Function at 0x4a596d
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x61
push 0
push 0
dec ecx
jne 0x4a30fc
push ecx
push ebx
push esi
push edi
mov esi, eax
lea edi, [ebp - 0x1a0]
mov ecx, 0x68
rep movsd dword es:[edi], dword [esi]
mov ebx, edx
lea eax, [ebp - 0x1a0]
mov edx, dword [0x41f26c]
call fcn.004067ac
xor eax, eax
push ebp
push 0x4a60cd
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4e2c68]
mov dword [eax], ebx
mov eax, dword [0x4e30e8]
mov byte [eax], 0
mov eax, dword [0x4e301c]
cmp dword [eax], 0
jne 0x4a606f
push ebp
mov edx, 0x4a60e4
xor eax, eax
call fcn.0048eb38
pop ecx
push ebp
mov edx, 0x4a61d4
xor eax, eax
call fcn.0048eb38
pop ecx
push ebp
mov edx, 0x4a61f8
xor eax, eax
call fcn.0048eb38
pop ecx
push ebp
mov edx, 0x4a6224
xor eax, eax
call fcn.0048eb38
pop ecx
push ebp
mov edx, 0x4a6244
xor eax, eax
call fcn.0048eb38
pop ecx
jmp 0x4a606f
mov eax, dword [0x4e2c68]
inc dword [eax]
mov eax, dword [0x4e2b3c]
push eax
mov eax, dword [0x4e2c68]
mov eax, dword [eax]
mov edx, dword [0x4e2ecc]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov ecx, 0x7fffffff
mov edx, 1
call fcn.00405fd8
mov eax, dword [0x4e2b30]
mov byte [eax], 0
mov eax, dword [0x4e2e50]
cmp byte [eax], 0
je 0x4a31f3
mov edx, dword [0x4e2b00]
mov edx, dword [edx]
mov eax, dword [0x4e2b3c]
mov eax, dword [eax]
call fcn.00456ee8
mov edi, dword [0x4e2b3c]
mov edi, dword [edi]
mov dword [ebp - 0x1dc], edi
mov ebx, dword [ebp - 0x1dc]
test ebx, ebx
je 0x4a3210
sub ebx, 4
mov ebx, dword [ebx]
test ebx, ebx
jle 0x4a3228
mov eax, dword [0x4e2b3c]
mov eax, dword [eax]
movzx eax, byte [eax]
mov edx, dword [0x4e2f40]
mov byte [edx], al
jmp 0x4a3230
mov eax, dword [0x4e2f40]
mov byte [eax], 0x27
mov eax, dword [0x4e2b3c]
mov eax, dword [eax]
mov dword [ebp - 0x1b8], eax
mov esi, dword [ebp - 0x1b8]
test esi, esi
je 0x4a324c
sub esi, 4
mov esi, dword [esi]
dec esi
jle 0x4a326d
mov eax, dword [0x4e2e60]
push eax
mov eax, dword [0x4e2b3c]
mov eax, dword [eax]
mov ecx, 0x7fffffff
mov edx, 2
call fcn.00405fd8
jmp 0x4a3277
mov eax, dword [0x4e2e60]
call fcn.00405ab4
mov eax, dword [0x4e2d94]
cmp word [eax], 0xff
jne 0x4a328d
mov eax, dword [0x4e2d94]
mov word [eax], 0xfe
mov eax, dword [0x4e30c4]
cmp byte [eax], 0
je 0x4a33d8
mov eax, dword [0x4e2f40]
cmp byte [eax], 0
jbe 0x4a33d8
mov eax, dword [0x4e2f40]
cmp byte [eax], 0x27
je 0x4a33d8
call sub.user32.dll_GetFocus
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0x2dc]
mov eax, dword [0x4e2c68]
mov eax, dword [eax]
mov edx, 1
call fcn.00403f8c
lea edx, [ebp - 0x2dc]
mov eax, dword [0x4e2c6c]
call fcn.00405d18
mov eax, dword [0x4e2c0c]
cmp dword [eax], 1
jne 0x4a332d
mov eax, dword [0x4e308c]
mov edx, dword [0x4e2c6c]
mov edx, dword [edx]
call fcn.00405b08
mov eax, dword [0x4e308c]
mov eax, dword [eax]
call fcn.00405f78
mov edx, eax
mov eax, dword [0x4e2f08]
call fcn.0040a7b4
mov eax, dword [0x4e2f08]
push eax
call sub.kernel32.dll_OutputDebugStringA
jmp 0x4a33d8
mov eax, dword [0x4e2c0c]
cmp dword [eax], 0
jne 0x4a33d8
push 0x4a626c
mov eax, dword [0x4e2c6c]
push dword [eax]
push 0x4a627c
mov eax, dword [0x4e308c]
mov edx, 3
call fcn.00405e38
mov edx, 0x4a6280
mov eax, dword [0x4e2ec0]
call fcn.0040a7b4
mov eax, dword [0x4e308c]
mov eax, dword [eax]
call fcn.00405f78
mov edx, eax
mov eax, dword [0x4e2f08]
call fcn.0040a7b4
push 0x41
mov eax, dword [0x4e2ec0]
push eax
mov eax, dword [0x4e2f08]
push eax
mov eax, dword [0x4e2900]
mov eax, dword [eax]
push eax
call sub.user32.dll_MessageBoxA_1
cmp eax, 2
jne 0x4a33ae
xor edx, edx
mov eax, 0x3e7
call fcn.00458594
push 0
push 0
mov eax, dword [0x4e2900]
mov eax, dword [eax]
push eax
call sub.user32.dll_InvalidateRect
mov eax, dword [0x4e2900]
mov eax, dword [eax]
push eax
call sub.user32.dll_UpdateWindow
mov eax, dword [ebp - 0x1a8]
push eax
call sub.user32.dll_SetFocus
mov eax, dword [0x4e2c0c]
cmp dword [eax], 2
jne 0x4a3452
mov eax, dword [0x4e2f40]
cmp byte [eax], 0
jbe 0x4a3452
mov eax, dword [0x4e2f40]
cmp byte [eax], 0x27
je 0x4a3452
lea ecx, [ebp - 0x2dc]
mov eax, dword [0x4e2c68]
mov eax, dword [eax]
mov edx, 1
call fcn.00403f8c
lea edx, [ebp - 0x2dc]
mov eax, dword [0x4e2c6c]
call fcn.00405d18
mov eax, dword [0x4e308c]
mov edx, dword [0x4e2c6c]
mov edx, dword [edx]
call fcn.00405b08
mov eax, dword [0x4e308c]
mov eax, dword [eax]
call fcn.00405f78
mov edx, eax
mov eax, dword [0x4e2f08]
call fcn.0040a7b4
mov eax, dword [0x4e2f08]
push eax
call sub.kernel32.dll_OutputDebugStringA
mov eax, dword [0x4e2f40]
movzx eax, byte [eax]
cmp eax, 0xff
ja case.0x4a3465.0
jmp dword [eax*4 + 0x4a346c]
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
xor ecx, ecx
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e2ac0]
cmp dword [eax], 0
jne 0x4a389c
mov eax, dword [0x4e2c68]
inc dword [eax]
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
xor ecx, ecx
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e2ac0]
cmp dword [eax], 0
je 0x4a38cc
mov eax, dword [0x4e2c68]
inc dword [eax]
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
xor ecx, ecx
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e30f8]
dec dword [eax]
mov eax, dword [0x4e2b30]
mov byte [eax], 1
mov eax, dword [0x4e30f8]
cmp dword [eax], 0
jge case.0x4a3465.0
xor edx, edx
mov eax, 0x7e
call fcn.00458594
jmp case.0x4a3465.0
mov eax, dword [0x4e289c]
dec dword [eax]
mov eax, dword [0x4e2b30]
mov byte [eax], 1
mov eax, dword [0x4e289c]
cmp dword [eax], 0
jge case.0x4a3465.0
xor edx, edx
mov eax, 0x8c
call fcn.00458594
jmp case.0x4a3465.0
mov eax, dword [0x4e289c]
inc dword [eax]
mov eax, dword [0x4e289c]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4e3128]
mov ecx, 1
mov edx, dword [0x41f420]
call fcn.00406d7c
add esp, 4
mov eax, dword [0x4e289c]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4e2ae8]
mov ecx, 1
mov edx, dword [0x41f468]
call fcn.00406d7c
add esp, 4
mov eax, dword [0x4e289c]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4e2c88]
mov ecx, 1
mov edx, dword [0x41f444]
call fcn.00406d7c
add esp, 4
