Function at 0x4a471a
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x61
push 0
push 0
dec ecx
jne 0x4a1ca0
push ecx
push ebx
push esi
push edi
mov esi, eax
lea edi, [ebp - 0x1a0]
mov ecx, 0x68
rep movsd dword es:[edi], dword [esi]
mov ebx, edx
lea eax, [ebp - 0x1a0]
mov edx, dword [0x41f228]
call fcn.004067a4
xor eax, eax
push ebp
push 0x4a4c59
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4d8c24]
mov dword [eax], ebx
mov eax, dword [0x4d908c]
mov byte [eax], 0
mov eax, dword [0x4d8fc8]
cmp dword [eax], 0
jne 0x4a4bfb
push ebp
mov edx, 0x4a4c70
xor eax, eax
call fcn.0048e1a8
pop ecx
push ebp
mov edx, 0x4a4d60
xor eax, eax
call fcn.0048e1a8
pop ecx
push ebp
mov edx, 0x4a4d84
xor eax, eax
call fcn.0048e1a8
pop ecx
push ebp
mov edx, 0x4a4db0
xor eax, eax
call fcn.0048e1a8
pop ecx
push ebp
mov edx, 0x4a4dd0
xor eax, eax
call fcn.0048e1a8
pop ecx
jmp 0x4a4bfb
mov eax, dword [0x4d8c24]
inc dword [eax]
mov eax, dword [0x4d8afc]
push eax
mov eax, dword [0x4d8c24]
mov eax, dword [eax]
mov edx, dword [0x4d8e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov ecx, 0x7fffffff
mov edx, 1
call fcn.00405fd0
mov eax, dword [0x4d8af0]
mov byte [eax], 0
mov eax, dword [0x4d8e04]
cmp byte [eax], 0
je 0x4a1d97
mov edx, dword [0x4d8ac4]
mov edx, dword [edx]
mov eax, dword [0x4d8afc]
mov eax, dword [eax]
call fcn.00456c04
mov edi, dword [0x4d8afc]
mov edi, dword [edi]
mov dword [ebp - 0x1dc], edi
mov ebx, dword [ebp - 0x1dc]
test ebx, ebx
je 0x4a1db4
sub ebx, 4
mov ebx, dword [ebx]
test ebx, ebx
jle 0x4a1dcc
mov eax, dword [0x4d8afc]
mov eax, dword [eax]
movzx eax, byte [eax]
mov edx, dword [0x4d8eec]
mov byte [edx], al
jmp 0x4a1dd4
mov eax, dword [0x4d8eec]
mov byte [eax], 0x27
mov eax, dword [0x4d8afc]
mov eax, dword [eax]
mov dword [ebp - 0x1b8], eax
mov esi, dword [ebp - 0x1b8]
test esi, esi
je 0x4a1df0
sub esi, 4
mov esi, dword [esi]
dec esi
jle 0x4a1e11
mov eax, dword [0x4d8e14]
push eax
mov eax, dword [0x4d8afc]
mov eax, dword [eax]
mov ecx, 0x7fffffff
mov edx, 2
call fcn.00405fd0
jmp 0x4a1e1b
mov eax, dword [0x4d8e14]
call fcn.00405aac
mov eax, dword [0x4d8d48]
cmp word [eax], 0xff
jne 0x4a1e31
mov eax, dword [0x4d8d48]
mov word [eax], 0xfe
mov eax, dword [0x4d9068]
cmp byte [eax], 0
je 0x4a1f7c
mov eax, dword [0x4d8eec]
cmp byte [eax], 0
jbe 0x4a1f7c
mov eax, dword [0x4d8eec]
cmp byte [eax], 0x27
je 0x4a1f7c
call sub.user32.dll_GetFocus
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0x2dc]
mov eax, dword [0x4d8c24]
mov eax, dword [eax]
mov edx, 1
call fcn.00403f8c
lea edx, [ebp - 0x2dc]
mov eax, dword [0x4d8c28]
call fcn.00405d10
mov eax, dword [0x4d8bc8]
cmp dword [eax], 1
jne 0x4a1ed1
mov eax, dword [0x4d9030]
mov edx, dword [0x4d8c28]
mov edx, dword [edx]
call fcn.00405b00
mov eax, dword [0x4d9030]
mov eax, dword [eax]
call fcn.00405f70
mov edx, eax
mov eax, dword [0x4d8eb4]
call fcn.0040a764
mov eax, dword [0x4d8eb4]
push eax
call sub.kernel32.dll_OutputDebugStringA
jmp 0x4a1f7c
mov eax, dword [0x4d8bc8]
cmp dword [eax], 0
jne 0x4a1f7c
push 0x4a4df8
mov eax, dword [0x4d8c28]
push dword [eax]
push 0x4a4e08
mov eax, dword [0x4d9030]
mov edx, 3
call fcn.00405e30
mov edx, 0x4a4e0c
mov eax, dword [0x4d8e74]
call fcn.0040a764
mov eax, dword [0x4d9030]
mov eax, dword [eax]
call fcn.00405f70
mov edx, eax
mov eax, dword [0x4d8eb4]
call fcn.0040a764
push 0x41
mov eax, dword [0x4d8e74]
push eax
mov eax, dword [0x4d8eb4]
push eax
mov eax, dword [0x4d88d8]
mov eax, dword [eax]
push eax
call sub.user32.dll_MessageBoxA_1
cmp eax, 2
jne 0x4a1f52
xor edx, edx
mov eax, 0x3e7
call fcn.00457e90
push 0
push 0
mov eax, dword [0x4d88d8]
mov eax, dword [eax]
push eax
call sub.user32.dll_InvalidateRect
mov eax, dword [0x4d88d8]
mov eax, dword [eax]
push eax
call sub.user32.dll_UpdateWindow
mov eax, dword [ebp - 0x1a8]
push eax
call sub.user32.dll_SetFocus
mov eax, dword [0x4d8bc8]
cmp dword [eax], 2
jne 0x4a1ff6
mov eax, dword [0x4d8eec]
cmp byte [eax], 0
jbe 0x4a1ff6
mov eax, dword [0x4d8eec]
cmp byte [eax], 0x27
je 0x4a1ff6
lea ecx, [ebp - 0x2dc]
mov eax, dword [0x4d8c24]
mov eax, dword [eax]
mov edx, 1
call fcn.00403f8c
lea edx, [ebp - 0x2dc]
mov eax, dword [0x4d8c28]
call fcn.00405d10
mov eax, dword [0x4d9030]
mov edx, dword [0x4d8c28]
mov edx, dword [edx]
call fcn.00405b00
mov eax, dword [0x4d9030]
mov eax, dword [eax]
call fcn.00405f70
mov edx, eax
mov eax, dword [0x4d8eb4]
call fcn.0040a764
mov eax, dword [0x4d8eb4]
push eax
call sub.kernel32.dll_OutputDebugStringA
mov eax, dword [0x4d8eec]
movzx eax, byte [eax]
cmp eax, 0xff
ja case.0x4a2009.0
jmp dword [eax*4 + 0x4a2010]
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
xor ecx, ecx
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8a88]
cmp dword [eax], 0
jne 0x4a2440
mov eax, dword [0x4d8c24]
inc dword [eax]
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
xor ecx, ecx
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8a88]
cmp dword [eax], 0
je 0x4a2470
mov eax, dword [0x4d8c24]
inc dword [eax]
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
xor ecx, ecx
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d909c]
dec dword [eax]
mov eax, dword [0x4d8af0]
mov byte [eax], 1
mov eax, dword [0x4d909c]
cmp dword [eax], 0
jge case.0x4a2009.0
xor edx, edx
mov eax, 0x7e
call fcn.00457e90
jmp case.0x4a2009.0
mov eax, dword [0x4d8878]
dec dword [eax]
mov eax, dword [0x4d8af0]
mov byte [eax], 1
mov eax, dword [0x4d8878]
cmp dword [eax], 0
jge case.0x4a2009.0
xor edx, edx
mov eax, 0x8c
call fcn.00457e90
jmp case.0x4a2009.0
mov eax, dword [0x4d8878]
inc dword [eax]
mov eax, dword [0x4d8878]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4d90cc]
mov ecx, 1
mov edx, dword [0x41f3dc]
call fcn.00406d74
add esp, 4
mov eax, dword [0x4d8878]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4d8ab0]
mov ecx, 1
mov edx, dword [0x41f424]
call fcn.00406d74
add esp, 4
mov eax, dword [0x4d8878]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4d8c44]
mov ecx, 1
mov edx, dword [0x41f400]
call fcn.00406d74
