Function at 0x48eb70
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c1aee
mov eax, dword fs:[0]
push eax
mov eax, 0x75bc
call fcn.004a14a0
mov eax, dword [0x4deb90]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x6ed0], ecx
mov ecx, 0x4e0c40
call fcn.0041c1a0
mov dword [ebp - 0x6ed4], eax
mov ecx, 0x51d1d50
call fcn.004114c0
mov dword [ebp - 0x6ed8], eax
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x6ee4], eax
movzx eax, byte [ebp + 0xc]
cmp eax, 1
je 0x487ca1
mov ecx, dword [ebp - 0x6ee4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6ee4]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0xb
je 0x487c9a
mov ecx, dword [ebp - 0x6ee4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6ee4]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0xc
je 0x487c9a
mov ecx, dword [ebp - 0x6ee4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6ee4]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0xe
jne 0x487ca1
mov al, 0xd0
jmp 0x48f432
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x138], 0
mov edx, dword [ebp - 0x6ed8]
mov dword [edx + 0x7edc8], 0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6ed9], al
mov dword [ebp - 0x7108], 0
mov dword [ebp - 0x70b8], 0
mov dword [ebp - 0x70f4], 1
mov byte [ebp - 0x6ef2], 0
mov dword [ebp - 0x6fec], 0
mov eax, dword [ebp - 0x6ed0]
movzx ecx, byte [eax + 0x40]
cmp ecx, 1
jne 0x487f2c
mov dword [ebp - 0x6f88], 0
jmp 0x487d2f
mov edx, dword [ebp - 0x6f88]
add edx, 1
mov dword [ebp - 0x6f88], edx
cmp dword [ebp - 0x6f88], 0x1adb0
jge 0x487f2c
mov eax, dword [ebp - 0x6f88]
shl eax, 4
mov ecx, dword [ebp - 0x6ed0]
cmp dword [ecx + eax + 0x33ac68], 0
jne 0x487d5d
jmp 0x487f2c
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x48]
call edx
mov dword [ebp - 0x72ec], eax
mov eax, dword [ebp - 0x6f88]
shl eax, 4
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [ecx + eax + 0x33ac68]
cmp edx, dword [ebp - 0x72ec]
jne 0x487f27
mov dword [ebp - 0x7010], 0
jmp 0x487db7
mov eax, dword [ebp - 0x7010]
add eax, 1
mov dword [ebp - 0x7010], eax
cmp dword [ebp - 0x7010], 0x1a
jge 0x487dee
push 0x4d4b94
mov ecx, dword [ebp - 0x7010]
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + ecx*4 + 0x5bf530]
push eax
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [ecx + 0x5bf52c]
push edx
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
jmp 0x487da8
mov eax, dword [ebp - 0x6f88]
shl eax, 4
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [ecx + eax + 0x33ac6c]
sub edx, 0xb
mov dword [ebp - 0x6f80], edx
mov dword [ebp - 0x6ef0], 0
jmp 0x487e28
mov eax, dword [ebp - 0x6ef0]
add eax, 1
mov dword [ebp - 0x6ef0], eax
cmp dword [ebp - 0x6ef0], 0x1a
jge 0x487f25
mov ecx, dword [ebp - 0x6f80]
add ecx, dword [ebp - 0x6ef0]
js 0x487eb6
mov edx, dword [ebp - 0x6f80]
add edx, dword [ebp - 0x6ef0]
cmp edx, 0x1adb0
jge 0x487eb6
mov eax, dword [ebp - 0x6f80]
add eax, dword [ebp - 0x6ef0]
mov ecx, dword [ebp - 0x6ed0]
cmp dword [ecx + eax*4 + 0x4e87ac], 0
je 0x487eb6
mov edx, dword [ebp - 0x6f80]
add edx, dword [ebp - 0x6ef0]
mov eax, dword [ebp - 0x6ed0]
mov ecx, dword [eax + edx*4 + 0x4e87ac]
push ecx
mov edx, dword [ebp - 0x6ef0]
mov eax, dword [ebp - 0x6ed0]
mov ecx, dword [eax + edx*4 + 0x5bf530]
push ecx
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 0x5bf52c]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
jmp 0x487f20
mov ecx, dword [ebp - 0x6f80]
add ecx, dword [ebp - 0x6ef0]
js 0x487f20
mov edx, dword [ebp - 0x6f80]
add edx, dword [ebp - 0x6ef0]
cmp edx, 0x1adb0
jge 0x487f20
mov eax, dword [ebp - 0x6f80]
add eax, dword [ebp - 0x6ef0]
mov ecx, dword [ebp - 0x6ed0]
cmp dword [ecx + eax*4 + 0x4e87ac], 0
jne 0x487f20
push 0x4d4b98
mov edx, dword [ebp - 0x6ef0]
mov eax, dword [ebp - 0x6ed0]
mov ecx, dword [eax + edx*4 + 0x5bf530]
push ecx
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 0x5bf52c]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
jmp 0x487e19
jmp 0x487f2c
jmp 0x487d20
push 0
mov ecx, 0x51cad30
call fcn.00487940
movzx ecx, byte [ebp - 0x6ed9]
mov dword [ebp - 0x7014], ecx
mov edx, dword [ebp - 0x7014]
sub edx, 2
mov dword [ebp - 0x7014], edx
cmp dword [ebp - 0x7014], 0xe5
ja case.0x487f71.4
mov eax, dword [ebp - 0x7014]
movzx ecx, byte [eax + 0x48f69c]
jmp dword [ecx*4 + 0x48f450]
push 1
push 0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00487960
jmp case.0x487f71.4
mov byte [ebp - 0x6ef2], 1
push 0
movzx edx, byte [ebp - 0x6ef2]
push edx
mov ecx, dword [ebp - 0x6ed0]
call fcn.00487960
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x708c], eax
mov eax, dword [ebp - 0x708c]
push eax
mov ecx, 0x5d539c8
call fcn.00459c10
push 0x4d0147
imul ecx, dword [ebp - 0x708c], 0x104
mov edx, dword [ebp - 0x6ed4]
lea eax, [edx + ecx + 0x26eb4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x72f0], eax
push 0x4d0167
imul ecx, dword [ebp - 0x72f0], 0x104
mov edx, dword [ebp - 0x6ed4]
lea eax, [edx + ecx + 0x26eb4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x4881d9
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0xa0]
call edx
mov dword [ebp - 0x72f4], eax
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax + 4]
mov eax, dword [edx + 0xa0]
call eax
mov dword [ebp - 0x7550], eax
mov ecx, 0x51ca6a0
call fcn.00460210
mov ecx, dword [ebp - 0x72f4]
mov dword [ebp - 0x7078], ecx
cmp dword [ebp - 0x7078], 0
je 0x4880c2
cmp dword [ebp - 0x7078], 1
je 0x488163
cmp dword [ebp - 0x7078], 2
je 0x48817f
jmp 0x4881d7
push 0
push 8
push 1
mov ecx, 0x51ca6a0
call fcn.00460800
push 0x5a
mov ecx, 0x5d539c8
call fcn.00459c10
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x6f0c], eax
mov edx, dword [ebp - 0x6f0c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6f0c]
mov edx, dword [eax + 0x14]
call edx
cmp eax, 0x11
jne 0x48811f
push 0x12
mov eax, dword [ebp - 0x6f0c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x6f0c]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48814c
mov ecx, dword [ebp - 0x6f0c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6f0c]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0x13
jne 0x48814c
push 0x14
mov ecx, dword [ebp - 0x6f0c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6f0c]
mov eax, dword [edx + 0x20]
call eax
push 6
mov ecx, dword [ebp - 0x6f0c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6f0c]
mov eax, dword [edx + 0x1c]
call eax
jmp 0x4881d7
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048fbb0
push 0
push 0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f850
jmp 0x4881d7
push 0
push 8
push 0x1f
mov ecx, 0x51ca6a0
call fcn.00460800
push 0x5a
mov ecx, 0x5d539c8
call fcn.00459c10
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x7018], eax
push 0x12
mov ecx, dword [ebp - 0x7018]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7018]
mov eax, dword [edx + 0x20]
call eax
push 6
mov ecx, dword [ebp - 0x7018]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7018]
mov eax, dword [edx + 0x1c]
call eax
jmp 0x48820d
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0xa0]
call edx
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax + 4]
mov eax, dword [edx + 0xa0]
call eax
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x488251
push 0x7fff
lea ecx, [ebp - 0xddc]
push ecx
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0xb0]
call edx
lea eax, [ebp - 0xddc]
push eax
mov ecx, 0x606c470
call fcn.004969a0
jmp 0x488277
push 0x7fff
lea ecx, [ebp - 0xddc]
push ecx
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0xb0]
call edx
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48829b
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f9b0
jmp 0x4882a6
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x488318
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax + 4]
mov eax, dword [edx + 0x48]
call eax
add eax, 4
mov ecx, dword [ebp - 0x6ed4]
movzx edx, byte [ecx + 0x141]
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + edx*4 + 0x144], eax
mov edx, dword [ebp - 0x6ed4]
mov al, byte [edx + 0x141]
add al, 1
mov ecx, dword [ebp - 0x6ed4]
mov byte [ecx + 0x141], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f9b0
jmp 0x488323
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48838c
mov edx, dword [ebp - 0x6ed4]
movzx eax, byte [edx + 0x141]
test eax, eax
jle 0x48838c
mov ecx, dword [ebp - 0x6ed4]
mov dl, byte [ecx + 0x141]
sub dl, 1
mov eax, dword [ebp - 0x6ed4]
mov byte [eax + 0x141], dl
mov ecx, dword [ebp - 0x6ed4]
movzx edx, byte [ecx + 0x141]
mov eax, dword [ebp - 0x6ed4]
mov ecx, dword [eax + edx*4 + 0x144]
push ecx
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x28]
call edx
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x488439
push 0x3e7
lea eax, [ebp - 0x542c]
push eax
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x7504], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul ecx, eax, 0x18
mov edx, dword [ebp - 0x6ed0]
lea eax, [edx + ecx + 0xc73d8]
push eax
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
lea ecx, [ebp - 0x542c]
push ecx
lea edx, [ebp - 0x9f4]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, 1
imul ecx, eax, 0x63
mov dword [ebp - 0x7090], ecx
cmp dword [ebp - 0x7090], 0x3e8
jae 0x48840d
jmp 0x488412
call fcn.004a0c3a
mov edx, dword [ebp - 0x7090]
mov byte [ebp + edx - 0x9f4], 0
lea eax, [ebp - 0x9f4]
push eax
mov ecx, dword [ebp - 0x6ed4]
add ecx, 9
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x488444
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x488479
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x72f8], eax
mov edx, dword [ebp - 0x72f8]
push edx
mov ecx, dword [ebp - 0x6ed0]
call fcn.00478170
xor al, al
jmp 0x48f432
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x4884cf
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f45], al
movzx eax, byte [ebp - 0x6f45]
cmp eax, 1
jne 0x4884af
push 1
mov ecx, 0x51cad30
call fcn.00469b80
jmp 0x4884cf
push 0
mov ecx, 0x51cad30
call fcn.00469b80
mov ecx, 0x59ca610
call fcn.00459aa0
mov ecx, 0x50bf048
call fcn.00473630
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48850c
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x72fc], eax
push 1
mov ecx, dword [ebp - 0x72fc]
push ecx
mov ecx, 0x51cad30
call fcn.00469070
push 1
mov ecx, 0x51cad30
call fcn.00469b80
jmp 0x48851d
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7508], eax
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x4885de
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f08], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x6f30], ax
lea edx, [ebp - 0x6f30]
push edx
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x4885dc
movzx edx, byte [ebp - 0x6f08]
cmp edx, 0x41
jne 0x488599
movzx eax, word [ebp - 0x6f30]
mov ecx, dword [ebp - 0x6ed8]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x7094], edx
jmp 0x4885b3
movzx eax, word [ebp - 0x6f30]
mov ecx, dword [ebp - 0x6ed4]
lea edx, [ecx + eax*4 + 0x2fd8c]
mov dword [ebp - 0x7094], edx
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [ebp - 0x7094]
mov dword [ecx], eax
movzx edx, word [ebp - 0x6f30]
push edx
movzx eax, byte [ebp - 0x6f08]
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00477220
jmp 0x4885f4
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x4886d6
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f07], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x6f2c], ax
lea ecx, [ebp - 0x6f2c]
push ecx
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x4886d4
movzx ecx, byte [ebp - 0x6f07]
cmp ecx, 0x41
jne 0x488674
movzx edx, word [ebp - 0x6f2c]
mov eax, dword [ebp - 0x6ed8]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x7074], ecx
jmp 0x48868e
movzx edx, word [ebp - 0x6f2c]
mov eax, dword [ebp - 0x6ed4]
lea ecx, [eax + edx*4 + 0x2fd8c]
mov dword [ebp - 0x7074], ecx
mov ecx, 0x7547800
call fcn.00490210
movzx edx, al
test edx, edx
je 0x4886ad
mov eax, dword [ebp - 0x7074]
mov dword [eax], 1
jmp 0x4886b9
mov ecx, dword [ebp - 0x7074]
mov dword [ecx], 0
movzx edx, word [ebp - 0x6f2c]
push edx
movzx eax, byte [ebp - 0x6f07]
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00477220
jmp 0x4886ec
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x4887f1
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f06], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x6f28], ax
lea ecx, [ebp - 0x6f28]
push ecx
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x4887ef
movzx ecx, byte [ebp - 0x6f06]
cmp ecx, 0x41
jne 0x48876c
movzx edx, word [ebp - 0x6f28]
mov eax, dword [ebp - 0x6ed8]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x7070], ecx
jmp 0x488786
movzx edx, word [ebp - 0x6f28]
mov eax, dword [ebp - 0x6ed4]
lea ecx, [eax + edx*4 + 0x2fd8c]
mov dword [ebp - 0x7070], ecx
push 1
mov ecx, 0x59ca610
call fcn.00459740
test eax, eax
jne 0x4887a6
push 0xd
mov ecx, 0x59ca610
call fcn.00459740
test eax, eax
je 0x4887c8
mov edx, dword [ebp - 0x7070]
mov dword [edx], 1
mov ecx, 0x59ca610
call fcn.004597e0
mov ecx, 0x59ca610
call fcn.00459810
jmp 0x4887d4
mov eax, dword [ebp - 0x7070]
mov dword [eax], 0
movzx ecx, word [ebp - 0x6f28]
push ecx
movzx edx, byte [ebp - 0x6f06]
push edx
mov ecx, dword [ebp - 0x6ed0]
call fcn.00477220
jmp 0x488807
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x4888e8
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f05], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x6f24], ax
lea eax, [ebp - 0x6f24]
push eax
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x4888e6
movzx edx, byte [ebp - 0x6f05]
cmp edx, 0x41
jne 0x488887
movzx eax, word [ebp - 0x6f24]
mov ecx, dword [ebp - 0x6ed8]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x706c], edx
jmp 0x4888a1
movzx eax, word [ebp - 0x6f24]
mov ecx, dword [ebp - 0x6ed4]
lea edx, [ecx + eax*4 + 0x2fd8c]
mov dword [ebp - 0x706c], edx
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x80
je 0x4888bf
mov ecx, dword [ebp - 0x706c]
mov dword [ecx], 1
jmp 0x4888cb
mov edx, dword [ebp - 0x706c]
mov dword [edx], 0
movzx eax, word [ebp - 0x6f24]
push eax
movzx ecx, byte [ebp - 0x6f05]
push ecx
mov ecx, dword [ebp - 0x6ed0]
call fcn.00477220
jmp 0x4888fe
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x4889c5
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6ef1], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x6f20], ax
lea edx, [ebp - 0x6f20]
push edx
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x4889c3
movzx edx, byte [ebp - 0x6ef1]
cmp edx, 0x41
jne 0x48897a
movzx eax, word [ebp - 0x6f20]
mov ecx, dword [ebp - 0x6ed8]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x7098], edx
jmp 0x488994
movzx eax, word [ebp - 0x6f20]
mov ecx, dword [ebp - 0x6ed4]
lea edx, [ecx + eax*4 + 0x2fd8c]
mov dword [ebp - 0x7098], edx
mov eax, dword [ebp - 0x7098]
mov ecx, dword [ebp - 0x6ed4]
mov edx, dword [ecx + 0x30d2c]
mov dword [eax], edx
movzx eax, word [ebp - 0x6f20]
push eax
movzx ecx, byte [ebp - 0x6ef1]
push ecx
mov ecx, dword [ebp - 0x6ed0]
call fcn.00477220
jmp 0x4889db
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x488aa2
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f04], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x6f1c], ax
lea edx, [ebp - 0x6f1c]
push edx
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x488aa0
movzx edx, byte [ebp - 0x6f04]
cmp edx, 0x41
jne 0x488a57
movzx eax, word [ebp - 0x6f1c]
mov ecx, dword [ebp - 0x6ed8]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x709c], edx
jmp 0x488a71
movzx eax, word [ebp - 0x6f1c]
mov ecx, dword [ebp - 0x6ed4]
lea edx, [ecx + eax*4 + 0x2fd8c]
mov dword [ebp - 0x709c], edx
mov eax, dword [ebp - 0x709c]
mov ecx, dword [ebp - 0x6ed4]
mov edx, dword [ecx + 0x30d30]
mov dword [eax], edx
movzx eax, word [ebp - 0x6f1c]
push eax
movzx ecx, byte [ebp - 0x6f04]
push ecx
mov ecx, dword [ebp - 0x6ed0]
call fcn.00477220
jmp 0x488ab8
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x488b7b