mov eax, dword [0x4e289c]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4e2ec4]
mov ecx, 1
mov edx, dword [0x41f48c]
call fcn.00406d7c
add esp, 4
mov eax, dword [0x4e289c]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4e2cfc]
mov ecx, 1
mov edx, dword [0x41f4b0]
call fcn.00406d7c
add esp, 4
lea eax, [ebp - 0x1ac]
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
call fcn.00405b4c
xor ecx, ecx
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e2ce4]
cmp byte [eax], 0
jb 0x4a3a39
mov eax, dword [0x4e2ce4]
cmp byte [eax], 4
jbe 0x4a3a49
mov edx, dword [ebp - 0x1ac]
mov eax, 0xd8
call fcn.00458594
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e3128]
mov edx, dword [edx]
mov byte [edx + eax], 0
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ae8]
mov edx, dword [edx]
mov ecx, dword [0x4e2ac0]
mov ecx, dword [ecx]
mov dword [edx + eax*4], ecx
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2c88]
mov edx, dword [edx]
lea eax, [edx + eax*4]
mov edx, dword [0x4e2c6c]
mov edx, dword [edx]
call fcn.00405b08
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ec4]
mov edx, dword [edx]
mov ecx, dword [0x4e2eb0]
mov ebx, dword [ecx]
mov dword [edx + eax*8], ebx
mov ebx, dword [ecx + 4]
mov dword [edx + eax*8 + 4], ebx
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
mov ecx, dword [0x4e2ce4]
movzx ecx, byte [ecx]
mov dword [edx + eax*4], ecx
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e289c]
cmp dword [eax], 0
jne 0x4a3af4
xor edx, edx
mov eax, 0x8c
call fcn.00458594
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4e2e60]
mov ecx, 4
mov edx, 1
call fcn.00406018
mov eax, dword [0x4e2b30]
mov byte [eax], 0
mov eax, dword [0x4e2abc]
mov byte [eax], 0
jmp 0x4a4289
lea eax, [ebp - 0x1ac]
call fcn.00405ab4
mov eax, dword [0x4e2e60]
cmp dword [eax], 0
jbe 0x4a3c1d
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
cmp byte [eax], 0x3c
je 0x4a3b95
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
cmp byte [eax], 0x3e
jne 0x4a3c1d
lea eax, [ebp - 0x1ac]
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx]
call fcn.00405c9c
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0
je 0x4a3bde
mov eax, dword [ebp - 0x1c0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1c0], eax
lea eax, [ebp - 0x2e4]
push eax
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c0]
mov edx, 2
call fcn.00405fd8
mov eax, dword [ebp - 0x2e4]
lea edx, [ebp - 0x2e0]
call fcn.00409b68
mov edx, dword [ebp - 0x2e0]
mov eax, dword [0x4e2e60]
call fcn.00405b08
mov eax, dword [0x4e2e60]
cmp dword [eax], 0
jbe 0x4a3cca
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
cmp byte [eax], 0x15
jne 0x4a3cca
lea eax, [ebp - 0x1ac]
push eax
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
mov ecx, 4
mov edx, 1
call fcn.00405fd8
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
je 0x4a3c8b
mov eax, dword [ebp - 0x1c8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1c8], eax
lea eax, [ebp - 0x2ec]
push eax
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c8]
mov edx, 5
call fcn.00405fd8
mov eax, dword [ebp - 0x2ec]
lea edx, [ebp - 0x2e8]
call fcn.00409b68
mov edx, dword [ebp - 0x2e8]
mov eax, dword [0x4e2e60]
call fcn.00405b08
cmp dword [ebp - 0x1ac], 0
jne 0x4a3ce3
lea eax, [ebp - 0x1ac]
mov edx, 0x4a6294
call fcn.00405b4c
xor ecx, ecx
mov edx, 0x4a6298
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [ebp - 0x1ac]
mov edx, 0x4a6294
call fcn.00405ec4
jne 0x4a3de3
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 1
jne 0x4a3d45
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2c88]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2c6c]
mov edx, dword [edx]
call fcn.00405ec4
je 0x4a3ddb
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 4
jne 0x4a3d79
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ec4]
mov edx, dword [edx]
fld qword [edx + eax*8]
mov eax, dword [0x4e2eb0]
fcomp qword [eax]
wait
fnstsw ax
sahf
je 0x4a3ddb
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 2
jne 0x4a3daa
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ae8]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2ac0]
cmp eax, dword [edx]
je 0x4a3ddb
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 3
jne 0x4a3de3
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ae8]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2ac0]
cmp eax, dword [edx]
jne 0x4a3de3
mov eax, dword [0x4e2b30]
mov byte [eax], 1
mov eax, dword [ebp - 0x1ac]
mov edx, 0x4a62a4
call fcn.00405ec4
jne 0x4a3ed1
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 1
jne 0x4a3e33
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2c88]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2c6c]
mov edx, dword [edx]
call fcn.00405ec4
ja 0x4a3ec9
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 4
jne 0x4a3e67
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ec4]
mov edx, dword [edx]
fld qword [edx + eax*8]
mov eax, dword [0x4e2eb0]
fcomp qword [eax]
wait
fnstsw ax
sahf
ja 0x4a3ec9
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 2
jne 0x4a3e98
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ae8]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2ac0]
cmp eax, dword [edx]
jg 0x4a3ec9
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 3
jne 0x4a3ed1
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ae8]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2ac0]
cmp eax, dword [edx]
jle 0x4a3ed1
mov eax, dword [0x4e2b30]
mov byte [eax], 1
mov eax, dword [ebp - 0x1ac]
mov edx, 0x4a62b0
call fcn.00405ec4
jne 0x4a3fbf
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 1
jne 0x4a3f21
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2c88]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2c6c]
mov edx, dword [edx]
call fcn.00405ec4
jb 0x4a3fb7
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 4
jne 0x4a3f55
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ec4]
mov edx, dword [edx]
fld qword [edx + eax*8]
mov eax, dword [0x4e2eb0]
fcomp qword [eax]
wait
