Function at 0x493b89
Capabilities:
Check for software breakpoints
Check http status code
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x4044c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x4a8
call fcn.004044c0
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x402be8
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0
mov word [0x5210dc], 2
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x270]
call fcn.00404766
mov edx, 0x40f42c
lea ecx, [ebp - 0x19c]
call fcn.004048b0
mov edx, 0x40a6cc
lea ecx, [ebp - 0x1a0]
call fcn.004048b0
mov edx, 0x40a6cc
lea ecx, [ebp - 0x24]
call fcn.004048b0
mov edx, 0x40a6cc
lea ecx, [ebp - 0x10c]
call fcn.004048b0
and word [ebp - 0x1ec], 0
and word [ebp - 0x1d4], 0
and word [ebp - 0xc4], 0
mov edx, 0x40a6cc
lea ecx, [ebp - 0x60]
call fcn.004048b0
cmp word [0x521220], 0x1e
jl 0x499eb2
push 1
call fcn.00404754
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xfe
je 0x4999b3
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x440], al
mov cx, 3
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x493cf9
mov dword [ebp - 0x3e8], 0x40ccf0
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x1fc]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 1
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x493d42
push dword [ebp - 0x19c]
push 0x40cab4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 4
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x493d8b
push dword [ebp - 0x19c]
push 0x40f440
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 5
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x493dd4
push dword [ebp - 0x19c]
push 0x40f44c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 6
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x493e1d
push dword [ebp - 0x19c]
push 0x40f458
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 7
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x493e66
push dword [ebp - 0x19c]
push 0x40bf4c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 8
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x493eaf
push dword [ebp - 0x19c]
push 0x40dd8c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 9
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x493ef8
push dword [ebp - 0x19c]
push 0x40cad8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0xa
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x493f41
push dword [ebp - 0x19c]
push 0x40c320
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0xb
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x493f8a
push dword [ebp - 0x19c]
push 0x40caf8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0xc
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x493fd3
push dword [ebp - 0x19c]
push 0x40f464
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0xd
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x49401c
push dword [ebp - 0x19c]
push 0x40cb14
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0xe
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x494065
push dword [ebp - 0x19c]
push 0x40cb20
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0xf
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x4940ae
push dword [ebp - 0x19c]
push 0x40f470
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0x10
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x4940f7
push dword [ebp - 0x19c]
push 0x40c774
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0x11
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x494140
push dword [ebp - 0x19c]
push 0x40cb3c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0x12
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x494189
push dword [ebp - 0x19c]
push 0x40cb48
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0x14
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x4941d2
push dword [ebp - 0x19c]
push 0x40cb58
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0x15
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x4959a2
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x444], al
mov cx, 0xfb
call fcn.004046b8
cmp byte [ebp - 0x444], al
jne 0x4942d4
mov dword [ebp - 0x3e8], 0x40e598
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2d0]
push eax
call fcn.00444696
mov dword [ebp - 0x3f8], 0x40bffc
mov dword [ebp - 0x400], 8
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048d4
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x4944f9
mov cx, 0xfc
call fcn.004046b8
cmp byte [ebp - 0x444], al
jne 0x494390
mov dword [ebp - 0x3e8], 0x40e598
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2d0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x3f8], 0x40bffc
mov dword [ebp - 0x400], 8
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048d4
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x4944f9
mov cx, 0xca
call fcn.004046b8
cmp byte [ebp - 0x444], al
jne 0x494439
mov dword [ebp - 0x3e8], 0x40f480
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0044b65a
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
jmp 0x4944f9
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 0x8008
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x3f0]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4944bb
mov dword [ebp - 0x3e8], 0x40e598
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.0044b65a
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
jmp 0x4944f9
lea eax, [ebp - 0x2c0]
push eax
call fcn.0044b65a
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 7
jne 0x4945ae
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov dword [ebp - 0x3e8], 0x40c8d4
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048d4
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
jmp 0x4944f9
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x51
jne 0x49470d
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov dword [ebp - 0x3e8], 0x40bb50
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048d4
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 7
jne 0x494708
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov dword [ebp - 0x3e8], 0x40bf4c
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2d0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4945ae
and word [ebp - 0x1ec], 0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xd3
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xd4
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0x58
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0x59
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xd2
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0x51
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0x20
setne cl
and ebx, ecx
test ebx, ebx
jne 0x494b4b
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x448], al
mov cx, 0x20
call fcn.004046b8
cmp byte [ebp - 0x448], al
jne 0x494893
push dword [ebp - 0x294]
push 0x40f4a0
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
or word [ebp - 0x1ec], 0xffff
jmp 0x494a71
mov cx, 0xd3
call fcn.004046b8
cmp byte [ebp - 0x448], al
jne 0x4948e4
push dword [ebp - 0x294]
push 0x40f4b0
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
or word [ebp - 0x1ec], 0xffff
jmp 0x494a71
mov cx, 0xd4
call fcn.004046b8
cmp byte [ebp - 0x448], al
jne 0x494935
push dword [ebp - 0x294]
push 0x40f4c0
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
or word [ebp - 0x1ec], 0xffff
jmp 0x494a71
mov cx, 0x58
call fcn.004046b8
cmp byte [ebp - 0x448], al
jne 0x494986
push dword [ebp - 0x294]
push 0x40f4d4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
or word [ebp - 0x1ec], 0xffff
jmp 0x494a71
mov cx, 0x51
call fcn.004046b8
cmp byte [ebp - 0x448], al
jne 0x4949d7
push dword [ebp - 0x294]
push 0x40bb50
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
or word [ebp - 0x1ec], 0xffff
jmp 0x494a71
mov cx, 0x59
call fcn.004046b8
cmp byte [ebp - 0x448], al
jne 0x494a25
push dword [ebp - 0x294]
push 0x40f4e4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
or word [ebp - 0x1ec], 0xffff
jmp 0x494a71
mov cx, 0xd2
call fcn.004046b8
cmp byte [ebp - 0x448], al
jne 0x494a71
push dword [ebp - 0x294]
push 0x40f4f8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
or word [ebp - 0x1ec], 0xffff
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xfb
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf7
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xfc
setne cl
and ebx, ecx
test ebx, ebx
jne 0x494b46
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.004048b6
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x494715
push dword [ebp - 0x294]
push 0x40a6cc
call fcn.004048ce
test eax, eax
je 0x4951a5
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x20
je 0x4950e5
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x44c], al
mov cx, 7
call fcn.004046b8
cmp byte [ebp - 0x44c], al
jne 0x494be8
push dword [ebp - 0x19c]
push 0x40bf4c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4950e0
mov cx, 0x20
call fcn.004046b8
cmp byte [ebp - 0x44c], al
jne 0x494c52
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x22c]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
jmp 0x4950e0
mov cx, 0x51
call fcn.004046b8
cmp byte [ebp - 0x44c], al
jne 0x494d06
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
push dword [ebp - 0x19c]
push 0x40bb50
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4950e0
mov cx, 0xc7
call fcn.004046b8
cmp byte [ebp - 0x44c], al
jne 0x494d4f
push dword [ebp - 0x19c]
push 0x40f440
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4950e0
mov cx, 0xd2
call fcn.004046b8
cmp byte [ebp - 0x44c], al
jne 0x494db9
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x22c]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
jmp 0x4950e0
mov cx, 0xd4
call fcn.004046b8
cmp byte [ebp - 0x44c], al
jne 0x494de5
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4950e0
mov cx, 0xd3
call fcn.004046b8
cmp byte [ebp - 0x44c], al
jne 0x494e11
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4950e0
mov cx, 0xfb
call fcn.004046b8
cmp byte [ebp - 0x44c], al
jne 0x494f3c
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xfb
setne bl
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 7
setne cl
or ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xfc
setne cl
or ebx, ecx
test ebx, ebx
jne 0x494ec4
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x494f37
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444696
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x22c]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4950e0
mov cx, 0xfc
call fcn.004046b8
cmp byte [ebp - 0x44c], al
je 0x494f80
mov cx, 0xf4
call fcn.004046b8
cmp byte [ebp - 0x44c], al
je 0x494f80
mov cx, 0xf7
call fcn.004046b8
cmp byte [ebp - 0x44c], al
je 0x494f80
mov cx, 0xfb
call fcn.004046b8
cmp byte [ebp - 0x44c], al
jne 0x494fec
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4950e0
mov cx, 0xfe
call fcn.004046b8
cmp byte [ebp - 0x44c], al
je 0x4950c8
mov cx, 0xbf
call fcn.004046b8
cmp byte [ebp - 0x44c], al
je 0x4950c8
mov cx, 0xc0
call fcn.004046b8
cmp byte [ebp - 0x44c], al
je 0x4950c8
mov cx, 0xc6
call fcn.004046b8
cmp byte [ebp - 0x44c], al
je 0x4950c8
mov cx, 0x28
call fcn.004046b8
cmp byte [ebp - 0x44c], al
je 0x4950c8
mov cx, 0x39
call fcn.004046b8
cmp byte [ebp - 0x44c], al
je 0x4950c8
mov cx, 0x3a
call fcn.004046b8
