Function at 0x4b5dd8
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x26
push 0
push 0
dec ecx
jne 0x4b5de0
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00404b34
xor eax, eax
push ebp
push 0x4b95e6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
cmp byte [eax], 0x2b
jne 0x4b5f44
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 8]
call fcn.00404944
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.00404ba4
push 0
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 0x7c], 0x2f
lea ecx, [ebp - 0x7c]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
call fcn.0047bf6c
mov edx, dword [ebp - 0x78]
lea eax, [ebp - 0x1c]
call fcn.0040471c
mov eax, dword [ebp - 0x18]
mov edx, 0x4b95fc
call fcn.00404a90
jne 0x4b5e67
mov byte [0x53617c], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x4b9608
call fcn.00404a90
jne 0x4b5e7d
mov byte [0x53617d], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x4b9614
call fcn.00404a90
jne 0x4b5e93
mov byte [0x53617d], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x4b9624
call fcn.00404a90
jne 0x4b5ea9
mov byte [0x53617e], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x4b9630
call fcn.00404a90
jne 0x4b5ebf
mov byte [0x53617e], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x4b9640
call fcn.00404a90
jne 0x4b5edf
mov byte [0x53617f], 1
call fcn.00406bb0
mov dword [0x536030], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x4b964c
call fcn.00404a90
jne 0x4b5ef5
mov byte [0x53617f], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x4b965c
call fcn.00404a90
jne 0x4b5f14
mov eax, dword [ebp - 4]
mov byte [eax + 0x4fc], 0
inc dword [0x53614c]
mov eax, dword [ebp - 0x18]
mov edx, 0x4b966c
call fcn.00404a90
jne case.default.0x4b609a
mov eax, dword [ebp - 4]
call fcn.004b54d4
mov eax, dword [ebp - 4]
mov byte [eax + 0x4fc], 0
inc dword [0x53614c]
jmp case.default.0x4b609a
mov eax, dword [ebp - 8]
call fcn.00404944
cmp eax, 0x10
jge 0x4b5f9d
mov eax, dword [ebp - 8]
cmp byte [eax], 0x3d
jne case.default.0x4b609a
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 8]
call fcn.00404944
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.00404ba4
mov eax, dword [ebp - 0x1c]
mov edx, 0x4b967c
call fcn.00404a90
jne case.default.0x4b609a
mov eax, dword [0x534350]
mov byte [eax + 0x13c], 1
jmp case.default.0x4b609a
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404ba4
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 8]
call fcn.00404944
mov ecx, eax
sub ecx, 0x10
mov edx, 0x11
mov eax, dword [ebp - 8]
call fcn.00404ba4
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 0xc]
call fcn.0050c694
cmp dword [0x534350], 0
jne case.0x4b609a.528
movzx eax, word [ebp - 0x60]
cmp eax, 0x20f
jg 0x4b607f
je 0x4b63d9
cmp eax, 0x208
jg 0x4b6052
je 0x4b63c9
cmp eax, 0x1f9
jg 0x4b603b
je 0x4b6185
add eax, 0xffffffce
sub eax, 2
jb case.0x4b609a.528
sub eax, 0x1c3
je 0x4b621e
dec eax
je 0x4b6168
jmp case.default.0x4b609a
sub eax, 0x1fa
je 0x4b64a4
dec eax
je 0x4b64c1
jmp case.default.0x4b609a
add eax, 0xfffffdf7
cmp eax, 5
ja case.default.0x4b609a
jmp dword [eax*4 + 0x4b6067]
cmp eax, 0x292
jg 0x4b60b9
je case.0x4b609a.528
add eax, 0xfffffdf0
cmp eax, 5
ja case.default.0x4b609a
jmp dword [eax*4 + 0x4b60a1]
cmp eax, 0xafa
jg 0x4b60d9
je case.0x4b609a.529
sub eax, 0x384
je 0x4b6154
dec eax
je 0x4b60f0
jmp case.default.0x4b609a
sub eax, 0x2710
je 0x4b657e
dec eax
je case.0x4b609a.528
jmp case.default.0x4b609a
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
lea ecx, [ebp - 0x80]
mov edx, 0x4b9688
mov eax, dword [0x53a088]
call fcn.004a72e0
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x58]
call fcn.00404a90
jne 0x4b612b
mov dl, 1
mov eax, dword [0x5342d8]
call fcn.004cda38
jmp case.0x4b609a.528
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b969c
call fcn.004de3dc
mov eax, dword [0x52bc1c]
mov eax, dword [eax]
call fcn.0045ea74
jmp case.0x4b609a.528
mov ecx, dword [ebp - 0x10]
mov dx, word [ebp - 0x5e]
mov eax, dword [ebp - 4]
call fcn.004b58f0
jmp case.0x4b609a.528
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b96b8
call fcn.004de3dc
jmp case.0x4b609a.528
mov eax, dword [ebp - 0x64]
sub eax, 0xfffffffe
je 0x4b61e4
sub eax, 2
jne 0x4b6201
push 0x4b9718
mov eax, dword [ebp - 4]
push dword [eax + 0x4b4]
push 0x4b9724
push 0x4b974c
lea eax, [ebp - 0x84]
mov edx, 4
call fcn.00404a04
mov edx, dword [ebp - 0x84]
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
call fcn.004de3dc
xor edx, edx
mov eax, dword [0x5342e0]
call fcn.004d3674
jmp case.0x4b609a.528
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b976c
call fcn.004de3dc
jmp case.0x4b609a.528
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9784
call fcn.004de3dc
jmp case.0x4b609a.528
mov eax, dword [ebp - 0x64]
add eax, 5
cmp eax, 4
ja case.default.0x4b622d
jmp dword [eax*4 + 0x4b6234]
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b979c
call fcn.004de3dc
jmp 0x4b62e5
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b97b0
call fcn.004de3dc
jmp 0x4b62e5
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b97e8
call fcn.004de3dc
jmp 0x4b62e5
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9814
call fcn.004de3dc
jmp 0x4b62e5
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9828
call fcn.004de3dc
jmp 0x4b62e5
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b983c
call fcn.004de3dc
mov eax, dword [0x5342e0]
call fcn.004d3abc
jmp case.0x4b609a.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004ba56c
jmp case.0x4b609a.528
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9858
call fcn.004de3dc
mov eax, dword [ebp - 4]
call fcn.004ba538
jmp case.0x4b609a.528
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b986c
call fcn.004de3dc
mov eax, dword [ebp - 4]
call fcn.004ba538
jmp case.0x4b609a.528
mov ax, word [ebp - 0x64]
mov word [0x53613c], ax
mov eax, dword [ebp - 0x64]
call fcn.004074ac
mov word [0x53613e], ax
mov ax, word [ebp - 0x5e]
mov word [0x536140], ax
mov ax, word [ebp - 0x5c]
mov word [0x536142], ax
cmp word [ebp - 0x60], 0xafa
jne 0x4b639a
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9880
call fcn.004de3dc
mov eax, dword [0x5342e0]
cmp byte [eax + 0x12c], 0
jne case.0x4b609a.528
mov eax, dword [ebp - 4]
call fcn.004ba538
jmp case.0x4b609a.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004ba2e8
jmp case.0x4b609a.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004ba5d8
jmp case.0x4b609a.528
mov byte [0x536050], 0
mov byte [0x536049], 0
mov byte [0x536048], 0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b98dc
call fcn.004de3dc
mov eax, dword [ebp - 4]
call fcn.0045b248
jmp case.0x4b609a.528
mov eax, dword [ebp - 4]
call fcn.004b3410
jmp case.0x4b609a.528
mov eax, dword [ebp - 0x64]
sub eax, 2
je 0x4b6430
dec eax
je 0x4b644d
dec eax
je 0x4b646a
jmp 0x4b6487
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b98f4