fnstsw ax
sahf
jb 0x4a3fb7
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 2
jne 0x4a3f86
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ae8]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2ac0]
cmp eax, dword [edx]
jl 0x4a3fb7
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 3
jne 0x4a3fbf
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ae8]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2ac0]
cmp eax, dword [edx]
jge 0x4a3fbf
mov eax, dword [0x4e2b30]
mov byte [eax], 1
mov eax, dword [ebp - 0x1ac]
mov edx, 0x4a62bc
call fcn.00405ec4
jne 0x4a40ad
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 1
jne 0x4a400f
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2c88]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2c6c]
mov edx, dword [edx]
call fcn.00405ec4
jne 0x4a40a5
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 4
jne 0x4a4043
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ec4]
mov edx, dword [edx]
fld qword [edx + eax*8]
mov eax, dword [0x4e2eb0]
fcomp qword [eax]
wait
fnstsw ax
sahf
jne 0x4a40a5
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 2
jne 0x4a4074
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ae8]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2ac0]
cmp eax, dword [edx]
jne 0x4a40a5
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 3
jne 0x4a40ad
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ae8]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2ac0]
cmp eax, dword [edx]
je 0x4a40ad
mov eax, dword [0x4e2b30]
mov byte [eax], 1
mov eax, dword [ebp - 0x1ac]
mov edx, 0x4a62cc
call fcn.00405ec4
jne 0x4a419b
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 1
jne 0x4a40fd
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2c88]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2c6c]
mov edx, dword [edx]
call fcn.00405ec4
jbe 0x4a4193
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 4
jne 0x4a4131
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ec4]
mov edx, dword [edx]
fld qword [edx + eax*8]
mov eax, dword [0x4e2eb0]
fcomp qword [eax]
wait
fnstsw ax
sahf
jbe 0x4a4193
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 2
jne 0x4a4162
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ae8]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2ac0]
cmp eax, dword [edx]
jle 0x4a4193
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 3
jne 0x4a419b
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ae8]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2ac0]
cmp eax, dword [edx]
jg 0x4a419b
mov eax, dword [0x4e2b30]
mov byte [eax], 1
mov eax, dword [ebp - 0x1ac]
mov edx, 0x4a62dc
call fcn.00405ec4
jne 0x4a4289
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 1
jne 0x4a41eb
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2c88]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2c6c]
mov edx, dword [edx]
call fcn.00405ec4
jae 0x4a4281
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 4
jne 0x4a421f
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ec4]
mov edx, dword [edx]
fld qword [edx + eax*8]
mov eax, dword [0x4e2eb0]
fcomp qword [eax]
wait
fnstsw ax
sahf
jae 0x4a4281
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 2
jne 0x4a4250
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ae8]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2ac0]
cmp eax, dword [edx]
jge 0x4a4281
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2cfc]
mov edx, dword [edx]
cmp dword [edx + eax*4], 3
jne 0x4a4289
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e2ae8]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2ac0]
cmp eax, dword [edx]
jl 0x4a4289
mov eax, dword [0x4e2b30]
mov byte [eax], 1
mov eax, dword [0x4e2abc]
cmp byte [eax], 0
je 0x4a3b60
mov eax, dword [0x4e2b30]
cmp byte [eax], 0
je 0x4a42b6
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e3128]
mov edx, dword [edx]
cmp byte [edx + eax], 1
jne 0x4a42c5
mov eax, dword [0x4e2c68]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
jmp 0x4a42d8
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e3128]
mov edx, dword [edx]
mov byte [edx + eax], 1
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e289c]
cmp dword [eax], 0
jne 0x4a42fb
xor edx, edx
mov eax, 0x8c
call fcn.00458594
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e3128]
mov edx, dword [edx]
cmp byte [edx + eax], 1
jne 0x4a4362
mov eax, dword [0x4e2c68]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
jmp 0x4a4375
mov eax, dword [0x4e289c]
mov eax, dword [eax]
mov edx, dword [0x4e3128]
mov edx, dword [edx]
mov byte [edx + eax], 1
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e30f8]
inc dword [eax]
mov eax, dword [0x4e30f8]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4e2e00]
mov ecx, 1
mov edx, dword [0x41f3fc]
call fcn.00406d7c
add esp, 4
mov eax, dword [0x4e30f8]
mov eax, dword [eax]
mov edx, dword [0x4e2e00]
mov edx, dword [edx]
mov byte [edx + eax], 0
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4e2e60]
mov ecx, 4
mov edx, 1
call fcn.00406018
xor ecx, ecx
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e2ac0]
cmp dword [eax], 0
jne 0x4a443f
mov eax, dword [0x4e2c68]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
jmp 0x4a4452
mov eax, dword [0x4e30f8]
mov eax, dword [eax]
mov edx, dword [0x4e2e00]
mov edx, dword [edx]
mov byte [edx + eax], 1
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4e2e60]
mov ecx, 4
mov edx, 1
call fcn.00406018
xor ecx, ecx
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e2ac0]
cmp dword [eax], 0
je 0x4a44e7
mov eax, dword [0x4e30f8]
mov eax, dword [eax]
mov edx, dword [0x4e2e00]
mov edx, dword [edx]
cmp byte [edx + eax], 1
jne 0x4a44f6
mov eax, dword [0x4e2c68]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
jmp 0x4a4509
mov eax, dword [0x4e30f8]
mov eax, dword [eax]
mov edx, dword [0x4e2e00]
mov edx, dword [edx]
mov byte [edx + eax], 1
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4e30f8]
mov eax, dword [eax]
mov edx, dword [0x4e2e00]