add esp, 4
mov eax, dword [0x4d8878]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4d8e78]
mov ecx, 1
mov edx, dword [0x41f448]
call fcn.00406d74
add esp, 4
mov eax, dword [0x4d8878]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4d8cb8]
mov ecx, 1
mov edx, dword [0x41f46c]
call fcn.00406d74
add esp, 4
lea eax, [ebp - 0x1ac]
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
call fcn.00405b44
xor ecx, ecx
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8ca0]
cmp byte [eax], 0
jb 0x4a25dd
mov eax, dword [0x4d8ca0]
cmp byte [eax], 4
jbe 0x4a25ed
mov edx, dword [ebp - 0x1ac]
mov eax, 0xd8
call fcn.00457e90
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d90cc]
mov edx, dword [edx]
mov byte [edx + eax], 0
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8ab0]
mov edx, dword [edx]
mov ecx, dword [0x4d8a88]
mov ecx, dword [ecx]
mov dword [edx + eax*4], ecx
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8c44]
mov edx, dword [edx]
lea eax, [edx + eax*4]
mov edx, dword [0x4d8c28]
mov edx, dword [edx]
call fcn.00405b00
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8e78]
mov edx, dword [edx]
mov ecx, dword [0x4d8e64]
mov ebx, dword [ecx]
mov dword [edx + eax*8], ebx
mov ebx, dword [ecx + 4]
mov dword [edx + eax*8 + 4], ebx
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
mov ecx, dword [0x4d8ca0]
movzx ecx, byte [ecx]
mov dword [edx + eax*4], ecx
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8878]
cmp dword [eax], 0
jne 0x4a2698
xor edx, edx
mov eax, 0x8c
call fcn.00457e90
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4d8e14]
mov ecx, 4
mov edx, 1
call fcn.00406010
mov eax, dword [0x4d8af0]
mov byte [eax], 0
mov eax, dword [0x4d8a84]
mov byte [eax], 0
jmp 0x4a2e2d
lea eax, [ebp - 0x1ac]
call fcn.00405aac
mov eax, dword [0x4d8e14]
cmp dword [eax], 0
jbe 0x4a27c1
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
cmp byte [eax], 0x3c
je 0x4a2739
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
cmp byte [eax], 0x3e
jne 0x4a27c1
lea eax, [ebp - 0x1ac]
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx]
call fcn.00405c94
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0
je 0x4a2782
mov eax, dword [ebp - 0x1c0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1c0], eax
lea eax, [ebp - 0x2e4]
push eax
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c0]
mov edx, 2
call fcn.00405fd0
mov eax, dword [ebp - 0x2e4]
lea edx, [ebp - 0x2e0]
call fcn.00409b18
mov edx, dword [ebp - 0x2e0]
mov eax, dword [0x4d8e14]
call fcn.00405b00
mov eax, dword [0x4d8e14]
cmp dword [eax], 0
jbe 0x4a286e
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
cmp byte [eax], 0x15
jne 0x4a286e
lea eax, [ebp - 0x1ac]
push eax
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
mov ecx, 4
mov edx, 1
call fcn.00405fd0
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
je 0x4a282f
mov eax, dword [ebp - 0x1c8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1c8], eax
lea eax, [ebp - 0x2ec]
push eax
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c8]
mov edx, 5
call fcn.00405fd0
mov eax, dword [ebp - 0x2ec]
lea edx, [ebp - 0x2e8]
call fcn.00409b18
mov edx, dword [ebp - 0x2e8]
mov eax, dword [0x4d8e14]
call fcn.00405b00
cmp dword [ebp - 0x1ac], 0
jne 0x4a2887
lea eax, [ebp - 0x1ac]
mov edx, 0x4a4e20
call fcn.00405b44
xor ecx, ecx
mov edx, 0x4a4e24
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [ebp - 0x1ac]
mov edx, 0x4a4e20
call fcn.00405ebc
jne 0x4a2987
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 1
jne 0x4a28e9
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8c44]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8c28]
mov edx, dword [edx]
call fcn.00405ebc
je 0x4a297f
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 4
jne 0x4a291d
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8e78]
mov edx, dword [edx]
fld qword [edx + eax*8]
mov eax, dword [0x4d8e64]
fcomp qword [eax]
wait
fnstsw ax
sahf
je 0x4a297f
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 2
jne 0x4a294e
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8ab0]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8a88]
cmp eax, dword [edx]
je 0x4a297f
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 3
jne 0x4a2987
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8ab0]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8a88]
cmp eax, dword [edx]
jne 0x4a2987
mov eax, dword [0x4d8af0]
mov byte [eax], 1
mov eax, dword [ebp - 0x1ac]
mov edx, 0x4a4e30
call fcn.00405ebc
jne 0x4a2a75
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 1
jne 0x4a29d7
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8c44]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8c28]
mov edx, dword [edx]
call fcn.00405ebc
ja 0x4a2a6d
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 4
jne 0x4a2a0b
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8e78]
mov edx, dword [edx]
fld qword [edx + eax*8]
mov eax, dword [0x4d8e64]
fcomp qword [eax]
wait
fnstsw ax
sahf
ja 0x4a2a6d
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 2
jne 0x4a2a3c
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8ab0]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8a88]
cmp eax, dword [edx]
jg 0x4a2a6d
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 3
jne 0x4a2a75
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8ab0]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8a88]
cmp eax, dword [edx]
jle 0x4a2a75
mov eax, dword [0x4d8af0]
mov byte [eax], 1
mov eax, dword [ebp - 0x1ac]
mov edx, 0x4a4e3c
call fcn.00405ebc
jne 0x4a2b63
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 1
jne 0x4a2ac5
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8c44]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8c28]
mov edx, dword [edx]
call fcn.00405ebc
jb 0x4a2b5b
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 4
jne 0x4a2af9
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8e78]
mov edx, dword [edx]