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7300], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f46], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x6f64], ax
lea edx, [ebp - 0x6f64]
push edx
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x488b79
movzx edx, byte [ebp - 0x6f46]
cmp edx, 0x41
jne 0x488b45
movzx eax, word [ebp - 0x6f64]
mov ecx, dword [ebp - 0x6ed8]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x70a0], edx
jmp 0x488b5f
movzx eax, word [ebp - 0x6f64]
mov ecx, dword [ebp - 0x6ed4]
lea edx, [ecx + eax*4 + 0x2fd8c]
mov dword [ebp - 0x70a0], edx
mov eax, dword [ebp - 0x7300]
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00477d00
mov ecx, dword [ebp - 0x70a0]
mov dword [ecx], eax
jmp 0x488b91
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7304], eax
mov edx, dword [ebp - 0x7304]
push edx
mov ecx, 0x51cad30
call fcn.0046a2e0
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax + 4]
mov eax, dword [edx + 0x48]
call eax
sub eax, 1
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x138], eax
push 1
push 8
push 0x24
mov ecx, 0x51ca6a0
call fcn.00460800
mov edx, dword [ebp - 0x6ed8]
mov dword [edx + 0x7edc8], 1
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x70a4], eax
mov eax, dword [ebp - 0x70a4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x70a4]
mov eax, dword [edx + 0x44]
call eax
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x488cec
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x701c], ax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f47], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x6f68], ax
lea ecx, [ebp - 0x6f68]
push ecx
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x488cea
movzx ecx, byte [ebp - 0x6f47]
cmp ecx, 0x41
jne 0x488cb6
movzx edx, word [ebp - 0x6f68]
mov eax, dword [ebp - 0x6ed8]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x70a8], ecx
jmp 0x488cd0
movzx edx, word [ebp - 0x6f68]
mov eax, dword [ebp - 0x6ed4]
lea ecx, [eax + edx*4 + 0x2fd8c]
mov dword [ebp - 0x70a8], ecx
movzx edx, word [ebp - 0x701c]
push edx
mov ecx, 0x51ca6a0
call fcn.004652c0
mov ecx, dword [ebp - 0x70a8]
mov dword [ecx], eax
jmp 0x488d02
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x488d6a
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x138], eax
push 0
push 8
push 0x1e
mov ecx, 0x51ca6a0
call fcn.00460800
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x70ac], eax
push 6
mov edx, dword [ebp - 0x70ac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x70ac]
mov edx, dword [eax + 0x1c]
call edx
jmp case.0x487f71.4
mov ecx, 0x51ca6a0
call fcn.00411420
push eax
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7308], eax
push 0x3e7
lea ecx, [ebp - 0x1994]
push ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x750c], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul edx, eax, 0x18
mov eax, dword [ebp - 0x6ed0]
lea ecx, [eax + edx + 0xc73d8]
push ecx
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
mov ecx, 0x51ca6a0
call fcn.00426d70
mov dword [ebp - 0x70b0], eax
mov edx, dword [ebp - 0x70b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x70b0]
mov edx, dword [eax + 0xc]
call edx
push eax
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0x1994]
push ecx
lea edx, [ebp - 0x224]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
push eax
push 1
mov eax, dword [ebp - 0x7308]
push eax
lea ecx, [ebp - 0x224]
push ecx
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490260
jmp case.0x487f71.4
mov dword [ebp - 0x70b8], 1
mov ecx, 0x51ca6a0
call fcn.00411420
push eax
lea edx, [ebp - 0x120]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x730c], eax
push 0x3e7
lea eax, [ebp - 0x1d7c]
push eax
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x7510], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul ecx, eax, 0x18
mov edx, dword [ebp - 0x6ed0]
lea eax, [edx + ecx + 0xc73d8]
push eax
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
mov ecx, 0x51ca6a0
call fcn.00426d70
mov dword [ebp - 0x70b4], eax
mov ecx, dword [ebp - 0x70b4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x70b4]
mov eax, dword [edx + 0xc]
call eax
push eax
lea ecx, [ebp - 0x120]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x1d7c]
push edx
lea eax, [ebp - 0x120]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0
mov ecx, dword [ebp - 0x70b8]
push ecx
mov edx, dword [ebp - 0x730c]
push edx
lea eax, [ebp - 0x120]
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490260
jmp case.0x487f71.4
push 0x4d0157
mov ecx, dword [ebp - 0x6ed4]
add ecx, 0x2de08
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0
mov ecx, 0x51ca350
call fcn.00415c80
jmp case.0x487f71.4
push 0x4d0177
mov edx, dword [ebp - 0x6ed4]
add edx, 0x2de08
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, 0x51ca6a0
call fcn.0043fdc0
mov dword [ebp - 0x7310], eax
push 1
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
push eax
mov eax, dword [ebp - 0x7310]
push eax
mov ecx, 0x5252170
call fcn.004448a0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x488fce
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x70bc], eax
push 0x12
mov ecx, dword [ebp - 0x70bc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x70bc]
mov eax, dword [edx + 0x20]
call eax
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x489000
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x70c0], eax
push 0x14
mov ecx, dword [ebp - 0x70c0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x70c0]
mov eax, dword [edx + 0x20]
call eax
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48915d
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x6fac], eax
mov ecx, 0x606c470
call fcn.00487900
mov dword [ebp - 0x6fb0], eax
mov ecx, 0x606c470
call fcn.0041cfe0
mov dword [ebp - 0x7514], eax
mov dword [ebp - 0x6f38], 0
imul ecx, dword [ebp - 0x6fac], 0x28
add ecx, dword [ebp - 0x6fb0]
mov edx, dword [ebp - 0x6f38]
cmp dword [ecx + edx*4], 0x80a
je 0x48915b
imul eax, dword [ebp - 0x6fac], 0x28
add eax, dword [ebp - 0x6fb0]
mov ecx, dword [ebp - 0x6f38]
mov edx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x6ed8]
cmp dword [eax + edx*4 + 0x1628], 1
jge 0x489147
cmp dword [ebp - 0x6f38], 0
jne 0x4890a9
mov dword [ebp - 0x70c4], 2
jmp 0x4890b3
mov dword [ebp - 0x70c4], 1
imul ecx, dword [ebp - 0x6fac], 0x28
add ecx, dword [ebp - 0x6fb0]
mov edx, dword [ebp - 0x6f38]
mov eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x6ed8]
mov edx, dword [ebp - 0x70c4]
mov dword [ecx + eax*4 + 0x1628], edx
imul eax, dword [ebp - 0x6fac], 0x28
add eax, dword [ebp - 0x6fb0]
mov ecx, dword [ebp - 0x6f38]
mov edx, dword [eax + ecx*4]
push edx
mov ecx, 0x51ca6a0
call fcn.00465e10
imul eax, dword [ebp - 0x6fac], 0x28
add eax, dword [ebp - 0x6fb0]
mov ecx, dword [ebp - 0x6ed8]
mov edx, dword [ecx + 0x7f72c]
mov ecx, dword [ebp - 0x6ed8]
mov esi, dword [ebp - 0x6f38]
mov eax, dword [eax + esi*4]
mov dword [ecx + edx*4 + 0x7f730], eax
mov ecx, dword [ebp - 0x6ed8]
mov edx, dword [ecx + 0x7f72c]
add edx, 1
mov eax, dword [ebp - 0x6ed8]
mov dword [eax + 0x7f72c], edx
mov ecx, dword [ebp - 0x6f38]
add ecx, 1
mov dword [ebp - 0x6f38], ecx
jmp 0x48904a
jmp 0x489168
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x4891fe
mov edx, dword [ebp - 0x6ed4]
cmp dword [edx + 0x30d2c], 0
jg 0x4891a4
mov eax, dword [ebp - 0x6ed4]
cmp dword [eax + 0x30d30], 0
jg 0x4891a4
mov ecx, dword [ebp - 0x6ed4]
cmp dword [ecx + 0x30d34], 0
jle 0x4891b7
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7518], eax
jmp 0x4891fc
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7314], eax
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x48]
call edx
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x13c], eax
mov edx, dword [ebp - 0x7314]
push edx
mov ecx, 0x4e0c40
call fcn.0046cdf0
jmp 0x489209
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x489323
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax + 4]
mov eax, dword [edx + 0x48]
call eax
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x13c], eax
mov edx, dword [ebp - 0x6ed8]
mov eax, dword [edx + 0x7e310]
add eax, 0xa0
push eax
mov ecx, 0x4e0c40
call fcn.0046cdf0
call fcn.00414f50
test eax, eax
jne 0x4892cc
mov ecx, dword [ebp - 0x6ed8]
mov edx, dword [ecx + 0x7e310]
add edx, 0xa0
push edx
mov ecx, 0x51ca6a0
call fcn.00460690
mov eax, dword [ebp - 0x6ed8]
mov ecx, dword [eax + 0x7e310]
add ecx, 0xa0
mov edx, dword [ebp - 0x6ed8]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0x6ed8]
mov ecx, dword [eax + 0x7e310]
add ecx, 1
and ecx, 0x80000007
jns 0x4892b4
dec ecx
or ecx, 0xfffffff8
inc ecx
mov edx, dword [ebp - 0x6ed8]
mov dword [edx + 0x7e310], ecx
mov ecx, 0x51d1d50
call fcn.0045bd30
jmp 0x489323
mov ecx, 0x51ca6a0
call fcn.00422670
mov eax, dword [ebp - 0x6ed8]
mov ecx, dword [eax + 0x7e310]
add ecx, 0xa0
mov edx, dword [ebp - 0x6ed8]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0x6ed8]
mov ecx, dword [eax + 0x7e310]
add ecx, 1
and ecx, 0x80000007
jns 0x48930d
dec ecx
or ecx, 0xfffffff8
inc ecx
mov edx, dword [ebp - 0x6ed8]
mov dword [edx + 0x7e310], ecx
mov ecx, 0x51d1d50
call fcn.0045bd30
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x4895b6
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6edb], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x6efc], ax
lea eax, [ebp - 0x6efc]
push eax
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x4895a9
movzx edx, byte [ebp - 0x6edb]
cmp edx, 0x41
jne 0x4893a8
movzx eax, word [ebp - 0x6efc]
mov ecx, dword [ebp - 0x6ed8]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x6ee8], edx
jmp 0x4893c2
movzx eax, word [ebp - 0x6efc]
mov ecx, dword [ebp - 0x6ed4]
lea edx, [ecx + eax*4 + 0x2fd8c]
mov dword [ebp - 0x6ee8], edx
movzx eax, byte [ebp - 0x6ed9]
mov dword [ebp - 0x6ffc], eax
mov ecx, dword [ebp - 0x6ffc]
sub ecx, 0x19
mov dword [ebp - 0x6ffc], ecx
cmp dword [ebp - 0x6ffc], 0xd
ja case.0x4893f1.6
mov edx, dword [ebp - 0x6ffc]
jmp dword [edx*4 + 0x48f784]
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, dword [ebp - 0x6ee8]
add eax, dword [ecx]
mov edx, dword [ebp - 0x6ee8]
mov dword [edx], eax
jmp 0x489542
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, dword [ebp - 0x6ee8]
mov edx, dword [ecx]
sub edx, eax
mov eax, dword [ebp - 0x6ee8]
mov dword [eax], edx
jmp 0x489542
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, dword [ebp - 0x6ee8]
imul eax, dword [ecx]
mov edx, dword [ebp - 0x6ee8]
mov dword [edx], eax
jmp 0x489542
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, eax
mov edx, dword [ebp - 0x6ee8]
mov eax, dword [edx]
cdq
idiv ecx
mov ecx, dword [ebp - 0x6ee8]
mov dword [ecx], eax
jmp 0x489542
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, eax
mov edx, dword [ebp - 0x6ee8]
mov eax, dword [edx]
cdq
idiv ecx
mov eax, dword [ebp - 0x6ee8]
mov dword [eax], edx
jmp 0x489542
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, dword [ebp - 0x6ee8]
mov dword [ecx], eax
jmp 0x489542
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x70c8], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
sub eax, dword [ebp - 0x70c8]
mov dword [ebp - 0x6fb4], eax
cmp dword [ebp - 0x6fb4], 0
jg 0x4894f8
mov dword [ebp - 0x6fb4], 1
mov edx, dword [ebp - 0x6fb4]
add edx, 1
mov dword [ebp - 0x6fb4], edx
call fcn.004a49ea
cdq
idiv dword [ebp - 0x6fb4]
add edx, dword [ebp - 0x70c8]
mov eax, dword [ebp - 0x6ee8]
mov dword [eax], edx
jmp 0x489542
mov ecx, dword [ebp - 0x6ed8]
movzx edx, byte [ecx + 6]
mov eax, dword [ebp - 0x6ee8]
mov dword [eax], edx
jmp 0x489542
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
movzx ecx, word [ebp - 0x6efc]
cmp ecx, 0x5b
jne 0x489576
mov edx, 4
imul eax, edx, 0x5b
mov ecx, dword [ebp - 0x6ed4]
cmp dword [ecx + eax + 0x2fd8c], 0
jne 0x489576
mov edx, dword [ebp - 0x6ed4]
mov dword [edx + 0x30ec8], 0
movzx eax, word [ebp - 0x6efc]
push eax
movzx ecx, byte [ebp - 0x6edb]
push ecx
mov ecx, dword [ebp - 0x6ed0]
call fcn.00477220
movzx edx, byte [ebp - 0x6edb]
cmp edx, 0x41
jne 0x4895a7
mov ecx, 0x51d1d50
call fcn.0045bd30
jmp 0x4895b4
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp 0x4895cc
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
mov dword [ebp - 0x6fb8], 0xffffffff
mov ecx, 0x606c470
call fcn.004114e0
mov dword [ebp - 0x70cc], eax
mov ecx, 0x606c470
call fcn.00487890
mov dword [ebp - 0x7318], eax
mov dword [ebp - 0x7000], 0
mov eax, dword [ebp - 0x7000]
cmp eax, dword [ebp - 0x70cc]
jge 0x48967f
imul ecx, dword [ebp - 0x7000], 0x18
mov edx, dword [ebp - 0x7318]
mov eax, dword [edx + ecx + 0x10]
mov dword [ebp - 0x6fb8], eax
cmp dword [ebp - 0x6fb8], 0
jl 0x48966e
mov ecx, dword [ebp - 0x6fb8]
cmp ecx, dword [ebp - 0x70cc]
jge 0x48966e
mov edx, dword [ebp - 0x6fb8]
mov eax, dword [ebp - 0x6ed8]
cmp dword [eax + edx*4 + 0x25c8], 0
jne 0x48966e
mov ecx, dword [ebp - 0x6fb8]
mov edx, dword [ebp - 0x6ed8]
mov dword [edx + ecx*4 + 0x25c8], 1
mov eax, dword [ebp - 0x7000]
add eax, 1
mov dword [ebp - 0x7000], eax
jmp 0x489605
mov ecx, 0x51d1d50
call fcn.0045bd30
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x4897aa
push 0x3e7
lea ecx, [ebp - 0x2164]
push ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x751c], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul edx, eax, 0x18
mov eax, dword [ebp - 0x6ed0]
lea ecx, [eax + edx + 0xc73d8]
push ecx
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
mov dword [ebp - 0x6f9c], 0xffffffff
mov ecx, 0x606c470
call fcn.004114e0
mov dword [ebp - 0x70d0], eax
mov dword [ebp - 0x6fbc], 0
mov edx, dword [ebp - 0x6fbc]
cmp edx, dword [ebp - 0x70d0]
jge 0x48975a
mov eax, dword [ebp - 0x6fbc]
push eax
mov ecx, 0x606c470
call fcn.004284f0
mov dword [ebp - 0x731c], eax
mov ecx, dword [ebp - 0x731c]
push ecx
lea edx, [ebp - 0x2164]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x489749
mov eax, dword [ebp - 0x6fbc]
mov dword [ebp - 0x6f9c], eax
jmp 0x48975a
mov ecx, dword [ebp - 0x6fbc]
add ecx, 1
mov dword [ebp - 0x6fbc], ecx
jmp 0x4896fe
cmp dword [ebp - 0x6f9c], 0
jl 0x4897a8
mov edx, dword [ebp - 0x6f9c]
cmp edx, dword [ebp - 0x70d0]
jge 0x4897a8
mov eax, dword [ebp - 0x6f9c]
mov ecx, dword [ebp - 0x6ed8]
cmp dword [ecx + eax*4 + 0x25c8], 0
jne 0x4897a8
mov edx, dword [ebp - 0x6f9c]
mov eax, dword [ebp - 0x6ed8]
mov dword [eax + edx*4 + 0x25c8], 1
mov ecx, 0x51d1d50
call fcn.0045bd30
jmp 0x4897b5
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x4898e8
push 0x3e7
lea ecx, [ebp - 0x254c]
push ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x7520], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul edx, eax, 0x18
mov eax, dword [ebp - 0x6ed0]
lea ecx, [eax + edx + 0xc73d8]
push ecx
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
mov dword [ebp - 0x6fa0], 0xffffffff
mov ecx, 0x606c470
call fcn.0041c1c0
mov dword [ebp - 0x70d4], eax
mov dword [ebp - 0x6f8c], 0
mov edx, dword [ebp - 0x6f8c]
cmp edx, dword [ebp - 0x70d4]
jge 0x489898
mov eax, dword [ebp - 0x6f8c]
push eax
mov ecx, 0x606c470
call fcn.004878b0
mov dword [ebp - 0x7320], eax
mov ecx, dword [ebp - 0x7320]
push ecx
lea edx, [ebp - 0x254c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x489887
mov eax, dword [ebp - 0x6f8c]
mov dword [ebp - 0x6fa0], eax
mov ecx, dword [ebp - 0x6ed4]
mov edx, dword [ebp - 0x6f8c]
mov dword [ecx + 0x3b224], edx
jmp 0x489898
mov eax, dword [ebp - 0x6f8c]
add eax, 1
mov dword [ebp - 0x6f8c], eax
jmp 0x48982a
cmp dword [ebp - 0x6fa0], 0
jl 0x4898e6
mov ecx, dword [ebp - 0x6fa0]
cmp ecx, dword [ebp - 0x70d4]
jge 0x4898e6
mov edx, dword [ebp - 0x6fa0]
mov eax, dword [ebp - 0x6ed8]
cmp dword [eax + edx*4 + 0x7dfe8], 0
jne 0x4898e6
mov ecx, dword [ebp - 0x6fa0]
mov edx, dword [ebp - 0x6ed8]
mov dword [edx + ecx*4 + 0x7dfe8], 1
mov ecx, 0x51d1d50
call fcn.0045bd30
jmp 0x4898f3
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
mov dword [ebp - 0x6fa4], 0xffffffff
mov ecx, 0x606c470
call fcn.00411500