mov edx, dword [edx]
cmp byte [edx + eax], 1
jne 0x4a457d
mov eax, dword [0x4e2c68]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
jmp 0x4a4590
mov eax, dword [0x4e30f8]
mov eax, dword [eax]
mov edx, dword [0x4e2e00]
mov edx, dword [edx]
mov byte [edx + eax], 1
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e30f8]
inc dword [eax]
mov eax, dword [0x4e30f8]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4e2e00]
mov ecx, 1
mov edx, dword [0x41f3fc]
call fcn.00406d7c
add esp, 4
mov eax, dword [0x4e30f8]
mov eax, dword [eax]
mov edx, dword [0x4e2e00]
mov edx, dword [edx]
mov byte [edx + eax], 0
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4e2e60]
mov ecx, 4
mov edx, 1
call fcn.00406018
xor ecx, ecx
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e2ac0]
cmp dword [eax], 0
je 0x4a465a
mov eax, dword [0x4e2c68]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
jmp 0x4a466d
mov eax, dword [0x4e30f8]
mov eax, dword [eax]
mov edx, dword [0x4e2e00]
mov edx, dword [edx]
mov byte [edx + eax], 1
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4e2e60]
mov ecx, 4
mov edx, 1
call fcn.00406018
mov eax, dword [0x4e3038]
inc dword [eax]
mov eax, dword [0x4e3038]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4e2a20]
mov ecx, 1
mov edx, dword [0x41f4f8]
call fcn.00406d7c
add esp, 4
mov eax, dword [0x4e3038]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4e2a30]
mov ecx, 1
mov edx, dword [0x41f4d4]
call fcn.00406d7c
add esp, 4
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
cmp byte [edx + eax + 0xc], 0
jne 0x4a4958
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
mov eax, 0x4a62ec
call fcn.0042824c
test eax, eax
jle 0x4a4873
mov eax, dword [0x4e3038]
dec dword [eax]
xor ecx, ecx
mov edx, 0x4a62f0
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e3038]
inc dword [eax]
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov ecx, dword [0x4e2ac0]
mov ecx, dword [ecx]
mov dword [edx + eax], ecx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
mov eax, 0x4a62ec
call fcn.0042824c
test eax, eax
jle 0x4a481d
mov eax, dword [0x4e3038]
dec dword [eax]
xor ecx, ecx
mov edx, 0x4a62f0
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e3038]
inc dword [eax]
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov ecx, dword [0x4e2ac0]
mov ecx, dword [ecx]
mov dword [edx + eax + 4], ecx
mov eax, dword [0x4e3038]
dec dword [eax]
xor ecx, ecx
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e3038]
inc dword [eax]
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov ecx, dword [0x4e2ac0]
mov ecx, dword [ecx]
mov dword [edx + eax + 8], ecx
jmp 0x4a48de
mov eax, dword [0x4e3038]
dec dword [eax]
xor ecx, ecx
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e3038]
inc dword [eax]
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov ecx, dword [0x4e2ac0]
mov ecx, dword [ecx]
mov dword [edx + eax + 4], ecx
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov dword [edx + eax + 8], 1
jmp 0x4a48de
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov dword [edx + eax], 1
mov eax, dword [0x4e3038]
dec dword [eax]
xor ecx, ecx
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e3038]
inc dword [eax]
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov ecx, dword [0x4e2ac0]
mov ecx, dword [ecx]
mov dword [edx + eax + 4], ecx
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov dword [edx + eax + 8], 1
mov eax, dword [0x4e3038]
mov eax, dword [eax]
mov edx, dword [0x4e2a30]
mov edx, dword [edx]
mov ecx, dword [0x4e2c68]
mov ecx, dword [ecx]
mov dword [edx + eax*4], ecx
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov byte [edx + eax + 0xc], 1
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
cmp dword [edx + eax + 8], 0
jne 0x4a4930
xor edx, edx
mov eax, 0x108
call fcn.00458594
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov eax, dword [edx + eax + 8]
mov edx, dword [0x4e3038]
imul edx, dword [edx], 0xd
mov ecx, dword [0x4e2a20]
mov ecx, dword [ecx]
sub dword [ecx + edx], eax
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov eax, dword [edx + eax + 8]
mov edx, dword [0x4e3038]
imul edx, dword [edx], 0xd
mov ecx, dword [0x4e2a20]
mov ecx, dword [ecx]
add dword [ecx + edx], eax
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
cmp dword [edx + eax + 8], 0
jle 0x4a49c1
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov eax, dword [edx + eax]
mov edx, dword [0x4e3038]
imul edx, dword [edx], 0xd
mov ecx, dword [0x4e2a20]
mov ecx, dword [ecx]
cmp eax, dword [ecx + edx + 4]
jg 0x4a4a02
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
cmp dword [edx + eax + 8], 0
jge 0x4a4a2b
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov eax, dword [edx + eax]
mov edx, dword [0x4e3038]
imul edx, dword [edx], 0xd
mov ecx, dword [0x4e2a20]
mov ecx, dword [ecx]
cmp eax, dword [ecx + edx + 4]
jge 0x4a4a2b
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov byte [edx + eax + 0xc], 0
mov eax, dword [0x4e2c68]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
mov eax, dword [0x4e3038]
dec dword [eax]
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4e2e60]
mov ecx, 4
mov edx, 1
call fcn.00406018
xor ecx, ecx
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e3038]
inc dword [eax]
mov eax, dword [0x4e3038]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4e2a20]
mov ecx, 1
mov edx, dword [0x41f4f8]
call fcn.00406d7c
add esp, 4
mov eax, dword [0x4e3038]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4e2a30]
mov ecx, 1
mov edx, dword [0x41f4d4]
call fcn.00406d7c
add esp, 4
mov eax, dword [0x4e3038]
mov eax, dword [eax]
mov edx, dword [0x4e2a30]
mov edx, dword [edx]
mov ecx, dword [0x4e2c68]
mov ecx, dword [ecx]
mov dword [edx + eax*4], ecx
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov eax, dword [edx + eax - 0xd]
mov edx, dword [0x4e3038]
imul edx, dword [edx], 0xd
mov ecx, dword [0x4e2a20]
mov ecx, dword [ecx]
mov dword [ecx + edx], eax
mov eax, dword [0x4e2ac0]
cmp dword [eax], 0
jne 0x4a4b4a