fld qword [edx + eax*8]
mov eax, dword [0x4d8e64]
fcomp qword [eax]
wait
fnstsw ax
sahf
jb 0x4a2b5b
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 2
jne 0x4a2b2a
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8ab0]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8a88]
cmp eax, dword [edx]
jl 0x4a2b5b
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 3
jne 0x4a2b63
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8ab0]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8a88]
cmp eax, dword [edx]
jge 0x4a2b63
mov eax, dword [0x4d8af0]
mov byte [eax], 1
mov eax, dword [ebp - 0x1ac]
mov edx, 0x4a4e48
call fcn.00405ebc
jne 0x4a2c51
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 1
jne 0x4a2bb3
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8c44]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8c28]
mov edx, dword [edx]
call fcn.00405ebc
jne 0x4a2c49
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 4
jne 0x4a2be7
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8e78]
mov edx, dword [edx]
fld qword [edx + eax*8]
mov eax, dword [0x4d8e64]
fcomp qword [eax]
wait
fnstsw ax
sahf
jne 0x4a2c49
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 2
jne 0x4a2c18
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8ab0]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8a88]
cmp eax, dword [edx]
jne 0x4a2c49
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 3
jne 0x4a2c51
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8ab0]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8a88]
cmp eax, dword [edx]
je 0x4a2c51
mov eax, dword [0x4d8af0]
mov byte [eax], 1
mov eax, dword [ebp - 0x1ac]
mov edx, 0x4a4e58
call fcn.00405ebc
jne 0x4a2d3f
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 1
jne 0x4a2ca1
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8c44]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8c28]
mov edx, dword [edx]
call fcn.00405ebc
jbe 0x4a2d37
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 4
jne 0x4a2cd5
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8e78]
mov edx, dword [edx]
fld qword [edx + eax*8]
mov eax, dword [0x4d8e64]
fcomp qword [eax]
wait
fnstsw ax
sahf
jbe 0x4a2d37
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 2
jne 0x4a2d06
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8ab0]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8a88]
cmp eax, dword [edx]
jle 0x4a2d37
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 3
jne 0x4a2d3f
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8ab0]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8a88]
cmp eax, dword [edx]
jg 0x4a2d3f
mov eax, dword [0x4d8af0]
mov byte [eax], 1
mov eax, dword [ebp - 0x1ac]
mov edx, 0x4a4e68
call fcn.00405ebc
jne 0x4a2e2d
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 1
jne 0x4a2d8f
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8c44]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8c28]
mov edx, dword [edx]
call fcn.00405ebc
jae 0x4a2e25
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 4
jne 0x4a2dc3
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8e78]
mov edx, dword [edx]
fld qword [edx + eax*8]
mov eax, dword [0x4d8e64]
fcomp qword [eax]
wait
fnstsw ax
sahf
jae 0x4a2e25
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 2
jne 0x4a2df4
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8ab0]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8a88]
cmp eax, dword [edx]
jge 0x4a2e25
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8cb8]
mov edx, dword [edx]
cmp dword [edx + eax*4], 3
jne 0x4a2e2d
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d8ab0]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8a88]
cmp eax, dword [edx]
jl 0x4a2e2d
mov eax, dword [0x4d8af0]
mov byte [eax], 1
mov eax, dword [0x4d8a84]
cmp byte [eax], 0
je 0x4a2704
mov eax, dword [0x4d8af0]
cmp byte [eax], 0
je 0x4a2e5a
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d90cc]
mov edx, dword [edx]
cmp byte [edx + eax], 1
jne 0x4a2e69
mov eax, dword [0x4d8c24]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
jmp 0x4a2e7c
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d90cc]
mov edx, dword [edx]
mov byte [edx + eax], 1
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8878]
cmp dword [eax], 0
jne 0x4a2e9f
xor edx, edx
mov eax, 0x8c
call fcn.00457e90
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d90cc]
mov edx, dword [edx]
cmp byte [edx + eax], 1
jne 0x4a2f06
mov eax, dword [0x4d8c24]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
jmp 0x4a2f19
mov eax, dword [0x4d8878]
mov eax, dword [eax]
mov edx, dword [0x4d90cc]
mov edx, dword [edx]
mov byte [edx + eax], 1
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d909c]
inc dword [eax]
mov eax, dword [0x4d909c]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4d8db0]
mov ecx, 1
mov edx, dword [0x41f3b8]
call fcn.00406d74
add esp, 4
mov eax, dword [0x4d909c]
mov eax, dword [eax]
mov edx, dword [0x4d8db0]
mov edx, dword [edx]
mov byte [edx + eax], 0
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4d8e14]
mov ecx, 4
mov edx, 1
call fcn.00406010
xor ecx, ecx
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8a88]
cmp dword [eax], 0
jne 0x4a2fe3
mov eax, dword [0x4d8c24]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
jmp 0x4a2ff6
mov eax, dword [0x4d909c]
mov eax, dword [eax]
mov edx, dword [0x4d8db0]
mov edx, dword [edx]
mov byte [edx + eax], 1
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4d8e14]
mov ecx, 4
mov edx, 1
call fcn.00406010
xor ecx, ecx
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8a88]
cmp dword [eax], 0
je 0x4a308b
mov eax, dword [0x4d909c]
mov eax, dword [eax]
mov edx, dword [0x4d8db0]
mov edx, dword [edx]
cmp byte [edx + eax], 1
jne 0x4a309a
mov eax, dword [0x4d8c24]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
jmp 0x4a30ad
mov eax, dword [0x4d909c]
mov eax, dword [eax]
mov edx, dword [0x4d8db0]
mov edx, dword [edx]
mov byte [edx + eax], 1