mov dword [ebp - 0x70d8], eax
mov ecx, 0x606c470
call fcn.004878e0
mov dword [ebp - 0x7324], eax
mov dword [ebp - 0x7004], 0
mov eax, dword [ebp - 0x7004]
cmp eax, dword [ebp - 0x70d8]
jge 0x4899a6
imul ecx, dword [ebp - 0x7004], 0x18
mov edx, dword [ebp - 0x7324]
mov eax, dword [edx + ecx + 0x10]
mov dword [ebp - 0x6fa4], eax
cmp dword [ebp - 0x6fa4], 0
jl 0x489995
mov ecx, dword [ebp - 0x6fa4]
cmp ecx, dword [ebp - 0x70d8]
jge 0x489995
mov edx, dword [ebp - 0x6fa4]
mov eax, dword [ebp - 0x6ed8]
cmp dword [eax + edx*4 + 0x3ba8], 0
jne 0x489995
mov ecx, dword [ebp - 0x6fa4]
mov edx, dword [ebp - 0x6ed8]
mov dword [edx + ecx*4 + 0x3ba8], 1
mov eax, dword [ebp - 0x7004]
add eax, 1
mov dword [ebp - 0x7004], eax
jmp 0x48992c
mov ecx, 0x51d1d50
call fcn.0045bd30
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x489ad1
push 0x3e7
lea ecx, [ebp - 0x2934]
push ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x7524], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul edx, eax, 0x18
mov eax, dword [ebp - 0x6ed0]
lea ecx, [eax + edx + 0xc73d8]
push ecx
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
mov dword [ebp - 0x6fc0], 0xffffffff
mov ecx, 0x606c470
call fcn.00411500
mov dword [ebp - 0x70dc], eax
mov dword [ebp - 0x6fa8], 0
mov edx, dword [ebp - 0x6fa8]
cmp edx, dword [ebp - 0x70dc]
jge 0x489a81
mov eax, dword [ebp - 0x6fa8]
push eax
mov ecx, 0x606c470
call fcn.00426dd0
mov dword [ebp - 0x7328], eax
mov ecx, dword [ebp - 0x7328]
push ecx
lea edx, [ebp - 0x2934]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x489a70
mov eax, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6fc0], eax
jmp 0x489a81
mov ecx, dword [ebp - 0x6fa8]
add ecx, 1
mov dword [ebp - 0x6fa8], ecx
jmp 0x489a25
cmp dword [ebp - 0x6fc0], 0
jl 0x489acf
mov edx, dword [ebp - 0x6fc0]
cmp edx, dword [ebp - 0x70dc]
jge 0x489acf
mov eax, dword [ebp - 0x6fc0]
mov ecx, dword [ebp - 0x6ed8]
cmp dword [ecx + eax*4 + 0x3ba8], 0
jne 0x489acf
mov edx, dword [ebp - 0x6fc0]
mov eax, dword [ebp - 0x6ed8]
mov dword [eax + edx*4 + 0x3ba8], 1
mov ecx, 0x51d1d50
call fcn.0045bd30
jmp 0x489adc
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48a039
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f48], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x6f6c], ax
lea ecx, [ebp - 0x6f6c]
push ecx
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x48a021
movzx ecx, byte [ebp - 0x6f48]
cmp ecx, 0x41
jne 0x489b6c
mov ecx, 0x51d1d50
call fcn.004114c0
mov dword [ebp - 0x732c], eax
movzx edx, word [ebp - 0x6f6c]
mov eax, dword [ebp - 0x732c]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x6f84], ecx
jmp 0x489b86
movzx edx, word [ebp - 0x6f6c]
mov eax, dword [ebp - 0x6ed4]
lea ecx, [eax + edx*4 + 0x2fd8c]
mov dword [ebp - 0x6f84], ecx
movzx edx, byte [ebp - 0x6ed9]
mov dword [ebp - 0x7008], edx
mov eax, dword [ebp - 0x7008]
sub eax, 0x2d
mov dword [ebp - 0x7008], eax
cmp dword [ebp - 0x7008], 5
ja case.default.0x489bb5
mov ecx, dword [ebp - 0x7008]
jmp dword [ecx*4 + 0x48f7bc]
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov edx, dword [ebp - 0x6f84]
cmp dword [edx], eax
jne 0x489c68
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax + 4]
mov eax, dword [edx + 0x48]
call eax
add eax, 4
mov ecx, dword [ebp - 0x6ed4]
movzx edx, byte [ecx + 0x141]
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + edx*4 + 0x144], eax
mov edx, dword [ebp - 0x6ed4]
mov al, byte [edx + 0x141]
add al, 1
mov ecx, dword [ebp - 0x6ed4]
mov byte [ecx + 0x141], al
mov edx, dword [ebp - 0x6ed4]
movzx eax, byte [edx + 0x141]
cmp eax, 0xa
jle 0x489c4f
push 0
mov ecx, 0x51ca6a0
call fcn.00414f30
push eax
push 0x4d4b9c
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f9b0
jmp 0x489c73
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.default.0x489bb5
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, dword [ebp - 0x6f84]
cmp dword [ecx], eax
je 0x489d24
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x6ed4]
movzx edx, byte [ecx + 0x141]
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + edx*4 + 0x144], eax
mov edx, dword [ebp - 0x6ed4]
mov al, byte [edx + 0x141]
add al, 1
mov ecx, dword [ebp - 0x6ed4]
mov byte [ecx + 0x141], al
mov edx, dword [ebp - 0x6ed4]
movzx eax, byte [edx + 0x141]
cmp eax, 0xa
jle 0x489d0b
push 0
mov ecx, 0x51ca6a0
call fcn.00414f30
push eax
push 0x4d4bdc
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f9b0
jmp 0x489d2f
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.default.0x489bb5
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, dword [ebp - 0x6f84]
cmp dword [ecx], eax
jge 0x489de0
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x6ed4]
movzx edx, byte [ecx + 0x141]
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + edx*4 + 0x144], eax
mov edx, dword [ebp - 0x6ed4]
mov al, byte [edx + 0x141]
add al, 1
mov ecx, dword [ebp - 0x6ed4]
mov byte [ecx + 0x141], al
mov edx, dword [ebp - 0x6ed4]
movzx eax, byte [edx + 0x141]
cmp eax, 0xa
jle 0x489dc7
push 0
mov ecx, 0x51ca6a0
call fcn.00414f30
push eax
push 0x4d4bbc
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f9b0
jmp 0x489deb
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.default.0x489bb5
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, dword [ebp - 0x6f84]
cmp dword [ecx], eax
jle 0x489e9c
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x6ed4]
movzx edx, byte [ecx + 0x141]
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + edx*4 + 0x144], eax
mov edx, dword [ebp - 0x6ed4]
mov al, byte [edx + 0x141]
add al, 1
mov ecx, dword [ebp - 0x6ed4]
mov byte [ecx + 0x141], al
mov edx, dword [ebp - 0x6ed4]
movzx eax, byte [edx + 0x141]
cmp eax, 0xa
jle 0x489e83
push 0
mov ecx, 0x51ca6a0
call fcn.00414f30
push eax
push 0x4d4c1c
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f9b0
jmp 0x489ea7
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.default.0x489bb5
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, dword [ebp - 0x6f84]
cmp dword [ecx], eax
jg 0x489f58
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x6ed4]
movzx edx, byte [ecx + 0x141]
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + edx*4 + 0x144], eax
mov edx, dword [ebp - 0x6ed4]
mov al, byte [edx + 0x141]
add al, 1
mov ecx, dword [ebp - 0x6ed4]
mov byte [ecx + 0x141], al
mov edx, dword [ebp - 0x6ed4]
movzx eax, byte [edx + 0x141]
cmp eax, 0xa
jle 0x489f3f
push 0
mov ecx, 0x51ca6a0
call fcn.00414f30
push eax
push 0x4d4bfc
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f9b0
jmp 0x489f63
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.default.0x489bb5
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, dword [ebp - 0x6f84]
cmp dword [ecx], eax
jl 0x48a014
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x6ed4]
movzx edx, byte [ecx + 0x141]
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + edx*4 + 0x144], eax
mov edx, dword [ebp - 0x6ed4]
mov al, byte [edx + 0x141]
add al, 1
mov ecx, dword [ebp - 0x6ed4]
mov byte [ecx + 0x141], al
mov edx, dword [ebp - 0x6ed4]
movzx eax, byte [edx + 0x141]
cmp eax, 0xa
jle 0x489ffb
push 0
mov ecx, 0x51ca6a0
call fcn.00414f30
push eax
push str.GOSUB
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f9b0
jmp case.default.0x489bb5
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp 0x48a037
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp 0x48a05a
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48a2da
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f03], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x6f70], ax
lea ecx, [ebp - 0x6f70]
push ecx
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x48a2c2
mov dword [ebp - 0x6f3c], 0
movzx ecx, byte [ebp - 0x6f03]
cmp ecx, 0x41
jne 0x48a0f4
mov ecx, 0x51d1d50
call fcn.004114c0
mov dword [ebp - 0x7330], eax
movzx edx, word [ebp - 0x6f70]
mov eax, dword [ebp - 0x7330]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x6f3c], ecx
jmp 0x48a11a
movzx edx, byte [ebp - 0x6f03]
cmp edx, 0x40
jne 0x48a11a
movzx eax, word [ebp - 0x6f70]
mov ecx, dword [ebp - 0x6ed4]
lea edx, [ecx + eax*4 + 0x2fd8c]
mov dword [ebp - 0x6f3c], edx
movzx eax, byte [ebp - 0x6ed9]
mov dword [ebp - 0x700c], eax
mov ecx, dword [ebp - 0x700c]
sub ecx, 0x27
mov dword [ebp - 0x700c], ecx
cmp dword [ebp - 0x700c], 0x18
ja case.0x48a150.6
mov edx, dword [ebp - 0x700c]
movzx eax, byte [edx + 0x48f7f0]
jmp dword [eax*4 + 0x48f7d4]
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, dword [ebp - 0x6f3c]
cmp dword [ecx], eax
jne 0x48a185
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f9b0
jmp 0x48a190
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x48a150.6
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov edx, dword [ebp - 0x6f3c]
cmp dword [edx], eax
je 0x48a1c3
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f9b0
jmp 0x48a1ce
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x48a150.6
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, dword [ebp - 0x6f3c]
cmp dword [ecx], eax
jge 0x48a201
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f9b0
jmp 0x48a20c
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x48a150.6
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov edx, dword [ebp - 0x6f3c]
cmp dword [edx], eax
jle 0x48a23f
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f9b0
jmp 0x48a24a
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x48a150.6
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, dword [ebp - 0x6f3c]
cmp dword [ecx], eax
jg 0x48a27a
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f9b0
jmp 0x48a285
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x48a150.6
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov edx, dword [ebp - 0x6f3c]
cmp dword [edx], eax
jl 0x48a2b5
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f9b0
jmp case.0x48a150.6
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp 0x48a2d8
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp 0x48a2fb
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul eax, eax, 0x18
mov ecx, dword [ebp - 0x6ed0]
lea edx, [ecx + eax + 0xc73d8]
mov dword [ebp - 0x7334], edx
push 0x3e7
mov ecx, dword [ebp - 0x7334]
call fcn.00412b10
push eax
lea eax, [ebp - 0x2d1c]
push eax
call fcn.004a57a0
add esp, 0xc
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x70e0], ecx
cmp dword [ebp - 0x70e0], 0
je 0x48a35e
cmp dword [ebp - 0x70e0], 3
je 0x48a35e
jmp 0x48a39a
mov edx, dword [ebp - 0x6ed4]
mov dword [edx + 0x26e98], 0
mov eax, dword [ebp - 0x6ed4]
mov byte [eax + 0x440d4], 0
push 0
lea ecx, [ebp - 0x2d1c]
push ecx
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [eax + 0xe0]
call edx
jmp case.0x487f71.4
push 0x3e7
lea eax, [ebp - 0x3104]
push eax
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x7528], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul ecx, eax, 0x18
mov edx, dword [ebp - 0x6ed0]
lea eax, [edx + ecx + 0xc73d8]
push eax
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x70e4], ecx
cmp dword [ebp - 0x70e4], 0
je 0x48a401
cmp dword [ebp - 0x70e4], 3
je 0x48a401
jmp 0x48a665
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
mulss xmm0, dword [0x4d5d58]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x64a8], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
divss xmm0, dword [0x4d5f34]
movss dword [ebp - 0x64a0], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x649c], xmm0
movss xmm0, dword [ebp - 0x649c]
mulss xmm0, dword [ebp - 0x64a0]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x73dc], xmm0
movsd xmm0, qword [ebp - 0x64a8]
call fcn.004bf6b0
movsd xmm1, qword [ebp - 0x73dc]
mulsd xmm1, xmm0
movsd qword [ebp - 0x6498], xmm1
movss xmm0, dword [ebp - 0x649c]
mulss xmm0, dword [ebp - 0x64a0]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x73e4], xmm0
movsd xmm0, qword [ebp - 0x64a8]
call fcn.004ac620
movsd xmm1, qword [ebp - 0x73e4]
mulsd xmm1, xmm0
movsd qword [ebp - 0x6490], xmm1
cvtss2sd xmm0, dword [ebp - 0x649c]
mulsd xmm0, qword [0x4d5df8]
cvtss2sd xmm1, dword [ebp - 0x64a0]
mulsd xmm0, xmm1
movsd qword [ebp - 0x73ec], xmm0
movsd xmm0, qword [ebp - 0x64a8]
call fcn.004bf6b0
movsd xmm1, qword [ebp - 0x73ec]
mulsd xmm1, xmm0
movsd qword [ebp - 0x6488], xmm1
cvtss2sd xmm0, dword [ebp - 0x649c]
mulsd xmm0, qword [0x4d5df8]
cvtss2sd xmm1, dword [ebp - 0x64a0]
mulsd xmm0, xmm1
movsd qword [ebp - 0x73f4], xmm0
movsd xmm0, qword [ebp - 0x64a8]
call fcn.004ac620
movsd xmm1, qword [ebp - 0x73f4]
mulsd xmm1, xmm0
movsd qword [ebp - 0x6480], xmm1
cvtss2sd xmm0, dword [ebp - 0x649c]
mulsd xmm0, qword [0x4d5e00]
cvtss2sd xmm1, dword [ebp - 0x64a0]
mulsd xmm0, xmm1
movsd qword [ebp - 0x73fc], xmm0
movsd xmm0, qword [ebp - 0x64a8]
call fcn.004bf6b0
movsd xmm1, qword [ebp - 0x73fc]
mulsd xmm1, xmm0
movsd qword [ebp - 0x6478], xmm1
cvtss2sd xmm0, dword [ebp - 0x649c]
mulsd xmm0, qword [0x4d5e00]
cvtss2sd xmm1, dword [ebp - 0x64a0]
mulsd xmm0, xmm1
movsd qword [ebp - 0x7404], xmm0
movsd xmm0, qword [ebp - 0x64a8]
call fcn.004ac620
movsd xmm1, qword [ebp - 0x7404]
mulsd xmm1, xmm0
movsd qword [ebp - 0x6470], xmm1
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x6468], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x6464], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x6460], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x645c], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
divss xmm0, dword [0x4d5f34]
movss dword [ebp - 0x6458], xmm0
lea edx, [ebp - 0x64b0]
push edx
push 0
lea eax, [ebp - 0x3104]
push eax
mov ecx, 0x606bd90
call fcn.00448c80
jmp case.0x487f71.4
push 0x3e7
lea ecx, [ebp - 0x34ec]
push ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x752c], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul edx, eax, 0x18
mov eax, dword [ebp - 0x6ed0]
lea ecx, [eax + edx + 0xc73d8]
push ecx
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
mov edx, dword [ebp + 8]
mov dword [ebp - 0x70e8], edx
cmp dword [ebp - 0x70e8], 0
je 0x48a6c9
cmp dword [ebp - 0x70e8], 3
je 0x48a6c9
jmp 0x48a6da
lea eax, [ebp - 0x34ec]
push eax
mov ecx, 0x606bd90
call fcn.004131f0
jmp case.0x487f71.4
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x7068], ecx
cmp dword [ebp - 0x7068], 0
je 0x48a70c
cmp dword [ebp - 0x7068], 2
je 0x48a796
cmp dword [ebp - 0x7068], 3
je 0x48a70c
jmp 0x48a7ac
mov edx, dword [ebp - 0x6ed4]
mov dword [edx + 0x26e98], 1
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x26ea4], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov edx, dword [ebp - 0x6ed4]
mov dword [edx + 0x26eac], eax
mov eax, dword [ebp - 0x6ed4]
mov ecx, dword [eax + 0x26eac]
push ecx
push 0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov edx, dword [ebp - 0x6ed4]
cvtsi2ss xmm0, dword [edx + 0x26ea4]
push ecx
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0
mov ecx, 0x606bd90
call fcn.00449410
jmp 0x48a7ac
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x71d8], eax
cmp dword [ebp - 0x71d8], 0
je 0x48a7ce
cmp dword [ebp - 0x71d8], 3
je 0x48a7ce
jmp 0x48a7f7
mov ecx, dword [ebp - 0x6ed4]
cmp dword [ecx + 0x26e98], 0
jle 0x48a7f7
mov edx, dword [ebp - 0x6ed4]
mov dword [edx + 0x26e98], 0
mov ecx, 0x606bd90
call fcn.004493c0
jmp case.0x487f71.4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x71d4], eax
cmp dword [ebp - 0x71d4], 0
je 0x48a819
cmp dword [ebp - 0x71d4], 3
je 0x48a819
jmp 0x48a832
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x3b238], eax
jmp 0x48a83d
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
mov edx, dword [ebp + 8]
mov dword [ebp - 0x71d0], edx
cmp dword [ebp - 0x71d0], 0
je 0x48a85f
cmp dword [ebp - 0x71d0], 3
je 0x48a85f
jmp 0x48a8a6
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
mov eax, dword [ebp - 0x6ed4]
fstp qword [eax + 0x3b240]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
mov ecx, dword [ebp - 0x6ed4]
fstp qword [ecx + 0x3b248]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