mov eax, dword [0x4e2c68]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
mov eax, dword [0x4e3038]
dec dword [eax]
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4e2e60]
mov ecx, 4
mov edx, 1
call fcn.00406018
xor ecx, ecx
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e3038]
inc dword [eax]
mov eax, dword [0x4e3038]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4e2a20]
mov ecx, 1
mov edx, dword [0x41f4f8]
call fcn.00406d7c
add esp, 4
mov eax, dword [0x4e3038]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4e2a30]
mov ecx, 1
mov edx, dword [0x41f4d4]
call fcn.00406d7c
add esp, 4
mov eax, dword [0x4e3038]
mov eax, dword [eax]
mov edx, dword [0x4e2a30]
mov edx, dword [edx]
mov ecx, dword [0x4e2c68]
mov ecx, dword [ecx]
mov dword [edx + eax*4], ecx
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov eax, dword [edx + eax - 0xd]
mov edx, dword [0x4e3038]
imul edx, dword [edx], 0xd
mov ecx, dword [0x4e2a20]
mov ecx, dword [ecx]
mov dword [ecx + edx], eax
mov eax, dword [0x4e2ac0]
cmp dword [eax], 0
je 0x4a4c69
mov eax, dword [0x4e2c68]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
mov eax, dword [0x4e3038]
dec dword [eax]
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4e2e60]
mov ecx, 4
mov edx, 1
call fcn.00406018
mov eax, dword [0x4e3038]
cmp dword [eax], 0
jne 0x4a4ce3
xor edx, edx
mov eax, 0x6e
call fcn.00458594
mov eax, dword [0x4e2c68]
mov edx, dword [ebp - 0x1a8]
mov dword [eax], edx
mov eax, dword [0x4e3038]
imul eax, dword [eax], 0xd
mov edx, dword [0x4e2a20]
mov edx, dword [edx]
mov byte [edx + eax + 0xc], 0
mov eax, dword [0x4e3038]
dec dword [eax]
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e3038]
inc dword [eax]
mov eax, dword [0x4e3038]
cmp dword [eax], 0x1e
jle 0x4a4d36
xor edx, edx
mov eax, 0x6c
call fcn.00458594
mov eax, dword [0x4e3038]
mov eax, dword [eax]
mov edx, dword [0x4e2a30]
mov edx, dword [edx]
mov ecx, dword [0x4e2c68]
mov ecx, dword [ecx]
mov dword [edx + eax*4], ecx
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e3038]
cmp dword [eax], 0
jne 0x4a4d73
xor edx, edx
mov eax, 0x6e
call fcn.00458594
xor ecx, ecx
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e2ac0]
cmp dword [eax], 0
jne 0x4a4daa
mov eax, dword [0x4e3038]
mov eax, dword [eax]
mov edx, dword [0x4e2a30]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
dec eax
mov edx, dword [0x4e2c68]
mov dword [edx], eax
mov eax, dword [0x4e3038]
dec dword [eax]
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e3038]
cmp dword [eax], 0
jne 0x4a4dd4
xor edx, edx
mov eax, 0x6e
call fcn.00458594
mov eax, dword [0x4e3038]
mov eax, dword [eax]
mov edx, dword [0x4e2a30]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
dec eax
mov edx, dword [0x4e2c68]
mov dword [edx], eax
mov eax, dword [0x4e3038]
dec dword [eax]
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e3038]
cmp dword [eax], 0
jne 0x4a4e19
xor edx, edx
mov eax, 0x6e
call fcn.00458594
mov eax, dword [0x4e3038]
mov eax, dword [eax]
mov edx, dword [0x4e2a30]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
dec eax
mov edx, dword [0x4e2c68]
mov dword [edx], eax
mov eax, dword [0x4e3038]
dec dword [eax]
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
mov edx, 0x4a62fc
call fcn.00405ec4
jbe 0x4a4ec8
xor ecx, ecx
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
lea eax, [ebp - 0x1a0]
mov edx, dword [0x4e2c6c]
mov edx, dword [edx]
call fcn.00405b4c
mov eax, dword [0x4e2ac0]
mov eax, dword [eax]
mov dword [ebp - 0x160], eax
mov eax, dword [0x4e2eb0]
mov edx, dword [eax]
mov dword [ebp - 0x120], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x11c], edx
mov eax, dword [0x4e2aac]
movzx eax, byte [eax]
mov byte [ebp - 0xa0], al
mov eax, dword [0x4e2b0c]
mov eax, dword [eax]
mov dword [ebp - 0x90], eax
mov eax, dword [0x4e2f64]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, dword [0x4e2fa4]
cmp dword [eax], 0
jne 0x4a4ede
xor edx, edx
mov eax, 0x6f
call fcn.00458594
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2c68]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 8]
mov edx, dword [0x4e29c4]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0xc]
mov edx, dword [0x4e30ec]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x10]
mov edx, dword [0x4e2968]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x14]
mov edx, dword [0x4e2c08]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x18]
mov edx, dword [0x4e30a8]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x1c]
mov edx, dword [0x4e2dc8]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x20]
mov edx, dword [0x4e3050]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x24]
mov edx, dword [0x4e2d54]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x28]
mov edx, dword [0x4e30a0]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x2c]
mov edx, dword [0x4e2ee0]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x30]
mov edx, dword [0x4e2e9c]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x44]
mov edx, dword [0x4e30f8]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x48]
mov edx, dword [0x4e289c]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
dec dword [eax]
mov eax, dword [0x4e2b30]
mov byte [eax], 1
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
cmp dword [edx + eax*4 + 0x50], 1
je 0x4a608e
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
cmp dword [edx + eax*4 + 0x50], 2
jne case.0x4a3465.0
mov eax, dword [0x4e2df4]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4e2e94]
mov byte [eax], 0
jmp case.0x4a3465.0
mov eax, dword [0x4e2fa4]
cmp dword [eax], 0
jne 0x4a50d6
xor edx, edx
mov eax, 0x70
call fcn.00458594
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov edx, dword [0x4e2c68]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 8]
mov edx, dword [0x4e29c4]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0xc]
mov edx, dword [0x4e30ec]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x10]
mov edx, dword [0x4e2968]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x14]