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4d909c]
mov eax, dword [eax]
mov edx, dword [0x4d8db0]
mov edx, dword [edx]
cmp byte [edx + eax], 1
jne 0x4a3121
mov eax, dword [0x4d8c24]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
jmp 0x4a3134
mov eax, dword [0x4d909c]
mov eax, dword [eax]
mov edx, dword [0x4d8db0]
mov edx, dword [edx]
mov byte [edx + eax], 1
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d909c]
inc dword [eax]
mov eax, dword [0x4d909c]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4d8db0]
mov ecx, 1
mov edx, dword [0x41f3b8]
call fcn.00406d74
add esp, 4
mov eax, dword [0x4d909c]
mov eax, dword [eax]
mov edx, dword [0x4d8db0]
mov edx, dword [edx]
mov byte [edx + eax], 0
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4d8e14]
mov ecx, 4
mov edx, 1
call fcn.00406010
xor ecx, ecx
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8a88]
cmp dword [eax], 0
je 0x4a31fe
mov eax, dword [0x4d8c24]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
jmp 0x4a3211
mov eax, dword [0x4d909c]
mov eax, dword [eax]
mov edx, dword [0x4d8db0]
mov edx, dword [edx]
mov byte [edx + eax], 1
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4d8e14]
mov ecx, 4
mov edx, 1
call fcn.00406010
mov eax, dword [0x4d8fe4]
inc dword [eax]
mov eax, dword [0x4d8fe4]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4d89f4]
mov ecx, 1
mov edx, dword [0x41f4b4]
call fcn.00406d74
add esp, 4
mov eax, dword [0x4d8fe4]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4d8a04]
mov ecx, 1
mov edx, dword [0x41f490]
call fcn.00406d74
add esp, 4
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
cmp byte [edx + eax + 0xc], 0
jne 0x4a34fc
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
mov eax, 0x4a4e78
call fcn.00428108
test eax, eax
jle 0x4a3417
mov eax, dword [0x4d8fe4]
dec dword [eax]
xor ecx, ecx
mov edx, 0x4a4e7c
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8fe4]
inc dword [eax]
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov ecx, dword [0x4d8a88]
mov ecx, dword [ecx]
mov dword [edx + eax], ecx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
mov eax, 0x4a4e78
call fcn.00428108
test eax, eax
jle 0x4a33c1
mov eax, dword [0x4d8fe4]
dec dword [eax]
xor ecx, ecx
mov edx, 0x4a4e7c
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8fe4]
inc dword [eax]
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov ecx, dword [0x4d8a88]
mov ecx, dword [ecx]
mov dword [edx + eax + 4], ecx
mov eax, dword [0x4d8fe4]
dec dword [eax]
xor ecx, ecx
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8fe4]
inc dword [eax]
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov ecx, dword [0x4d8a88]
mov ecx, dword [ecx]
mov dword [edx + eax + 8], ecx
jmp 0x4a3482
mov eax, dword [0x4d8fe4]
dec dword [eax]
xor ecx, ecx
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8fe4]
inc dword [eax]
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov ecx, dword [0x4d8a88]
mov ecx, dword [ecx]
mov dword [edx + eax + 4], ecx
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov dword [edx + eax + 8], 1
jmp 0x4a3482
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov dword [edx + eax], 1
mov eax, dword [0x4d8fe4]
dec dword [eax]
xor ecx, ecx
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8fe4]
inc dword [eax]
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov ecx, dword [0x4d8a88]
mov ecx, dword [ecx]
mov dword [edx + eax + 4], ecx
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov dword [edx + eax + 8], 1
mov eax, dword [0x4d8fe4]
mov eax, dword [eax]
mov edx, dword [0x4d8a04]
mov edx, dword [edx]
mov ecx, dword [0x4d8c24]
mov ecx, dword [ecx]
mov dword [edx + eax*4], ecx
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov byte [edx + eax + 0xc], 1
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
cmp dword [edx + eax + 8], 0
jne 0x4a34d4
xor edx, edx
mov eax, 0x108
call fcn.00457e90
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov eax, dword [edx + eax + 8]
mov edx, dword [0x4d8fe4]
imul edx, dword [edx], 0xd
mov ecx, dword [0x4d89f4]
mov ecx, dword [ecx]
sub dword [ecx + edx], eax
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov eax, dword [edx + eax + 8]
mov edx, dword [0x4d8fe4]
imul edx, dword [edx], 0xd
mov ecx, dword [0x4d89f4]
mov ecx, dword [ecx]
add dword [ecx + edx], eax
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
cmp dword [edx + eax + 8], 0
jle 0x4a3565
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov eax, dword [edx + eax]
mov edx, dword [0x4d8fe4]
imul edx, dword [edx], 0xd
mov ecx, dword [0x4d89f4]
mov ecx, dword [ecx]
cmp eax, dword [ecx + edx + 4]
jg 0x4a35a6
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
cmp dword [edx + eax + 8], 0
jge 0x4a35cf
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov eax, dword [edx + eax]
mov edx, dword [0x4d8fe4]
imul edx, dword [edx], 0xd
mov ecx, dword [0x4d89f4]
mov ecx, dword [ecx]
cmp eax, dword [ecx + edx + 4]
jge 0x4a35cf
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov byte [edx + eax + 0xc], 0
mov eax, dword [0x4d8c24]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
mov eax, dword [0x4d8fe4]
dec dword [eax]
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4d8e14]
mov ecx, 4
mov edx, 1
call fcn.00406010
xor ecx, ecx
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8fe4]
inc dword [eax]
mov eax, dword [0x4d8fe4]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4d89f4]
mov ecx, 1
mov edx, dword [0x41f4b4]
call fcn.00406d74
add esp, 4
mov eax, dword [0x4d8fe4]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4d8a04]
mov ecx, 1
mov edx, dword [0x41f490]
call fcn.00406d74
add esp, 4
mov eax, dword [0x4d8fe4]
mov eax, dword [eax]
mov edx, dword [0x4d8a04]
mov edx, dword [edx]
mov ecx, dword [0x4d8c24]
mov ecx, dword [ecx]
mov dword [edx + eax*4], ecx
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov eax, dword [edx + eax - 0xd]
mov edx, dword [0x4d8fe4]
imul edx, dword [edx], 0xd