cmp byte [ebp - 0x44c], al
je 0x4950c8
mov cx, 0x3b
call fcn.004046b8
cmp byte [ebp - 0x44c], al
je 0x4950c8
mov cx, 0x3c
call fcn.004046b8
cmp byte [ebp - 0x44c], al
je 0x4950c8
mov cx, 0xbc
call fcn.004046b8
cmp byte [ebp - 0x44c], al
je 0x4950c8
mov cx, 0xd1
call fcn.004046b8
cmp byte [ebp - 0x44c], al
je 0x4950c8
mov cx, 0xc3
call fcn.004046b8
cmp byte [ebp - 0x44c], al
jne 0x4950ca
jmp 0x4950e5
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x494b63
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x20
jne 0x4951a5
push dword [ebp - 0x294]
push 0x40f4a0
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.004048b6
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4950e5
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x450], al
mov cx, 7
call fcn.004046b8
cmp byte [ebp - 0x450], al
jne 0x495209
push dword [ebp - 0x19c]
push 0x40bf4c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x495970
mov cx, 0x20
call fcn.004046b8
cmp byte [ebp - 0x450], al
jne 0x495273
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x22c]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
jmp 0x495970
mov cx, 0x51
call fcn.004046b8
cmp byte [ebp - 0x450], al
jne 0x4952bc
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
push dword [ebp - 0x19c]
push 0x40bb50
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
jmp 0x495970
mov cx, 0xc7
call fcn.004046b8
cmp byte [ebp - 0x450], al
jne 0x495305
push dword [ebp - 0x19c]
push 0x40f440
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x495970
mov cx, 0xd2
call fcn.004046b8
cmp byte [ebp - 0x450], al
jne 0x49536f
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x22c]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
jmp 0x495970
mov cx, 0xd4
call fcn.004046b8
cmp byte [ebp - 0x450], al
jne 0x49539b
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x495970
mov cx, 0xd3
call fcn.004046b8
cmp byte [ebp - 0x450], al
jne 0x4953c7
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x495970
mov cx, 0xfb
call fcn.004046b8
cmp byte [ebp - 0x450], al
jne 0x495535
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xfb
setne bl
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 7
setne cl
or ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xfc
setne cl
or ebx, ecx
test ebx, ebx
jne 0x49549a
push dword [ebp - 0x19c]
push 0x40bf4c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x495530
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444696
mov dword [ebp - 0x3f8], 0x40bffc
mov dword [ebp - 0x400], 8
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x495970
mov cx, 0xfc
call fcn.004046b8
cmp byte [ebp - 0x450], al
je 0x49557d
mov cx, 0xf4
call fcn.004046b8
cmp byte [ebp - 0x450], al
je 0x49557d
mov cx, 0xf7
call fcn.004046b8
cmp byte [ebp - 0x450], al
je 0x49557d
mov cx, 0xfb
call fcn.004046b8
cmp byte [ebp - 0x450], al
jne 0x4957ff
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea edx, [ebp - 0x2c0]
lea ecx, [ebp - 0x22c]
call fcn.004048d4
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea ecx, [ebp - 0x2c0]
call fcn.00404844
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00404880
mov dword [ebp - 0x3f8], 0x40f50c
mov dword [ebp - 0x400], 8
push 1
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x400]
push eax
push 0
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047de
push eax
call fcn.0040484a
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x20c]
test eax, eax
je 0x4957fa
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
movsx eax, word [ebp - 0x20c]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047c0
mov dword [ebp - 0x2c8], 0x80020004
mov dword [ebp - 0x2d0], 0xa
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x400], 0x4008
lea eax, [ebp - 0x2d0]
push eax
mov ax, word [ebp - 0x20c]
add ax, 0xb
jo 0x49cc66
movsx eax, ax
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047f0
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
push 4
call fcn.00404898
add esp, 0x14
mov dword [ebp - 0x408], 0x40f528
mov dword [ebp - 0x410], 8
mov dword [ebp - 0x2b8], 0x80020004
mov dword [ebp - 0x2c0], 0xa
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
lea eax, [ebp - 0x2c0]
push eax
push 8
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x495970
mov cx, 0xfe
call fcn.004046b8
cmp byte [ebp - 0x450], al
je 0x4958db
mov cx, 0xbf
call fcn.004046b8
cmp byte [ebp - 0x450], al
je 0x4958db
mov cx, 0xc0
call fcn.004046b8
cmp byte [ebp - 0x450], al
je 0x4958db
mov cx, 0xc6
call fcn.004046b8
cmp byte [ebp - 0x450], al
je 0x4958db
mov cx, 0x28
call fcn.004046b8
cmp byte [ebp - 0x450], al
je 0x4958db
mov cx, 0x39
call fcn.004046b8
cmp byte [ebp - 0x450], al
je 0x4958db
mov cx, 0x3a
call fcn.004046b8
cmp byte [ebp - 0x450], al
je 0x4958db
mov cx, 0x3b
call fcn.004046b8
cmp byte [ebp - 0x450], al
je 0x4958db
mov cx, 0x3c
call fcn.004046b8
cmp byte [ebp - 0x450], al
je 0x4958db
mov cx, 0xbc
call fcn.004046b8
cmp byte [ebp - 0x450], al
je 0x4958db
mov cx, 0xd1
call fcn.004046b8
cmp byte [ebp - 0x450], al
je 0x4958db
mov cx, 0xc3
call fcn.004046b8
cmp byte [ebp - 0x450], al
jne 0x4958e0
jmp 0x495975
mov cx, 0xd9
call fcn.004046b8
cmp byte [ebp - 0x450], al
jne 0x49595a
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.00443e26
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x495970
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4951a5
push dword [ebp - 0x60]
push dword [ebp - 0x19c]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x60]
call fcn.004048b6
mov edx, 0x40a6cc
lea ecx, [ebp - 0x19c]
call fcn.004048b0
jmp 0x4999ae
mov cx, 0x28
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x495cbb
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x130]
call fcn.00404766
mov dword [ebp - 0x3e8], 0x40c14c
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x130]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x454], al
mov cx, 0x12
call fcn.004046b8
cmp byte [ebp - 0x454], al
jne 0x495b0b
mov dword [ebp - 0x3e8], 0x40e434
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x130]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 1
jne 0x495b06
mov dword [ebp - 0x3e8], 0x40f340
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x130]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x495c43
mov cx, 0x21
call fcn.004046b8
cmp byte [ebp - 0x454], al
jne 0x495be1
mov dword [ebp - 0x3e8], 0x40eb90
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x130]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x22
jne 0x495bdf
mov dword [ebp - 0x3e8], 0x40da98
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x130]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x495c43
mov cx, 0x26
call fcn.004046b8
cmp byte [ebp - 0x454], al
jne 0x495c43
mov dword [ebp - 0x3e8], 0x40e6b8
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x130]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x130]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4999ae
mov cx, 0x29
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x495e16
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x104]
call fcn.00404766
mov dword [ebp - 0x3e8], 0x40f550
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x104]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x104]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xc8
jne 0x495e11
mov dword [ebp - 0x3e8], 0x40f560
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x104]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0x39
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x495e67
mov dword [ebp - 0x3e8], 0x40f578
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x174]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0x3a
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x495eb8
mov dword [ebp - 0x3e8], 0x40f594
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0xe4]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0x3b
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x495f06
mov dword [ebp - 0x3e8], 0x40f5a8
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x70]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0x3c
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x495f57
mov dword [ebp - 0x3e8], 0x40f5bc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x164]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0xbc
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x4962e4
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0xf4]
call fcn.00404766
mov dword [ebp - 0x3e8], 0x40f5d0
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0xf4]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x458], al
mov cx, 0x31
call fcn.004046b8
cmp byte [ebp - 0x458], al
jne 0x49604e
mov dword [ebp - 0x3e8], 0x40be20
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x496125
mov cx, 0xbd
call fcn.004046b8
cmp byte [ebp - 0x458], al
je 0x496070
mov cx, 0xca
call fcn.004046b8
cmp byte [ebp - 0x458], al
jne 0x4960c3
mov dword [ebp - 0x3e8], 0x40e6fc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x496125
mov cx, 4
call fcn.004046b8
cmp byte [ebp - 0x458], al
jne 0x496125
mov dword [ebp - 0x3e8], 0x40dd2c
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xc2
jne 0x496271
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov dword [ebp - 0x3e8], 0x40e3d4
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2d0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x3f8], 0x40bffc
mov dword [ebp - 0x400], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xd7
jne 0x4962df
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov dword [ebp - 0x3e8], 0x40f5e4
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
jmp 0x4999ae
mov cx, 0xbe
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x496335
mov dword [ebp - 0x3e8], 0x40f600
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x1fc]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0xbf
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x4964dc
mov dword [ebp - 0x3e8], 0x40f61c
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x21c]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x21c]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 7
jne 0x4964d7
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x45c], al
mov cx, 7
call fcn.004046b8
cmp byte [ebp - 0x45c], al
jne 0x4964d2
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov dword [ebp - 0x3e8], 0x40c8d4
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2d0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x21c]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4963f8
jmp 0x4999ae
mov cx, 0xc0
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x4965df
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x198]
call fcn.00404766
mov dword [ebp - 0x3e8], 0x40f638
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x198]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x198]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4999ae
mov cx, 0xc3
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x496857
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x1e4]
call fcn.00404766
mov dword [ebp - 0x3e8], 0x40f650
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x1e4]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1e4]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x3c