call fcn.004de3dc
jmp case.0x4b609a.528
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9910
call fcn.004de3dc
jmp case.0x4b609a.528
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9910
call fcn.004de3dc
jmp case.0x4b609a.528
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b992c
call fcn.004de3dc
jmp case.0x4b609a.528
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9948
call fcn.004de3dc
jmp case.0x4b609a.528
mov eax, dword [ebp - 0x64]
sub eax, 0xfffffffe
je 0x4b64e9
dec eax
jne 0x4b6506
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9960
call fcn.004de3dc
jmp case.0x4b609a.528
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9984
call fcn.004de3dc
jmp case.0x4b609a.528
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b99a8
call fcn.004de3dc
jmp case.0x4b609a.528
mov eax, dword [ebp - 4]
call fcn.004b3410
jmp case.0x4b609a.528
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b99cc
call fcn.004de3dc
jmp case.0x4b609a.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004ba7e0
jmp case.default.0x4b609a
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b99f8
call fcn.004de3dc
mov eax, dword [0x5342d4]
call fcn.0045b248
jmp case.default.0x4b609a
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9a08
call fcn.004de3dc
mov eax, dword [0x5342d4]
call fcn.0045b248
jmp case.default.0x4b609a
cmp byte [0x536058], 0
je 0x4b6615
cmp word [ebp - 0x60], 0x27a
jne case.default.0x4b609a
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x4d4], edx
mov edx, dword [ebp - 0x60]
mov dword [eax + 0x4d8], edx
mov edx, dword [ebp - 0x5c]
mov dword [eax + 0x4dc], edx
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
add eax, 0x4e0
call fcn.004046d8
mov byte [0x536059], 1
mov dl, 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x364]
call fcn.0042fdf8
jmp case.default.0x4b609a
movzx eax, word [ebp - 0x60]
cmp eax, 0x296
jg 0x4b689a
je 0x4b8c10
cmp eax, 0x258
jg 0x4b6791
je 0x4b82aa
cmp eax, 0x21
jg 0x4b66cd
je 0x4b7702
add eax, 0xfffffffb
cmp eax, 0x1b
ja case.0x4b90a3.0
jmp dword [eax*4 + 0x4b665d]
cmp eax, 0x34
jg 0x4b6733
je 0x4b7782
add eax, 0xffffffde
cmp eax, 0x11
ja case.0x4b90a3.0
jmp dword [eax*4 + 0x4b66eb]
cmp eax, 0xc9
jg 0x4b676a
je 0x4b826a
sub eax, 0x35
je 0x4b79da
dec eax
je 0x4b6df4
add eax, 0xffffffd2
sub eax, 5
jb 0x4b7e2d
sub eax, 0x5f
je 0x4b825a
jmp case.0x4b90a3.0
sub eax, 0xca
je 0x4b828a
dec eax
je case.0x4b68b9.709
sub eax, 7
je 0x4b85ba
dec eax
je 0x4b85d4
jmp case.0x4b90a3.0
add eax, 0xfffffda7
cmp eax, 0x3c
ja case.0x4b90a3.0
jmp dword [eax*4 + 0x4b67a6]
cmp eax, 0x2f4
jg 0x4b6a30
je 0x4b8db0
add eax, 0xfffffd69
cmp eax, 0x5b
ja case.0x4b90a3.0
jmp dword [eax*4 + 0x4b68c0]
cmp eax, 0x384
jg 0x4b6b32
je 0x4b6c07
add eax, 0xfffffd0b
cmp eax, 0x36
ja case.0x4b90a3.0
jmp dword [eax*4 + 0x4b6a56]
cmp eax, 0x2711
jg 0x4b6ba8
je 0x4b6d95
cmp eax, 0x451
jg 0x4b6b77
je 0x4b954d
sub eax, 0x385
je 0x4b7f35
sub eax, 0xc7
je 0x4b7cac
dec eax
je 0x4b7d32
sub eax, 3
je 0x4b7c41
jmp case.0x4b90a3.0
sub eax, 0x4b0
je 0x4b9561
sub eax, 0x1447
je 0x4b85ee
sub eax, 0xaa
je 0x4b6e17
sub eax, 0x258
je case.0x4b6656.30
jmp case.0x4b90a3.0
cmp eax, 0x2722
jg 0x4b6bdc
je 0x4b827a
sub eax, 0x271a
je 0x4b7364
sub eax, 5
je 0x4b7d5b
dec eax
je 0x4b7df0
dec eax
je case.0x4b6656.30
jmp case.0x4b90a3.0
sub eax, 0x2737
je 0x4b8b0d
sub eax, 0x18
je 0x4b94e1
dec eax
je 0x4b94f9
sub eax, 0x3e5
je 0x4b6da5
jmp case.0x4b90a3.0
mov ecx, dword [ebp - 0x10]
mov dx, word [ebp - 0x5e]
mov eax, dword [ebp - 4]
call fcn.004b58f0
jmp case.0x4b90a3.0
mov eax, 0x53433c
call fcn.00404684
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
push 0
mov eax, dword [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 0x33
mov eax, dword [0x5342e8]
call fcn.004c718c
xor ecx, ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.004a8cb0
jmp case.0x4b90a3.0
xor eax, eax
mov dword [0x535dc8], eax
xor eax, eax
mov dword [0x535dcc], eax
lea edx, [ebp - 0x74]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x70]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0x32
mov eax, dword [0x5342e8]
call fcn.004c718c
mov dl, 7
mov eax, dword [0x5342d8]
call fcn.004cda38
push 0
push 0
push 0
xor ecx, ecx
mov edx, 0x51
mov eax, dword [ebp - 4]
call fcn.004b2ce4
cmp byte [ebp - 0x6c], 1
jne 0x4b6ce3
mov byte [0x5360f8], 1
jmp 0x4b6cea
mov byte [0x5360f8], 0
mov byte [0x535dc4], 0
cmp word [0x53613c], 0
jbe 0x4b6d19
push 0xffffff
mov ecx, 0x8000
mov edx, 0x4b9a50
mov eax, dword [0x5342d8]
call fcn.004cde58
jmp case.0x4b90a3.0
cmp word [0x536140], 0
jbe 0x4b6d41
push 0xffffff
mov ecx, 0x8000
mov edx, 0x4b9a78
mov eax, dword [0x5342d8]
call fcn.004cde58
jmp case.0x4b90a3.0
cmp word [0x536142], 0
jbe 0x4b6d69
push 0xffffff
mov ecx, 0x8000
mov edx, 0x4b9aa0
mov eax, dword [0x5342d8]
call fcn.004cde58
jmp case.0x4b90a3.0
cmp word [0x53613e], 0
jbe case.0x4b90a3.0
push 0xffffff
mov ecx, 0x8000
mov edx, 0x4b9ac4
mov eax, dword [0x5342d8]
call fcn.004cde58
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004ba988
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004b5ab8
jmp case.0x4b90a3.0
mov eax, dword [ebp - 0x64]
mov dword [0x535f38], eax
test byte [0x535f38], 4
je 0x4b6dda
xor ecx, ecx
mov edx, 0x4b9aec
mov eax, dword [ebp - 4]
call fcn.004a8cb0
jmp case.0x4b90a3.0
mov eax, dword [0x534348]
mov edx, dword [eax + 0x2ae90]
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.004a8cb0
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004babb8
jmp case.0x4b90a3.0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bac54
jmp case.0x4b90a3.0
movzx eax, word [ebp - 0x5e]
mov dword [0x535f3c], eax
jmp case.0x4b90a3.0
push 0x412aaaab
call fcn.0047cb14
mov ebx, eax
mov eax, dword [ebp - 0x10]
call fcn.00404944
cmp ebx, eax
jge 0x4b6e85
lea eax, [ebp - 0x14]
push eax
push 0x412aaaab
call fcn.0047cb14
inc eax
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404944
mov ecx, eax
mov eax, dword [ebp - 0x10]
pop edx
call fcn.00404ba4
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.0050c748
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x7c], 0x2f
lea ecx, [ebp - 0x7c]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.0047bf6c
jmp 0x4b6e8d
lea eax, [ebp - 0x1c]
call fcn.00404684
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0xa
mov eax, dword [0x5342e8]
call fcn.004c718c
cmp dword [ebp - 0x1c], 0
je case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
push 0
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 0x7c], 0x5c
lea ecx, [ebp - 0x7c]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x40]
mov eax, dword [ebp - 0x1c]
call fcn.0047bf6c
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x4c]
add eax, 0x3c
call fcn.004046d8
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x3c]
mov eax, 0x4b9b00
call fcn.00404c88
test eax, eax
jle 0x4b6f3b
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x38], 0xff00ff
