mov ecx, 0x80
cmp ax, cx
je 0x4dfc66
test edx, edx
je 0x4dfb42
cmp dword [edx + 4], 0
je 0x4dfb42
push 0x9b4
mov ecx, 0x7014c8
call fcn.004f82a0
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4dfa60
sub eax, edx
add eax, 2
push eax
lea eax, [ebp - 0x170]
push str.
push eax
call fcn.0053c7e0
lea esi, [edi + 0x9e4]
add esp, 0xc
test esi, esi
je 0x4dfb42
mov ecx, str.monster
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4dfabe
test dl, dl
je 0x4dfab2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4dfabe
add eax, 2
add ecx, 2
test dl, dl
jne 0x4dfa96
xor eax, eax
jmp 0x4dfac3
mov esi, dword [esi + 4]
jmp 0x4df901
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4dfafd
push 0x9b3
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x40]
push 0x5ba2b8
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0xf83232
jmp 0x4dfb22
push esi
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x40]
push 0x5ba2b8
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0xffffff
push 0xffffff
lea eax, [ebp - 0x40]
mov ecx, 0x7014c8
push eax
push 0x9b4
call fcn.004f82a0
push eax
mov ecx, edi
call fcn.00464cb0
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4dfc66
cmp dword [eax], 0
je 0x4dfc66
push 0x9b5
mov ecx, 0x7014c8
call fcn.004f82a0
lea edx, [eax + 1]
jmp 0x4dfb70
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4dfb70
sub eax, edx
add eax, 2
push eax
lea eax, [ebp - 0x170]
push str.
push eax
call fcn.0053c7e0
lea esi, [edi + 0x9f5]
add esp, 0xc
test esi, esi
je 0x4dfc66
mov ecx, str.monster
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4dfbc6
test dl, dl
je 0x4dfbc2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4dfbc6
add eax, 2
add ecx, 2
test dl, dl
jne 0x4dfba6
xor eax, eax
jmp 0x4dfbcb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4dfc08
push 0x9b3
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x1a0]
push 0x5ba2b8
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0xf83232
jmp 0x4dfc30
push esi
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x1a0]
push 0x5ba2b8
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0xffffff
push 0xffffff
lea eax, [ebp - 0x1a0]
mov ecx, 0x7014c8
push eax
push 0x9b5
call fcn.004f82a0
push eax
mov ecx, edi
call fcn.00464cb0
push 0x2f
lea eax, [ebp - 0x1a0]
push 0
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x3a8]
mov ecx, edi
push 0
push 0
push 0
movzx esi, word [eax + 0x24]
push 0xffffff
push 0x5b0c00
call fcn.00464cc0
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
mov eax, esi
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4dfcd3
cmp dword [eax], esi
je 0x4dfcb1
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4dfca4
jmp 0x4dfcd3
mov esi, dword [eax + 4]
test esi, esi
je 0x4dfcd3
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.00464cc0
mov esi, dword [esi + 4]
test esi, esi
jne 0x4dfcb8
cmp dword [ebp + 0x1c], 0
jne 0x4dfefe
mov ecx, dword [ebp - 0x3c4]
test ecx, ecx
je 0x4dfcf3
mov eax, dword [ecx]
mov eax, dword [eax + 0x7c]
call eax
movzx ecx, ax
jmp 0x4dfd04
mov eax, dword [ebp - 0x3c8]
test eax, eax
je 0x4dfd3a
movzx ecx, word [eax + 0x9c4]
cmp ecx, 0xffffffff
je 0x4dfd3a
lea eax, [ecx - 0x50]
cmp eax, 9
ja 0x4dfd3a
push ecx
mov ecx, dword [ebp - 0x3b4]
lea eax, [edi + 0x58]
push eax
mov dword [edi + 0x910], 0
mov dword [edi + 0x914], 0
call fcn.004e0600
jmp 0x4e00a1
mov eax, dword [ebp - 0x3a8]
mov esi, 0x801
xor ecx, ecx
xor edx, edx
movzx eax, word [eax + 0x28]
cmp ax, si
jne 0x4dfd68
mov ecx, dword [0x6e8c20]
push 0x51
call fcn.00477160
mov esi, eax
xor ecx, ecx
jmp 0x4dfec5
mov esi, 0x807
cmp ax, si