jne 0x496735
mov dword [ebp - 0x3e8], 0x40f5bc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1e4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 7
jne 0x496852
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov dword [ebp - 0x3e8], 0x40bf4c
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2d0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1e4]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x3c
jne 0x49684d
mov dword [ebp - 0x3e8], 0x40f5bc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1e4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x496735
jmp 0x4999ae
mov cx, 0xc4
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x496e83
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 3
jne 0x4968c5
mov edx, 0x40ccf0
lea ecx, [ebp - 0x10c]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe8
jne 0x496c94
lea eax, [ebp - 0x2c0]
push eax
call fcn.00445bbb
lea eax, [ebp - 0x2c0]
push eax
call fcn.0040484a
mov word [ebp - 0x250], ax
lea ecx, [ebp - 0x2c0]
call fcn.00404844
mov ax, word [0x5210dc]
add ax, word [ebp - 0x250]
jo 0x49cc66
mov word [ebp - 0x28c], ax
push dword [0x5210d8]
push 1
call fcn.00404838
mov ecx, eax
call fcn.0040479c
mov word [ebp - 0x1d0], ax
push 1
movsx eax, word [ebp - 0x1d0]
push eax
push 1
push 0x11
lea eax, [ebp - 0xc8]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [0x5210d8]
lea eax, [ebp - 0x2a4]
push eax
call fcn.0040482c
push dword [ebp - 0xc8]
lea eax, [ebp - 0x2a0]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x1d0]
push eax
push 1
push dword [ebp - 0x2a4]
call fcn.00404832
push eax
push 1
push dword [ebp - 0x2a0]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x2a0]
push eax
call fcn.00404820
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404820
push 1
movsx eax, word [ebp - 0x250]
push eax
push 1
push 0x11
lea eax, [ebp - 0x230]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [0x5210d8]
lea eax, [ebp - 0x2a4]
push eax
call fcn.0040482c
push dword [ebp - 0x230]
lea eax, [ebp - 0x2a0]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x250]
push eax
movsx eax, word [0x5210dc]
push eax
push dword [ebp - 0x2a4]
call fcn.00404832
push eax
push 1
push dword [ebp - 0x2a0]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x2a0]
push eax
call fcn.00404820
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404820
push 1
mov ax, word [ebp - 0x250]
add ax, 2
jo 0x49cc66
movsx eax, ax
push eax
push 1
push 0x11
push 0x5210d8
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [ebp - 0x230]
lea eax, [ebp - 0x2a4]
push eax
call fcn.0040482c
push dword [0x5210d8]
lea eax, [ebp - 0x2a0]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x250]
push eax
push 1
push dword [ebp - 0x2a4]
call fcn.00404832
push eax
push 2
push dword [ebp - 0x2a0]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x2a0]
push eax
call fcn.00404820
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404820
push 1
push dword [ebp - 0xc8]
call fcn.00404832
mov esi, eax
push 1
push dword [0x5210d8]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
mov cx, 0xfe
call fcn.004046b8
mov bl, al
mov ax, word [ebp - 0x250]
add ax, 2
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
mov byte [eax], bl
or word [0x521094], 0xffff
lea eax, [ebp - 0x2c0]
push eax
call fcn.00493b89
lea eax, [ebp - 0x2c0]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x1a0]
call fcn.004048b6
lea ecx, [ebp - 0x2c0]
call fcn.00404844
and word [0x521094], 0
push dword [ebp - 0x24]
push 0x40f66c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004048b6
push eax
push dword [ebp - 0x10c]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2ac]
call fcn.004048b6
push eax
push dword [ebp - 0x1a0]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x2a8]
push eax
push 2
call fcn.0040489e
add esp, 0xc
push 1
movsx eax, word [ebp - 0x1d0]
push eax
push 1
push 0x11
push 0x5210d8
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [ebp - 0xc8]
lea eax, [ebp - 0x2a4]
push eax
call fcn.0040482c
push dword [0x5210d8]
lea eax, [ebp - 0x2a0]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x1d0]
push eax
push 1
push dword [ebp - 0x2a4]
call fcn.00404832
push eax
push 1
push dword [ebp - 0x2a0]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x2a0]
push eax
call fcn.00404820
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404820
mov ax, word [ebp - 0x28c]
mov word [0x5210dc], ax
or word [ebp - 0xc4], 0xffff
jmp 0x4968c5
mov ax, word [0x5210dc]
sub ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
push 7
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0040487a
mov dword [ebp - 0x3f8], 0x40f66c
mov dword [ebp - 0x400], 0x8008
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x400]
push eax
call fcn.0040480e
mov word [ebp - 0x43c], ax
lea ecx, [ebp - 0x2c0]
call fcn.00404844
movsx eax, word [ebp - 0x43c]
test eax, eax
je 0x496d94
push dword [ebp - 0x24]
call fcn.004d8bec
sub eax, 7
jo 0x49cc66
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2c0], 3
lea eax, [ebp - 0x24]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
lea eax, [ebp - 0x2c0]
push eax
push 1
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
lea eax, [ebp - 0x2d0]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
lea eax, [ebp - 0x24]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
push 0xc
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0040487a
mov dword [ebp - 0x3f8], 0x40f680
mov dword [ebp - 0x400], 0x8008
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x400]
push eax
call fcn.0040480e
mov word [ebp - 0x43c], ax
lea ecx, [ebp - 0x2c0]
call fcn.00404844
movsx eax, word [ebp - 0x43c]
test eax, eax
je 0x496e7e
push dword [ebp - 0x24]
call fcn.004d8bec
sub eax, 0xc
jo 0x49cc66
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2c0], 3
lea eax, [ebp - 0x24]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
lea eax, [ebp - 0x2c0]
push eax
push 1
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
lea eax, [ebp - 0x2d0]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4999ae
mov cx, 0xc6
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x49852d
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x140]
call fcn.00404766
mov dword [ebp - 0x3e8], 0x40f6a0
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x140]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov esi, 0x40a6cc
push 2
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
or word [0x521094], 0xffff
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea edx, [ebp - 0x2c0]
lea ecx, [ebp - 0x22c]
call fcn.004048d4
and word [0x521094], 0
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00404880
lea eax, [ebp - 0x2c0]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x1e8]
call fcn.004048b6
lea ecx, [ebp - 0x2c0]
call fcn.00404844
lea eax, [ebp - 0x1e8]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
push 5
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047c0
mov dword [ebp - 0x3f8], 0x40f6b4
mov dword [ebp - 0x400], 0x8008
lea eax, [ebp - 0x1e8]
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x410], 0x4008
push 5
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047c0
mov dword [ebp - 0x418], 0x40f6c4
mov dword [ebp - 0x420], 0x8008
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.0040488c
push eax
call fcn.00404892
mov word [ebp - 0x43c], ax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x43c]
test eax, eax
je 0x4971d5
push 1
push dword [ebp - 0x1e8]
push 0x40bf4c
push 0
call fcn.004047ea
mov ecx, eax
call fcn.0040479c
mov word [ebp - 0x108], ax
mov ax, word [ebp - 0x108]
sub ax, 6
jo 0x49cc66
mov word [ebp - 0x2b8], ax
mov dword [ebp - 0x2c0], 2
lea eax, [ebp - 0x1e8]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
lea eax, [ebp - 0x2c0]
push eax
push 6
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
mov dword [ebp - 0x408], 0x40f6dc
mov dword [ebp - 0x410], 8
push dword [ebp - 0x1e8]
call fcn.004d8bec
movsx ecx, word [ebp - 0x108]
sub eax, ecx
jo 0x49cc66
sub eax, 1
jo 0x49cc66
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2f0], 3
lea eax, [ebp - 0x1e8]
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], 0x4008
lea eax, [ebp - 0x2f0]
push eax
mov ax, word [ebp - 0x108]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047f0
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x22c]
call fcn.004048d4
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 5
call fcn.00404898
add esp, 0x18
push 1
push dword [ebp - 0x1e8]
push 0x40f6f0
push 0
call fcn.004047ea
test eax, eax
je 0x4974f3
push 1
push dword [ebp - 0x1e8]
push 0x40bf4c
push 0
call fcn.004047ea
mov ecx, eax
call fcn.0040479c
mov word [ebp - 0x108], ax
mov ax, word [ebp - 0x108]
sub ax, 8
jo 0x49cc66
mov word [ebp - 0x2b8], ax
mov dword [ebp - 0x2c0], 2
lea eax, [ebp - 0x1e8]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
lea eax, [ebp - 0x2c0]
push eax
push 8
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
mov dword [ebp - 0x408], 0x40f6dc
mov dword [ebp - 0x410], 8
push dword [ebp - 0x1e8]
call fcn.004d8bec
movsx ecx, word [ebp - 0x108]
sub eax, ecx
jo 0x49cc66
sub eax, 1
jo 0x49cc66
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2f0], 3
lea eax, [ebp - 0x1e8]
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], 0x4008
lea eax, [ebp - 0x2f0]
push eax
mov ax, word [ebp - 0x108]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047f0
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x22c]
call fcn.004048d4
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 5
call fcn.00404898
add esp, 0x18
push 0x22
lea eax, [ebp - 0x2c0]
push eax
call fcn.004048bc
mov dword [ebp - 0x3e8], 0x40bf4c
mov dword [ebp - 0x3f0], 8
push 0x22
lea eax, [ebp - 0x2e0]
push eax
call fcn.004048bc
push 1
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
push 0
lea eax, [ebp - 0x300]
push eax
call fcn.004047de
push eax
call fcn.0040484a
mov word [ebp - 0x148], ax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 5
call fcn.00404898
add esp, 0x18
movsx eax, word [ebp - 0x148]
test eax, eax
je 0x4974f3
movsx eax, word [ebp - 0x148]
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047c0
mov dword [ebp - 0x3e8], 0x40f714
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
movsx ecx, word [ebp - 0x148]
sub eax, ecx
jo 0x49cc66
sub eax, 1
jo 0x49cc66
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0040487a
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x22c]
call fcn.004048d4
lea ecx, [ebp - 0x2a8]
call fcn.00404868
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x140]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
mov edx, 0x40a6cc
lea ecx, [ebp - 0x1a0]
call fcn.004048b0
mov edx, 0x40a6cc
lea ecx, [ebp - 0x58]
call fcn.004048b0
mov edx, 0x40a6cc
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
sub ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xe8
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe8
setne cl
and ebx, ecx
test ebx, ebx
jne 0x4984eb
mov ax, word [0x5210dc]
sub ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe8
jne 0x49760c
mov ax, word [0x5210dc]
sub ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov edx, 0x40a6cc
mov ecx, 0x52123c
call fcn.004048b0
lea eax, [ebp - 0x2c0]
push eax
call fcn.00445bbb
lea eax, [ebp - 0x2c0]