jmp 0x4b6f45
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x38], 0x70ccc8
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.004c0d98
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.0047bcf0
call fcn.004a8f3c
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x48], eax
jmp case.0x4b90a3.0
push 0x412aaaab
call fcn.0047cb14
mov ebx, eax
mov eax, dword [ebp - 0x10]
call fcn.00404944
cmp ebx, eax
jge 0x4b6fca
lea eax, [ebp - 0x14]
push eax
push 0x412aaaab
call fcn.0047cb14
inc eax
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404944
mov ecx, eax
mov eax, dword [ebp - 0x10]
pop edx
call fcn.00404ba4
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.0050c748
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x7c], 0x2f
lea ecx, [ebp - 0x7c]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.0047bf6c
jmp 0x4b6fd2
lea eax, [ebp - 0x1c]
call fcn.00404684
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 9
mov eax, dword [0x5342e8]
call fcn.004c718c
cmp dword [ebp - 0x1c], 0
je case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
push 0
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 0x7c], 0x5c
lea ecx, [ebp - 0x7c]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x40]
mov eax, dword [ebp - 0x1c]
call fcn.0047bf6c
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x4c]
add eax, 0x3c
call fcn.004046d8
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x3c]
mov eax, 0x4b9b00
call fcn.00404c88
test eax, eax
jle 0x4b7080
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x38], 0xff00ff
jmp 0x4b708a
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x38], 0x70ccc8
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.004c0d98
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.0047bcf0
call fcn.004a8f3c
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x48], eax
jmp case.0x4b90a3.0
mov eax, dword [0x534350]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je case.0x4b90a3.0
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
push 0
push 0
push 0
push 0
movzx edx, word [ebp - 0x60]
mov ecx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c718c
jmp case.0x4b90a3.0
push 0x412aaaab
call fcn.0047cb14
mov ebx, eax
mov eax, dword [ebp - 0x10]
call fcn.00404944
cmp ebx, eax
jge 0x4b7148
lea eax, [ebp - 0x14]
push eax
push 0x412aaaab
call fcn.0047cb14
inc eax
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404944
mov ecx, eax
mov eax, dword [ebp - 0x10]
pop edx
call fcn.00404ba4
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.0050c748
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x7c], 0x2f
lea ecx, [ebp - 0x7c]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.0047bf6c
jmp 0x4b7150
lea eax, [ebp - 0x1c]
call fcn.00404684
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
mov eax, dword [0x534350]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je 0x4b7190
mov ax, word [ebp - 0x5c]
push eax
mov ax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov cx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c688c
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
movzx edx, word [ebp - 0x60]
mov ecx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c718c
cmp dword [ebp - 0x1c], 0
je case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
push 0
lea eax, [ebp - 0x94]
push eax
mov byte [ebp - 0x7c], 0x5c
lea ecx, [ebp - 0x7c]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x40]
mov eax, dword [ebp - 0x1c]
call fcn.0047bf6c
mov edx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x4c]
add eax, 0x3c
call fcn.004046d8
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x3c]
mov eax, 0x4b9b00
call fcn.00404c88
test eax, eax
jle 0x4b722d
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x38], 0xff00ff
jmp 0x4b7237
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x38], 0x70ccc8
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.004c0d98
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.0047bcf0
call fcn.004a8f3c
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x48], eax
jmp case.0x4b90a3.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
mov eax, dword [0x534350]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
jne 0x4b7287
cmp word [ebp - 0x60], 6
je 0x4b7287
cmp word [ebp - 0x60], 7
jne 0x4b72b1
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
movzx edx, word [ebp - 0x60]
mov ecx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c718c
cmp word [ebp - 0x60], 6
jne case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x536034], eax
jmp case.0x4b90a3.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
mov eax, dword [0x534350]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je case.0x4b90a3.0
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0xd
mov eax, dword [0x5342e8]
call fcn.004c718c
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
movzx eax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x1b4], eax
jmp case.0x4b90a3.0
cmp byte [0x5343dc], 0
je case.0x4b90a3.0
mov ax, word [ebp - 0x64]
mov word [0x53441c], ax
jmp case.0x4b90a3.0
mov eax, dword [ebp - 4]
call fcn.004b54d4
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0xa
mov eax, dword [0x5342e8]
call fcn.004c718c
jmp case.0x4b90a3.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
mov eax, dword [0x534350]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x5e]
mov dx, 0xc
mov eax, dword [ebp - 0x4c]
call fcn.00500504
jmp case.0x4b90a3.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
mov eax, dword [0x534350]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x5e]
mov dx, 0xc
mov eax, dword [ebp - 0x4c]
call fcn.00500504
jmp case.0x4b90a3.0
mov eax, dword [0x534350]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x5e]
mov dx, word [ebp - 0x60]
mov eax, dword [ebp - 0x4c]
call fcn.00500504
cmp word [ebp - 0x60], 0xf
jne case.0x4b90a3.0
cmp dword [ebp - 0x10], 0
je case.0x4b90a3.0
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x13c], 1
jmp case.0x4b90a3.0
lea edx, [ebp - 0x2e]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x5e]
mov dx, word [ebp - 0x60]
mov eax, dword [ebp - 0x4c]
call fcn.00500504
movzx eax, word [ebp - 0x2e]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x124], eax
movzx eax, word [ebp - 0x2c]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x128], eax
mov dx, word [ebp - 0x28]
mov ax, word [ebp - 0x2a]
call fcn.004074a0
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x12c], eax
jmp case.0x4b90a3.0
lea edx, [ebp - 0x74]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x5e]
mov dx, word [ebp - 0x60]
mov eax, dword [ebp - 0x4c]
call fcn.00500504
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x124], eax
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x128], eax
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x12c], eax