jne 0x4dfd88
mov ecx, dword [0x6e8c20]
push 0x52
call fcn.00477160
mov esi, eax
xor ecx, ecx
jmp 0x4dfec5
mov esi, 0x808
cmp ax, si
jne 0x4dfda8
mov ecx, dword [0x6e8c20]
push 0x50
call fcn.00477160
mov esi, eax
xor ecx, ecx
jmp 0x4dfec5
mov esi, 0x809
cmp ax, si
jne 0x4dfdc8
mov ecx, dword [0x6e8c20]
push 0x53
call fcn.00477160
mov esi, eax
xor ecx, ecx
jmp 0x4dfec5
mov esi, 0x80b
cmp ax, si
jne 0x4dfde8
mov ecx, dword [0x6e8c20]
push 0x56
call fcn.00477160
mov esi, eax
xor ecx, ecx
jmp 0x4dfec5
mov esi, 0x80d
cmp ax, si
jne 0x4dfe08
mov ecx, dword [0x6e8c20]
push 0x57
call fcn.00477160
mov esi, eax
xor ecx, ecx
jmp 0x4dfec5
mov esi, 0x80a
cmp ax, si
jne 0x4dfe28
mov ecx, dword [0x6e8c20]
push 0x58
call fcn.00477160
mov esi, eax
xor ecx, ecx
jmp 0x4dfec5
mov esi, 0x80c
cmp ax, si
jne 0x4dfe48
mov ecx, dword [0x6e8c20]
push 0x59
call fcn.00477160
mov esi, eax
xor ecx, ecx
jmp 0x4dfec5
mov esi, 0x816
cmp ax, si
jne 0x4dfe65
mov ecx, dword [0x6e8c20]
push 0x5a
call fcn.00477160
mov esi, eax
xor ecx, ecx
jmp 0x4dfec5
mov esi, 0x80e
cmp ax, si
jne 0x4dfe80
mov ecx, dword [0x6e8c20]
push 0x54
call fcn.00477160
push 0x55
jmp 0x4dfeb6
mov esi, 0x80f
cmp ax, si
jne 0x4dfe9d
mov ecx, dword [0x6e8c20]
push 0x5b
call fcn.00477160
mov esi, eax
xor ecx, ecx
jmp 0x4dfec5
mov esi, 0x810
cmp ax, si
jne 0x4dfedb
mov ecx, dword [0x6e8c20]
push 0x5c
call fcn.00477160
push 0x5d
mov ecx, dword [0x6e8c20]
mov esi, eax
call fcn.00477160
mov ecx, eax
test esi, esi
je 0x4dfed9
lea eax, [esi + 0x58]
mov edx, 1
mov dword [edi + 0x910], eax
jmp 0x4dfee5
xor edx, edx
mov dword [edi + 0x910], 0
test ecx, ecx
je 0x4dfef7
lea eax, [ecx + 0x58]
mov dword [edi + 0x914], eax
jmp 0x4e0068
test edx, edx
jmp 0x4e005c
mov eax, dword [ebp - 0x3a8]
mov esi, 0x801
xor edx, edx
xor ecx, ecx
movzx eax, word [eax + 0x28]
cmp ax, si
jne 0x4dff2c
mov ecx, dword [0x6e8c20]
push 0x51
call fcn.00477160
mov esi, eax
xor edx, edx
jmp 0x4e002b
mov esi, 0x807
cmp ax, si
jne 0x4dff4c
mov ecx, dword [0x6e8c20]
push 0x52
call fcn.00477160
mov esi, eax
xor edx, edx
jmp 0x4e002b
mov esi, 0x808
cmp ax, si
jne 0x4dff6c
mov ecx, dword [0x6e8c20]
push 0x50
call fcn.00477160
mov esi, eax
xor edx, edx
jmp 0x4e002b
mov esi, 0x809
cmp ax, si
jne 0x4dff8c
mov ecx, dword [0x6e8c20]
push 0x53
call fcn.00477160
mov esi, eax
xor edx, edx
jmp 0x4e002b
mov esi, 0x80b
cmp ax, si
jne 0x4dffac
mov ecx, dword [0x6e8c20]
push 0x56
call fcn.00477160
mov esi, eax
xor edx, edx
jmp 0x4e002b
mov esi, 0x80d
cmp ax, si
jne 0x4dffc9
mov ecx, dword [0x6e8c20]
push 0x57
call fcn.00477160
mov esi, eax
xor edx, edx
jmp 0x4e002b
mov esi, 0x80a
cmp ax, si
jne 0x4dffe6
mov ecx, dword [0x6e8c20]
push 0x58
call fcn.00477160
mov esi, eax
xor edx, edx
jmp 0x4e002b
mov esi, 0x80c
cmp ax, si
jne 0x4e0003
mov ecx, dword [0x6e8c20]
push 0x59
call fcn.00477160
mov esi, eax
xor edx, edx
jmp 0x4e002b
mov esi, 0x80e
cmp ax, si
jne 0x4e0041
mov ecx, dword [0x6e8c20]
push 0x54
call fcn.00477160
mov ecx, dword [0x6e8c20]
mov esi, eax
push 0x55
call fcn.00477160
mov edx, eax
test esi, esi
je 0x4e003f
lea ecx, [esi + 0x58]
mov dword [edi + 0x910], ecx
mov ecx, 1
jmp 0x4e004b
xor ecx, ecx
mov dword [edi + 0x910], 0
test edx, edx
je 0x4e005a
lea eax, [edx + 0x58]
mov dword [edi + 0x914], eax
jmp 0x4e0068
test ecx, ecx
mov dword [edi + 0x914], 0
je 0x4e00a1
push 0
push 0
push 0
push 0xffffff
push 0x5b0c00
mov ecx, edi
call fcn.00464cc0
push 0
push 0
push 0
push 0xff00
push 0xa7c
mov ecx, 0x7014c8
call fcn.004f82a0
push eax
mov ecx, edi
call fcn.00464cc0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00598fe4
mov esp, ebp
pop ebp
ret 0x18