mov edx, dword [ebp - 0x6ed4]
fstp qword [edx + 0x3b250]
jmp 0x48a8b3
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
fstp st(0)
jmp case.0x487f71.4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x71cc], eax
cmp dword [ebp - 0x71cc], 0
je 0x48a8d8
cmp dword [ebp - 0x71cc], 3
je 0x48a8d8
jmp 0x48aa1a
mov dword [ebp - 0x6f40], 0
mov dword [ebp - 0x6f40], 0
jmp 0x48a8fd
mov ecx, dword [ebp - 0x6f40]
add ecx, 1
mov dword [ebp - 0x6f40], ecx
cmp dword [ebp - 0x6f40], 5
jge 0x48a997
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
cvtsi2ss xmm0, eax
cvtss2sd xmm0, xmm0
mov edx, dword [ebp - 0x6f40]
movsd qword [ebp + edx*8 - 0x68c4], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
cvtsi2ss xmm0, eax
cvtss2sd xmm0, xmm0
mov eax, dword [ebp - 0x6f40]
movsd qword [ebp + eax*8 - 0x6874], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
cvtsi2ss xmm0, eax
cvtss2sd xmm0, xmm0
mov ecx, dword [ebp - 0x6f40]
movsd qword [ebp + ecx*8 - 0x6824], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
cvtsi2ss xmm0, eax
cvtss2sd xmm0, xmm0
mov edx, dword [ebp - 0x6f40]
movsd qword [ebp + edx*8 - 0x67d4], xmm0
jmp 0x48a8ee
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x6780], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x677c], eax
mov edi, dword [ebp - 0x6ed4]
add edi, 0x43f88
mov ecx, 0x54
lea esi, [ebp - 0x68c4]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x6ed4]
mov byte [eax + 0x440d4], 1
lea ecx, [ebp - 0x67d4]
push ecx
lea edx, [ebp - 0x6824]
push edx
lea eax, [ebp - 0x6874]
push eax
lea ecx, [ebp - 0x68c4]
push ecx
mov edx, dword [ebp - 0x677c]
push edx
mov eax, dword [ebp - 0x6780]
push eax
push 0x1f5
mov ecx, 0x606bd90
call fcn.00449af0
jmp 0x48aa8c
mov dword [ebp - 0x6fd4], 0
mov dword [ebp - 0x6fd4], 0
jmp 0x48aa3f
mov ecx, dword [ebp - 0x6fd4]
add ecx, 1
mov dword [ebp - 0x6fd4], ecx
cmp dword [ebp - 0x6fd4], 5
jge 0x48aa76
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp 0x48aa30
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
mov edx, dword [ebp + 8]
mov dword [ebp - 0x71c8], edx
cmp dword [ebp - 0x71c8], 0
je 0x48aab1
cmp dword [ebp - 0x71c8], 3
je 0x48aab1
jmp 0x48ac4f
mov dword [ebp - 0x6f44], 0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x6fc4], eax
mov eax, dword [ebp - 0x6fc4]
mov dword [ebp - 0x7064], eax
mov ecx, dword [ebp - 0x6fc4]
push ecx
mov ecx, 0x606bd90
call fcn.00422690
lea edx, [eax*4 + 0x27f]
mov dword [ebp - 0x6fc4], edx
mov dword [ebp - 0x6f44], 0
jmp 0x48ab11
mov eax, dword [ebp - 0x6f44]
add eax, 1
mov dword [ebp - 0x6f44], eax
cmp dword [ebp - 0x6f44], 5
jge 0x48ab97
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
cvtsi2sd xmm0, eax
mov ecx, dword [ebp - 0x6f44]
movsd qword [ebp + ecx*8 - 0x6774], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
cvtsi2sd xmm0, eax
mov edx, dword [ebp - 0x6f44]
movsd qword [ebp + edx*8 - 0x6724], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
cvtsi2sd xmm0, eax
mov eax, dword [ebp - 0x6f44]
movsd qword [ebp + eax*8 - 0x66d4], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
cvtsi2sd xmm0, eax
mov ecx, dword [ebp - 0x6f44]
movsd qword [ebp + ecx*8 - 0x6684], xmm0
jmp 0x48ab02
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x6630], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x662c], eax
imul edx, dword [ebp - 0x7064], 0x150
mov eax, dword [ebp - 0x6ed4]
lea edi, [eax + edx + 0x440d8]
mov ecx, 0x54
lea esi, [ebp - 0x6774]
rep movsd dword es:[edi], dword [esi]
imul ecx, dword [ebp - 0x7064], 0x150
mov edx, dword [ebp - 0x6ed4]
mov eax, dword [ebp - 0x6fc4]
mov dword [edx + ecx + 0x44218], eax
imul ecx, dword [ebp - 0x7064], 0x150
mov edx, dword [ebp - 0x6ed4]
mov byte [edx + ecx + 0x44224], 1
lea eax, [ebp - 0x6684]
push eax
lea ecx, [ebp - 0x66d4]
push ecx
lea edx, [ebp - 0x6724]
push edx
lea eax, [ebp - 0x6774]
push eax
mov ecx, dword [ebp - 0x662c]
push ecx
mov edx, dword [ebp - 0x6630]
push edx
mov eax, dword [ebp - 0x6fc4]
push eax
mov ecx, 0x606bd90
call fcn.00449af0
jmp 0x48acc1
mov dword [ebp - 0x6fd8], 0
mov dword [ebp - 0x6fd8], 0
jmp 0x48ac74
mov ecx, dword [ebp - 0x6fd8]
add ecx, 1
mov dword [ebp - 0x6fd8], ecx
cmp dword [ebp - 0x6fd8], 5
jge 0x48acab
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp 0x48ac65
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x7340], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x733c], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7338], eax
mov edx, dword [ebp - 0x7338]
push edx
push 0
push ecx
movss xmm0, dword [ebp - 0x733c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x7340]
movss dword [esp], xmm0
push 0
mov ecx, 0x606bd90
call fcn.004490b0
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x7348], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x7344], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
fstp qword [ebp - 0x7434]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
fstp qword [ebp - 0x742c]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
fstp qword [ebp - 0x7424]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
fstp qword [ebp - 0x741c]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
fstp qword [ebp - 0x7414]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
fstp qword [ebp - 0x740c]
cvtsd2ss xmm0, qword [ebp - 0x740c]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x7414]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x741c]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x7424]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x742c]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x7434]
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x7344]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x7348]
movss dword [esp], xmm0
mov ecx, 0x606bd90
call fcn.00449830
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48aeb1
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7354], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7350], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x734c], eax
mov eax, dword [ebp - 0x734c]
cdq
and edx, 0xf
add eax, edx
sar eax, 4
push eax
mov eax, dword [ebp - 0x7350]
push eax
mov ecx, dword [ebp - 0x7354]
push ecx
mov ecx, 0x606bd90
call fcn.004510a0
jmp 0x48aed2
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48af4c
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7358], eax
push 0x3e7
lea edx, [ebp - 0x38d4]
push edx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x7530], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul eax, eax, 0x18
mov ecx, dword [ebp - 0x6ed0]
lea edx, [ecx + eax + 0xc73d8]
push edx
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
push 0
mov eax, dword [ebp - 0x7358]
push eax
lea ecx, [ebp - 0x38d4]
push ecx
mov ecx, 0x606bd90
call fcn.00452da0
jmp 0x48af62
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7364], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7360], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x735c], eax
mov edx, dword [ebp - 0x735c]
push edx
mov eax, dword [ebp - 0x7360]
push eax
mov ecx, dword [ebp - 0x7364]
push ecx
mov ecx, 0x606bd90
call fcn.00453800
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7374], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x7370], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x736c], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f49], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7368], eax
push 0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0
push 0
mov edx, dword [ebp - 0x7368]
push edx
movzx eax, byte [ebp - 0x6f49]
push eax
push ecx
movss xmm0, dword [ebp - 0x736c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x7370]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x7374]
push ecx
mov ecx, 0x606bd90
call fcn.004532b0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48b175
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x737c], eax
push 0x3e7
lea edx, [ebp - 0x60c]
push edx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x7534], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul eax, eax, 0x18
mov ecx, dword [ebp - 0x6ed0]
lea edx, [ecx + eax + 0xc73d8]
push edx
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
lea eax, [ebp - 0x60c]
push eax
mov ecx, 0x606c470
call fcn.00496b20
mov dword [ebp - 0x7060], eax
cmp dword [ebp - 0x7060], 0
jge 0x48b101
lea ecx, [ebp - 0x60c]
push ecx
call fcn.004a5417
add esp, 4
mov dword [ebp - 0x7060], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x71c4], eax
cvtsi2sd xmm0, dword [ebp - 0x71c4]
mov edx, dword [ebp - 0x71c4]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4d6270]
movsd qword [ebp - 0x743c], xmm0
cvtsd2ss xmm0, qword [ebp - 0x743c]
movss dword [ebp - 0x7378], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x7378]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x7060]
push eax
mov ecx, dword [ebp - 0x737c]
push ecx
mov ecx, 0x606bd90
call fcn.004534c0
jmp 0x48b196
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48b1d5
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0xac]
call edx
fstp dword [ebp - 0x71e0]
fld dword [ebp - 0x71e0]
mov eax, dword [ebp - 0x6ed4]
fstp qword [eax + 0x43c30]
jmp 0x48b1f1
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0xac]
call edx
fstp st(0)
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48b291
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x71c0], eax
imul eax, dword [ebp - 0x71c0], 0x150
mov ecx, dword [ebp - 0x6ed4]
mov byte [ecx + eax + 0x44224], 0
push 0x3e7
lea edx, [ebp - 0x3cbc]
push edx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x7538], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul eax, eax, 0x18
mov ecx, dword [ebp - 0x6ed0]
lea edx, [ecx + eax + 0xc73d8]
push edx
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
lea eax, [ebp - 0x3cbc]
push eax
mov ecx, dword [ebp - 0x71c0]
push ecx
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [eax + 0xe4]
call edx
jmp 0x48b2a7
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48b2d7
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x71e4], eax
mov eax, dword [ebp - 0x6ed4]
mov ecx, dword [ebp - 0x71e4]
mov dword [eax + 0x43c64], ecx
jmp 0x48b2e2
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48b329
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x71ec], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x71e8], eax
mov edx, dword [ebp - 0x71e8]
push edx
mov eax, dword [ebp - 0x71ec]
push eax
mov ecx, 0x606bd90
call fcn.00453bd0
jmp 0x48b33f
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48b387
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x71f0], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x71f4], eax
mov ecx, dword [ebp - 0x71f0]
mov edx, dword [ebp - 0x6ed4]
mov eax, dword [ebp - 0x71f4]
mov dword [edx + ecx*4 + 0x43c68], eax
jmp 0x48b39d
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48b431
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x71f8], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x71fc], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7200], eax
mov dword [ebp - 0x6fc8], 0
mov ecx, dword [ebp - 0x71f8]
mov dword [ebp - 0x6fc8], ecx
jmp 0x48b406
mov edx, dword [ebp - 0x6fc8]
add edx, 1
mov dword [ebp - 0x6fc8], edx
mov eax, dword [ebp - 0x6fc8]
cmp eax, dword [ebp - 0x71fc]
jg 0x48b42f
mov ecx, dword [ebp - 0x6fc8]
mov edx, dword [ebp - 0x6ed4]
mov eax, dword [ebp - 0x7200]
mov dword [edx + ecx*4 + 0x43c68], eax
jmp 0x48b3f7
jmp 0x48b452
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48b499
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7208], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7204], eax
mov ecx, dword [ebp - 0x7204]
push ecx
mov edx, dword [ebp - 0x7208]
push edx
mov ecx, 0x606bd90
call fcn.00450fb0
jmp 0x48b4af
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48b4de
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x720c], eax
mov eax, dword [ebp - 0x720c]
push eax
mov ecx, 0x606bd90
call fcn.004511a0
jmp 0x48b4e9
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48b536
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x71bc], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x71bc]
mov edx, dword [ebp - 0x6ed4]
mov dword [edx + ecx*4 + 0x1718], eax
mov eax, dword [ebp - 0x71bc]
push eax
mov ecx, 0x606bd90
call fcn.00451060
jmp 0x48b54c
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48b657
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7214], eax
push 0x3e7
lea ecx, [ebp - 0x11c4]
push ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x753c], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul edx, eax, 0x18
mov eax, dword [ebp - 0x6ed0]
lea ecx, [eax + edx + 0xc73d8]
push ecx
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
lea edx, [ebp - 0x11c4]
push edx
mov ecx, 0x606c470
call fcn.00496b20
mov dword [ebp - 0x705c], eax
cmp dword [ebp - 0x705c], 0
jge 0x48b5e3
lea eax, [ebp - 0x11c4]
push eax
call fcn.004a5417
add esp, 4
mov dword [ebp - 0x705c], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x71b8], eax
cvtsi2sd xmm0, dword [ebp - 0x71b8]
mov ecx, dword [ebp - 0x71b8]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4d6270]
movsd qword [ebp - 0x7444], xmm0
cvtsd2ss xmm0, qword [ebp - 0x7444]
movss dword [ebp - 0x7210], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x7210]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x705c]
push edx
mov eax, dword [ebp - 0x7214]
push eax
mov ecx, 0x606bd90
call fcn.00450be0
jmp 0x48b678
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48b6f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7218], eax
push 0x3e7
lea ecx, [ebp - 0x40a4]
push ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x7540], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul edx, eax, 0x18
mov eax, dword [ebp - 0x6ed0]
lea ecx, [eax + edx + 0xc73d8]
push ecx
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
lea edx, [ebp - 0x40a4]
push edx
mov eax, dword [ebp - 0x7218]
push eax
mov ecx, 0x606bd90
call fcn.004527f0
jmp 0x48b706
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7220], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x721c], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x71b4], eax
mov byte [ebp - 0x6f4a], 0
mov ecx, 0x7547800
call fcn.00490210
movzx ecx, al
test ecx, ecx
je 0x48b760
mov dword [ebp - 0x71b4], 1
movzx edx, byte [ebp - 0x6f4a]
push edx
mov eax, dword [ebp - 0x71b4]
push eax
mov ecx, dword [ebp - 0x721c]
push ecx
mov edx, dword [ebp - 0x7220]
push edx
mov ecx, 0x606bd90
call fcn.0044bfd0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48ba55
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f4b], al
push 0x3e7
lea eax, [ebp - 0x448c]
push eax
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x7544], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul ecx, eax, 0x18
mov edx, dword [ebp - 0x6ed0]
lea eax, [edx + ecx + 0xc73d8]
push eax
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
mulss xmm0, dword [0x4d5d58]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x6448], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
divss xmm0, dword [0x4d5f34]
movss dword [ebp - 0x6440], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x643c], xmm0
movss xmm0, dword [ebp - 0x643c]
mulss xmm0, dword [ebp - 0x6440]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x744c], xmm0
movsd xmm0, qword [ebp - 0x6448]
call fcn.004bf6b0
movsd xmm1, qword [ebp - 0x744c]
mulsd xmm1, xmm0
movsd qword [ebp - 0x6438], xmm1
movss xmm0, dword [ebp - 0x643c]
mulss xmm0, dword [ebp - 0x6440]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x7454], xmm0
movsd xmm0, qword [ebp - 0x6448]
call fcn.004ac620
movsd xmm1, qword [ebp - 0x7454]
mulsd xmm1, xmm0
movsd qword [ebp - 0x6430], xmm1
cvtss2sd xmm0, dword [ebp - 0x643c]
mulsd xmm0, qword [0x4d5df8]
cvtss2sd xmm1, dword [ebp - 0x6440]