mov ecx, dword [0x4d89f4]
mov ecx, dword [ecx]
mov dword [ecx + edx], eax
mov eax, dword [0x4d8a88]
cmp dword [eax], 0
jne 0x4a36ee
mov eax, dword [0x4d8c24]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
mov eax, dword [0x4d8fe4]
dec dword [eax]
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4d8e14]
mov ecx, 4
mov edx, 1
call fcn.00406010
xor ecx, ecx
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8fe4]
inc dword [eax]
mov eax, dword [0x4d8fe4]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4d89f4]
mov ecx, 1
mov edx, dword [0x41f4b4]
call fcn.00406d74
add esp, 4
mov eax, dword [0x4d8fe4]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4d8a04]
mov ecx, 1
mov edx, dword [0x41f490]
call fcn.00406d74
add esp, 4
mov eax, dword [0x4d8fe4]
mov eax, dword [eax]
mov edx, dword [0x4d8a04]
mov edx, dword [edx]
mov ecx, dword [0x4d8c24]
mov ecx, dword [ecx]
mov dword [edx + eax*4], ecx
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov eax, dword [edx + eax - 0xd]
mov edx, dword [0x4d8fe4]
imul edx, dword [edx], 0xd
mov ecx, dword [0x4d89f4]
mov ecx, dword [ecx]
mov dword [ecx + edx], eax
mov eax, dword [0x4d8a88]
cmp dword [eax], 0
je 0x4a380d
mov eax, dword [0x4d8c24]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
mov eax, dword [0x4d8fe4]
dec dword [eax]
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4d8e14]
mov ecx, 4
mov edx, 1
call fcn.00406010
mov eax, dword [0x4d8fe4]
cmp dword [eax], 0
jne 0x4a3887
xor edx, edx
mov eax, 0x6e
call fcn.00457e90
mov eax, dword [0x4d8c24]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
mov eax, dword [0x4d8fe4]
imul eax, dword [eax], 0xd
mov edx, dword [0x4d89f4]
mov edx, dword [edx]
mov byte [edx + eax + 0xc], 0
mov eax, dword [0x4d8fe4]
dec dword [eax]
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8fe4]
inc dword [eax]
mov eax, dword [0x4d8fe4]
cmp dword [eax], 0x1e
jle 0x4a38da
xor edx, edx
mov eax, 0x6c
call fcn.00457e90
mov eax, dword [0x4d8fe4]
mov eax, dword [eax]
mov edx, dword [0x4d8a04]
mov edx, dword [edx]
mov ecx, dword [0x4d8c24]
mov ecx, dword [ecx]
mov dword [edx + eax*4], ecx
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8fe4]
cmp dword [eax], 0
jne 0x4a3917
xor edx, edx
mov eax, 0x6e
call fcn.00457e90
xor ecx, ecx
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8a88]
cmp dword [eax], 0
jne 0x4a394e
mov eax, dword [0x4d8fe4]
mov eax, dword [eax]
mov edx, dword [0x4d8a04]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
dec eax
mov edx, dword [0x4d8c24]
mov dword [edx], eax
mov eax, dword [0x4d8fe4]
dec dword [eax]
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8fe4]
cmp dword [eax], 0
jne 0x4a3978
xor edx, edx
mov eax, 0x6e
call fcn.00457e90
mov eax, dword [0x4d8fe4]
mov eax, dword [eax]
mov edx, dword [0x4d8a04]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
dec eax
mov edx, dword [0x4d8c24]
mov dword [edx], eax
mov eax, dword [0x4d8fe4]
dec dword [eax]
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8fe4]
cmp dword [eax], 0
jne 0x4a39bd
xor edx, edx
mov eax, 0x6e
call fcn.00457e90
mov eax, dword [0x4d8fe4]
mov eax, dword [eax]
mov edx, dword [0x4d8a04]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
dec eax
mov edx, dword [0x4d8c24]
mov dword [edx], eax
mov eax, dword [0x4d8fe4]
dec dword [eax]
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
mov edx, 0x4a4e88
call fcn.00405ebc
jbe 0x4a3a6c
xor ecx, ecx
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
lea eax, [ebp - 0x1a0]
mov edx, dword [0x4d8c28]
mov edx, dword [edx]
call fcn.00405b44
mov eax, dword [0x4d8a88]
mov eax, dword [eax]
mov dword [ebp - 0x160], eax
mov eax, dword [0x4d8e64]
mov edx, dword [eax]
mov dword [ebp - 0x120], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x11c], edx
mov eax, dword [0x4d8a78]
movzx eax, byte [eax]
mov byte [ebp - 0xa0], al
mov eax, dword [0x4d8acc]
mov eax, dword [eax]
mov dword [ebp - 0x90], eax
mov eax, dword [0x4d8f10]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, dword [0x4d8f50]
cmp dword [eax], 0
jne 0x4a3a82
xor edx, edx
mov eax, 0x6f
call fcn.00457e90
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8c24]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 8]
mov edx, dword [0x4d899c]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0xc]
mov edx, dword [0x4d9090]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x10]
mov edx, dword [0x4d8940]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x14]
mov edx, dword [0x4d8bc4]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x18]
mov edx, dword [0x4d904c]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x1c]
mov edx, dword [0x4d8d7c]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x20]
mov edx, dword [0x4d8ffc]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x24]
mov edx, dword [0x4d8d0c]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x28]
mov edx, dword [0x4d9044]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x2c]
mov edx, dword [0x4d8e94]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x30]
mov edx, dword [0x4d8e50]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x44]
mov edx, dword [0x4d909c]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x48]
mov edx, dword [0x4d8878]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
dec dword [eax]
mov eax, dword [0x4d8af0]
mov byte [eax], 1
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
cmp dword [edx + eax*4 + 0x50], 1
je 0x4a4c1a
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
cmp dword [edx + eax*4 + 0x50], 2
jne case.0x4a2009.0
mov eax, dword [0x4d8da4]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4d8e48]
mov byte [eax], 0
jmp case.0x4a2009.0
mov eax, dword [0x4d8f50]
cmp dword [eax], 0
jne 0x4a3c7a
xor edx, edx
mov eax, 0x70
call fcn.00457e90
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4d8c24]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 8]
mov edx, dword [0x4d899c]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0xc]