mov edx, dword [0x4e2c08]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x18]
mov edx, dword [0x4e30a8]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x1c]
mov edx, dword [0x4e2dc8]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x20]
mov edx, dword [0x4e3050]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x24]
mov edx, dword [0x4e2d54]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x28]
mov edx, dword [0x4e30a0]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x2c]
mov edx, dword [0x4e2ee0]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x30]
mov edx, dword [0x4e2e9c]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x44]
mov edx, dword [0x4e30f8]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov eax, dword [edx + eax*4 + 0x48]
mov edx, dword [0x4e289c]
mov dword [edx], eax
mov eax, dword [0x4e2fa4]
dec dword [eax]
mov eax, dword [0x4e2b30]
mov byte [eax], 1
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
cmp dword [edx + eax*4 + 0x50], 1
je 0x4a608e
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
cmp dword [edx + eax*4 + 0x50], 2
jne case.0x4a3465.0
mov eax, dword [0x4e2df4]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4e2e94]
mov byte [eax], 0
jmp case.0x4a3465.0
mov ecx, 1
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov edx, dword [0x4e2c6c]
mov edx, dword [edx]
lea eax, [ebp - 0x2f4]
mov ecx, 0x4a6308
call fcn.00405dc4
mov eax, dword [ebp - 0x2f4]
lea edx, [ebp - 0x2f0]
call fcn.004281c4
mov edx, dword [ebp - 0x2f0]
mov eax, dword [0x4e2c6c]
call fcn.00405b08
mov eax, dword [0x4e2c68]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4e2b30]
mov byte [eax], 0
jmp 0x4a53f8
mov eax, dword [0x4e2c68]
inc dword [eax]
mov eax, dword [0x4e2ff8]
push eax
mov eax, dword [0x4e2c68]
mov eax, dword [eax]
mov edx, dword [0x4e2ecc]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov ecx, 0x7fffffff
mov edx, 1
call fcn.00405fd8
mov eax, dword [0x4e2e50]
cmp byte [eax], 0
je 0x4a5368
mov edx, dword [0x4e2b00]
mov edx, dword [edx]
mov eax, dword [0x4e2ff8]
mov eax, dword [eax]
call fcn.00456ee8
mov eax, dword [0x4e308c]
mov edx, dword [0x4e2ff8]
mov edx, dword [edx]
call fcn.00405b08
mov eax, dword [0x4e2c6c]
mov eax, dword [eax]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
je 0x4a53ad
mov eax, dword [ebp - 0x1d0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1d0], eax
lea eax, [ebp - 0x2fc]
push eax
mov eax, dword [0x4e308c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1d0]
mov edx, 2
call fcn.00405fd8
mov eax, dword [ebp - 0x2fc]
lea edx, [ebp - 0x2f8]
call fcn.004281c4
mov edx, dword [ebp - 0x2f8]
mov eax, dword [0x4e2c6c]
mov eax, dword [eax]
call fcn.00405ec4
jne 0x4a53f8
mov eax, dword [0x4e2b30]
mov byte [eax], 1
mov eax, dword [0x4e2b30]
cmp byte [eax], 0
jne 0x4a5417
mov eax, dword [0x4e2c68]
mov eax, dword [eax]
mov edx, dword [0x4e2f4c]
cmp eax, dword [edx]
jl 0x4a531c
mov eax, dword [0x4e2b30]
cmp byte [eax], 0
jne case.0x4a3465.0
mov edx, dword [0x4e2c6c]
mov edx, dword [edx]
mov eax, 0x71
call fcn.00458594
jmp case.0x4a3465.0
mov ecx, 1
mov edx, 0x4a6288
lea eax, [ebp - 0x1a0]
call fcn.004d778c
mov eax, dword [0x4e2fa4]
inc dword [eax]
mov eax, dword [0x4e2fa4]
mov eax, dword [eax]
inc eax
push eax
mov eax, dword [0x4e2e80]
mov ecx, 1
mov edx, dword [0x41f3d8]
call fcn.00406d7c
add esp, 4
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov ecx, dword [0x4e2c68]
mov ecx, dword [ecx]
mov dword [edx + eax*4], ecx
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov ecx, dword [0x4e29c4]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 8], ecx
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov ecx, dword [0x4e30ec]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0xc], ecx
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov ecx, dword [0x4e2968]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x10], ecx
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov ecx, dword [0x4e2c08]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x14], ecx
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov ecx, dword [0x4e30a8]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x18], ecx
mov eax, dword [0x4e2fa4]
imul eax, dword [eax], 0x13
mov edx, dword [0x4e2e80]
mov edx, dword [edx]
mov ecx, dword [0x4e2dc8]
mov ecx, dword [ecx]
mov dword [edx + eax*4 + 0x1c], ecx
mov edx, dword [0x4e2c6c]
mov edx, dword [edx]
lea eax, [ebp - 0x304]
mov ecx, 0x4a6308
call fcn.00405dc4
mov eax, dword [ebp - 0x304]
lea edx, [ebp - 0x300]
call fcn.004281c4
mov edx, dword [ebp - 0x300]
mov eax, dword [0x4e2c6c]
call fcn.00405b08
mov eax, dword [0x4e2c68]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4e2b30]
mov byte [eax], 0
jmp 0x4a5667
mov eax, dword [0x4e2c68]
inc dword [eax]
mov eax, dword [0x4e2ff8]
push eax
mov eax, dword [0x4e2c68]
mov eax, dword [eax]
mov edx, dword [0x4e2ecc]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
mov ecx, 0x7fffffff
mov edx, 1
call fcn.00405fd8
mov eax, dword [0x4e2e50]
cmp byte [eax], 0
je 0x4a55d7
mov edx, dword [0x4e2b00]
mov edx, dword [edx]
mov eax, dword [0x4e2ff8]
mov eax, dword [eax]
call fcn.00456ee8
mov eax, dword [0x4e308c]
mov edx, dword [0x4e2ff8]
mov edx, dword [edx]
call fcn.00405b08
mov eax, dword [0x4e2c6c]
mov eax, dword [eax]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
je 0x4a561c
mov eax, dword [ebp - 0x1d8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1d8], eax
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [0x4e308c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1d8]
mov edx, 2
call fcn.00405fd8
mov eax, dword [ebp - 0x30c]
lea edx, [ebp - 0x308]
call fcn.004281c4
mov edx, dword [ebp - 0x308]
mov eax, dword [0x4e2c6c]
mov eax, dword [eax]
call fcn.00405ec4
jne 0x4a5667
mov eax, dword [0x4e2b30]
mov byte [eax], 1
mov eax, dword [0x4e2b30]
cmp byte [eax], 0
jne 0x4a5686
mov eax, dword [0x4e2c68]
mov eax, dword [eax]
mov edx, dword [0x4e2f4c]
cmp eax, dword [edx]
jl 0x4a558b