push eax
call fcn.0040484a
mov word [ebp - 0x250], ax
lea ecx, [ebp - 0x2c0]
call fcn.00404844
mov ax, word [0x5210dc]
add ax, word [ebp - 0x250]
jo 0x49cc66
mov word [ebp - 0x28c], ax
push dword [0x5210d8]
push 1
call fcn.00404838
mov ecx, eax
call fcn.0040479c
mov word [ebp - 0x1d0], ax
push 1
movsx eax, word [ebp - 0x1d0]
push eax
push 1
push 0x11
lea eax, [ebp - 0xc8]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [0x5210d8]
lea eax, [ebp - 0x2a4]
push eax
call fcn.0040482c
push dword [ebp - 0xc8]
lea eax, [ebp - 0x2a0]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x1d0]
push eax
push 1
push dword [ebp - 0x2a4]
call fcn.00404832
push eax
push 1
push dword [ebp - 0x2a0]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x2a0]
push eax
call fcn.00404820
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404820
push 1
movsx eax, word [ebp - 0x250]
push eax
push 1
push 0x11
lea eax, [ebp - 0x230]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [0x5210d8]
lea eax, [ebp - 0x2a4]
push eax
call fcn.0040482c
push dword [ebp - 0x230]
lea eax, [ebp - 0x2a0]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x250]
push eax
movsx eax, word [0x5210dc]
push eax
push dword [ebp - 0x2a4]
call fcn.00404832
push eax
push 1
push dword [ebp - 0x2a0]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x2a0]
push eax
call fcn.00404820
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404820
push 1
mov ax, word [ebp - 0x250]
add ax, 2
jo 0x49cc66
movsx eax, ax
push eax
push 1
push 0x11
push 0x5210d8
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [ebp - 0x230]
lea eax, [ebp - 0x2a4]
push eax
call fcn.0040482c
push dword [0x5210d8]
lea eax, [ebp - 0x2a0]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x250]
push eax
push 1
push dword [ebp - 0x2a4]
call fcn.00404832
push eax
push 2
push dword [ebp - 0x2a0]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x2a0]
push eax
call fcn.00404820
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404820
push 1
push dword [ebp - 0xc8]
call fcn.00404832
mov esi, eax
push 1
push dword [0x5210d8]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
mov cx, 0xfe
call fcn.004046b8
mov bl, al
mov ax, word [ebp - 0x250]
add ax, 2
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
mov byte [eax], bl
mov dword [ebp - 0x3e8], 0x40c110
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.00493b89
mov dword [ebp - 0x3f8], 0x40c0dc
mov dword [ebp - 0x400], 8
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xbc]
call fcn.004048b6
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 3
call fcn.00404898
add esp, 0x10
push 1
movsx eax, word [ebp - 0x1d0]
push eax
push 1
push 0x11
push 0x5210d8
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [ebp - 0xc8]
lea eax, [ebp - 0x2a4]
push eax
call fcn.0040482c
push dword [0x5210d8]
lea eax, [ebp - 0x2a0]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x1d0]
push eax
push 1
push dword [ebp - 0x2a4]
call fcn.00404832
push eax
push 1
push dword [ebp - 0x2a0]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x2a0]
push eax
call fcn.00404820
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404820
mov ax, word [ebp - 0x28c]
mov word [0x5210dc], ax
push dword [ebp - 0xbc]
push 0x40ccbc
call fcn.004048ce
test eax, eax
je 0x497f17
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x460], al
mov cx, 0xf6
call fcn.004046b8
cmp byte [ebp - 0x460], al
jne 0x497a7a
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xa
jne 0x497a45
mov edx, 0x40ccc8
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497a68
mov edx, 0x40cce0
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov edx, 0x40cce0
lea ecx, [ebp - 0x58]
call fcn.004048b0
jmp 0x497eb5
mov cx, 0xf7
call fcn.004046b8
cmp byte [ebp - 0x460], al
jne 0x497b01
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xa
jne 0x497ad9
mov edx, 0x40c320
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497aef
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov edx, 0x40ccf0
lea ecx, [ebp - 0x58]
call fcn.004048b0
jmp 0x497eb5
mov cx, 0xf8
call fcn.004046b8
cmp byte [ebp - 0x460], al
jne 0x497e33
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 3
jne 0x497b55
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov edx, 0x40bdcc
lea ecx, [ebp - 0x58]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x464], al
mov cx, 0xa
call fcn.004046b8
cmp byte [ebp - 0x464], al
jne 0x497c10
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 9
jne 0x497be8
mov edx, 0x40cd00
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 3
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497c0b
mov edx, 0x40c320
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497e2e
mov cx, 9
call fcn.004046b8
cmp byte [ebp - 0x464], al
jne 0x497c49
mov edx, 0x40cad8
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497e2e
mov cx, 0xb
call fcn.004046b8
cmp byte [ebp - 0x464], al
jne 0x497c82
mov edx, 0x40caf8
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497e2e
mov cx, 0xd
call fcn.004046b8
cmp byte [ebp - 0x464], al
jne 0x497cbb
mov edx, 0x40cb14
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497e2e
mov cx, 0xe
call fcn.004046b8
cmp byte [ebp - 0x464], al
jne 0x497cf4
mov edx, 0x40cb20
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497e2e
mov cx, 0xf
call fcn.004046b8
cmp byte [ebp - 0x464], al
jne 0x497d2d
mov edx, 0x40f470
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497e2e
mov cx, 0x10
call fcn.004046b8
cmp byte [ebp - 0x464], al
jne 0x497d66
mov edx, 0x40c774
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497e2e
mov cx, 0x11
call fcn.004046b8
cmp byte [ebp - 0x464], al
jne 0x497d9f
mov edx, 0x40cb3c
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497e2e
mov cx, 0x12
call fcn.004046b8
cmp byte [ebp - 0x464], al
jne 0x497dd5
mov edx, 0x40cb48
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497e2e
mov cx, 0x14
call fcn.004046b8
cmp byte [ebp - 0x464], al
jne 0x497e0b
mov edx, 0x40cb58
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497e2e
mov edx, 0x40a6cc
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497eb5
mov cx, 0xf9
call fcn.004046b8
cmp byte [ebp - 0x460], al
jne 0x497eb5
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xa
jne 0x497e92
mov edx, 0x40c320
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497ea8
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov edx, 0x40cd1c
lea ecx, [ebp - 0x58]
call fcn.004048b0
push dword [ebp - 0x20]
push 0x40a6cc
call fcn.004048ce
test eax, eax
je 0x497ece
or word [ebp - 0x1d4], 0xffff
push dword [ebp - 0x20]
push dword [ebp - 0x144]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004048b6
push eax
push dword [ebp - 0x58]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.004048b6
lea ecx, [ebp - 0x2a8]
call fcn.00404868
mov edx, 0x40a6cc
lea ecx, [ebp - 0x144]
call fcn.004048b0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf0
setne bl
mov ax, word [0x5210dc]
sub ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf0
setne cl
and ebx, ecx
test ebx, ebx
jne 0x4980ce
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
mov word [ebp - 0x5c], ax
mov si, word [ebp - 0x5c]
imul si, si, 0x100
jo 0x49cc66
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
add si, ax
jo 0x49cc66
mov word [ebp - 0x5c], si
mov ax, word [ebp - 0x5c]
add ax, word [0x5210dc]
jo 0x49cc66
add ax, 2
jo 0x49cc66
mov word [0x521240], ax
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
mov cx, 0xfc
call fcn.004046b8
mov bl, al
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov byte [eax], bl
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x2c0]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x208]
call fcn.004048b6
lea ecx, [ebp - 0x2c0]
call fcn.00404844
push dword [ebp - 0x208]
push 0x40a6cc
call fcn.004048ce
test eax, eax
jne 0x498096
push 0x40bffc
push 0
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x208]
call fcn.004048b6
jmp 0x4980b3
push 0x40bffc
push dword [ebp - 0x208]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x208]
call fcn.004048b6
mov ax, word [0x5210dc]
sub ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x497f17
mov esi, 0x40a6cc
push 0
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov esi, 0x40a6cc
push 1
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf9
jne 0x498137
mov ax, word [0x5210dc]
add ax, 3
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 3
jne 0x49816a
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 9
jne 0x4981b4
push 0x40f72c
push dword [ebp - 0x20]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
push dword [ebp - 0x144]
push 0x40a6cc
call fcn.004048ce
test eax, eax
je 0x498261
cmp word [ebp - 0x1d4], 0xffff
jne 0x498261
push dword [ebp - 0x1a0]
push dword [ebp - 0x20]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004048b6
push eax
push dword [ebp - 0x144]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2ac]
call fcn.004048b6
push eax
push dword [ebp - 0x58]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2b0]
call fcn.004048b6
push eax
push dword [ebp - 0xbc]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x1a0]
call fcn.004048b6
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x2a8]
push eax
push 3
call fcn.0040489e
add esp, 0x10
jmp 0x4984d5
push dword [ebp - 0x208]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x3f8], ax
mov dword [ebp - 0x400], 0xb
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 0x8008
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x43c], ax
lea ecx, [ebp - 0x400]
call fcn.00404844
movsx eax, word [ebp - 0x43c]
test eax, eax
je 0x498457
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xe8
setne bl
push dword [ebp - 0x274]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
inc eax
and ebx, eax
test ebx, ebx
jne 0x4983b9
push dword [ebp - 0x1a0]
push dword [ebp - 0x20]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004048b6
push eax
push dword [ebp - 0x274]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2ac]
call fcn.004048b6
push eax
push dword [ebp - 0x58]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2b0]
call fcn.004048b6
push eax
push dword [ebp - 0xbc]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x1a0]
call fcn.004048b6
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x2a8]
push eax
push 3
call fcn.0040489e
add esp, 0x10
jmp 0x49843b
push dword [ebp - 0x1a0]
push dword [ebp - 0x20]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004048b6
push eax
push dword [ebp - 0x208]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2ac]
call fcn.004048b6
push eax
push dword [ebp - 0x58]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2b0]
call fcn.004048b6
push eax
push dword [ebp - 0xbc]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x1a0]
call fcn.004048b6
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x2a8]
push eax
push 3
call fcn.0040489e
add esp, 0x10
mov edx, 0x40a6cc
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov edx, 0x40a6cc
lea ecx, [ebp - 0x58]
call fcn.004048b0
jmp 0x4984d5
push dword [ebp - 0x1a0]
push dword [ebp - 0x20]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004048b6
push eax
push dword [ebp - 0xbc]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x1a0]