mov edx, dword [0x4d9090]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x10]
mov edx, dword [0x4d8940]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x14]
mov edx, dword [0x4d8bc4]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x18]
mov edx, dword [0x4d904c]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x1c]
mov edx, dword [0x4d8d7c]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x20]
mov edx, dword [0x4d8ffc]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x24]
mov edx, dword [0x4d8d0c]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x28]
mov edx, dword [0x4d9044]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x2c]
mov edx, dword [0x4d8e94]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x30]
mov edx, dword [0x4d8e50]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x44]
mov edx, dword [0x4d909c]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x48]
mov edx, dword [0x4d8878]
mov dword [edx], eax
mov eax, dword [0x4d8f50]
dec dword [eax]
mov eax, dword [0x4d8af0]
mov byte [eax], 1
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
cmp dword [edx + eax*4 + 0x50], 1
je 0x4a4c1a
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
cmp dword [edx + eax*4 + 0x50], 2
jne case.0x4a2009.0
mov eax, dword [0x4d8da4]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4d8e48]
mov byte [eax], 0
jmp case.0x4a2009.0
mov ecx, 1
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov edx, dword [0x4d8c28]
mov edx, dword [edx]
lea eax, [ebp - 0x2f4]
mov ecx, 0x4a4e94
call fcn.00405dbc
mov eax, dword [ebp - 0x2f4]
lea edx, [ebp - 0x2f0]
call fcn.00428080
mov edx, dword [ebp - 0x2f0]
mov eax, dword [0x4d8c28]
call fcn.00405b00
mov eax, dword [0x4d8c24]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4d8af0]
mov byte [eax], 0
jmp 0x4a3f9c
mov eax, dword [0x4d8c24]
inc dword [eax]
mov eax, dword [0x4d8fa4]
push eax
mov eax, dword [0x4d8c24]
mov eax, dword [eax]
mov edx, dword [0x4d8e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov ecx, 0x7fffffff
mov edx, 1
call fcn.00405fd0
mov eax, dword [0x4d8e04]
cmp byte [eax], 0
je 0x4a3f0c
mov edx, dword [0x4d8ac4]
mov edx, dword [edx]
mov eax, dword [0x4d8fa4]
mov eax, dword [eax]
call fcn.00456c04
mov eax, dword [0x4d9030]
mov edx, dword [0x4d8fa4]
mov edx, dword [edx]
call fcn.00405b00
mov eax, dword [0x4d8c28]
mov eax, dword [eax]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
je 0x4a3f51
mov eax, dword [ebp - 0x1d0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1d0], eax
lea eax, [ebp - 0x2fc]
push eax
mov eax, dword [0x4d9030]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1d0]
mov edx, 2
call fcn.00405fd0
mov eax, dword [ebp - 0x2fc]
lea edx, [ebp - 0x2f8]
call fcn.00428080
mov edx, dword [ebp - 0x2f8]
mov eax, dword [0x4d8c28]
mov eax, dword [eax]
call fcn.00405ebc
jne 0x4a3f9c
mov eax, dword [0x4d8af0]
mov byte [eax], 1
mov eax, dword [0x4d8af0]
cmp byte [eax], 0
jne 0x4a3fbb
mov eax, dword [0x4d8c24]
mov eax, dword [eax]
mov edx, dword [0x4d8ef8]
cmp eax, dword [edx]
jl 0x4a3ec0
mov eax, dword [0x4d8af0]
cmp byte [eax], 0
jne case.0x4a2009.0
mov edx, dword [0x4d8c28]
mov edx, dword [edx]
mov eax, 0x71
call fcn.00457e90
jmp case.0x4a2009.0
mov ecx, 1
mov edx, 0x4a4e14
lea eax, [ebp - 0x1a0]
call fcn.004cce34
mov eax, dword [0x4d8f50]
inc dword [eax]
mov eax, dword [0x4d8f50]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4d8e34]
mov ecx, 1
mov edx, dword [0x41f394]
call fcn.00406d74
add esp, 4
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov ecx, dword [0x4d8c24]
mov ecx, dword [ecx]
mov dword [edx + eax*4], ecx
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov ecx, dword [0x4d899c]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 8], ecx
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov ecx, dword [0x4d9090]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0xc], ecx
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov ecx, dword [0x4d8940]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x10], ecx
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov ecx, dword [0x4d8bc4]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x14], ecx
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov ecx, dword [0x4d904c]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x18], ecx
mov eax, dword [0x4d8f50]
imul eax, dword [eax], 0x13
mov edx, dword [0x4d8e34]
mov edx, dword [edx]
mov ecx, dword [0x4d8d7c]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x1c], ecx
mov edx, dword [0x4d8c28]
mov edx, dword [edx]
lea eax, [ebp - 0x304]
mov ecx, 0x4a4e94
call fcn.00405dbc
mov eax, dword [ebp - 0x304]
lea edx, [ebp - 0x300]
call fcn.00428080
mov edx, dword [ebp - 0x300]
mov eax, dword [0x4d8c28]
call fcn.00405b00
mov eax, dword [0x4d8c24]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4d8af0]
mov byte [eax], 0
jmp 0x4a420b
mov eax, dword [0x4d8c24]
inc dword [eax]
mov eax, dword [0x4d8fa4]
push eax
mov eax, dword [0x4d8c24]
mov eax, dword [eax]
mov edx, dword [0x4d8e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov ecx, 0x7fffffff
mov edx, 1
call fcn.00405fd0
mov eax, dword [0x4d8e04]
cmp byte [eax], 0
je 0x4a417b
mov edx, dword [0x4d8ac4]
mov edx, dword [edx]
mov eax, dword [0x4d8fa4]
mov eax, dword [eax]
call fcn.00456c04
mov eax, dword [0x4d9030]
mov edx, dword [0x4d8fa4]
mov edx, dword [edx]
call fcn.00405b00
mov eax, dword [0x4d8c28]
mov eax, dword [eax]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
je 0x4a41c0
mov eax, dword [ebp - 0x1d8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1d8], eax
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [0x4d9030]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1d8]
mov edx, 2
call fcn.00405fd0
mov eax, dword [ebp - 0x30c]
lea edx, [ebp - 0x308]
call fcn.00428080
mov edx, dword [ebp - 0x308]
mov eax, dword [0x4d8c28]
mov eax, dword [eax]
call fcn.00405ebc
jne 0x4a420b
mov eax, dword [0x4d8af0]
mov byte [eax], 1
mov eax, dword [0x4d8af0]