mov eax, dword [0x4e2b30]
cmp byte [eax], 0
jne case.0x4a3465.0
mov edx, dword [0x4e2c6c]
mov edx, dword [edx]
mov eax, 0x71
call fcn.00458594
jmp case.0x4a3465.0
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov edx, dword [0x4e2c68]
mov dword [edx], eax
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov edx, dword [0x4e2c68]
mov dword [edx], eax
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov edx, dword [0x4e2c68]
mov dword [edx], eax
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
mov eax, dword [0x4e2e60]
mov eax, dword [eax]
movzx eax, byte [eax + 3]
shl eax, 0x18
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 2]
shl edx, 0x10
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [0x4e2e60]
mov edx, dword [edx]
movzx edx, byte [edx]
add eax, edx
mov edx, dword [0x4e2c68]
mov dword [edx], eax
mov eax, dword [0x4e2b30]
mov byte [eax], 1
jmp case.0x4a3465.0
push ebp
call fcn.0049b9d0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049b594
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049bb6c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049bc38
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049bca0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049bd10
pop ecx
jmp case.0x4a3465.0
call fcn.0049bdf4
jmp case.0x4a3465.0
push ebp
call fcn.0049be28
pop ecx
jmp case.0x4a3465.0
call fcn.0049bf10
jmp case.0x4a3465.0
push ebp
call fcn.0049bf40
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049c030
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049c104
pop ecx
jmp case.0x4a3465.0
call fcn.0049c1dc
jmp case.0x4a3465.0
push ebp
call fcn.0049c21c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049c2ac
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049de30
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049e238
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049e664
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049e8a0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004963e4
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049ea60
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00493f50
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049ebe0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049ed18
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049ee54
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049f0b0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049f0f8
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049f328
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049f43c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049f55c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049f67c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049f72c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049f7e0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049f8d8
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049f9ec
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049fb38
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049fc84
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049fdd0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049ef50
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049fec8
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049b1d0
pop ecx
jmp case.0x4a3465.0
call fcn.0049ff40
jmp case.0x4a3465.0
call fcn.0049ff50
jmp case.0x4a3465.0
push ebp
call fcn.0049ff60
pop ecx
jmp case.0x4a3465.0
mov eax, dword [0x4e30e8]
mov byte [eax], 1
jmp case.0x4a3465.0
call fcn.0049ffbc
jmp case.0x4a3465.0
call fcn.0049fffc
jmp case.0x4a3465.0
call fcn.004a004c
jmp case.0x4a3465.0
push ebp
call fcn.004a00ac
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a0308
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a038c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a0410
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a049c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a0524
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a05c8
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a066c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a0714
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00495368
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004967e0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00497cd8
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00495d2c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049a58c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049a7d0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00494c08
pop ecx
jmp case.0x4a3465.0
call fcn.0049aa14
jmp case.0x4a3465.0
push ebp
call fcn.0049aa38
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00494354
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00494b94
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004942a4
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004942fc
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a0bf0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049b844
pop ecx
jmp case.0x4a3465.0
call fcn.004a07bc
jmp case.0x4a3465.0
call fcn.004a07e4
jmp case.0x4a3465.0
call fcn.004a080c
jmp case.0x4a3465.0
push ebp
call fcn.004941a0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a0834
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a08c8
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a092c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a0a3c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a0a80
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a0de0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a0ec4
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a0fc0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049b004
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a10a4
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a1114
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a141c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a1e10
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a1f90