call fcn.004048b6
lea ecx, [ebp - 0x2a8]
call fcn.00404868
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x22c]
call fcn.00404766
mov edx, 0x40a6cc
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov edx, 0x40a6cc
lea ecx, [ebp - 0x58]
call fcn.004048b0
mov edx, dword [ebp - 0x208]
lea ecx, [ebp - 0x274]
call fcn.004048b0
jmp 0x497577
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x140]
call fcn.004048d4
jmp 0x4999ae
mov cx, 0xc7
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x498576
push dword [ebp - 0x19c]
push 0x40f73c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0xca
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x4985bf
push dword [ebp - 0x19c]
push 0x40f748
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0xd1
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x49863d
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov dword [ebp - 0x3e8], 0x40f758
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x260]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
jmp 0x4999ae
mov cx, 0xe8
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x4993f5
mov edx, 0x40a6cc
mov ecx, 0x52123c
call fcn.004048b0
lea eax, [ebp - 0x2c0]
push eax
call fcn.00445bbb
lea eax, [ebp - 0x2c0]
push eax
call fcn.0040484a
mov word [ebp - 0x250], ax
lea ecx, [ebp - 0x2c0]
call fcn.00404844
mov ax, word [0x5210dc]
add ax, word [ebp - 0x250]
jo 0x49cc66
mov word [ebp - 0x28c], ax
push dword [0x5210d8]
push 1
call fcn.00404838
mov ecx, eax
call fcn.0040479c
mov word [ebp - 0x1d0], ax
push 1
movsx eax, word [ebp - 0x1d0]
push eax
push 1
push 0x11
lea eax, [ebp - 0xc8]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [0x5210d8]
lea eax, [ebp - 0x2a4]
push eax
call fcn.0040482c
push dword [ebp - 0xc8]
lea eax, [ebp - 0x2a0]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x1d0]
push eax
push 1
push dword [ebp - 0x2a4]
call fcn.00404832
push eax
push 1
push dword [ebp - 0x2a0]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x2a0]
push eax
call fcn.00404820
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404820
push 1
movsx eax, word [ebp - 0x250]
push eax
push 1
push 0x11
lea eax, [ebp - 0x230]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [0x5210d8]
lea eax, [ebp - 0x2a4]
push eax
call fcn.0040482c
push dword [ebp - 0x230]
lea eax, [ebp - 0x2a0]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x250]
push eax
movsx eax, word [0x5210dc]
push eax
push dword [ebp - 0x2a4]
call fcn.00404832
push eax
push 1
push dword [ebp - 0x2a0]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x2a0]
push eax
call fcn.00404820
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404820
push 1
mov ax, word [ebp - 0x250]
add ax, 2
jo 0x49cc66
movsx eax, ax
push eax
push 1
push 0x11
push 0x5210d8
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [ebp - 0x230]
lea eax, [ebp - 0x2a4]
push eax
call fcn.0040482c
push dword [0x5210d8]
lea eax, [ebp - 0x2a0]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x250]
push eax
push 1
push dword [ebp - 0x2a4]
call fcn.00404832
push eax
push 2
push dword [ebp - 0x2a0]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x2a0]
push eax
call fcn.00404820
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404820
push 1
push dword [ebp - 0xc8]
call fcn.00404832
mov esi, eax
push 1
push dword [0x5210d8]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
mov cx, 0xfe
call fcn.004046b8
mov bl, al
mov ax, word [ebp - 0x250]
add ax, 2
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
mov byte [eax], bl
mov dword [ebp - 0x3e8], 0x40c110
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.00493b89
mov dword [ebp - 0x3f8], 0x40c0dc
mov dword [ebp - 0x400], 8
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xbc]
call fcn.004048b6
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 3
call fcn.00404898
add esp, 0x10
push 1
movsx eax, word [ebp - 0x1d0]
push eax
push 1
push 0x11
push 0x5210d8
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [ebp - 0xc8]
lea eax, [ebp - 0x2a4]
push eax
call fcn.0040482c
push dword [0x5210d8]
lea eax, [ebp - 0x2a0]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x1d0]
push eax
push 1
push dword [ebp - 0x2a4]
call fcn.00404832
push eax
push 1
push dword [ebp - 0x2a0]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x2a0]
push eax
call fcn.00404820
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404820
mov ax, word [ebp - 0x28c]
mov word [0x5210dc], ax
push dword [ebp - 0xbc]
push 0x40ccbc
call fcn.004048ce
test eax, eax
je 0x498f5d
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x468], al
mov cx, 0xf6
call fcn.004046b8
cmp byte [ebp - 0x468], al
jne 0x498ac0
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xa
jne 0x498a8b
mov edx, 0x40ccc8
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498aae
mov edx, 0x40cce0
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov edx, 0x40cce0
lea ecx, [ebp - 0x58]
call fcn.004048b0
jmp 0x498efb
mov cx, 0xf7
call fcn.004046b8
cmp byte [ebp - 0x468], al
jne 0x498b47
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xa
jne 0x498b1f
mov edx, 0x40c320
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498b35
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov edx, 0x40ccf0
lea ecx, [ebp - 0x58]
call fcn.004048b0
jmp 0x498efb
mov cx, 0xf8
call fcn.004046b8
cmp byte [ebp - 0x468], al
jne 0x498e79
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 3
jne 0x498b9b
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov edx, 0x40bdcc
lea ecx, [ebp - 0x58]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x46c], al
mov cx, 0xa
call fcn.004046b8
cmp byte [ebp - 0x46c], al
jne 0x498c56
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 9
jne 0x498c2e
mov edx, 0x40cd00
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 3
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498c51
mov edx, 0x40c320
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498e74
mov cx, 9
call fcn.004046b8
cmp byte [ebp - 0x46c], al
jne 0x498c8f
mov edx, 0x40cad8
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498e74
mov cx, 0xb
call fcn.004046b8
cmp byte [ebp - 0x46c], al
jne 0x498cc8
mov edx, 0x40caf8
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498e74
mov cx, 0xd
call fcn.004046b8
cmp byte [ebp - 0x46c], al
jne 0x498d01
mov edx, 0x40cb14
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498e74
mov cx, 0xe
call fcn.004046b8
cmp byte [ebp - 0x46c], al
jne 0x498d3a
mov edx, 0x40cb20
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498e74
mov cx, 0xf
call fcn.004046b8
cmp byte [ebp - 0x46c], al
jne 0x498d73
mov edx, 0x40f470
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498e74
mov cx, 0x10
call fcn.004046b8
cmp byte [ebp - 0x46c], al
jne 0x498dac
mov edx, 0x40c774
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498e74
mov cx, 0x11
call fcn.004046b8
cmp byte [ebp - 0x46c], al
jne 0x498de5
mov edx, 0x40cb3c
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498e74
mov cx, 0x12
call fcn.004046b8
cmp byte [ebp - 0x46c], al
jne 0x498e1b
mov edx, 0x40cb48
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498e74
mov cx, 0x14
call fcn.004046b8
cmp byte [ebp - 0x46c], al
jne 0x498e51
mov edx, 0x40cb58
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498e74
mov edx, 0x40a6cc
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498efb
mov cx, 0xf9
call fcn.004046b8
cmp byte [ebp - 0x468], al
jne 0x498efb
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xa
jne 0x498ed8
mov edx, 0x40c320
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498eee
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov edx, 0x40cd1c
lea ecx, [ebp - 0x58]
call fcn.004048b0
push dword [ebp - 0x20]
push 0x40a6cc
call fcn.004048ce
test eax, eax
je 0x498f14
or word [ebp - 0x1d4], 0xffff
push dword [ebp - 0x20]
push dword [ebp - 0x144]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004048b6
push eax
push dword [ebp - 0x58]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.004048b6
lea ecx, [ebp - 0x2a8]
call fcn.00404868
mov edx, 0x40a6cc
lea ecx, [ebp - 0x144]
call fcn.004048b0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf0
setne bl
mov ax, word [0x5210dc]
sub ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf0
setne cl
and ebx, ecx
test ebx, ebx
jne 0x499114
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
mov word [ebp - 0x5c], ax
mov si, word [ebp - 0x5c]
imul si, si, 0x100
jo 0x49cc66
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
add si, ax
jo 0x49cc66
mov word [ebp - 0x5c], si
mov ax, word [ebp - 0x5c]
add ax, word [0x5210dc]
jo 0x49cc66
add ax, 2
jo 0x49cc66
mov word [0x521240], ax
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
mov word [0x5210dc], ax
mov cx, 0xfc
call fcn.004046b8
mov bl, al
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov byte [eax], bl
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x2c0]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x208]
call fcn.004048b6
lea ecx, [ebp - 0x2c0]
call fcn.00404844
push dword [ebp - 0x208]
push 0x40a6cc
call fcn.004048ce
test eax, eax
jne 0x4990dc
push 0x40bffc
push 0
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x208]
call fcn.004048b6
jmp 0x4990f9
push 0x40bffc
push dword [ebp - 0x208]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x208]
call fcn.004048b6
mov ax, word [0x5210dc]
sub ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x498f5d
push dword [ebp - 0x144]
push 0x40a6cc
call fcn.004048ce
test eax, eax
je 0x499199
cmp word [ebp - 0x1d4], 0xffff
jne 0x499199
push dword [ebp - 0x20]
push dword [ebp - 0x144]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004048b6
push eax
push dword [ebp - 0x58]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2ac]
call fcn.004048b6
push eax
push dword [ebp - 0xbc]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x1a0]
call fcn.004048b6
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x2a8]
push eax
push 2
call fcn.0040489e
add esp, 0xc
jmp 0x4993a2
push dword [ebp - 0x208]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x3f8], ax
mov dword [ebp - 0x400], 0xb
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 0x8008
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x43c], ax
lea ecx, [ebp - 0x400]
call fcn.00404844
movsx eax, word [ebp - 0x43c]
test eax, eax
je 0x499348
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xe8
setne bl
push dword [ebp - 0x274]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
inc eax
and ebx, eax
test ebx, ebx
jne 0x4992ca
push dword [ebp - 0x20]
push dword [ebp - 0x274]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004048b6
push eax
push dword [ebp - 0x58]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2ac]
call fcn.004048b6
push eax
push dword [ebp - 0xbc]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x1a0]
call fcn.004048b6
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x2a8]
push eax
push 2
call fcn.0040489e
add esp, 0xc
jmp 0x49932c
push dword [ebp - 0x20]
push dword [ebp - 0x208]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004048b6
push eax
push dword [ebp - 0x58]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x2ac]
call fcn.004048b6
push eax
push dword [ebp - 0xbc]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x1a0]