mulsd xmm0, xmm1
movsd qword [ebp - 0x745c], xmm0
movsd xmm0, qword [ebp - 0x6448]
call fcn.004bf6b0
movsd xmm1, qword [ebp - 0x745c]
mulsd xmm1, xmm0
movsd qword [ebp - 0x6428], xmm1
cvtss2sd xmm0, dword [ebp - 0x643c]
mulsd xmm0, qword [0x4d5df8]
cvtss2sd xmm1, dword [ebp - 0x6440]
mulsd xmm0, xmm1
movsd qword [ebp - 0x7464], xmm0
movsd xmm0, qword [ebp - 0x6448]
call fcn.004ac620
movsd xmm1, qword [ebp - 0x7464]
mulsd xmm1, xmm0
movsd qword [ebp - 0x6420], xmm1
cvtss2sd xmm0, dword [ebp - 0x643c]
mulsd xmm0, qword [0x4d5e00]
cvtss2sd xmm1, dword [ebp - 0x6440]
mulsd xmm0, xmm1
movsd qword [ebp - 0x746c], xmm0
movsd xmm0, qword [ebp - 0x6448]
call fcn.004bf6b0
movsd xmm1, qword [ebp - 0x746c]
mulsd xmm1, xmm0
movsd qword [ebp - 0x6418], xmm1
cvtss2sd xmm0, dword [ebp - 0x643c]
mulsd xmm0, qword [0x4d5e00]
cvtss2sd xmm1, dword [ebp - 0x6440]
mulsd xmm0, xmm1
movsd qword [ebp - 0x7598], xmm0
movsd xmm0, qword [ebp - 0x6448]
call fcn.004ac620
movsd xmm1, qword [ebp - 0x7598]
mulsd xmm1, xmm0
movsd qword [ebp - 0x6410], xmm1
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x6408], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x6404], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x6400], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x63fc], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
divss xmm0, dword [0x4d5f34]
movss dword [ebp - 0x63f8], xmm0
lea ecx, [ebp - 0x6450]
push ecx
push 0
movzx edx, byte [ebp - 0x6f4b]
push edx
lea eax, [ebp - 0x448c]
push eax
mov ecx, 0x606bd90
call fcn.00449ed0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48bada
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f4c], al
push 0x3e7
lea ecx, [ebp - 0x4874]
push ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x7548], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul edx, eax, 0x18
mov eax, dword [ebp - 0x6ed0]
lea ecx, [eax + edx + 0xc73d8]
push ecx
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
lea edx, [ebp - 0x4874]
push edx
movzx eax, byte [ebp - 0x6f4c]
push eax
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 0xe8]
call eax
jmp 0x48baf0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7224], eax
push 0
mov ecx, dword [ebp - 0x7224]
push ecx
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [eax + 0xe4]
call edx
jmp case.0x487f71.4
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x71b0], eax
push 0xb
mov eax, dword [ebp - 0x71b0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x71b0]
mov eax, dword [edx + 0x20]
call eax
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f4d], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x722c], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x7228], xmm0
push ecx
movss xmm0, dword [ebp - 0x7228]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x722c]
movss dword [esp], xmm0
movzx ecx, byte [ebp - 0x6f4d]
push ecx
mov ecx, 0x606bd90
call fcn.00448650
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f02], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x7234], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x7230], xmm0
movzx edx, byte [ebp - 0x6f02]
cmp edx, 5
jl 0x48bc15
jmp 0x48bc43
push ecx
movss xmm0, dword [ebp - 0x7230]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x7234]
movss dword [esp], xmm0
movzx eax, byte [ebp - 0x6f02]
push eax
mov ecx, 0x606bd90
call fcn.004486d0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48bcdb
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f52], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f51], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f50], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f4f], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f4e], al
movzx ecx, byte [ebp - 0x6f4e]
push ecx
movzx edx, byte [ebp - 0x6f4f]
push edx
movzx eax, byte [ebp - 0x6f50]
push eax
movzx ecx, byte [ebp - 0x6f51]
push ecx
movzx edx, byte [ebp - 0x6f52]
push edx
mov ecx, 0x606bd90
call fcn.004487a0
jmp 0x48bd12
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7244], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x7240], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x723c], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f79], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7238], eax
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0
push 0
mov eax, dword [ebp - 0x7238]
push eax
movzx ecx, byte [ebp - 0x6f79]
push ecx
push ecx
movss xmm0, dword [ebp - 0x723c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x7240]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x7244]
push edx
mov ecx, 0x606bd90
call fcn.0044b480
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7250], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x724c], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x7248], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
fstp qword [ebp - 0x74a0]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
fstp qword [ebp - 0x7498]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
fstp qword [ebp - 0x7490]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
fstp qword [ebp - 0x7488]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
fstp qword [ebp - 0x7480]
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
fstp qword [ebp - 0x7478]
cvtsd2ss xmm0, qword [ebp - 0x7478]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x7480]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x7488]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x7490]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x7498]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x74a0]
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x7248]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x724c]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x7250]
push eax
mov ecx, 0x606bd90
call fcn.0044b970
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7260], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x725c], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x7258], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f53], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7254], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f980
fstp qword [ebp - 0x74a8]
mov byte [ebp - 0x6f01], 0
movzx ecx, byte [ebp - 0x6f53]
cmp ecx, 1
jne 0x48bf7d
mov byte [ebp - 0x6f01], 1
cvtsd2ss xmm0, qword [ebp - 0x74a8]
push ecx
movss dword [esp], xmm0
movzx edx, byte [ebp - 0x6f01]
push edx
push 0
mov eax, dword [ebp - 0x7254]
push eax
push 0
push ecx
movss xmm0, dword [ebp - 0x7258]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x725c]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x7260]
push ecx
mov ecx, 0x606bd90
call fcn.0044b480
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f55], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x726c], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x7268], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f54], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7264], eax
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0
push 1
mov edx, dword [ebp - 0x7264]
push edx
movzx eax, byte [ebp - 0x6f54]
push eax
push ecx
movss xmm0, dword [ebp - 0x7268]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x726c]
movss dword [esp], xmm0
movzx ecx, byte [ebp - 0x6f55]
push ecx
mov ecx, 0x606bd90
call fcn.0044b480
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x71a8], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7270], eax
mov ecx, 0x7547800
call fcn.00490210
movzx edx, al
test edx, edx
je 0x48c105
push 0
mov eax, dword [ebp - 0x71a8]
mov dword [ebp - 0x71ac], eax
cvtsi2sd xmm0, dword [ebp - 0x71ac]
mov ecx, dword [ebp - 0x71ac]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4d6270]
movsd qword [ebp - 0x74b0], xmm0
cvtsd2ss xmm0, qword [ebp - 0x74b0]
divss xmm0, dword [0x4d61e8]
push ecx
movss dword [esp], xmm0
mov ecx, 0x606bd90
call fcn.00414710
jmp 0x48c15a
mov edx, dword [ebp - 0x7270]
push edx
mov eax, dword [ebp - 0x71a8]
mov dword [ebp - 0x71a4], eax
cvtsi2sd xmm0, dword [ebp - 0x71a4]
mov ecx, dword [ebp - 0x71a4]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4d6270]
movsd qword [ebp - 0x74b8], xmm0
cvtsd2ss xmm0, qword [ebp - 0x74b8]
divss xmm0, dword [0x4d61e8]
push ecx
movss dword [esp], xmm0
mov ecx, 0x606bd90
call fcn.00414710
push 0xb
mov edx, dword [ebp - 0x6ee4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6ee4]
mov edx, dword [eax + 0x20]
call edx
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x718c], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7190], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x719c], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7274], eax
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x754c], eax
mov eax, dword [ebp - 0x6ed4]
mov byte [eax + 0x30ef4], 0
mov ecx, dword [ebp - 0x6ed4]
xorps xmm0, xmm0
movsd qword [ecx + 0x30ef8], xmm0
mov edx, dword [ebp - 0x6ed4]
xorps xmm0, xmm0
movsd qword [edx + 0x30f00], xmm0
mov eax, dword [ebp - 0x6ed4]
mov dword [eax + 0x30f08], 0
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x30f0c], 0
mov ecx, 0x7547800
call fcn.00490210
movzx edx, al
test edx, edx
je 0x48c298
push 0
mov eax, dword [ebp - 0x719c]
mov dword [ebp - 0x71a0], eax
cvtsi2sd xmm0, dword [ebp - 0x71a0]
mov ecx, dword [ebp - 0x71a0]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4d6270]
movsd qword [ebp - 0x74c0], xmm0
cvtsd2ss xmm0, qword [ebp - 0x74c0]
divss xmm0, dword [0x4d61e8]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x7190]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x718c]
push ecx
movss dword [esp], xmm0
mov ecx, 0x606bd90
call fcn.00448b20
jmp 0x48c309
mov edx, dword [ebp - 0x7274]
push edx
mov eax, dword [ebp - 0x719c]
mov dword [ebp - 0x7198], eax
cvtsi2sd xmm0, dword [ebp - 0x7198]
mov ecx, dword [ebp - 0x7198]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4d6270]
movsd qword [ebp - 0x74c8], xmm0
cvtsd2ss xmm0, qword [ebp - 0x74c8]
divss xmm0, dword [0x4d61e8]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x7190]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x718c]
push ecx
movss dword [esp], xmm0
mov ecx, 0x606bd90
call fcn.00448b20
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7084], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7088], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7058], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7184], eax
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x7470], eax
mov edx, dword [ebp - 0x6ed4]
mov byte [edx + 0x30ef4], 1
cvtsi2ss xmm0, dword [ebp - 0x7084]
cvtss2sd xmm0, xmm0
mov eax, dword [ebp - 0x6ed4]
movsd qword [eax + 0x30ef8], xmm0
cvtsi2ss xmm0, dword [ebp - 0x7088]
cvtss2sd xmm0, xmm0
mov ecx, dword [ebp - 0x6ed4]
movsd qword [ecx + 0x30f00], xmm0
mov edx, dword [ebp - 0x6ed4]
mov eax, dword [ebp - 0x7058]
mov dword [edx + 0x30f08], eax
mov ecx, dword [ebp - 0x6ed4]
mov edx, dword [ebp - 0x7184]
mov dword [ecx + 0x30f0c], edx
mov ecx, 0x7547800
call fcn.00490210
movzx eax, al
test eax, eax
je 0x48c448
push 0
mov ecx, dword [ebp - 0x7058]
mov dword [ebp - 0x7188], ecx
cvtsi2sd xmm0, dword [ebp - 0x7188]
mov edx, dword [ebp - 0x7188]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4d6270]
movsd qword [ebp - 0x74d0], xmm0
cvtsd2ss xmm0, qword [ebp - 0x74d0]
divss xmm0, dword [0x4d61e8]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x7088]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x7084]
push ecx
movss dword [esp], xmm0
mov ecx, 0x606bd90
call fcn.00448b20
jmp 0x48c4b9
mov eax, dword [ebp - 0x7184]
push eax
mov ecx, dword [ebp - 0x7058]
mov dword [ebp - 0x7180], ecx
cvtsi2sd xmm0, dword [ebp - 0x7180]
mov edx, dword [ebp - 0x7180]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4d6270]
movsd qword [ebp - 0x74d8], xmm0
cvtsd2ss xmm0, qword [ebp - 0x74d8]
divss xmm0, dword [0x4d61e8]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x7088]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x7084]
push ecx
movss dword [esp], xmm0
mov ecx, 0x606bd90
call fcn.00448b20
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7054], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7080], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x707c], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7194], eax
mov eax, dword [ebp - 0x6ed4]
mov byte [eax + 0x30ef4], 1
cvtsi2sd xmm0, dword [ebp - 0x7054]
mov ecx, dword [ebp - 0x6ed4]
movsd qword [ecx + 0x30ef8], xmm0
cvtsi2sd xmm0, dword [ebp - 0x7080]
mov edx, dword [ebp - 0x6ed4]
movsd qword [edx + 0x30f00], xmm0
mov eax, dword [ebp - 0x6ed4]
mov ecx, dword [ebp - 0x707c]
mov dword [eax + 0x30f08], ecx
mov edx, dword [ebp - 0x6ed4]
mov eax, dword [ebp - 0x7194]
mov dword [edx + 0x30f0c], eax
mov ecx, 0x7547800
call fcn.00490210
movzx ecx, al
test ecx, ecx
je 0x48c5e6
push 0
mov edx, dword [ebp - 0x707c]
mov dword [ebp - 0x714c], edx
cvtsi2sd xmm0, dword [ebp - 0x714c]
mov eax, dword [ebp - 0x714c]
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d6270]
movsd qword [ebp - 0x74e0], xmm0
cvtsd2ss xmm0, qword [ebp - 0x74e0]
divss xmm0, dword [0x4d61e8]
push ecx
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x7080]
neg ecx
cvtsi2ss xmm0, ecx
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x7054]
neg edx
cvtsi2ss xmm0, edx
push ecx
movss dword [esp], xmm0
mov ecx, 0x606bd90
call fcn.00448b20
jmp 0x48c65f
mov eax, dword [ebp - 0x7194]
push eax
mov ecx, dword [ebp - 0x707c]
mov dword [ebp - 0x7168], ecx
cvtsi2sd xmm0, dword [ebp - 0x7168]
mov edx, dword [ebp - 0x7168]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4d6270]
movsd qword [ebp - 0x74e8], xmm0
cvtsd2ss xmm0, qword [ebp - 0x74e8]
divss xmm0, dword [0x4d61e8]
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x7080]
neg eax
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x7054]
neg ecx
cvtsi2ss xmm0, ecx
push ecx
movss dword [esp], xmm0
mov ecx, 0x606bd90
call fcn.00448b20
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7278], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x727c], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x6fcc], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x715c], eax
mov edx, dword [ebp - 0x6fcc]
mov dword [ebp - 0x7150], edx
cvtsi2sd xmm0, dword [ebp - 0x7150]
mov eax, dword [ebp - 0x7150]
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d6270]
subsd xmm0, qword [0x4d5e40]
divsd xmm0, qword [0x4d5e40]
cvtsi2sd xmm1, dword [ebp - 0x7278]
mulsd xmm0, xmm1
cvttsd2si ecx, xmm0
mov dword [ebp - 0x7030], ecx
mov edx, dword [ebp - 0x6fcc]
mov dword [ebp - 0x7154], edx
cvtsi2sd xmm0, dword [ebp - 0x7154]
mov eax, dword [ebp - 0x7154]
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4d6270]
subsd xmm0, qword [0x4d5e40]
divsd xmm0, qword [0x4d5e40]
cvtsi2sd xmm1, dword [ebp - 0x727c]
mulsd xmm0, xmm1
cvttsd2si ecx, xmm0
mov dword [ebp - 0x702c], ecx
mov edx, dword [ebp - 0x6ed4]
mov byte [edx + 0x30ef4], 1
cvtsi2sd xmm0, dword [ebp - 0x7030]
mov eax, dword [ebp - 0x6ed4]
movsd qword [eax + 0x30ef8], xmm0
cvtsi2sd xmm0, dword [ebp - 0x702c]
mov ecx, dword [ebp - 0x6ed4]
movsd qword [ecx + 0x30f00], xmm0
mov edx, dword [ebp - 0x6ed4]
mov eax, dword [ebp - 0x6fcc]
mov dword [edx + 0x30f08], eax
mov ecx, dword [ebp - 0x6ed4]
mov edx, dword [ebp - 0x715c]
mov dword [ecx + 0x30f0c], edx
mov ecx, 0x7547800
call fcn.00490210
movzx eax, al
test eax, eax
je 0x48c824
push 0
mov ecx, dword [ebp - 0x6fcc]
mov dword [ebp - 0x7158], ecx
cvtsi2sd xmm0, dword [ebp - 0x7158]
mov edx, dword [ebp - 0x7158]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4d6270]
movsd qword [ebp - 0x74f0], xmm0
cvtsd2ss xmm0, qword [ebp - 0x74f0]
divss xmm0, dword [0x4d61e8]
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x702c]
neg eax
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x7030]
neg ecx
cvtsi2ss xmm0, ecx
push ecx