cmp byte [eax], 0
jne 0x4a422a
mov eax, dword [0x4d8c24]
mov eax, dword [eax]
mov edx, dword [0x4d8ef8]
cmp eax, dword [edx]
jl 0x4a412f
mov eax, dword [0x4d8af0]
cmp byte [eax], 0
jne case.0x4a2009.0
mov edx, dword [0x4d8c28]
mov edx, dword [edx]
mov eax, 0x71
call fcn.00457e90
jmp case.0x4a2009.0
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov edx, dword [0x4d8c24]
mov dword [edx], eax
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov edx, dword [0x4d8c24]
mov dword [edx], eax
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov edx, dword [0x4d8c24]
mov dword [edx], eax
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
mov eax, dword [0x4d8e14]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4d8e14]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov edx, dword [0x4d8c24]
mov dword [edx], eax
mov eax, dword [0x4d8af0]
mov byte [eax], 1
jmp case.0x4a2009.0
push ebp
call fcn.0049aa78
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049a64c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049ac14
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049ace0
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049ad48
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049adb8
pop ecx
jmp case.0x4a2009.0
call fcn.0049ae9c
jmp case.0x4a2009.0
push ebp
call fcn.0049aed0
pop ecx
jmp case.0x4a2009.0
call fcn.0049afb8
jmp case.0x4a2009.0
push ebp
call fcn.0049afe8
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049b0c0
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049b194
pop ecx
jmp case.0x4a2009.0
call fcn.0049b26c
jmp case.0x4a2009.0
push ebp
call fcn.0049b2ac
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049b33c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049ca68
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049ce60
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049d28c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049d4c0
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049551c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049d680
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004930b8
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049d800
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049d938
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049da74
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049dcd0
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049dd18
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049df48
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049e05c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049e17c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049e29c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049e34c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049e400
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049e4f8
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049e60c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049e758
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049e8a4
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049e9f0
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049db70
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049eae8
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049a278
pop ecx
jmp case.0x4a2009.0
call fcn.0049eb60
jmp case.0x4a2009.0
call fcn.0049eb70
jmp case.0x4a2009.0
push ebp
call fcn.0049eb80
pop ecx
jmp case.0x4a2009.0
mov eax, dword [0x4d908c]
mov byte [eax], 1
jmp case.0x4a2009.0
call fcn.0049ebdc
jmp case.0x4a2009.0
call fcn.0049ec1c
jmp case.0x4a2009.0
call fcn.0049ec6c
jmp case.0x4a2009.0
call fcn.0049eccc
jmp case.0x4a2009.0
push ebp
call fcn.0049ee68
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049eeec
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049ef70
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049effc
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049f084
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049f128
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049f1cc
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049f274
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004944b8
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00495918
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00496e10
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00494e64
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00499634
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00499878
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00493d58
pop ecx
jmp case.0x4a2009.0
call fcn.00499abc
jmp case.0x4a2009.0
push ebp
call fcn.00499ae0
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004934bc
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00493ce4
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049340c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00493464
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049f750
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049a8ec
pop ecx
jmp case.0x4a2009.0
call fcn.0049f31c
jmp case.0x4a2009.0
call fcn.0049f344
jmp case.0x4a2009.0
call fcn.0049f36c
jmp case.0x4a2009.0
push ebp
call fcn.00493308
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049f394
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049f428
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049f48c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049f59c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049f5e0
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049f940
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049fa24
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049fb20
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049a0ac
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049fc04
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049fc74
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049ff7c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a0970