call fcn.004048b6
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x2a8]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov edx, 0x40a6cc
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov edx, 0x40a6cc
lea ecx, [ebp - 0x58]
call fcn.004048b0
jmp 0x4993a2
push dword [ebp - 0x20]
push dword [ebp - 0xbc]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x1a0]
call fcn.004048b6
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x22c]
call fcn.00404766
mov edx, 0x40a6cc
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov edx, 0x40a6cc
lea ecx, [ebp - 0x58]
call fcn.004048b0
mov edx, dword [ebp - 0x208]
lea ecx, [ebp - 0x274]
call fcn.004048b0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x140]
call fcn.004048d4
jmp 0x4999ae
mov cx, 0xf0
call fcn.004046b8
cmp byte [ebp - 0x440], al
sbb esi, esi
neg esi
mov cx, 0xf3
call fcn.004046b8
cmp al, byte [ebp - 0x440]
sbb eax, eax
neg eax
or esi, eax
test esi, esi
jne 0x499640
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 1
jne 0x499462
cmp word [0x5210d4], 0xf0
jne 0x499462
and dword [ebp - 0x4a8], 0
jmp 0x49946c
mov dword [ebp - 0x4a8], 1
mov ax, word [0x5210dc]
add ax, 2
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx eax, byte [eax]
neg eax
sbb eax, eax
neg eax
mov esi, dword [ebp - 0x4a8]
or esi, eax
neg esi
sbb esi, esi
neg esi
mov ax, word [0x5210dc]
add ax, 3
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xfa
setne cl
or esi, ecx
neg esi
sbb esi, esi
neg esi
mov ax, word [0x5210dc]
add ax, 4
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xfd
setne cl
or esi, ecx
neg esi
sbb esi, esi
neg esi
mov ax, word [0x5210dc]
add ax, 5
jo 0x49cc66
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf9
setne cl
or esi, ecx
test esi, esi
jne 0x499552
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov ax, word [0x5210dc]
mov word [ebp - 0x418], ax
mov dword [ebp - 0x420], 2
mov dword [ebp - 0x2e8], 3
mov dword [ebp - 0x2f0], 2
mov dword [ebp - 0x2d8], 2
mov dword [ebp - 0x2e0], 2
or dword [ebp - 0x3e8], 0xffffffff
mov dword [ebp - 0x3f0], 0x800b
push 0x5211d8
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00404886
mov edx, eax
lea ecx, [ebp - 0x2d0]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047a2
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004047d2
push eax
call fcn.0040484a
mov word [0x5210dc], ax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
push 5
call fcn.00404898
add esp, 0x18
jmp 0x4999ae
mov cx, 0xf4
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x499711
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.004334a1
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x10
jne 0x49970c
push dword [ebp - 0x19c]
push 0x40c774
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0xf8
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x499744
lea eax, [ebp - 0x2c0]
push eax
call fcn.00445689
lea edx, [ebp - 0x2c0]
lea ecx, [ebp - 0x22c]
call fcn.004048d4
jmp 0x4999ae
mov cx, 0xfb
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x4997f4
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444696
mov dword [ebp - 0x3f8], 0x40bffc
mov dword [ebp - 0x400], 8
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x4999ae
mov cx, 0xfc
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x499871
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4999ae
mov cx, 0xfd
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x49989d
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov cx, 0xf7
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x49994a
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.004334a1
mov dword [ebp - 0x3f8], 0x40bffc
mov dword [ebp - 0x400], 8
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x4999ae
mov cx, 0xcd
call fcn.004046b8
cmp byte [ebp - 0x440], al
jne 0x499998
mov dword [ebp - 0x3e8], 0x40f778
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x24c]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x4999ae
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x493c6c
push dword [ebp - 0x19c]
push 0x40cad8
call fcn.004048ce
test eax, eax
jne 0x4999d7
mov edx, 0x40a6cc
lea ecx, [ebp - 0x19c]
call fcn.004048b0
mov edx, dword [ebp - 0x19c]
lea ecx, [ebp - 0xb8]
call fcn.004048b0
push dword [ebp - 0x24]
push 0x40a6cc
call fcn.004048ce
test eax, eax
jne 0x499c25
push dword [ebp - 0x60]
push dword [ebp - 0x19c]
call fcn.0040486e
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2c0], 8
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x330]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x350]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x360]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x370]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x390]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x3a0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x3b0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x3c0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x3d0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x3d0]
push eax
lea eax, [ebp - 0x3c0]
push eax
lea eax, [ebp - 0x3b0]
push eax
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x370]
push eax
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 0x12
call fcn.00404898
add esp, 0x4c
jmp 0x499e76
push dword [ebp - 0x60]
push dword [ebp - 0x19c]
call fcn.0040486e
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2c0], 8
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x400], 8
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x330]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x350]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x360]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x370]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x390]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x3a0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x3b0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x3c0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x3d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x3e0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x3e0]
push eax
lea eax, [ebp - 0x3d0]
push eax
lea eax, [ebp - 0x3c0]
push eax
lea eax, [ebp - 0x3b0]
push eax
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x370]
push eax
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 0x13
call fcn.00404898
add esp, 0x50
mov edx, 0x40a6cc
lea ecx, [ebp - 0x294]
call fcn.004048b0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x184]
call fcn.00404766
jmp 0x49c958
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
mov edx, 0x40e25c
lea ecx, [ebp - 0x2a8]
call fcn.004048b0
mov word [ebp - 0x434], 3
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0044b956
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea ecx, [ebp - 0x2a8]
call fcn.00404868
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
mov edx, 0x40f790
lea ecx, [ebp - 0x2a8]
call fcn.004048b0
mov word [ebp - 0x434], 0xcb
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0044b956
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea ecx, [ebp - 0x2a8]
call fcn.00404868
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xd4
jne 0x49a0a3
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
mov edx, 0x40aeb4
lea ecx, [ebp - 0x2a8]
call fcn.004048b0
mov word [ebp - 0x434], 0xd4
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0044b956
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea ecx, [ebp - 0x2a8]
call fcn.00404868
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x49a139
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x3f8], 0x40bffc
mov dword [ebp - 0x400], 8
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xdf
jne 0x49a223
push dword [ebp - 0x19c]
push 0x40dd04
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.0044506b
mov dword [ebp - 0x3f8], 0x40bffc
mov dword [ebp - 0x400], 8
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 7
jne 0x49a275
push dword [ebp - 0x19c]
push 0x40c8d4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x49a277
jmp 0x49a27c
jmp 0x499eb2
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x15
jne 0x49a391
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov dword [ebp - 0x3e8], 0x40e598
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x2c0]
push eax
call fcn.0044b65a
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
lea eax, [ebp - 0x2c0]
push eax
call fcn.0044b65a
lea edx, [ebp - 0x2c0]
lea ecx, [ebp - 0xb4]
call fcn.004048d4
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x1bc]
call fcn.00404766
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x288]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xd3
jne 0x49a8f2
mov dword [ebp - 0x3e8], 0x40f6a0
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1bc]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov ax, word [0x5210dc]
mov word [ebp - 0x154], ax
mov ax, word [ebp - 0x154]
mov word [0x5210dc], ax
mov ax, word [0x5210dc]
mov word [ebp - 0x34], ax
and word [ebp - 0x1c8], 0
and word [ebp - 0x150], 0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xfe
je 0x49a864
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe8
jne 0x49a849
or word [ebp - 0x150], 0xffff
mov ax, word [0x5210dc]
mov word [ebp - 0x1cc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00445bbb
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.004047c6
push eax
call fcn.0040461c
call fcn.00404622
mov word [ebp - 0x1c8], ax
lea ecx, [ebp - 0x2a8]
call fcn.00404868
lea ecx, [ebp - 0x2c0]
call fcn.00404844
push 0x40a6cc
call fcn.00404616
mov word [ebp - 0x188], ax
mov ax, word [ebp - 0x1cc]
sub ax, 1
jo 0x49cc66
mov word [ebp - 0x474], ax
mov word [ebp - 0x470], 1
mov word [ebp - 0x200], 1
jmp 0x49a577
mov ax, word [ebp - 0x200]
add ax, word [ebp - 0x470]
jo 0x49cc66
mov word [ebp - 0x200], ax
mov ax, word [ebp - 0x200]
cmp ax, word [ebp - 0x474]
jg 0x49a5b7
movsx eax, word [ebp - 0x200]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
mov cx, word [ebp - 0x188]
add cx, ax
jo 0x49cc66
mov word [ebp - 0x188], cx
jmp 0x49a55c
mov edx, 0x40a6cc
lea ecx, [ebp - 0x204]
call fcn.004048b0
mov ax, word [ebp - 0x1c8]
add ax, 4
jo 0x49cc66
mov word [ebp - 0x47c], ax
mov word [ebp - 0x478], 1
mov ax, word [ebp - 0x1cc]
mov word [ebp - 0x200], ax
jmp 0x49a613
mov ax, word [ebp - 0x200]
add ax, word [ebp - 0x478]
jo 0x49cc66
mov word [ebp - 0x200], ax
mov ax, word [ebp - 0x200]
cmp ax, word [ebp - 0x47c]
jg 0x49a682
push dword [ebp - 0x204]
call fcn.00404802
movsx eax, word [ebp - 0x200]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx eax, byte [eax]
mov dword [ebp - 0x4ac], eax
fild dword [ebp - 0x4ac]
fstp qword [ebp - 0x4b4]
fadd qword [ebp - 0x4b4]
fnstsw ax
test al, 0xd
jne 0x49cc61
push ecx
push ecx
fstp qword [esp]
call fcn.00404664
mov edx, eax
lea ecx, [ebp - 0x204]
call fcn.004048b6
jmp 0x49a5f8
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x288]
call fcn.004048d4
push 0x40a6cc
call fcn.00404616
mov word [ebp - 0x1c0], ax
push dword [0x5210d8]
push 1
call fcn.00404838
mov ecx, eax
movsx eax, word [ebp - 0x1cc]
sub ecx, eax
jo 0x49cc66
movsx eax, word [ebp - 0x1c8]
sub ecx, eax
jo 0x49cc66
sub ecx, 4
jo 0x49cc66
add ecx, 1
jo 0x49cc66
call fcn.0040479c
mov word [ebp - 0x484], ax