movss dword [esp], xmm0
mov ecx, 0x606bd90
call fcn.00448b20
jmp 0x48c89d
mov edx, dword [ebp - 0x715c]
push edx
mov eax, dword [ebp - 0x6fcc]
mov dword [ebp - 0x7160], eax
cvtsi2sd xmm0, dword [ebp - 0x7160]
mov ecx, dword [ebp - 0x7160]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4d6270]
movsd qword [ebp - 0x74f8], xmm0
cvtsd2ss xmm0, qword [ebp - 0x74f8]
divss xmm0, dword [0x4d61e8]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x702c]
neg edx
cvtsi2ss xmm0, edx
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x7030]
neg eax
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov ecx, 0x606bd90
call fcn.00448b20
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7174], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7170], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x716c], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7280], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7284], eax
mov ecx, dword [ebp - 0x7280]
mov dword [ebp - 0x7164], ecx
cvtsi2sd xmm0, dword [ebp - 0x7164]
mov edx, dword [ebp - 0x7164]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4d6270]
movsd qword [ebp - 0x7500], xmm0
cvtsd2ss xmm0, qword [ebp - 0x7500]
divss xmm0, dword [0x4d61e8]
cvtss2sd xmm0, xmm0
mov eax, dword [ebp - 0x6ed4]
mulsd xmm0, qword [eax + 0x43c30]
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x71dc], xmm0
mov ecx, 0x7547800
call fcn.00490210
movzx ecx, al
test ecx, ecx
je 0x48c9a3
push 0
push ecx
movss xmm0, dword [ebp - 0x71dc]
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x716c]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x7170]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x7174]
push edx
mov ecx, 0x606bd90
call fcn.0044bd80
jmp 0x48c9e5
mov eax, dword [ebp - 0x7284]
push eax
push ecx
movss xmm0, dword [ebp - 0x71dc]
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x716c]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x7170]
push ecx
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x7174]
push ecx
mov ecx, 0x606bd90
call fcn.0044bd80
jmp case.0x487f71.4
lea ecx, [ebp - 0x6bc8]
call fcn.00412360
push 0x304
push 0
lea edx, [ebp - 0x6bc8]
push edx
call fcn.004a20f0
add esp, 0xc
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
movzx eax, al
mov dword [ebp - 0x6bc8], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
movzx ecx, ax
mov dword [ebp - 0x6b8c], ecx
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
movzx edx, ax
mov dword [ebp - 0x6b88], edx
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x6bac], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x6ba8], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x6af0], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x6aec], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x6b54], eax
mov dword [ebp - 0x6bc0], 1
movss xmm0, dword [0x4d5d88]
movss dword [ebp - 0x6ba4], xmm0
push ecx
movss xmm0, dword [0x4d600c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4d600c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4d600c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4d600c]
movss dword [esp], xmm0
lea ecx, [ebp - 0x75b8]
call fcn.004112b0
mov ecx, dword [eax]
mov dword [ebp - 0x6b9c], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x6b98], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x6b94], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x6b90], edx
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
movzx eax, al
cmp eax, 1
jne 0x48cbd9
mov ecx, dword [ebp - 0x6bc0]
or ecx, 0x10000002
mov dword [ebp - 0x6bc0], ecx
xorps xmm0, xmm0
movss dword [ebp - 0x6ba4], xmm0
movss xmm0, dword [0x4d5d88]
movss dword [ebp - 0x6ae8], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4d600c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4d600c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4d600c]
movss dword [esp], xmm0
lea ecx, [ebp - 0x75c8]
call fcn.004112b0
mov edx, dword [eax]
mov dword [ebp - 0x6b9c], edx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x6b98], ecx
mov edx, dword [eax + 8]
mov dword [ebp - 0x6b94], edx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x6b90], eax
cmp dword [ebp - 0x6b54], 0
jne 0x48cbec
mov dword [ebp - 0x6b54], 0x10
push 0x3e7
lea ecx, [ebp - 0x5044]
push ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x7554], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul edx, eax, 0x18
mov eax, dword [ebp - 0x6ed0]
lea ecx, [eax + edx + 0xc73d8]
push ecx
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
lea edx, [ebp - 0x5044]
push edx
lea eax, [ebp - 0x6bc8]
push eax
mov ecx, 0x606bd90
call fcn.0044c140
jmp case.0x487f71.4
lea ecx, [ebp - 0x6ecc]
call fcn.00412360
push 0x304
push 0
lea ecx, [ebp - 0x6ecc]
push ecx
call fcn.004a20f0
add esp, 0xc
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
movzx edx, al
mov dword [ebp - 0x6ecc], edx
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x6df4], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
movss dword [ebp - 0x6df0], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x6e58], eax
mov dword [ebp - 0x6ec4], 1
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
movzx eax, al
cmp eax, 1
jne 0x48ccf9
mov ecx, dword [ebp - 0x6ec4]
or ecx, 0x10000004
mov dword [ebp - 0x6ec4], ecx
xorps xmm0, xmm0
movss dword [ebp - 0x6dec], xmm0
cmp dword [ebp - 0x6e58], 0
jne 0x48cd0c
mov dword [ebp - 0x6e58], 0x10
lea edx, [ebp - 0x6ecc]
push edx
mov ecx, 0x606bd90
call fcn.0044c360
jmp case.0x487f71.4
mov dword [ebp - 0x70f4], 0
mov byte [ebp - 0x6ef5], 0
movzx eax, byte [ebp - 0x6ed9]
cmp eax, 0xba
jne 0x48cd48
mov byte [ebp - 0x6ef5], 1
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x70f8], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6eda], al
movzx ecx, byte [ebp - 0x6eda]
cmp ecx, 0x43
je 0x48cd8c
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
movzx edx, ax
mov dword [ebp - 0x7178], edx
jmp 0x48cd9d
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7178], eax
mov eax, dword [ebp - 0x7178]
mov dword [ebp - 0x70f0], eax
movzx ecx, byte [ebp - 0x6eda]
cmp ecx, 0xc5
je 0x48d38e
mov dl, byte [ebp - 0x6eda]
mov byte [ebp - 0x6624], dl
mov eax, dword [ebp - 0x70f0]
mov dword [ebp - 0x6620], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
movzx ecx, al
mov dword [ebp - 0x6fdc], ecx
mov edx, dword [ebp - 0x6fdc]
sub edx, 0xbc
mov dword [ebp - 0x6fdc], edx
cmp dword [ebp - 0x6fdc], 0xf
ja case.0x48ce0d.3
mov eax, dword [ebp - 0x6fdc]
jmp dword [eax*4 + 0x48f80c]
mov dword [ebp - 0x661c], 0x59
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, 4
imul edx, ecx, 0
mov dword [ebp + edx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
cvttss2si eax, xmm0
mov ecx, 4
shl ecx, 0
mov dword [ebp + ecx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
cvtsi2ss xmm0, eax
cvttss2si edx, xmm0
mov eax, 4
shl eax, 1
mov dword [ebp + eax - 0x6618], edx
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
movzx ecx, al
mov edx, 4
imul eax, edx, 3
mov dword [ebp + eax - 0x6618], ecx
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, 4
shl ecx, 2
mov dword [ebp + ecx - 0x6618], eax
jmp case.0x48ce0d.3
mov dword [ebp - 0x661c], 0x99
jmp case.0x48ce0d.3
mov dword [ebp - 0x661c], 0x81
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov edx, 4
imul ecx, edx, 0
mov dword [ebp + ecx - 0x6618], eax
push 0x3e7
lea edx, [ebp - 0x15ac]
push edx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x7558], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul eax, eax, 0x18
mov ecx, dword [ebp - 0x6ed0]
lea edx, [ecx + eax + 0xc73d8]
push edx
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
lea eax, [ebp - 0x15ac]
push eax
mov ecx, 0x606c470
call fcn.00496b20
mov dword [ebp - 0x7034], eax
cmp dword [ebp - 0x7034], 0
jge 0x48cf61
lea ecx, [ebp - 0x15ac]
push ecx
call fcn.004a5417
add esp, 4
mov dword [ebp - 0x7034], eax
mov edx, 4
shl edx, 0
mov eax, dword [ebp - 0x7034]
mov dword [ebp + edx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, 4
shl ecx, 1
mov dword [ebp + ecx - 0x6618], eax
jmp case.0x48ce0d.3
mov dword [ebp - 0x661c], 0x47
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov edx, 4
imul ecx, edx, 0
mov dword [ebp + ecx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov edx, 4
shl edx, 0
mov dword [ebp + edx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, 4
shl ecx, 1
mov dword [ebp + ecx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov edx, 4
imul ecx, edx, 3
mov dword [ebp + ecx - 0x6618], eax
jmp case.0x48ce0d.3
mov dword [ebp - 0x661c], 0x7c
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov edx, 4
imul ecx, edx, 0
mov dword [ebp + ecx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov edx, 4
shl edx, 0
mov dword [ebp + edx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, 4
shl ecx, 1
mov dword [ebp + ecx - 0x6618], eax
jmp case.0x48ce0d.3
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f56], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x7020], ax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6ef6], al
movzx edx, byte [ebp - 0x6ef6]
cmp edx, 0x43
je 0x48d0bc
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
movzx eax, ax
mov dword [ebp - 0x717c], eax
jmp 0x48d0cd
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x717c], eax
mov ecx, dword [ebp - 0x717c]
mov dword [ebp - 0x7288], ecx
mov dword [ebp - 0x661c], 0x1e
movzx edx, byte [ebp - 0x6f56]
mov eax, 4
imul ecx, eax, 0
mov dword [ebp + ecx - 0x6618], edx
movzx edx, word [ebp - 0x7020]
mov eax, 4
shl eax, 0
mov dword [ebp + eax - 0x6618], edx
movzx ecx, byte [ebp - 0x6ef6]
mov edx, 4
shl edx, 1
mov dword [ebp + edx - 0x6618], ecx
mov eax, 4
imul ecx, eax, 3
mov edx, dword [ebp - 0x7288]
mov dword [ebp + ecx - 0x6618], edx
jmp case.0x48ce0d.3
mov dword [ebp - 0x661c], 0x90
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
movzx eax, ax
mov ecx, 4
imul edx, ecx, 0
mov dword [ebp + edx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, 4
shl ecx, 0
mov dword [ebp + ecx - 0x6618], eax
jmp case.0x48ce0d.3
mov dword [ebp - 0x661c], 0x9b
push 0x3e7
lea edx, [ebp - 0x4c5c]
push edx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x755c], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul eax, eax, 0x18
mov ecx, dword [ebp - 0x6ed0]
lea edx, [ecx + eax + 0xc73d8]
push edx
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
lea eax, [ebp - 0x4c5c]
push eax
lea ecx, [ebp - 0x65a0]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov edx, 4
imul ecx, edx, 0
mov dword [ebp + ecx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov edx, 4
shl edx, 0
mov dword [ebp + edx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, 4
shl ecx, 1
mov dword [ebp + ecx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov edx, 4
imul ecx, edx, 3
mov dword [ebp + ecx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov edx, 4
shl edx, 2
mov dword [ebp + edx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, 4
imul edx, ecx, 5
mov dword [ebp + edx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, 4
imul edx, ecx, 6
mov dword [ebp + edx - 0x6618], eax
jmp case.0x48ce0d.3
mov dword [ebp - 0x661c], 0x9e
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, 4
imul edx, ecx, 0
mov dword [ebp + edx - 0x6618], eax
jmp case.0x48ce0d.3
mov dword [ebp - 0x661c], 0x61
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, 4
imul edx, ecx, 0
mov dword [ebp + edx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov ecx, 4
shl ecx, 0
mov dword [ebp + ecx - 0x6618], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov edx, 4
shl edx, 1
mov dword [ebp + edx - 0x6618], eax
movzx eax, byte [ebp - 0x6ef5]
push eax
mov ecx, dword [ebp - 0x70f8]
push ecx
lea edx, [ebp - 0x6624]
push edx
mov ecx, dword [ebp - 0x6ed0]
call fcn.004856e0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6eda], al
movzx eax, byte [ebp - 0x6eda]
cmp eax, 0x43
je 0x48d36c
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
movzx ecx, ax
mov dword [ebp - 0x70ec], ecx
jmp 0x48d37d
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x70ec], eax
mov edx, dword [ebp - 0x70ec]
mov dword [ebp - 0x70f0], edx
jmp 0x48cda9
mov eax, dword [ebp - 0x70f4]
push eax
mov ecx, dword [ebp - 0x70f8]
push ecx
mov ecx, dword [ebp - 0x6ed0]
call fcn.004858c0
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00485990
jmp case.0x487f71.4
push 0
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00485b60
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
push eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00485c50
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov edx, dword [ebp - 0x6ed4]
mov dword [edx + 0x26d78], eax
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x7038], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.00490080
mov dword [ebp - 0x703c], eax
mov eax, dword [ebp - 0x7038]
push eax
mov ecx, 0x606bef8
call fcn.0045e1d0
mov ecx, dword [ebp - 0x703c]
push ecx
mov ecx, 0x606bef8
call fcn.0045e230
mov edx, dword [ebp - 0x6ed4]
mov dword [edx + 0x3b228], 1
mov eax, dword [ebp - 0x6ed4]
mov ecx, dword [ebp - 0x7038]
mov dword [eax + 0x3b22c], ecx
mov edx, dword [ebp - 0x6ed4]
mov eax, dword [ebp - 0x703c]
mov dword [edx + 0x3b230], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, 0x50befa0
call fcn.00476a20
movzx ecx, al
test ecx, ecx
je 0x48d4fd
push 1
mov ecx, 0x606bef8
call fcn.0045e360
mov edx, dword [ebp - 0x7038]
push edx
mov ecx, 0x50befa0
call fcn.00477020
movzx eax, al
test eax, eax
jne 0x48d4d4
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x703c]
push ecx
mov ecx, 0x50befa0
call fcn.004770a0
movzx edx, al
test edx, edx
jne 0x48d4f1
jmp case.0x487f71.4
mov ecx, 0x50befa0
call fcn.00476fd0
jmp 0x48d509
push 0
mov ecx, 0x606bef8
call fcn.0045e360
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6ef4], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x6f18], ax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6ef3], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x6f14], ax
lea eax, [ebp - 0x6f18]
push eax
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x48d5e7
movzx edx, byte [ebp - 0x6ef4]
cmp edx, 0x41
jne 0x48d59e
movzx eax, word [ebp - 0x6f18]
mov ecx, dword [ebp - 0x6ed8]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x70fc], edx
jmp 0x48d5b8
movzx eax, word [ebp - 0x6f18]
mov ecx, dword [ebp - 0x6ed4]
lea edx, [ecx + eax*4 + 0x2fd8c]
mov dword [ebp - 0x70fc], edx
mov eax, dword [ebp - 0x70fc]
mov ecx, dword [ebp - 0x6ed4]
mov edx, dword [ecx + 0x3b22c]
mov dword [eax], edx
movzx eax, word [ebp - 0x6f18]
push eax
movzx ecx, byte [ebp - 0x6ef4]
push ecx
mov ecx, dword [ebp - 0x6ed0]
call fcn.00477220
lea edx, [ebp - 0x6f14]
push edx
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x48d67a
movzx edx, byte [ebp - 0x6ef3]
cmp edx, 0x41
jne 0x48d631
movzx eax, word [ebp - 0x6f14]
mov ecx, dword [ebp - 0x6ed8]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x7100], edx
jmp 0x48d64b
movzx eax, word [ebp - 0x6f14]
mov ecx, dword [ebp - 0x6ed4]
lea edx, [ecx + eax*4 + 0x2fd8c]
mov dword [ebp - 0x7100], edx
mov eax, dword [ebp - 0x7100]
mov ecx, dword [ebp - 0x6ed4]
mov edx, dword [ecx + 0x3b230]
mov dword [eax], edx
movzx eax, word [ebp - 0x6f14]
push eax
movzx ecx, byte [ebp - 0x6ef3]
push ecx
mov ecx, dword [ebp - 0x6ed0]
call fcn.00477220
jmp case.0x487f71.4
push 0
mov ecx, 0x606bef8
call fcn.0045e1d0
push 0
mov ecx, 0x606bef8
call fcn.0045e230
mov edx, dword [ebp - 0x6ed4]
mov dword [edx + 0x3b228], 0
mov eax, dword [ebp - 0x6ed4]
mov dword [eax + 0x3b22c], 0
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x3b230], 0
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, 0x50befa0
call fcn.00476a20
movzx edx, al
test edx, edx
je 0x48d6f4
mov ecx, 0x50befa0
call fcn.00476fa0
push 1
mov ecx, 0x606bef8
call fcn.0045e360
jmp 0x48d700
push 0