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a20c0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a2230
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a24e0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a2610
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049ab78
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a2740
pop ecx
jmp case.0x4a3465.0
call fcn.004a2874
jmp case.0x4a3465.0
push ebp
call fcn.004a2898
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a28e8
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a2ad4
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a0d70
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a2b08
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00493e90
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00493e20
pop ecx
jmp case.0x4a3465.0
call fcn.00493e00
jmp case.0x4a3465.0
push ebp
call fcn.004a1cb0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a1b78
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a15d8
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004930b8
pop ecx
jmp case.0x4a3465.0
call fcn.004938f8
jmp case.0x4a3465.0
push ebp
call fcn.00492950
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049277c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a2a34
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a235c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049b3e4
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004924c0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00492554
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004925d4
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00492634
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004923cc
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00492368
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00492330
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00492250
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004922ac
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00492010
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004920ec
pop ecx
jmp case.0x4a3465.0
call fcn.00492220
jmp case.0x4a3465.0
push ebp
call fcn.00491c1c
pop ecx
jmp case.0x4a3465.0
call fcn.004a2850
jmp case.0x4a3465.0
push ebp
call fcn.004918ec
pop ecx
jmp case.0x4a3465.0
call fcn.00491adc
jmp case.0x4a3465.0
push ebp
call fcn.00491814
pop ecx
jmp case.0x4a3465.0
call fcn.00491894
jmp case.0x4a3465.0
push ebp
call fcn.0049e074
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049f230
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00491704
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004914b4
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00490efc
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00491010
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00491194
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00490ec8
pop ecx
jmp case.0x4a3465.0
call fcn.00490e5c
jmp case.0x4a3465.0
push ebp
call fcn.00490d2c
pop ecx
jmp case.0x4a3465.0
call fcn.00490634
jmp case.0x4a3465.0
push ebp
call fcn.0049055c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00490500
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00490424
pop ecx
jmp case.0x4a3465.0
call fcn.004902a0
jmp case.0x4a3465.0
call fcn.004903c0
jmp case.0x4a3465.0
push ebp
xor eax, eax
call fcn.00490404
pop ecx
jmp case.0x4a3465.0
push ebp
mov eax, 1
call fcn.00490404
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049017c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00490148
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004900e8
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a2b68
pop ecx
jmp case.0x4a3465.0
push ebp
mov al, 1
call fcn.00492cc4
pop ecx
jmp case.0x4a3465.0
push ebp
mov al, 2
call fcn.00492cc4
pop ecx
jmp case.0x4a3465.0
push ebp
mov al, 3
call fcn.00492cc4
pop ecx
jmp case.0x4a3465.0
push ebp
mov al, 4
call fcn.00492cc4
pop ecx
jmp case.0x4a3465.0
push ebp
mov al, 5
call fcn.00492cc4
pop ecx
jmp case.0x4a3465.0
mov eax, dword [0x4e30e8]
mov byte [eax], 1
jmp case.0x4a3465.0
push ebp
call fcn.0049004c
pop ecx
jmp case.0x4a3465.0
push ebp
mov al, 6
call fcn.00492cc4
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049c578
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049cdc8
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0048ffd0
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0048fed4
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049d4dc
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049da00
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a171c
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a1864
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.004a19a8
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00494cd8
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.00499c14
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0049e488
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0048fdac
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0048fd08
pop ecx
jmp case.0x4a3465.0
call fcn.004a02e0
jmp case.0x4a3465.0
push ebp
call fcn.0048fbb4
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0048fb20
pop ecx
jmp case.0x4a3465.0
push ebp
call fcn.0048fa70
pop ecx
mov eax, dword [0x4e2960]
cmp byte [eax], 0
jne 0x4a604c
cmp byte [ebp - 0x1b1], 0x13
jbe 0x4a6046
call fcn.00422dd0
mov byte [ebp - 0x1b1], 0
jmp 0x4a604c
inc byte [ebp - 0x1b1]
mov eax, dword [0x4e2e94]
cmp byte [eax], 0
jne 0x4a606f
mov eax, dword [0x4e2fb4]
cmp byte [eax], 0
je 0x4a606f
mov eax, dword [0x4e2df4]
cmp dword [eax], 0
jle 0x4a606f
call fcn.004a2f20
mov eax, dword [0x4e2c68]
mov eax, dword [eax]
mov edx, dword [0x4e2f4c]
cmp eax, dword [edx]
jge 0x4a608e
mov eax, dword [0x4e30e8]
cmp byte [eax], 0
je 0x4a319f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a60d4
lea eax, [ebp - 0x30c]
mov edx, 0xc
call fcn.00405ad8
lea eax, [ebp - 0x1b0]
mov edx, 2
call fcn.00405ad8
lea eax, [ebp - 0x1a0]
mov edx, dword [0x41f26c]
call fcn.00406668
ret