mov word [ebp - 0x480], 1
mov ax, word [ebp - 0x1cc]
add ax, word [ebp - 0x1c8]
jo 0x49cc66
add ax, 4
jo 0x49cc66
mov word [ebp - 0x200], ax
jmp 0x49a766
mov ax, word [ebp - 0x200]
add ax, word [ebp - 0x480]
jo 0x49cc66
mov word [ebp - 0x200], ax
mov ax, word [ebp - 0x200]
cmp ax, word [ebp - 0x484]
jg 0x49a7a6
movsx eax, word [ebp - 0x200]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
mov cx, word [ebp - 0x1c0]
add cx, ax
jo 0x49cc66
mov word [ebp - 0x1c0], cx
jmp 0x49a74b
mov ax, word [ebp - 0x188]
mov word [ebp - 0x3e8], ax
mov dword [ebp - 0x3f0], 2
push 0xea
lea eax, [ebp - 0x2c0]
push eax
call fcn.004048bc
mov ax, word [ebp - 0x1c0]
mov word [ebp - 0x3f8], ax
mov dword [ebp - 0x400], 2
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x49a864
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x49a481
mov ax, word [ebp - 0x34]
mov word [0x5210dc], ax
cmp word [ebp - 0x150], 0xffff
je 0x49a87a
jmp 0x49a87f
jmp 0x49a45a
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1bc]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x21c]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xcc
jne 0x49aab7
mov dword [ebp - 0x3e8], 0x40f7a8
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x21c]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x21c]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 7
jne 0x49aa7c
mov dword [ebp - 0x3e8], 0x40bf4c
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x21c]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x21c]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
jmp 0x49a9c7
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x21c]
call fcn.004048d4
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x198]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xcd
jne 0x49abc1
mov dword [ebp - 0x3e8], 0x40f638
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x198]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x198]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x44]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
push eax
call fcn.00404610
mov edx, eax
lea ecx, [ebp - 0x278]
call fcn.004048b6
and word [ebp - 0x238], 0
push dword [ebp - 0x278]
call fcn.00404802
fcomp qword [0x402c18]
fnstsw ax
sahf
jne 0x49ad84
mov dword [ebp - 0x3e8], 0x40f66c
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x44]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
mov edx, 0x40e25c
lea ecx, [ebp - 0x2a8]
call fcn.004048b0
mov word [ebp - 0x434], 3
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0044b956
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x44]
call fcn.004048d4
lea ecx, [ebp - 0x2a8]
call fcn.00404868
lea ecx, [ebp - 0x2c0]
call fcn.00404844
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe8
jne 0x49ad4f
mov ax, word [ebp - 0x238]
add ax, 1
jo 0x49cc66
mov word [ebp - 0x238], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004bdd47
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x44]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
push eax
call fcn.00404610
mov edx, eax
lea ecx, [ebp - 0x278]
call fcn.004048b6
or word [ebp - 0xc4], 0xffff
jmp 0x49ac13
mov dword [ebp - 0x3e8], 0x40c0dc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x2c0]
call fcn.0040478a
lea eax, [ebp - 0x2c0]
push eax
movsx eax, word [ebp - 0x238]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004046ac
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x44]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x1e4]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xd0
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xc3
setne cl
and ebx, ecx
test ebx, ebx
jne 0x49b144
mov dword [ebp - 0x3e8], 0x40f7c0
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x1e4]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1e4]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x3c
jne 0x49af53
mov dword [ebp - 0x3e8], 0x40f7d8
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1e4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
push eax
call fcn.00404610
mov edx, eax
lea ecx, [ebp - 0x278]
call fcn.004048b6
push dword [ebp - 0x278]
call fcn.00404802
fcomp qword [0x402c10]
fnstsw ax
sahf
jne 0x49b109
mov dword [ebp - 0x3e8], 0x40bf4c
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1e4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 7
jne 0x49b030
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
push eax
call fcn.00404610
mov edx, eax
lea ecx, [ebp - 0x278]
call fcn.004048b6
jmp 0x49b104
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1e4]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x3c
jne 0x49b0dc
mov dword [ebp - 0x3e8], 0x40f5bc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1e4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
push eax
call fcn.00404610
mov edx, eax
lea ecx, [ebp - 0x278]
call fcn.004048b6
jmp 0x49af7b
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1e4]
call fcn.004048d4
mov edx, 0x40dbc0
lea ecx, [ebp - 0x2a8]
call fcn.004048b0
mov word [ebp - 0x434], 0x3a
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2c0]
lea ecx, [ebp - 0xe4]
call fcn.004048d4
lea ecx, [ebp - 0x2a8]
call fcn.00404868
mov edx, 0x40eed4
lea ecx, [ebp - 0x2a8]
call fcn.004048b0
mov word [ebp - 0x434], 0x3b
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2c0]
lea ecx, [ebp - 0x70]
call fcn.004048d4
lea ecx, [ebp - 0x2a8]
call fcn.00404868
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0xf4]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x28
jne 0x49b49b
mov dword [ebp - 0x3e8], 0x40c0c0
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0xf4]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x21
jne 0x49b2d3
mov dword [ebp - 0x3e8], 0x40eb90
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x49b428
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x12
jne 0x49b428
mov dword [ebp - 0x3e8], 0x40e434
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov edx, 0x40d194
lea ecx, [ebp - 0x2a8]
call fcn.004048b0
mov word [ebp - 0x434], 1
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0044b956
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
lea ecx, [ebp - 0x2a8]
call fcn.00404868
lea ecx, [ebp - 0x2c0]
call fcn.00404844
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x22
jne 0x49b496
mov dword [ebp - 0x3e8], 0x40da98
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x49b794
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xc9
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xbc
setne cl
and ebx, ecx
test ebx, ebx
jne 0x49b794
mov dword [ebp - 0x3e8], 0x40f5d0
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x488], al
mov cx, 4
call fcn.004046b8
cmp byte [ebp - 0x488], al
jne 0x49b5b8
mov dword [ebp - 0x3e8], 0x40dd2c
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x49b68f
mov cx, 0xca
call fcn.004046b8
cmp byte [ebp - 0x488], al
je 0x49b5da
mov cx, 0xbd
call fcn.004046b8
cmp byte [ebp - 0x488], al
jne 0x49b62d
mov dword [ebp - 0x3e8], 0x40e6fc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
jmp 0x49b68f
mov cx, 0x31
call fcn.004046b8
cmp byte [ebp - 0x488], al
jne 0x49b68f
mov dword [ebp - 0x3e8], 0x40f7e8
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf7
jne 0x49b721
lea eax, [ebp - 0x2c0]
push eax
call fcn.004334a1
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x49b794
lea eax, [ebp - 0x2c0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov edx, 0x40ec30
lea ecx, [ebp - 0x2a8]
call fcn.004048b0
mov word [ebp - 0x434], 0x39
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2c0]
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea ecx, [ebp - 0x2a8]
call fcn.00404868
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x260]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xde
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xd1
setne cl
and ebx, ecx
test ebx, ebx
jne 0x49b8fd
mov dword [ebp - 0x3e8], 0x40df44
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x260]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x49cc66
mov word [0x5210dc], ax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0044506b
mov dword [ebp - 0x3e8], 0x40bffc
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x260]
call fcn.004048d4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 7
call fcn.00404898
add esp, 0x20
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 3
call fcn.00404898
add esp, 0x10
push 0xfe
lea eax, [ebp - 0x2c0]
push eax
call fcn.004048bc
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd4]
call fcn.004048b6
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x3e8], 0x40a6cc
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x120]
call fcn.00404766
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0x1ac]
call fcn.004048b0
mov dword [ebp - 0x2b8], 1
mov dword [ebp - 0x2c0], 2
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
lea eax, [ebp - 0x2c0]
push eax
push 1
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.004047c6
push eax
call fcn.004047cc
sub ax, 0xe8
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x43c], ax
lea ecx, [ebp - 0x2a8]
call fcn.00404868
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x43c]
test eax, eax
je 0x49bf5d
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x410], 0x4008
mov dword [ebp - 0x3e8], 1
mov dword [ebp - 0x3f0], 2
lea eax, [ebp - 0x2c0]
push eax
call fcn.00445bbb
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x410]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x3f0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.00404778
add esp, 0x2c
push eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.004047c6
push eax
call fcn.0040461c
call fcn.00404622
mov word [ebp - 0x1c8], ax
lea ecx, [ebp - 0x2a8]
call fcn.00404868
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov ax, word [ebp - 0x1c8]
add ax, 4
jo 0x49cc66
mov word [ebp - 0x2b8], ax
mov dword [ebp - 0x2c0], 2
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
lea eax, [ebp - 0x2c0]
push eax
push 1
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
lea edx, [ebp - 0x2d0]
lea ecx, [ebp - 0x288]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
push dword [ebp - 0x1ac]
call fcn.004d8bec
movsx ecx, word [ebp - 0x1c8]
sub eax, ecx
jo 0x49cc66
sub eax, 4
jo 0x49cc66
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2c0], 3
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
lea eax, [ebp - 0x2c0]
push eax
mov ax, word [ebp - 0x1c8]
add ax, 1
jo 0x49cc66
add ax, 4
jo 0x49cc66
movsx eax, ax
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
lea eax, [ebp - 0x2d0]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd4]
call fcn.004048b6
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
push 0xfe
lea eax, [ebp - 0x2c0]
push eax
call fcn.004048bc
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov word [0x5210dc], 1
lea eax, [ebp - 0x2c0]
push eax
call fcn.004be8b5
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x120]
call fcn.004048d4
lea ecx, [ebp - 0x2c0]
call fcn.00404844
movsx esi, word [0x5210dc]
push dword [0x5210d8]
push 1
call fcn.00404838
cmp esi, eax
jge 0x49bf5b
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe8
jne 0x49bf5b
push 0x40a6cc
call fcn.00404616
mov word [ebp - 0xd0], ax
push dword [0x5210d8]
push 1