mov ecx, 0x606bef8
call fcn.0045e360
jmp case.0x487f71.4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x728c], eax
cmp dword [ebp - 0x728c], 0
je 0x48d719
jmp 0x48d724
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x7290], ecx
cmp dword [ebp - 0x7290], 0
je 0x48d73d
jmp 0x48d748
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x6f90], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x6f94], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7294], eax
push 0
mov edx, dword [ebp - 0x6f90]
push edx
push 0x1f7
mov ecx, 0x5252170
call fcn.004448a0
push 0
mov eax, dword [ebp - 0x6f94]
push eax
push 0x1f8
mov ecx, 0x5252170
call fcn.004448a0
push 0
mov ecx, dword [ebp - 0x7294]
push ecx
push 0x1f9
mov ecx, 0x5252170
call fcn.004448a0
push 0
mov edx, dword [ebp - 0x6f90]
push edx
push 0x280
mov ecx, 0x5252170
call fcn.004448a0
push 0
mov eax, dword [ebp - 0x6f94]
push eax
push 0x281
mov ecx, 0x5252170
call fcn.004448a0
push 0
mov ecx, dword [ebp - 0x6f90]
push ecx
push 0x284
mov ecx, 0x5252170
call fcn.004448a0
push 0
mov edx, dword [ebp - 0x6f94]
push edx
push 0x285
mov ecx, 0x5252170
call fcn.004448a0
push 0
mov eax, dword [ebp - 0x6f90]
push eax
push 0x288
mov ecx, 0x5252170
call fcn.004448a0
push 0
mov ecx, dword [ebp - 0x6f94]
push ecx
push 0x289
mov ecx, 0x5252170
call fcn.004448a0
push 0
mov edx, dword [ebp - 0x6f90]
push edx
push 0x28c
mov ecx, 0x5252170
call fcn.004448a0
push 0
mov eax, dword [ebp - 0x6f94]
push eax
push 0x28d
mov ecx, 0x5252170
call fcn.004448a0
push 0
mov ecx, dword [ebp - 0x6f90]
push ecx
push 0x290
mov ecx, 0x5252170
call fcn.004448a0
push 0
mov edx, dword [ebp - 0x6f94]
push edx
push 0x291
mov ecx, 0x5252170
call fcn.004448a0
jmp case.0x487f71.4
xor eax, eax
mov ecx, dword [ebp - 0x6ed4]
add ecx, 0x30ed0
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov dword [ecx + 0x18], eax
mov dword [ecx + 0x1c], eax
mov dword [ecx + 0x20], eax
mov dword [ebp - 0x64d4], 0x47
mov dword [ebp - 0x64d0], 1
mov dword [ebp - 0x64b8], 1
movss xmm0, dword [0x4d5d88]
movss dword [ebp - 0x64c0], xmm0
movss xmm0, dword [0x4d5d88]
movss dword [ebp - 0x64bc], xmm0
mov dword [ebp - 0x64b4], 0
lea edx, [ebp - 0x64d4]
push edx
mov ecx, 0x606bd90
call fcn.0044c570
jmp case.0x487f71.4
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x7104], eax
push 0x19
mov eax, dword [ebp - 0x7104]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x7104]
mov eax, dword [edx + 0x20]
call eax
jmp case.0x487f71.4
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x6f34], eax
mov ecx, dword [ebp - 0x6f34]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6f34]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x7040], eax
cmp dword [ebp - 0x7040], 0x19
je 0x48d9b7
cmp dword [ebp - 0x7040], 0x1a
je 0x48d9ce
cmp dword [ebp - 0x7040], 0x1b
je 0x48d9e5
jmp 0x48d9fa
push 0
mov ecx, dword [ebp - 0x6f34]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6f34]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48d9fa
push 0x11
mov ecx, dword [ebp - 0x6f34]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6f34]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48d9fa
push 0x13
mov ecx, dword [ebp - 0x6f34]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6f34]
mov eax, dword [edx + 0x20]
call eax
jmp case.0x487f71.4
mov dword [ebp - 0x7108], 1
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x7298], ecx
cmp dword [ebp - 0x7298], 0
je 0x48da20
jmp 0x48dd22
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
movzx edx, al
mov dword [ebp - 0x729c], edx
mov eax, dword [ebp - 0x729c]
mov dword [ebp - 0x63f0], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x63ec], eax
mov ecx, dword [ebp - 0x6ed8]
movzx edx, byte [ecx + 1]
cmp edx, 2
jne 0x48da6c
mov dword [ebp - 0x63ec], 0
jmp 0x48da87
mov ecx, 0x7547800
call fcn.00490210
movzx eax, al
test eax, eax
je 0x48da87
mov dword [ebp - 0x63ec], 0xa
mov ecx, dword [ebp - 0x6ed4]
mov byte [ecx + 0x26eb0], 0
mov edx, dword [ebp - 0x6ed4]
mov byte [edx + 0x26eb1], 0
mov eax, dword [ebp - 0x6ed4]
mov byte [eax + 0x26eb2], 0
mov ecx, dword [ebp - 0x6ed4]
mov byte [ecx + 0x26eb3], 0
mov edx, dword [ebp - 0x63f0]
mov dword [ebp - 0x7044], edx
cmp dword [ebp - 0x7044], 0x28
je 0x48daef
cmp dword [ebp - 0x7044], 0x46
je 0x48db91
cmp dword [ebp - 0x7044], 0x47
je 0x48dbb5
jmp 0x48dc9f
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x63e8], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x63e7], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x63e6], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x63e5], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x63e4], al
mov eax, dword [ebp - 0x6ed4]
mov cl, byte [ebp - 0x63e8]
mov byte [eax + 0x26eb0], cl
mov edx, dword [ebp - 0x6ed4]
mov al, byte [ebp - 0x63e7]
mov byte [edx + 0x26eb1], al
mov ecx, dword [ebp - 0x6ed4]
mov dl, byte [ebp - 0x63e6]
mov byte [ecx + 0x26eb2], dl
mov eax, dword [ebp - 0x6ed4]
mov cl, byte [ebp - 0x63e4]
mov byte [eax + 0x26eb3], cl
jmp 0x48dcdf
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
cvtsi2ss xmm0, eax
divss xmm0, dword [0x4d61e8]
movss dword [ebp - 0x63e0], xmm0
jmp 0x48dcdf
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x63d4], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
cvtsi2ss xmm0, eax
movss dword [ebp - 0x63dc], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
cvtsi2ss xmm0, eax
movss dword [ebp - 0x63d8], xmm0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x63d0], eax
cmp dword [ebp - 0x63d4], 0
jne 0x48dc18
mov dword [ebp - 0x63d4], 1
cmp dword [ebp - 0x63d0], 0
je 0x48dc5d
cmp dword [ebp - 0x63ec], 1
jne 0x48dc9d
cmp dword [ebp - 0x63d4], 1
jne 0x48dc9d
movss xmm0, dword [ebp - 0x63dc]
ucomiss xmm0, dword [0x4d5d88]
lahf
test ah, 0x44
jp 0x48dc9d
movss xmm0, dword [ebp - 0x63d8]
ucomiss xmm0, dword [0x4d5d88]
lahf
test ah, 0x44
jp 0x48dc9d
xor edx, edx
mov eax, dword [ebp - 0x6ed4]
add eax, 0x30ed0
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], edx
mov dword [eax + 0x18], edx
mov dword [eax + 0x1c], edx
mov dword [eax + 0x20], edx
mov edi, dword [ebp - 0x6ed4]
add edi, 0x30ed0
mov ecx, 9
lea esi, [ebp - 0x63f0]
rep movsd dword es:[edi], dword [esi]
jmp 0x48dcdf
mov ecx, dword [ebp - 0x6ed8]
movzx edx, byte [ecx + 1]
cmp edx, 2
jne 0x48dcba
mov dword [ebp - 0x63f0], 0
jmp 0x48dcdf
mov ecx, 0x7547800
call fcn.00490210
movzx eax, al
test eax, eax
je 0x48dcdf
mov dword [ebp - 0x63f0], 0
mov dword [ebp - 0x63ec], 0xa
lea ecx, [ebp - 0x63f0]
push ecx
mov ecx, 0x606bd90
call fcn.0044c570
cmp dword [ebp - 0x7108], 0
jne 0x48dd20
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x710c], eax
push 0xb
mov edx, dword [ebp - 0x710c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x710c]
mov edx, dword [eax + 0x20]
call edx
jmp 0x48dd2d
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
jmp case.0x487f71.4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x72a0], eax
cmp dword [ebp - 0x72a0], 0
je 0x48dd46
jmp 0x48dd5f
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x1740], eax
jmp 0x48dd6a
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
mov edx, dword [ebp - 0x6ed4]
mov dword [edx + 0x1740], 0
jmp case.0x487f71.4
mov eax, dword [ebp - 0x6ed4]
mov dword [eax + 0x1740], 0
mov ecx, 0x50bf034
call fcn.0046c220
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48de0c
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f59], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f58], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f57], al
movzx ecx, byte [ebp - 0x6f57]
push ecx
movzx edx, byte [ebp - 0x6f58]
push edx
movzx eax, byte [ebp - 0x6f59]
push eax
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 0xf0]
call eax
jmp 0x48de2d
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48de9b
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f5c], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f5b], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f5a], al
movzx ecx, byte [ebp - 0x6f5a]
push ecx
movzx edx, byte [ebp - 0x6f5b]
push edx
movzx eax, byte [ebp - 0x6f5c]
push eax
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 0xf4]
call eax
jmp 0x48debc
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48df2a
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f5f], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f5e], al
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6f5d], al
movzx ecx, byte [ebp - 0x6f5d]
push ecx
movzx edx, byte [ebp - 0x6f5e]
push edx
movzx eax, byte [ebp - 0x6f5f]
push eax
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 0xf8]
call eax
jmp 0x48df4b
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48dfa6
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
movzx ecx, al
mov dword [ebp - 0x7110], ecx
push 1
push 1
mov edx, dword [ebp - 0x7110]
push edx
mov ecx, 0x51ca6a0
call fcn.00463990
push 0xa
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x7110]
push ecx
call fcn.00486e70
add esp, 0xc
lea edx, [ebp - 0x1c]
push edx
push 0
mov ecx, 0x606bef8
call fcn.0045def0
jmp 0x48dfb1
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48dfd9
push 1
mov ecx, 0x51ca6a0
call fcn.004642f0
push 0x4d4c3c
push 0
mov ecx, 0x606bef8
call fcn.0045def0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e03d
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
movzx eax, ax
cdq
mov ecx, 0x3e8
idiv ecx
mov word [ebp - 0x6f74], ax
movzx edx, word [ebp - 0x6f74]
test edx, edx
jne 0x48e018
mov eax, 1
mov word [ebp - 0x6f74], ax
push 1
movzx ecx, word [ebp - 0x6f74]
push ecx
mov ecx, 0x51ca6a0
call fcn.00464250
push 0x4d4c64
push 0
mov ecx, 0x606bef8
call fcn.0045def0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e053
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e0bb
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x72a4], eax
push 0x3e7
lea edx, [ebp - 0x63cc]
push edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7560], esp
imul eax, dword [ebp - 0x72a4], 0x18
mov edx, dword [ebp - 0x6ed0]
lea eax, [edx + eax + 0xc73d8]
push eax
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
lea ecx, [ebp - 0x63cc]
push ecx
mov ecx, 0x51ca6a0
call fcn.00464f90
jmp 0x48e0c6
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e140
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x7024], ax
push 0x3e7
lea edx, [ebp - 0x5fe4]
push edx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x7564], esp
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
imul eax, eax, 0x18
mov ecx, dword [ebp - 0x6ed0]
lea edx, [ecx + eax + 0xc73d8]
push edx
mov ecx, esi
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
lea eax, [ebp - 0x5fe4]
push eax
movzx ecx, word [ebp - 0x7024]
push ecx
mov ecx, 0x51ca6a0
call fcn.00464d10
jmp 0x48e156
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e187
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x7028], ax
movzx edx, word [ebp - 0x7028]
push edx
mov ecx, 0x51ca6a0
call fcn.00465260
jmp 0x48e192
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e1a7
mov ecx, 0x51ca6a0
call fcn.00465210
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e2ab
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x6f00], ax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x72a8], eax
push 0x3e7
lea eax, [ebp - 0x5bfc]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7568], esp
imul edx, dword [ebp - 0x72a8], 0x18
mov eax, dword [ebp - 0x6ed0]
lea edx, [eax + edx + 0xc73d8]
push edx
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
lea eax, [ebp - 0x5bfc]
push eax
movzx ecx, word [ebp - 0x6f00]
sub ecx, 1
imul edx, ecx, 0x104
mov eax, dword [ebp - 0x6ed4]
lea ecx, [eax + edx + 0x2df14]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
movzx edx, word [ebp - 0x6f00]
mov dword [ebp - 0x72ac], edx
mov eax, dword [ebp - 0x72ac]
push eax
movzx ecx, word [ebp - 0x6f00]
sub ecx, 1
imul edx, ecx, 0x104
mov eax, dword [ebp - 0x6ed4]
lea ecx, [eax + edx + 0x2df14]
push ecx
mov ecx, 0x51ca6a0
call fcn.00465310
movzx edx, word [ebp - 0x6f00]
sub edx, 1
imul eax, edx, 0x104
mov ecx, dword [ebp - 0x6ed4]
lea edx, [ecx + eax + 0x2df14]
push edx
movzx eax, word [ebp - 0x6f00]
push eax
mov ecx, 0x606bef8
call fcn.0045def0
jmp 0x48e2c1
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e33e
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
mov word [ebp - 0x6f78], ax
movzx ecx, word [ebp - 0x6f78]
sub ecx, 1
imul edx, ecx, 0x104
mov eax, dword [ebp - 0x6ed4]
lea ecx, [eax + edx + 0x2df14]
mov edx, 1
imul eax, edx, 0
mov byte [ecx + eax], 0
movzx ecx, word [ebp - 0x6f78]
mov dword [ebp - 0x72b0], ecx
mov edx, dword [ebp - 0x72b0]
push edx
mov ecx, 0x51ca6a0
call fcn.00465550
push 0x4d4c60
movzx eax, word [ebp - 0x6f78]
push eax
mov ecx, 0x606bef8
call fcn.0045def0
jmp 0x48e349
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e3ca
mov dword [ebp - 0x6f98], 0
jmp 0x48e36f
mov ecx, dword [ebp - 0x6f98]
add ecx, 1
mov dword [ebp - 0x6f98], ecx
cmp dword [ebp - 0x6f98], 0x15
jge 0x48e3ca
imul edx, dword [ebp - 0x6f98], 0x104
mov eax, dword [ebp - 0x6ed4]
lea ecx, [eax + edx + 0x2df14]
mov edx, 1
imul eax, edx, 0
mov byte [ecx + eax], 0
mov ecx, dword [ebp - 0x6f98]
add ecx, 1
push ecx
mov ecx, 0x51ca6a0
call fcn.00465550
push 0x4d4c68
mov edx, dword [ebp - 0x6f98]
add edx, 1
push edx
mov ecx, 0x606bef8
call fcn.0045def0
jmp 0x48e360
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e408
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x72b4], eax
push 0
mov eax, dword [ebp - 0x72b4]
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [ecx + eax*4 + 0x791d8]
push edx
mov ecx, 0x51ca6a0
call fcn.00462bc0
jmp 0x48e413
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e428
mov ecx, 0x51ca6a0
call fcn.00462ea0
jmp case.0x487f71.4
mov dword [ebp - 0x6fd0], 0
mov ecx, 0x606c470
call fcn.00411520
add eax, 1
mov dword [ebp - 0x72b8], eax
mov eax, dword [ebp - 0x6fd0]
cmp eax, dword [ebp - 0x72b8]
jge 0x48e496
mov ecx, dword [ebp - 0x6fd0]
mov edx, dword [ebp - 0x6ed8]
cmp dword [edx + ecx*4 + 0x3888], 0
jne 0x48e485
mov eax, dword [ebp - 0x6fd0]
mov ecx, dword [ebp - 0x6ed8]
mov dword [ecx + eax*4 + 0x3888], 1
mov edx, dword [ebp - 0x6fd0]
add edx, 1
mov dword [ebp - 0x6fd0], edx
jmp 0x48e44a
mov ecx, 0x51d1d50
call fcn.0045bd30
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e51b
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
movzx eax, al
mov dword [ebp - 0x6fe0], eax
cmp dword [ebp - 0x6fe0], 0
jge 0x48e4d2
mov dword [ebp - 0x6fe0], 0
mov ecx, 0x51d1d50
call fcn.004114c0
mov dword [ebp - 0x7114], eax
mov ecx, dword [ebp - 0x6fe0]
mov edx, dword [ebp - 0x7114]
cmp dword [edx + ecx*4 + 0x3888], 0
jne 0x48e519
mov eax, dword [ebp - 0x6fe0]
mov ecx, dword [ebp - 0x7114]
mov dword [ecx + eax*4 + 0x3888], 1
mov ecx, 0x51d1d50
call fcn.0045bd30
jmp 0x48e526
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e5f8
mov edx, dword [ebp - 0x6ed4]
cmp dword [edx + 0x30d2c], 0
jle 0x48e5f1
mov ecx, 0x51ca6a0
call fcn.00460210
push 0
push 8
push 7
mov ecx, 0x51ca6a0
call fcn.00460800
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x6f10], eax
push 0x5a
mov ecx, 0x5d539c8
call fcn.00459c10
mov eax, dword [ebp - 0x6f10]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x6f10]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0x11
jne 0x48e5af
push 0x12
mov ecx, dword [ebp - 0x6f10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6f10]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48e5dc
mov ecx, dword [ebp - 0x6f10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6f10]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0x13
jne 0x48e5dc
push 0x14
mov ecx, dword [ebp - 0x6f10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6f10]
mov eax, dword [edx + 0x20]
call eax
push 6
mov ecx, dword [ebp - 0x6f10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6f10]
mov eax, dword [edx + 0x1c]