mov eax, dword [ebp - 0x68]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x134], eax
jmp case.0x4b90a3.0
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.0047bcf0
push eax
movzx ecx, word [ebp - 0x5a]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004ae7d8
jmp case.0x4b90a3.0
lea edx, [ebp - 0x44]
mov ecx, 4
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
mov ax, word [ebp - 0x5a]
call fcn.004074b0
and eax, 0xff
push eax
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x44]
push eax
xor ecx, ecx
mov cl, byte [ebp - 0x5a]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004ae884
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004ae8ec
jmp case.0x4b90a3.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x534350]
jne 0x4b7698
xor ecx, ecx
mov edx, 0x4b9b14
mov eax, dword [ebp - 4]
call fcn.004a8cb0
cmp dword [ebp - 0x4c], 0
je 0x4b76d2
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
push 0
movzx ecx, word [ebp - 0x5e]
mov dx, word [ebp - 0x60]
mov eax, dword [ebp - 0x4c]
call fcn.00500504
mov eax, dword [ebp - 0x4c]
mov word [eax + 0x62], 0
jmp case.0x4b90a3.0
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0x20
mov eax, dword [0x5342e8]
call fcn.004c718c
jmp case.0x4b90a3.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0x21
mov eax, dword [0x5342e8]
call fcn.004c718c
jmp case.0x4b90a3.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0x1b
mov eax, dword [0x5342e8]
call fcn.004c718c
jmp case.0x4b90a3.0
mov eax, dword [0x534350]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x80], edx
mov eax, dword [0x534350]
mov dl, byte [ebp - 0x5e]
mov byte [eax + 0x12], dl
lea ecx, [ebp - 0xc8]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004c18a4
mov eax, dword [0x534350]
lea esi, [ebp - 0xc8]
lea edi, [eax + 0x4c]
mov ecx, 0xc
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [0x534350]
mov eax, dword [eax + 0x6a]
mov edx, dword [0x534350]
cmp eax, dword [edx + 0x6e]
jae 0x4b7822
mov eax, dword [0x534350]
mov eax, dword [eax + 0x6a]
mov dword [ebp - 0xd0], eax
xor eax, eax
mov dword [ebp - 0xcc], eax
fild qword [ebp - 0xd0]
mov eax, dword [0x534350]
mov eax, dword [eax + 0x6e]
mov dword [ebp - 0xd8], eax
xor eax, eax
mov dword [ebp - 0xd4], eax
fild qword [ebp - 0xd8]
fdivp st(1)
fmul dword [0x4b9b18]
call fcn.00402bf8
mov byte [0x53a0c5], al
jmp 0x4b7829
mov byte [0x53a0c5], 0
mov eax, dword [0x534350]
movzx eax, word [eax + 0x72]
mov dword [ebp - 0xdc], eax
fild dword [ebp - 0xdc]
mov eax, dword [0x534350]
movzx eax, word [eax + 0x74]
mov dword [ebp - 0xe0], eax
fild dword [ebp - 0xe0]
fdivp st(1)
fmul dword [0x4b9b18]
call fcn.00402bf8
mov byte [0x53a0c6], al
jmp case.0x4b90a3.0
xor eax, eax
mov al, byte [ebp - 0x5e]
mov dword [0x536124], eax
mov ax, word [ebp - 0x5e]
call fcn.004074b0
and eax, 0xff
mov dword [0x536120], eax
xor eax, eax
mov al, byte [ebp - 0x5c]
mov dword [0x536128], eax
mov ax, word [ebp - 0x5c]
call fcn.004074b0
and eax, 0xff
mov dword [0x53612c], eax
xor eax, eax
mov al, byte [ebp - 0x5a]
mov dword [0x536130], eax
mov ax, word [ebp - 0x5a]
call fcn.004074b0
and eax, 0xff
mov dword [0x536134], eax
xor eax, eax
mov al, byte [ebp - 0x64]
mov dword [0x536138], eax
jmp case.0x4b90a3.0
movzx eax, word [ebp - 0x5e]
mov dword [0x535f34], eax
movzx eax, word [ebp - 0x5c]
mov edx, dword [0x52bc6c]
mov dword [edx], eax
mov eax, dword [0x52bc6c]
cmp dword [eax], 0
jne 0x4b78fb
mov byte [0x535f31], 0
jmp case.0x4b90a3.0
mov byte [0x535f31], 1
jmp case.0x4b90a3.0
mov eax, dword [0x534350]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x6a], edx
mov eax, dword [0x534350]
mov eax, dword [eax + 0x6a]
mov edx, dword [0x534350]
cmp eax, dword [edx + 0x6e]
jae 0x4b7971
mov eax, dword [0x534350]
mov eax, dword [eax + 0x6a]
mov dword [ebp - 0xd0], eax
xor eax, eax
mov dword [ebp - 0xcc], eax
fild qword [ebp - 0xd0]
mov eax, dword [0x534350]
mov eax, dword [eax + 0x6e]
mov dword [ebp - 0xd8], eax
xor eax, eax
mov dword [ebp - 0xd4], eax
fild qword [ebp - 0xd8]
fdivp st(1)
fmul dword [0x4b9b18]
call fcn.00402bf8
mov byte [0x53a0c5], al
jmp 0x4b7978
mov byte [0x53a0c5], 0
push 0xff
push 0x4b9b24
lea edx, [ebp - 0xe8]
movzx eax, word [ebp - 0x5e]
call fcn.00408d74
push dword [ebp - 0xe8]
push 0x4b9b34
lea eax, [ebp - 0xe4]
mov edx, 3
call fcn.00404a04
mov edx, dword [ebp - 0xe4]
mov ecx, 0xffffff
mov eax, dword [0x5342d8]
call fcn.004cde58
jmp case.0x4b90a3.0
mov edx, 0x4b9b48
mov eax, dword [0x5342d8]
call fcn.004cdaf4
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
mov eax, dword [ebp - 0x4c]
cmp word [eax + 0x62], 0
jbe 0x4b7a1c
movzx eax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
movzx edx, word [edx + 0x62]
sub eax, edx
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.004c12e0
mov ax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x62], ax
mov ax, word [ebp - 0x5c]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x64], ax
mov ax, word [ebp - 0x5a]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x66], ax
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 0x44], 0
jne 0x4b7a79
cmp byte [0x54d843], 0
jbe 0x4b7a79
lea ecx, [ebp - 0xec]
mov eax, dword [ebp - 0x4c]
movzx edx, word [eax + 0x68]
mov eax, dword [ebp - 0x4c]
movzx eax, word [eax + 0x66]
call fcn.0047cfb4
mov edx, dword [ebp - 0xec]
mov eax, dword [ebp - 0x4c]
add eax, 0x44
call fcn.004046d8
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x534350]
jne case.0x4b90a3.0
mov eax, dword [ebp - 4]
call fcn.004aed58
jmp case.0x4b90a3.0
lea edx, [ebp - 0x74]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x534350]
jne 0x4b7b75
mov eax, dword [0x534350]
cmp dword [eax + 0x48], 0xf9
jne 0x4b7ae6
call fcn.00406bb0
mov dword [0x536028], eax
cmp byte [0x54dfd8], 0
jne 0x4b7af6
mov byte [0x54e7a4], 1
mov eax, dword [0x534350]
mov edx, dword [ebp - 0x6c]
mov dword [eax + 0x130], edx
cmp byte [0x54e03c], 1
jne 0x4b7b39
mov eax, dword [0x534350]
cmp byte [eax + 0x12], 0
jne 0x4b7b39
mov edx, dword [ebp - 0x6c]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0xe], 0
jne 0x4b7b39
mov eax, dword [ebp - 0x50]
mov dword [0x53608c], eax
cmp byte [0x54d851], 1
jne 0x4b7b89
mov edx, dword [ebp - 0x6c]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x4b7b89
xor eax, eax
mov al, byte [0x54d856]
shl eax, 0x1e
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x24], eax
call fcn.00406bb0
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x28], eax
jmp 0x4b7b89
mov eax, dword [ebp - 0x4c]
call fcn.005042dc
test al, al
je 0x4b7b89
mov eax, dword [ebp - 0x4c]
call fcn.0050430c
cmp byte [0x54d840], 0
je 0x4b7b9d
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x534350]
je 0x4b7bc3
push 0
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x70]
push eax
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0x68]
mov dx, 0x1f
mov eax, dword [ebp - 0x4c]
call fcn.005005c4
jmp 0x4b7be7
push 0