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a0af0
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a0c20
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a0d90
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a1040
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a1170
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00499c20
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a12a0
pop ecx
jmp case.0x4a2009.0
call fcn.004a13d4
jmp case.0x4a2009.0
push ebp
call fcn.004a13f8
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a1448
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a148c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a1678
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049f8d0
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a16ac
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00492ff8
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00492f88
pop ecx
jmp case.0x4a2009.0
call fcn.00492f68
jmp case.0x4a2009.0
push ebp
call fcn.004a0810
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a06d8
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a0138
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00492220
pop ecx
jmp case.0x4a2009.0
call fcn.00492a60
jmp case.0x4a2009.0
push ebp
call fcn.00491aac
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004918d8
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a15d8
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a0ebc
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049a48c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049161c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004916b0
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00491730
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00491790
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00491528
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004914c4
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049148c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004913ac
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00491408
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049116c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00491248
pop ecx
jmp case.0x4a2009.0
call fcn.0049137c
jmp case.0x4a2009.0
push ebp
call fcn.00490d78
pop ecx
jmp case.0x4a2009.0
call fcn.004a13b0
jmp case.0x4a2009.0
push ebp
call fcn.00490be0
pop ecx
jmp case.0x4a2009.0
call fcn.00490ce4
jmp case.0x4a2009.0
push ebp
call fcn.00490b08
pop ecx
jmp case.0x4a2009.0
call fcn.00490b88
jmp case.0x4a2009.0
push ebp
call fcn.0049cca0
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049de50
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004909f8
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004907a8
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00490264
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00490378
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004904fc
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00490230
pop ecx
jmp case.0x4a2009.0
call fcn.004901c4
jmp case.0x4a2009.0
push ebp
call fcn.00490094
pop ecx
jmp case.0x4a2009.0
call fcn.0048f99c
jmp case.0x4a2009.0
push ebp
call fcn.0048f94c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0048f8f0
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0048f814
pop ecx
jmp case.0x4a2009.0
call fcn.0048f690
jmp case.0x4a2009.0
call fcn.0048f7b0
jmp case.0x4a2009.0
push ebp
xor eax, eax
call fcn.0048f7f4
pop ecx
jmp case.0x4a2009.0
push ebp
mov eax, 1
call fcn.0048f7f4
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0048f578
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0048f544
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0048f4e4
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a170c
pop ecx
jmp case.0x4a2009.0
push ebp
mov al, 1
call fcn.00491e20
pop ecx
jmp case.0x4a2009.0
push ebp
mov al, 2
call fcn.00491e20
pop ecx
jmp case.0x4a2009.0
push ebp
mov al, 3
call fcn.00491e20
pop ecx
jmp case.0x4a2009.0
push ebp
mov al, 4
call fcn.00491e20
pop ecx
jmp case.0x4a2009.0
push ebp
mov al, 5
call fcn.00491e20
pop ecx
jmp case.0x4a2009.0
mov eax, dword [0x4d908c]
mov byte [eax], 1
jmp case.0x4a2009.0
push ebp
call fcn.0048f480
pop ecx
jmp case.0x4a2009.0
push ebp
mov al, 6
call fcn.00491e20
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049b588
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049bc18
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0048f404
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0048f308
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049c1b8
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049c684
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a027c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a03c4
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.004a0508
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00493e28
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.00498d70
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0049d0b0
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0048f1e0
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0048f13c
pop ecx
jmp case.0x4a2009.0
push ebp
call fcn.0048f0e0
pop ecx
mov eax, dword [0x4d8938]
cmp byte [eax], 0
jne 0x4a4bd8
cmp byte [ebp - 0x1b1], 0x13
jbe 0x4a4bd2
call fcn.00422d54
mov byte [ebp - 0x1b1], 0
jmp 0x4a4bd8
inc byte [ebp - 0x1b1]
mov eax, dword [0x4d8e48]
cmp byte [eax], 0
jne 0x4a4bfb
mov eax, dword [0x4d8f60]
cmp byte [eax], 0
je 0x4a4bfb
mov eax, dword [0x4d8da4]
cmp dword [eax], 0
jle 0x4a4bfb
call fcn.004a1ac4
mov eax, dword [0x4d8c24]
mov eax, dword [eax]
mov edx, dword [0x4d8ef8]
cmp eax, dword [edx]
jge 0x4a4c1a
mov eax, dword [0x4d908c]
cmp byte [eax], 0
je 0x4a1d43
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a4c60
lea eax, [ebp - 0x30c]
mov edx, 0xc
call fcn.00405ad0
lea eax, [ebp - 0x1b0]
mov edx, 2
call fcn.00405ad0
lea eax, [ebp - 0x1a0]
mov edx, dword [0x41f228]
call fcn.00406660
ret