call eax
mov al, 0xd0
jmp 0x48f432
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e650
mov ecx, dword [ebp - 0x6ed4]
cmp dword [ecx + 0x30d30], 0
jle 0x48e649
push 0
push 8
push 0x1d
mov ecx, 0x51ca6a0
call fcn.00460800
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x7118], eax
push 6
mov edx, dword [ebp - 0x7118]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7118]
mov edx, dword [eax + 0x1c]
call edx
mov al, 0xd0
jmp 0x48f432
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e741
mov eax, dword [ebp - 0x6ed4]
cmp dword [eax + 0x30d34], 0
jle 0x48e73a
mov ecx, 0x51ca6a0
call fcn.00460210
push 0
push 8
push 0x19
mov ecx, 0x51ca6a0
call fcn.00460800
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x6eec], eax
push 0x5a
mov ecx, 0x5d539c8
call fcn.00459c10
mov ecx, 0x51cad30
call fcn.00467ef0
mov ecx, dword [ebp - 0x6eec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6eec]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0x11
jne 0x48e6e3
push 0x12
mov ecx, dword [ebp - 0x6eec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6eec]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48e710
mov ecx, dword [ebp - 0x6eec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6eec]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0x13
jne 0x48e710
push 0x14
mov ecx, dword [ebp - 0x6eec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6eec]
mov eax, dword [edx + 0x20]
call eax
push 0
mov ecx, dword [ebp - 0x6eec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6eec]
mov eax, dword [edx + 0x20]
call eax
push 6
mov ecx, dword [ebp - 0x6eec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6eec]
mov eax, dword [edx + 0x1c]
call eax
mov al, 0xd0
jmp 0x48f432
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48e786
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
movzx ecx, al
sub ecx, 1
mov dword [ebp - 0x72bc], ecx
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
movzx edx, al
mov eax, dword [ebp - 0x72bc]
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + eax*4 + 0x310a0], edx
jmp 0x48e79c
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
jmp case.0x487f71.4
mov dword [ebp - 0x6fec], 1
cmp dword [ebp + 8], 0
jne 0x48ea48
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x13c], eax
mov edx, dword [ebp - 0x6ed4]
mov dword [edx + 0x138], 0
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
movzx eax, al
mov dword [ebp - 0x704c], eax
push 0
mov ecx, 0x51cad30
call fcn.0046a2e0
mov dword [ebp - 0x7048], 0
mov dword [ebp - 0x6ff8], 0
jmp 0x48e830
mov ecx, dword [ebp - 0x6ff8]
add ecx, 1
mov dword [ebp - 0x6ff8], ecx
mov edx, dword [ebp - 0x6ff8]
cmp edx, dword [ebp - 0x704c]
jge 0x48e865
mov eax, dword [ebp - 0x6ff8]
mov ecx, dword [ebp - 0x6ed4]
cmp dword [ecx + eax*4 + 0x310a0], 1
jne 0x48e863
mov edx, dword [ebp - 0x7048]
add edx, 1
mov dword [ebp - 0x7048], edx
jmp 0x48e821
mov eax, dword [ebp - 0x704c]
push eax
mov ecx, dword [ebp - 0x7048]
push ecx
mov ecx, 0x59b8a00
call fcn.0041cf50
lea ecx, [ebp - 0x75a8]
call fcn.00497650
mov dword [ebp - 4], 0
push 0x4d0187
lea ecx, [ebp - 0x75a8]
call fcn.00497710
mov dword [ebp - 0x6fe8], 0
mov dword [ebp - 0x6fe4], 0
jmp 0x48e8c4
mov edx, dword [ebp - 0x6fe4]
add edx, 1
mov dword [ebp - 0x6fe4], edx
mov eax, dword [ebp - 0x6fe4]
cmp eax, dword [ebp - 0x704c]
jge 0x48e9ab
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7120], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x711c], eax
mov ecx, dword [ebp - 0x6fe4]
mov edx, dword [ebp - 0x6ed4]
cmp dword [edx + ecx*4 + 0x310a0], 1
jne 0x48e9a6
cmp dword [ebp - 0x6fec], 1
je 0x48e95a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x756c], esp
imul eax, dword [ebp - 0x711c], 0x18
mov edx, dword [ebp - 0x6ed0]
lea eax, [edx + eax + 0xc73d8]
push eax
call fcn.0041bb50
mov ecx, dword [ebp - 0x6fe8]
push ecx
mov edx, dword [ebp - 0x7120]
push edx
mov ecx, 0x59b8a00
call fcn.0046eea0
jmp 0x48e997
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7570], esp
imul eax, dword [ebp - 0x711c], 0x18
mov edx, dword [ebp - 0x6ed0]
lea eax, [edx + eax + 0xc73d8]
push eax
call fcn.0041bb50
mov ecx, dword [ebp - 0x6fe8]
push ecx
mov edx, dword [ebp - 0x7120]
push edx
mov ecx, 0x59b8a00
call fcn.0046fbf0
mov eax, dword [ebp - 0x6fe8]
add eax, 1
mov dword [ebp - 0x6fe8], eax
jmp 0x48e8b5
cmp dword [ebp - 0x6fec], 1
je 0x48e9c0
mov ecx, 0x59b8a00
call fcn.0046f2d0
jmp 0x48e9ca
mov ecx, 0x59b8a00
call fcn.0046fe10
cmp dword [ebp - 0x6fec], 1
je 0x48ea1f
mov ecx, dword [ebp - 0x6ed4]
cmp dword [ecx + 0x30d2c], 0
jg 0x48e9f1
mov edx, dword [ebp - 0x6ed4]
cmp dword [edx + 0x30d30], 0
jle 0x48ea08
push 6
mov eax, dword [ebp - 0x6ee4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x6ee4]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48ea1d
push 3
mov ecx, dword [ebp - 0x6ee4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6ee4]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48ea34
push 6
mov ecx, dword [ebp - 0x6ee4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6ee4]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x75a8]
call fcn.00497690
jmp 0x48ea92
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
movzx ecx, al
mov dword [ebp - 0x72c0], ecx
mov dword [ebp - 0x7050], 0
jmp 0x48ea77
mov edx, dword [ebp - 0x7050]
add edx, 1
mov dword [ebp - 0x7050], edx
mov eax, dword [ebp - 0x7050]
cmp eax, dword [ebp - 0x72c0]
jge 0x48ea92
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
jmp 0x48ea68
jmp case.0x487f71.4
cmp dword [ebp + 8], 1
jne 0x48eac2
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
movzx ecx, al
mov edx, dword [ebp - 0x6ed0]
cmp ecx, dword [edx + 0x29bfe8]
jne 0x48eac0
mov al, 0xd3
jmp 0x48f432
jmp 0x48eacd
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48eb1e
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x6ff0], eax
mov eax, dword [ebp - 0x6ff0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x6ff0]
mov eax, dword [edx + 0x14]
call eax
mov ecx, dword [ebp - 0x6ed0]
mov dword [ecx + 0x5bf8c4], eax
push 0x15
mov edx, dword [ebp - 0x6ff0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6ff0]
mov edx, dword [eax + 0x20]
call edx
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48eb6b
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x7124], eax
mov eax, dword [ebp - 0x6ed0]
mov ecx, dword [eax + 0x5bf8c4]
push ecx
mov edx, dword [ebp - 0x7124]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7124]
mov edx, dword [eax + 0x20]
call edx
mov eax, dword [ebp - 0x6ed0]
mov dword [eax + 0x5bf8c4], 0xffffffff
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48ebd4
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x72c4], eax
mov ecx, dword [ebp - 0x72c4]
push ecx
mov ecx, 0x51ca6a0
call fcn.00487870
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
and edx, 0x80
jne 0x48ebd2
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x7128], eax
push 0x10
mov eax, dword [ebp - 0x7128]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x7128]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48ebee
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x9c]
call edx
jmp case.0x487f71.4
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x712c], eax
push 2
mov eax, dword [ebp - 0x712c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x712c]
mov eax, dword [edx + 0x20]
call eax
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x13c], eax
jmp case.0x487f71.4
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x7130], eax
push 9
mov edx, dword [ebp - 0x7130]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7130]
mov edx, dword [eax + 0x20]
call edx
jmp case.0x487f71.4
cmp dword [ebp + 8], 0
jne 0x48ee1f
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax + 4]
mov eax, dword [edx + 0x48]
call eax
sub eax, 1
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x13c], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6edc], al
mov dword [ebp - 0x6ff4], 0
mov ecx, 0x51cad30
call fcn.00487920
movzx edx, byte [ebp - 0x6edc]
cmp edx, 0xe4
je 0x48ee1a
mov al, byte [ebp - 0x6edc]
mov byte [ebp - 0x7134], al
cmp byte [ebp - 0x7134], 0xe0
je 0x48ed05
cmp byte [ebp - 0x7134], 0xe5
je 0x48edf3
jmp 0x48ee04
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x72cc], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x72c8], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
movzx ecx, ax
push ecx
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [eax + 8]
call edx
cmp dword [ebp + 8], 0
jne 0x48edde
mov eax, dword [ebp - 0x6ff4]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7574], esp
imul edx, dword [ebp - 0x72c8], 0x18
mov eax, dword [ebp - 0x6ed0]
lea edx, [eax + edx + 0xc73d8]
push edx
call fcn.0041bb50
mov dword [ebp - 0x7578], eax
mov dword [ebp - 4], 1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x757c], esp
imul eax, dword [ebp - 0x72cc], 0x18
mov edx, dword [ebp - 0x6ed0]
lea eax, [edx + eax + 0xc73d8]
push eax
call fcn.0041bb50
mov dword [ebp - 0x7580], eax
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7584], esp
push 0
call fcn.00426a90
mov dword [ebp - 4], 0xffffffff
mov ecx, 0x51cad30
call fcn.00468400
cmp dword [ebp - 0x6ff4], 0xffffffff
je 0x48edf1
mov dword [ebp - 0x6ff4], 0
jmp 0x48ee04
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x6ff4], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6edc], al
jmp 0x48eccb
jmp 0x48eed4
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6edd], al
mov dword [ebp - 0x7588], 0
movzx ecx, byte [ebp - 0x6edd]
cmp ecx, 0xe4
je 0x48eed4
mov dl, byte [ebp - 0x6edd]
mov byte [ebp - 0x7138], dl
cmp byte [ebp - 0x7138], 0xe0
je 0x48ee6d
cmp byte [ebp - 0x7138], 0xe5
je 0x48eeb3
jmp 0x48eebe
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x758c], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7590], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
movzx eax, ax
push eax
mov ecx, dword [ebp - 0x6ed0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 8]
call eax
jmp 0x48eebe
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f8f0
mov byte [ebp - 0x6edd], al
jmp 0x48ee3a
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x13c], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x7140], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x72d4], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x72d0], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
movzx edx, ax
push edx
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp + 8], 0
jne 0x48f08c
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7380], esp
imul edx, dword [ebp - 0x72d0], 0x18
mov eax, dword [ebp - 0x6ed0]
lea edx, [eax + edx + 0xc73d8]
push edx
call fcn.0041bb50
mov dword [ebp - 0x7384], eax
mov dword [ebp - 4], 3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7388], esp
imul eax, dword [ebp - 0x72d4], 0x18
mov edx, dword [ebp - 0x6ed0]
lea eax, [edx + eax + 0xc73d8]
push eax
call fcn.0041bb50
mov dword [ebp - 0x738c], eax
mov byte [ebp - 4], 4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7390], esp
imul edx, dword [ebp - 0x7140], 0x18
mov eax, dword [ebp - 0x6ed0]
lea edx, [eax + edx + 0xc73d8]
push edx
call fcn.0041bb50
mov dword [ebp - 4], 0xffffffff
mov ecx, 0x51cad30
call fcn.00468400
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x713c], eax
push 1
mov eax, dword [ebp - 0x713c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x713c]
mov eax, dword [edx + 0x20]
call eax
push 0x3e7
lea ecx, [ebp - 0x5814]
push ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7394], esp
imul edx, dword [ebp - 0x7140], 0x18
mov eax, dword [ebp - 0x6ed0]
lea edx, [eax + edx + 0xc73d8]
push edx
call fcn.0041bb50
call fcn.004115a0
add esp, 0x20
push 0
lea eax, [ebp - 0x5814]
push eax
mov ecx, 0x51ca6a0
call fcn.00462bc0
mov ecx, 0x51cad30
call fcn.0046b2c0
push 1
mov ecx, 0x51cad30
call fcn.00487940
push 0
mov ecx, 0x4e0c40
call fcn.0046eaf0
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x13c], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x72dc], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x72d8], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
movzx edx, ax
push edx
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp + 8], 0
jne 0x48f1cd
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7398], esp
imul edx, dword [ebp - 0x72d8], 0x18
mov eax, dword [ebp - 0x6ed0]
lea edx, [eax + edx + 0xc73d8]
push edx
call fcn.0041bb50
mov dword [ebp - 0x739c], eax
mov dword [ebp - 4], 5
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x73a0], esp
imul eax, dword [ebp - 0x72dc], 0x18
mov edx, dword [ebp - 0x6ed0]
lea eax, [edx + eax + 0xc73d8]
push eax
call fcn.0041bb50
mov dword [ebp - 0x73a4], eax
mov byte [ebp - 4], 6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x73a8], esp
push 0x4d4c70
call fcn.00426a90
mov dword [ebp - 4], 0xffffffff
mov ecx, 0x51cad30
call fcn.00468400
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x7144], eax
push 1
mov ecx, dword [ebp - 0x7144]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7144]
mov eax, dword [edx + 0x20]
call eax
push 1
mov ecx, 0x51cad30
call fcn.00487940
push 0
mov ecx, 0x4e0c40
call fcn.0046eaf0
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x13c], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x72e4], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x72e0], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
movzx edx, ax
push edx
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp + 8], 0
jne 0x48f2e7
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x73ac], esp
imul edx, dword [ebp - 0x72e0], 0x18
mov eax, dword [ebp - 0x6ed0]
lea edx, [eax + edx + 0xc73d8]
push edx
call fcn.0041bb50
mov dword [ebp - 0x73b0], eax
mov dword [ebp - 4], 7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x73b4], esp
push 0x4d4c6c
call fcn.00426a90
mov dword [ebp - 0x73b8], eax
mov byte [ebp - 4], 8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x73bc], esp
imul eax, dword [ebp - 0x72e4], 0x18
mov edx, dword [ebp - 0x6ed0]
lea eax, [edx + eax + 0xc73d8]
push eax
call fcn.0041bb50
mov dword [ebp - 4], 0xffffffff
mov ecx, 0x51cad30
call fcn.00468400
push 1
mov ecx, 0x51cad30
call fcn.00487940
push 0
mov ecx, 0x4e0c40
call fcn.0046eaf0
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
add ecx, 4
mov edx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 4]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x6ed4]
mov dword [ecx + 0x13c], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x72e8], eax
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f950
movzx edx, ax
push edx
mov eax, dword [ebp - 0x6ed0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp + 8], 0
jne 0x48f407
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x73c0], esp
imul edx, dword [ebp - 0x72e8], 0x18
mov eax, dword [ebp - 0x6ed0]
lea edx, [eax + edx + 0xc73d8]
push edx
call fcn.0041bb50
mov dword [ebp - 0x73c4], eax
mov dword [ebp - 4], 9
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x73c8], esp
push 0x4d4c78
call fcn.00426a90
mov dword [ebp - 0x73cc], eax
mov byte [ebp - 4], 0xa
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x73d0], esp
push 0x4d4c74
call fcn.00426a90
mov dword [ebp - 4], 0xffffffff
mov ecx, 0x51cad30
call fcn.00468400
push 8
mov ecx, 0x51ca6a0
call fcn.00411440
mov dword [ebp - 0x7148], eax
push 1
mov eax, dword [ebp - 0x7148]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x7148]
mov eax, dword [edx + 0x20]
call eax
push 1
mov ecx, 0x51cad30
call fcn.00487940
push 0
mov ecx, 0x4e0c40
call fcn.0046eaf0
jmp case.0x487f71.4
mov ecx, dword [ebp - 0x6ed0]
call fcn.0048f920
mov dword [ebp - 0x73d4], eax
mov ecx, dword [ebp - 0x6ed0]
mov dl, byte [ebp - 0x6ed9]
mov byte [ecx + 0x29bff1], dl
mov al, byte [ebp - 0x6ed9]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a0848
mov esp, ebp
pop ebp
ret 8