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x70]
push eax
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0x68]
mov dx, 0x7987
mov eax, dword [ebp - 0x4c]
call fcn.005005c4
mov eax, dword [ebp - 0x4c]
cmp word [eax + 0x62], 0
jbe 0x4b7c0f
movzx eax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
movzx edx, word [edx + 0x62]
sub eax, edx
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.004c12e0
mov ax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x62], ax
mov ax, word [ebp - 0x5c]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x66], ax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x534350]
jne case.0x4b90a3.0
mov eax, dword [ebp - 4]
call fcn.004aed58
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
mov dx, word [ebp - 0x5c]
mov ax, word [ebp - 0x5e]
call fcn.004074a0
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x158], eax
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x15c], eax
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x160], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x158]
call fcn.0050bfe0
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x534350]
je 0x4b7d23
mov ax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x62], ax
mov ax, word [ebp - 0x5c]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x66], ax
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 0x44], 0
jne 0x4b7d23
cmp byte [0x54d843], 0
jbe 0x4b7d23
lea ecx, [ebp - 0xf0]
mov eax, dword [ebp - 0x4c]
movzx edx, word [eax + 0x68]
mov eax, dword [ebp - 0x4c]
movzx eax, word [eax + 0x66]
call fcn.0047cfb4
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x4c]
add eax, 0x44
call fcn.004046d8
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x194], 1
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x194], 0
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
mov eax, dword [ebp - 0x4c]
cmp word [eax + 0x62], 0
jbe 0x4b7d9d
movzx eax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
movzx edx, word [edx + 0x62]
sub eax, edx
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.004c12e0
mov ax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x62], ax
mov ax, word [ebp - 0x5c]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x66], ax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x534350]
jne 0x4b7dc6
mov eax, dword [ebp - 4]
call fcn.004aed58
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x195], 1
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x19c], 0x7d0
call fcn.00406bb0
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x198], eax
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
mov eax, dword [ebp - 0x4c]
mov edx, dword [0x4ff904]
call fcn.00403ac0
test al, al
je case.0x4b90a3.0
mov eax, dword [ebp - 0x4c]
call fcn.00505a9c
jmp case.0x4b90a3.0
cmp byte [0x54dfc5], 1
jne 0x4b7e41
cmp word [ebp - 0x60], 0x66
je case.default.0x4b609a
cmp byte [0x54dfc6], 1
jne 0x4b7e55
cmp word [ebp - 0x60], 0x68
je case.default.0x4b609a
cmp byte [0x54dfc7], 1
jne 0x4b7e69
cmp word [ebp - 0x60], 0x65
je case.default.0x4b609a
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
cmp byte [0x54dfc1], 1
jne 0x4b7ee3
cmp word [ebp - 0x60], 0x67
jne 0x4b7ee3
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004b5d64
mov eax, dword [ebp - 0x24]
mov edx, dword [0x534350]
mov edx, dword [edx + 0x40]
call fcn.00404a90
je 0x4b7ee3
push 0x4b9b5c
push dword [ebp - 0x24]
push 0x4b9b68
lea eax, [ebp - 0xf8]
mov edx, 0x54deb0
call fcn.004048e8
push dword [ebp - 0xf8]
lea eax, [ebp - 0xf4]
mov edx, 4
call fcn.00404a04
mov edx, dword [ebp - 0xf4]
mov eax, dword [ebp - 4]
call fcn.004b3738
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5342d8]
call fcn.004cdc28
mov ax, word [ebp - 0x5e]
call fcn.004074b0
call fcn.004a8f3c
push eax
mov al, byte [ebp - 0x5e]
call fcn.004a8f3c
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5342d8]
call fcn.004cde58
cmp word [ebp - 0x60], 0x68
jne case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.004ec06c
jmp case.0x4b90a3.0
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
movzx eax, word [ebp - 0x5e]
push eax
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5342d8]
call fcn.004cdb6c
jmp case.0x4b90a3.0
cmp byte [0x54dfc4], 1
je case.default.0x4b609a
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x4b8019
mov eax, dword [ebp - 0x20]
call fcn.004b5ccc
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
jle 0x4b7fe3
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0xc4], eax
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0xc0], 1
call fcn.00406bb0
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0xcc], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0xcc]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0xd0], eax
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov dword [eax + 0xc8], edx
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
call fcn.005043b8
mov ax, word [ebp - 0x5e]
call fcn.004074b0
call fcn.004a8f3c
push eax
mov al, byte [ebp - 0x5e]
call fcn.004a8f3c
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5342d8]
call fcn.004cde58
jmp case.0x4b90a3.0
mov ax, word [ebp - 0x5e]
call fcn.004074b0
call fcn.004a8f3c
push eax
mov al, byte [ebp - 0x5e]
call fcn.004a8f3c
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5342d8]
call fcn.004cde58
jmp case.0x4b90a3.0
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
push 0
lea eax, [ebp - 0xfc]
push eax
mov byte [ebp - 0x7c], 0x5c
lea ecx, [ebp - 0x7c]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x40]
mov eax, dword [ebp - 0x20]
call fcn.0047bf6c
mov edx, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x4c]
add eax, 0x3c
call fcn.004046d8
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x3c]
mov eax, 0x4b9b00
call fcn.00404c88
test eax, eax
jle 0x4b80b8
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x38], 0xff00ff
jmp 0x4b80c2
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x38], 0x70ccc8
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.004c0d98
mov al, byte [ebp - 0x5e]
call fcn.004a8f3c
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x48], eax
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
mov al, byte [ebp - 0x5e]
call fcn.004a8f3c
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x48], eax
jmp case.0x4b90a3.0
mov eax, dword [0x534350]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je case.0x4b90a3.0
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0x1bf9
mov eax, dword [0x5342e8]
call fcn.004c718c
jmp case.0x4b90a3.0
lea edx, [ebp - 0x74]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x4b8193
mov ax, word [ebp - 0x5c]
push eax
mov ax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x70]
push eax
mov cx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c688c
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x138], eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x70]