call fcn.00404838
mov ecx, eax
movsx eax, word [0x5210dc]
sub ecx, eax
jo 0x49cc66
sub ecx, 1
jo 0x49cc66
call fcn.0040479c
mov word [ebp - 0x490], ax
mov word [ebp - 0x48c], 1
mov ax, word [0x5210dc]
mov word [ebp - 0x200], ax
jmp 0x49bed0
mov ax, word [ebp - 0x200]
add ax, word [ebp - 0x48c]
jo 0x49cc66
mov word [ebp - 0x200], ax
mov ax, word [ebp - 0x200]
cmp ax, word [ebp - 0x490]
jg 0x49bf10
movsx eax, word [ebp - 0x200]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
mov cx, word [ebp - 0xd0]
add cx, ax
jo 0x49cc66
mov word [ebp - 0xd0], cx
jmp 0x49beb5
movsx eax, word [ebp - 0xd0]
mov dword [ebp - 0x4b8], eax
fild dword [ebp - 0x4b8]
fstp qword [ebp - 0x4c0]
push dword [ebp - 0xd4]
call fcn.00404802
fadd qword [ebp - 0x4c0]
fnstsw ax
test al, 0xd
jne 0x49cc61
push ecx
push ecx
fstp qword [esp]
call fcn.00404664
mov edx, eax
lea ecx, [ebp - 0xd4]
call fcn.004048b6
jmp 0x49bf5f
jmp 0x49bf64
jmp 0x49baef
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.00404880
lea eax, [ebp - 0x2d0]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.00404880
lea edx, [ebp - 0x2c0]
lea ecx, [ebp - 0xa0]
call fcn.004048d4
mov word [ebp - 0xa4], 1
cmp word [ebp - 0xa4], 4
jg 0x49c931
mov ax, word [ebp - 0xa4]
mov word [ebp - 0x494], ax
movsx eax, word [ebp - 0x494]
mov dword [ebp - 0x4c4], eax
cmp dword [ebp - 0x4c4], 1
je 0x49c064
cmp dword [ebp - 0x4c4], 2
je 0x49c073
cmp dword [ebp - 0x4c4], 3
je 0x49c082
cmp dword [ebp - 0x4c4], 4
je 0x49c091
jmp 0x49c09e
mov edx, 0x40f7f8
lea ecx, [ebp - 0x30]
call fcn.004048b0
jmp 0x49c09e
mov edx, 0x40f808
lea ecx, [ebp - 0x30]
call fcn.004048b0
jmp 0x49c09e
mov edx, 0x40f818
lea ecx, [ebp - 0x30]
call fcn.004048b0
jmp 0x49c09e
mov edx, 0x40cd34
lea ecx, [ebp - 0x30]
call fcn.004048b0
and word [ebp - 0x1c4], 0
cmp word [ebp - 0x1c4], 0xffff
je 0x49c914
push 0
push 0xffffffffffffffff
push dword [ebp - 0x30]
push dword [ebp - 0x19c]
call fcn.0040466a
mov ecx, eax
call fcn.0040479c
mov word [ebp - 0x29c], ax
movsx eax, word [ebp - 0x29c]
test eax, eax
jne 0x49c0ec
or word [ebp - 0x1c4], 0xffff
jmp 0x49c90f
mov ax, word [ebp - 0x29c]
sub ax, 1
jo 0x49cc66
mov word [ebp - 0x2b8], ax
mov dword [ebp - 0x2c0], 2
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
lea eax, [ebp - 0x2c0]
push eax
push 1
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
push dword [ebp - 0x30]
call fcn.004d8bec
sub eax, 1
jo 0x49cc66
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2e0], 3
lea eax, [ebp - 0x30]
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x410], 0x4008
lea eax, [ebp - 0x2e0]
push eax
push 2
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047f0
mov dword [ebp - 0x428], 0x40bffc
mov dword [ebp - 0x430], 8
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x430]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004047d2
push eax
call fcn.0040484a
mov word [ebp - 0x188], ax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 6
call fcn.00404898
add esp, 0x1c
push dword [ebp - 0x30]
call fcn.004d8bec
mov dword [ebp - 0x438], eax
push dword [ebp - 0x19c]
call fcn.004d8bec
mov esi, eax
movsx eax, word [ebp - 0x29c]
sub esi, eax
jo 0x49cc66
push dword [ebp - 0x30]
call fcn.004d8bec
sub esi, eax
jo 0x49cc66
mov dword [ebp - 0x2b8], esi
mov dword [ebp - 0x2c0], 3
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4008
lea eax, [ebp - 0x2c0]
push eax
movsx eax, word [ebp - 0x29c]
add eax, dword [ebp - 0x438]
jo 0x49cc66
add eax, 1
jo 0x49cc66
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
lea eax, [ebp - 0x2d0]
push eax
call fcn.0040484a
mov word [ebp - 0x1a8], ax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
push 0
push 0xffffffffffffffff
push 0x40f82c
push dword [ebp - 0x1a8]
call fcn.00404814
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004048b6
push eax
call fcn.0040466a
mov ecx, eax
call fcn.0040479c
mov word [ebp - 0x23c], ax
lea ecx, [ebp - 0x2a8]
call fcn.00404868
movsx eax, word [ebp - 0x23c]
test eax, eax
jne 0x49c33e
lea eax, [ebp - 0xa0]
push eax
call fcn.0040462e
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
jmp 0x49c958
cmp word [ebp - 0x23c], 1
jne 0x49c401
push 0x40a6cc
call fcn.00404616
mov word [ebp - 0x290], ax
push dword [ebp - 0x1a8]
call fcn.00404814
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004048b6
push eax
call fcn.004d8bec
sub eax, 1
jo 0x49cc66
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2c0], 3
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4002
lea eax, [ebp - 0x2c0]
push eax
push 2
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
lea eax, [ebp - 0x2d0]
push eax
call fcn.0040484a
mov word [ebp - 0x298], ax
lea ecx, [ebp - 0x2a8]
call fcn.00404868
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x49c538
mov ax, word [ebp - 0x23c]
sub ax, 1
jo 0x49cc66
mov word [ebp - 0x2b8], ax
mov dword [ebp - 0x2c0], 2
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4002
lea eax, [ebp - 0x2c0]
push eax
push 1
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
lea eax, [ebp - 0x2d0]
push eax
call fcn.0040484a
mov word [ebp - 0x290], ax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
push dword [ebp - 0x1a8]
call fcn.00404814
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004048b6
push eax
call fcn.004d8bec
movsx ecx, word [ebp - 0x23c]
sub eax, ecx
jo 0x49cc66
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2c0], 3
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4002
lea eax, [ebp - 0x2c0]
push eax
mov ax, word [ebp - 0x23c]
add ax, 1
jo 0x49cc66
movsx eax, ax
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
lea eax, [ebp - 0x2d0]
push eax
call fcn.0040484a
mov word [ebp - 0x298], ax
lea ecx, [ebp - 0x2a8]
call fcn.00404868
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov ax, word [ebp - 0x298]
mov word [ebp - 0xcc], ax
push 0x40a6cc
call fcn.00404616
mov word [ebp - 0x110], ax
mov word [ebp - 0x14c], 1
and word [ebp - 0x2c], 0
movsx esi, word [ebp - 0x14c]
push dword [ebp - 0x298]
call fcn.00404814
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004048b6
push eax
call fcn.004d8bec
xor ecx, ecx
cmp esi, eax
setle cl
neg ecx
mov word [ebp - 0x43c], cx
lea ecx, [ebp - 0x2a8]
call fcn.00404868
movsx eax, word [ebp - 0x43c]
test eax, eax
je 0x49c8c9
mov dword [ebp - 0x2b8], 1
mov dword [ebp - 0x2c0], 2
lea eax, [ebp - 0x298]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4002
lea eax, [ebp - 0x2c0]
push eax
movsx eax, word [ebp - 0x14c]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
mov dword [ebp - 0x408], 0x40c110
mov dword [ebp - 0x410], 0x8008
xor eax, eax
cmp word [ebp - 0x14c], 1
setg al
neg eax
mov word [ebp - 0x418], ax
mov dword [ebp - 0x420], 0xb
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x43c], ax
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [ebp - 0x43c]
test eax, eax
je 0x49c6ab
mov ax, word [ebp - 0x2c]
add ax, 1
jo 0x49cc66
mov word [ebp - 0x2c], ax
mov dword [ebp - 0x2b8], 1
mov dword [ebp - 0x2c0], 2
lea eax, [ebp - 0x298]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4002
lea eax, [ebp - 0x2c0]
push eax
movsx eax, word [ebp - 0x14c]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
mov dword [ebp - 0x408], 0x40c0dc
mov dword [ebp - 0x410], 0x8008
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x410]
push eax
call fcn.0040480e
mov word [ebp - 0x43c], ax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x43c]
test eax, eax
je 0x49c8ac
cmp word [ebp - 0x2c], 0
jle 0x49c76a
mov ax, word [ebp - 0x2c]
sub ax, 1
jo 0x49cc66
mov word [ebp - 0x2c], ax
jmp 0x49c8ac
mov ax, word [ebp - 0x14c]
add ax, 1
jo 0x49cc66
mov word [ebp - 0x2b8], ax
mov dword [ebp - 0x2c0], 2
lea eax, [ebp - 0x298]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4002
lea eax, [ebp - 0x2c0]
push eax
push 1
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
lea eax, [ebp - 0x2d0]
push eax
call fcn.0040484a
mov word [ebp - 0xcc], ax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
push dword [ebp - 0x298]
call fcn.00404814
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004048b6
push eax
call fcn.004d8bec
movsx ecx, word [ebp - 0x14c]
sub eax, ecx
jo 0x49cc66
sub eax, 1
jo 0x49cc66
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2c0], 3
lea eax, [ebp - 0x298]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 0x4002
lea eax, [ebp - 0x2c0]
push eax
mov ax, word [ebp - 0x14c]
add ax, 2
jo 0x49cc66
movsx eax, ax
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047f0
lea eax, [ebp - 0x2d0]
push eax
call fcn.0040484a
mov word [ebp - 0x110], ax
lea ecx, [ebp - 0x2a8]
call fcn.00404868
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x49c8c9
mov ax, word [ebp - 0x14c]
add ax, 1
jo 0x49cc66
mov word [ebp - 0x14c], ax
jmp 0x49c565
mov ax, word [ebp - 0x188]
add ax, word [ebp - 0xcc]
jo 0x49cc66
add ax, word [ebp - 0x290]
jo 0x49cc66
add ax, word [ebp - 0x110]
jo 0x49cc66
push eax
call fcn.00404814
mov edx, eax
lea ecx, [ebp - 0x19c]
call fcn.004048b6
jmp 0x49c0b4
jmp 0x49c0a6
mov ax, word [ebp - 0xa4]
add ax, 1
jo 0x49cc66
mov word [ebp - 0xa4], ax
jmp 0x49c015
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3f0], 8
lea edx, [ebp - 0x3f0]
lea ecx, [ebp - 0x184]
call fcn.00404766
call fcn.0040473c
wait
push 0x49cc40
jmp 0x49ca44
lea ecx, [ebp - 0x20]
call fcn.00404868
lea ecx, [ebp - 0x24]
call fcn.00404868
lea ecx, [ebp - 0x30]
call fcn.00404868
lea ecx, [ebp - 0x44]
call fcn.00404844
lea ecx, [ebp - 0x54]
call fcn.00404844
lea ecx, [ebp - 0x58]
call fcn.00404868
lea ecx, [ebp - 0x60]
call fcn.00404868
lea ecx, [ebp - 0x70]
call fcn.00404844
lea ecx, [ebp - 0x80]
call fcn.00404844
lea ecx, [ebp - 0x90]
call fcn.00404844
lea ecx, [ebp - 0xa0]
call fcn.00404844
lea ecx, [ebp - 0xb4]
call fcn.00404844
lea ecx, [ebp - 0xb8]
call fcn.00404868
lea ecx, [ebp - 0xbc]
call fcn.00404868
lea eax, [ebp - 0xc8]
push eax
push 0
call fcn.00404784
lea ecx, [ebp - 0xd4]
call fcn.00404868
lea ecx, [ebp - 0xe4]
call fcn.00404844
lea ecx, [ebp - 0xf4]
call fcn.00404844
lea ecx, [ebp - 0x104]
call fcn.00404844
lea ecx, [ebp - 0x10c]
call fcn.00404868
lea ecx, [ebp - 0x120]
call fcn.00404844
lea ecx, [ebp - 0x130]
call fcn.00404844
lea ecx, [ebp - 0x140]
call fcn.00404844
lea ecx, [ebp - 0x144]
call fcn.00404868
lea ecx, [ebp - 0x164]
call fcn.00404844
lea ecx, [ebp - 0x174]
call fcn.00404844
lea ecx, [ebp - 0x198]
call fcn.00404844
lea ecx, [ebp - 0x19c]
call fcn.00404868
lea ecx, [ebp - 0x1a0]
call fcn.00404868
lea ecx, [ebp - 0x1a4]
call fcn.00404868
lea ecx, [ebp - 0x1ac]
call fcn.00404868
lea ecx, [ebp - 0x1bc]
call fcn.00404844
lea ecx, [ebp - 0x1e4]
call fcn.00404844
lea ecx, [ebp - 0x1e8]
call fcn.00404868
lea ecx, [ebp - 0x1fc]
call fcn.00404844
lea ecx, [ebp - 0x204]
call fcn.00404868
lea ecx, [ebp - 0x208]
call fcn.00404868
lea ecx, [ebp - 0x21c]
call fcn.00404844
lea ecx, [ebp - 0x22c]
call fcn.00404844
lea eax, [ebp - 0x230]
push eax
push 0
call fcn.00404784
lea ecx, [ebp - 0x234]
call fcn.00404868
lea ecx, [ebp - 0x24c]
call fcn.00404844
lea ecx, [ebp - 0x260]
call fcn.00404844
lea ecx, [ebp - 0x270]
call fcn.00404844
lea ecx, [ebp - 0x274]
call fcn.00404868
lea ecx, [ebp - 0x278]
call fcn.00404868
lea ecx, [ebp - 0x288]
call fcn.00404844
lea ecx, [ebp - 0x294]
call fcn.00404868
ret
jmp fcn.004044cc
call fcn.0040477e