push eax
push 0
push 0
movzx ecx, word [ebp - 0x5e]
mov dx, 0x14
mov eax, dword [ebp - 0x4c]
call fcn.00500504
jmp case.0x4b90a3.0
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0x15
mov eax, dword [0x5342e8]
call fcn.004c718c
jmp case.0x4b90a3.0
lea edx, [ebp - 0x26]
mov ecx, 2
mov eax, dword [ebp - 0x10]
call fcn.0050c7e4
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
movzx eax, word [ebp - 0x5e]
push eax
mov ecx, dword [ebp - 0x64]
mov dl, 1
mov eax, dword [0x4cb918]
call fcn.004cb9d8
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
xor edx, edx
mov dword [eax + 0xc], edx
movzx eax, word [ebp - 0x26]
mov edx, dword [ebp - 0x54]
mov dword [edx + 0x1c], eax
mov edx, dword [ebp - 0x54]
mov eax, dword [0x534320]
call fcn.004cbde0
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x534320]
call fcn.004cbe64
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bad3c
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bb0d0
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bade4
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004baea8
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004baf78
jmp case.0x4b90a3.0
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
mov eax, dword [ebp - 0x100]
mov edx, dword [ebp - 0x64]
call fcn.0050ae38
jmp case.0x4b90a3.0
lea edx, [ebp - 0x104]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
mov edx, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bb188
jmp case.0x4b90a3.0
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
lea edx, [ebp - 0x108]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
mov eax, dword [ebp - 0x108]
push eax
movzx ecx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bb1f8
jmp case.0x4b90a3.0
movzx eax, word [ebp - 0x5c]
push eax
movzx ecx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bb428
jmp case.0x4b90a3.0
movzx ecx, word [ebp - 0x5c]
movzx edx, word [ebp - 0x5e]
mov eax, dword [0x534348]
call fcn.00509b98
jmp case.0x4b90a3.0
mov edx, 0x4b9b74
mov eax, dword [0x5342d8]
call fcn.004cdaf4
jmp case.0x4b90a3.0
movzx ecx, word [ebp - 0x5c]
movzx edx, word [ebp - 0x5e]
mov eax, dword [0x534348]
call fcn.00509cbc
jmp case.0x4b90a3.0
mov eax, dword [0x534350]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x18], edx
mov eax, dword [0x534350]
mov si, 0xfff5
call fcn.00403b30
mov eax, dword [0x535f98]
sub eax, 0xd
jae 0x4b83bf
mov eax, dword [0x535f98]
mov edx, eax
shl eax, 4
add eax, edx
lea edi, [eax*4 + 0x534354]
mov esi, 0x535f9c
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov byte [0x535f9c], 0
jmp case.0x4b90a3.0
mov eax, 0x535f9c
call fcn.0050a8f8
mov byte [0x535f9c], 0
jmp case.0x4b90a3.0
mov eax, dword [0x534350]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x18], edx
mov eax, dword [0x534350]
mov si, 0xfff5
call fcn.00403b30
mov byte [0x535f9c], 0
jmp case.0x4b90a3.0
cmp dword [0x535f98], 0
jge 0x4b8437
mov eax, dword [0x535f98]
inc eax
neg eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov edx, eax
shl eax, 4
add eax, edx
lea edi, [eax*4 + 0x534354]
mov esi, 0x535f9c
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov byte [0x535f9c], 0
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bb498
jmp case.0x4b90a3.0
mov eax, dword [0x534350]
mov dx, word [ebp - 0x64]
mov word [eax + 0x72], dx
mov eax, dword [0x534350]
movzx eax, word [eax + 0x72]
mov dword [ebp - 0xdc], eax
fild dword [ebp - 0xdc]
mov eax, dword [0x534350]
movzx eax, word [eax + 0x74]
inc eax
mov dword [ebp - 0xe0], eax
fild dword [ebp - 0xe0]
fdivp st(1)
fmul dword [0x4b9b18]
call fcn.00402bf8
mov byte [0x53a0c6], al
mov eax, dword [0x534350]
mov dx, word [ebp - 0x5e]
mov word [eax + 0x76], dx
mov eax, dword [0x534350]
mov dx, word [ebp - 0x5c]
mov word [eax + 0x7a], dx
jmp case.0x4b90a3.0
mov eax, 0x6a
call fcn.004ff470
mov eax, dword [0x534350]
mov eax, dword [eax + 0x80]
cmp eax, dword [ebp - 0x64]
jge 0x4b8512
mov eax, dword [0x534350]
push dword [eax + 0x80]
mov eax, dword [ebp - 0x64]
pop edx
sub eax, edx
lea edx, [ebp - 0x10c]
call fcn.00408d74
lea eax, [ebp - 0x10c]
mov edx, 0x4b9b8c
call fcn.0040494c
mov edx, dword [ebp - 0x10c]
mov eax, dword [0x5342d8]
call fcn.004cdaf4
mov eax, dword [0x534350]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x80], edx
jmp case.0x4b90a3.0
push 0
push 0
push 0
mov dx, word [ebp - 0x5c]
mov ax, word [ebp - 0x5e]
call fcn.004074a0
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
movzx edx, word [ebp - 0x60]
mov ecx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c718c
jmp case.0x4b90a3.0
push 0
push 0
push 0
mov dx, word [ebp - 0x5c]
mov ax, word [ebp - 0x5e]
call fcn.004074a0
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
movzx edx, word [ebp - 0x60]
mov ecx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c718c
jmp case.0x4b90a3.0
mov byte [0x536058], 1
jmp case.0x4b90a3.0
mov byte [0x535fe0], 0
call fcn.0050ab70
jmp case.0x4b90a3.0
mov eax, 0x535fe0
call fcn.0050a8f8
mov byte [0x535fe0], 0
jmp case.0x4b90a3.0
cmp dword [ebp - 0x10], 0
je case.0x4b90a3.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bb5b0
jmp case.0x4b90a3.0
cmp dword [ebp - 0x10], 0
je case.0x4b90a3.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bb704
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bb69c
jmp case.0x4b90a3.0
mov dx, word [ebp - 0x5a]
mov ax, word [ebp - 0x5c]
call fcn.004074a0
push eax
movzx ecx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bb898
jmp case.0x4b90a3.0
mov dx, word [ebp - 0x5a]
mov ax, word [ebp - 0x5c]
call fcn.004074a0
push eax
movzx edx, word [ebp - 0x5e]
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bba10
jmp case.0x4b90a3.0
lea edx, [ebp - 0x110]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
mov eax, dword [ebp - 0x110]
push eax
movzx ecx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bbae8
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
call fcn.004e5f94
jmp case.0x4b90a3.0
mov eax, dword [ebp - 0x10]
push eax
movzx ecx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bbbc8
jmp case.0x4b90a3.0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bbdd8
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bbfec
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bc02c
jmp case.0x4b90a3.0
cmp byte [0x535e54], 0
je case.0x4b90a3.0
cmp dword [ebp - 0x64], 0
jle 0x4b8702
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x64]
call fcn.00408d74
mov edx, dword [ebp - 0x114]
mov eax, 0x535f28
mov ecx, 0x4b9b9c
call fcn.00404990
jmp case.0x4b90a3.0
mov eax, 0x535f28
mov edx, 0x4b9bac
call fcn.004046d8
jmp case.0x4b90a3.0
call fcn.00406bb0
mov edx, dword [0x52bf20]
mov edx, dword [edx]
mov dword [edx + 0x714], eax
mov eax, dword [0x534350]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x80], edx
mov byte [0x535e98], 0
jmp case.0x4b90a3.0
call fcn.00406bb0
mov edx, dword [0x52bf20]
mov edx, dword [edx]
mov dword [edx + 0x714], eax
mov eax, 0x535e98
call fcn.0050a8f8
mov byte [0x535e98], 0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9bc0
call fcn.004de3dc
jmp case.0x4b90a3.0
cmp byte [0x535e54], 0
je case.0x4b90a3.0
cmp dword [ebp - 0x64], 0
jl 0x4b87bf
lea edx, [ebp - 0x118]
mov eax, dword [ebp - 0x64]
call fcn.00408d74
mov edx, dword [ebp - 0x118]
mov eax, 0x535f28
mov ecx, 0x4b9b9c
call fcn.00404990
jmp case.0x4b90a3.0
mov eax, 0x535f28
mov edx, 0x4b9bac
call fcn.004046d8
jmp case.0x4b90a3.0
cmp byte [0x535e98], 0
je case.0x4b90a3.0
call fcn.00406bb0
mov edx, dword [0x52bf20]
mov edx, dword [edx]
mov dword [edx + 0x714], eax
mov eax, dword [0x534350]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x80], edx
mov ax, word [ebp - 0x5e]
mov word [0x535ed8], ax
mov ax, word [ebp - 0x5c]
mov word [0x535eda], ax
mov eax, 0x535e98
call fcn.0050a8f8
mov byte [0x535e98], 0
jmp case.0x4b90a3.0
call fcn.00406bb0
mov edx, dword [0x52bf20]
mov edx, dword [edx]
mov dword [edx + 0x714], eax
mov eax, 0x535e98
call fcn.0050a8f8
mov byte [0x535e98], 0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9bdc
call fcn.004de3dc
jmp case.0x4b90a3.0
call fcn.00406bb0
mov edx, dword [0x52bf20]
mov edx, dword [edx]
mov dword [edx + 0x714], eax
cmp word [ebp - 0x60], 0x2bd
je 0x4b88cb
cmp word [ebp - 0x60], 0x2be
jne 0x4b88a9
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9bf8
call fcn.004de3dc
jmp 0x4b88c1
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9c0c
call fcn.004de3dc
mov eax, 0x535e98
call fcn.0050a8f8
mov byte [0x535e98], 0
jmp case.0x4b90a3.0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bc0ac
jmp case.0x4b90a3.0
call fcn.00406bb0
mov edx, dword [0x52bf20]
mov edx, dword [edx]
mov dword [edx + 0x714], eax
cmp word [ebp - 0x60], 0x2c1
je 0x4b8947
cmp word [ebp - 0x60], 0x2c3
jne 0x4b892a
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9c20
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9c34
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov edx, dword [ebp - 0x64]
call fcn.004e73dc
jmp case.0x4b90a3.0
call fcn.00406bb0
mov edx, dword [0x52bf20]
mov edx, dword [edx]
mov dword [edx + 0x714], eax
mov eax, dword [0x534350]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x80], edx
mov dx, word [ebp - 0x5c]
mov ax, word [ebp - 0x5e]
call fcn.004074a0
mov edx, eax
mov eax, dword [0x52bf20]
mov eax, dword [eax]
call fcn.004e730c
jmp case.0x4b90a3.0
call fcn.00406bb0
mov edx, dword [0x52bf20]
mov edx, dword [edx]
mov dword [edx + 0x714], eax
mov eax, dword [ebp - 0x64]
dec eax
je 0x4b89c0
dec eax
je 0x4b89dd
dec eax
je 0x4b89fa
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9c48
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9c64
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9c84
call fcn.004de3dc
jmp case.0x4b90a3.0
call fcn.00406bb0
mov edx, dword [0x52bf20]
mov edx, dword [edx]
mov dword [edx + 0x714], eax
mov eax, dword [0x534350]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x80], edx
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9c9c
call fcn.004de3dc
jmp case.0x4b90a3.0
call fcn.00406bb0
mov edx, dword [0x52bf20]
mov edx, dword [edx]
mov dword [edx + 0x714], eax
mov eax, dword [ebp - 0x64]
dec eax
je 0x4b8a7c
dec eax
je 0x4b8a99
dec eax
je 0x4b8ab6
dec eax
je 0x4b8ad3
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9cb4
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9cd4
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9d00
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9d1c
call fcn.004de3dc
jmp case.0x4b90a3.0
movzx eax, word [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x10]
push eax
movzx ecx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bc2bc
jmp case.0x4b90a3.0
inc dword [0x536154]
jmp case.0x4b90a3.0
cmp dword [ebp - 0x64], 0x7d0
jne 0x4b8b2a
mov byte [0x529ad8], 1
jmp 0x4b8b31
mov byte [0x529ad8], 0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bc4ac
jmp case.0x4b90a3.0
cmp word [ebp - 0x5e], 0
jbe 0x4b8b51
mov byte [0x5360f8], 1
jmp 0x4b8b58
mov byte [0x5360f8], 0
call fcn.00406bb0
mov dword [0x5360e8], eax
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360e8], eax
mov byte [0x5360f8], 1
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360e8], eax
mov eax, dword [ebp - 0x64]
sub eax, 0xfffffffc
je 0x4b8bf3
dec eax
je 0x4b8bd6
dec eax
je 0x4b8bb9
dec eax
jne case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9d34
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9d58
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9d78
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9d90
call fcn.004de3dc
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360e8], eax
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360e8], eax
mov eax, dword [ebp - 0x64]
add eax, 5
cmp eax, 4
ja case.0x4b90a3.0
jmp dword [eax*4 + 0x4b8c3f]
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9db4
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9dd8
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9e04
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9e28
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9e40
call fcn.004de3dc
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360e8], eax
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360e8], eax
mov eax, dword [ebp - 0x64]
sub eax, 0xfffffffd
je 0x4b8d49
dec eax
je 0x4b8d2c
dec eax
jne case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9e6c
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9e80
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9e94
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x5360fc]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp case.0x4b90a3.0
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 4]
call fcn.004bc618
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360f0], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bc6b0
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360f0], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bcb64
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360f0], eax
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9eb0
call fcn.004de3dc
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360f0], eax
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9ecc
call fcn.004de3dc
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360f0], eax
lea edx, [ebp - 0x120]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
mov edx, dword [ebp - 0x120]
mov eax, 0x535ce8
call fcn.004046d8
mov eax, dword [0x52bf20]
mov eax, dword [eax]
call fcn.004e8e7c
jmp case.0x4b90a3.0
call fcn.0050af68
cmp byte [0x535edc], 0
je 0x4b8e70
mov eax, 0x535edc
call fcn.0050a8f8
mov byte [0x535edc], 0
cmp dword [0x535cdc], 0
jle 0x4b8e91
mov eax, dword [0x534350]
mov edx, dword [0x535cdc]
add dword [eax + 0x80], edx
xor eax, eax
mov dword [0x535cdc], eax
mov eax, dword [0x52bf20]
mov eax, dword [eax]
call fcn.004e8f74
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360ec], eax
cmp byte [0x535edc], 0
je case.0x4b90a3.0
mov eax, 0x535edc
call fcn.0050af08
mov byte [0x535edc], 0
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360ec], eax
cmp byte [0x535edc], 0
je case.0x4b90a3.0
mov eax, 0x535edc
call fcn.0050a8f8
mov byte [0x535edc], 0
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360ec], eax
cmp byte [0x535edc], 0
je case.0x4b90a3.0
mov byte [0x535edc], 0
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360ec], eax
cmp byte [0x535edc], 0
je case.0x4b90a3.0
lea eax, [ebp - 0x124]
mov edx, 0x535edc
call fcn.004048e8
mov eax, dword [ebp - 0x124]
mov edx, dword [0x535f18]
call fcn.0050aa9c
mov eax, 0x535edc
call fcn.0050af08
mov byte [0x535edc], 0
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bd200
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bd260
jmp case.0x4b90a3.0
mov eax, dword [ebp - 0x64]
mov dword [0x535cdc], eax
mov dx, word [ebp - 0x5c]
mov ax, word [ebp - 0x5e]
call fcn.004074a0
mov edx, dword [0x534350]
mov dword [edx + 0x80], eax
call fcn.00406bb0
mov dword [0x5360ec], eax
jmp case.0x4b90a3.0
mov eax, dword [ebp - 0x64]
mov dword [0x535cdc], eax
mov dx, word [ebp - 0x5c]
mov ax, word [ebp - 0x5e]
call fcn.004074a0
mov edx, dword [0x534350]
mov dword [edx + 0x80], eax
call fcn.00406bb0
mov dword [0x5360ec], eax
jmp case.0x4b90a3.0
mov eax, dword [ebp - 0x64]
mov dword [0x535ce0], eax
mov eax, 0x6a
call fcn.004ff470
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
call fcn.004e8f74
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bc06c
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360f0], eax
movzx edx, word [ebp - 0x5e]
mov eax, dword [ebp - 4]
call fcn.004bd2c0
jmp case.0x4b90a3.0
call fcn.00406bb0
mov dword [0x5360f0], eax
mov dword [0x536060], 0xffffffff
jmp case.0x4b90a3.0
lea edx, [ebp - 0x128]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp - 4]
call fcn.004bd368
jmp case.0x4b90a3.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bd3f4
jmp case.0x4b90a3.0
mov eax, dword [ebp - 4]
call fcn.004b4f00
jmp case.0x4b90a3.0
mov eax, dword [ebp - 0x64]
cmp eax, 5
ja case.0x4b90a3.0
jmp dword [eax*4 + 0x4b90aa]
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9f00
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9f24
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9f4c
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9f78
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9fa4
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [ebp - 4]
call fcn.004b4f00
jmp case.0x4b90a3.0
mov eax, dword [ebp - 0x64]
dec eax
je 0x4b9174
dec eax
je 0x4b9191
dec eax
je 0x4b91ae
dec eax
je 0x4b91cb
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9f00
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9fd8
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4b9ff8
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba02c
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [ebp - 0x64]
add eax, 7
cmp eax, 5
ja case.0x4b90a3.0
jmp dword [eax*4 + 0x4b91fe]
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba050
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba07c
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba0ac
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba0e0
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba134
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba15c
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [ebp - 0x64]
sub eax, 0xfffffffc
je 0x4b9330
dec eax
je 0x4b9313
dec eax
je 0x4b92f6
dec eax
jne case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba198
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba1b0
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba1d0
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba200
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [ebp - 0x64]
sub eax, 0xfffffffd
je 0x4b9399
dec eax
je 0x4b937c
dec eax
jne case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba198
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba234
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba25c
call fcn.004de3dc
jmp case.0x4b90a3.0
call fcn.00406bb0
mov edx, dword [0x52bf20]
mov edx, dword [edx]
mov dword [edx + 0x714], eax
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba27c
call fcn.004de3dc
jmp case.0x4b90a3.0
call fcn.00406bb0
mov edx, dword [0x52bf20]
mov edx, dword [edx]
mov dword [edx + 0x714], eax
mov eax, dword [ebp - 0x64]
sub eax, 0xfffffffd
je 0x4b9445
dec eax
je 0x4b9428
dec eax
jne case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba294
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba2b4
call fcn.004de3dc
jmp case.0x4b90a3.0
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
mov edx, 0x4ba2cc
call fcn.004de3dc
jmp case.0x4b90a3.0
call fcn.00406bb0
mov edx, dword [0x52bf20]
mov edx, dword [edx]
mov dword [edx + 0x714], eax
cmp dword [ebp - 0x10], 0
je case.0x4b90a3.0
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
mov edx, dword [ebp - 0x12c]
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
call fcn.004de3dc
jmp case.0x4b90a3.0
cmp dword [ebp - 0x10], 0
je case.0x4b90a3.0
lea edx, [ebp - 0x130]
mov eax, dword [ebp - 0x10]
call fcn.0050c748
mov edx, dword [ebp - 0x130]
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov cx, word [0x4b9690]
call fcn.004de3dc
jmp case.0x4b90a3.0
call fcn.00406bb0
mov edx, dword [0x52bf20]
mov edx, dword [edx]
mov dword [edx + 0x714], eax
jmp case.0x4b90a3.0
call fcn.00406bb0
mov edx, dword [0x52bf20]
mov edx, dword [edx]
mov dword [edx + 0x714], eax
jmp case.0x4b90a3.0
mov eax, dword [0x534350]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je case.0x4b90a3.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5342e8]
call fcn.004c6720
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4b90a3.0
movzx eax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x124], eax
movzx eax, word [ebp - 0x5c]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x128], eax
jmp case.0x4b90a3.0
mov eax, dword [0x5342e8]
mov eax, dword [eax + 0x62584]
mov dl, 0x2a
call fcn.0043597c
jmp case.0x4b90a3.0
mov eax, dword [ebp - 0x10]
call fcn.004b5508
mov eax, dword [0x52bf20]
mov eax, dword [eax]
mov eax, dword [eax + 0x6a4]
mov dl, 1
call fcn.0048dd48
mov edx, dword [ebp - 8]
mov eax, 0x4ba2e4
call fcn.00404c88
test eax, eax
jle case.default.0x4b609a
mov edx, dword [ebp - 8]
mov eax, dword [0x5342d8]
call fcn.004cdaf4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b95ed
lea eax, [ebp - 0x130]
mov edx, 0x14
call fcn.004046a8
lea eax, [ebp - 0x94]
mov edx, 6
call fcn.004046a8
lea eax, [ebp - 0x78]
call fcn.00404684
lea eax, [ebp - 0x58]
call fcn.00404684
lea eax, [ebp - 0x24]
mov edx, 8
call fcn.004046a8
ret