Function at 0x48b7f0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x63d404
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x2860
call fcn.0061c3c0
mov dword [ebp - 0x1f4c], ecx
push 0x667e0c
lea eax, [ebp - 0xddc]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x1f50], eax
mov ecx, dword [ebp - 0x1f50]
mov dword [ebp - 0x1f54], ecx
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x1f54]
call fcn.00404a70
push eax
call fcn.0044a140
add esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xddc]
call fcn.00404a50
cmp dword [ebp - 0x10], 0
je 0x4918e9
mov dword [ebp - 0x18], 0
push 0x667e58
lea edx, [ebp - 0xde0]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x1f58], eax
mov ecx, dword [ebp - 0x1f58]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0xde0]
call fcn.0040e840
mov dword [ebp - 0x14], 0
call dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4918dd
mov cx, word [0x65a5a8]
mov word [ebp - 0x224], cx
push 0x206
push 0
lea edx, [ebp - 0x222]
push edx
call fcn.0061b420
add esp, 0xc
push 0
push 0x23
lea eax, [ebp - 0x224]
push eax
push 0
call fcn.00441770
add esp, 0x10
lea ecx, [ebp - 0xde4]
push ecx
call fcn.004e9da0
add esp, 4
mov dword [ebp - 0x1f5c], eax
mov edx, dword [ebp - 0x1f5c]
mov dword [ebp - 0x1f60], edx
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x1f60]
call fcn.00404a70
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.00441a10
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xde4]
call fcn.00404a50
lea ecx, [ebp - 0x224]
push ecx
call fcn.00441690
add esp, 4
test eax, eax
jne 0x48b98f
push 0
lea edx, [ebp - 0x224]
push edx
call fcn.00449250
add esp, 8
test eax, eax
jne 0x48b98f
jmp 0x4918e9
push 0x667d84
lea eax, [ebp - 0xde8]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x1f64], eax
mov ecx, dword [ebp - 0x1f64]
mov dword [ebp - 0x1f68], ecx
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x1f68]
call fcn.00404a70
push eax
lea edx, [ebp - 0x224]
push edx
call fcn.00441a10
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xde8]
call fcn.00404a50
lea eax, [ebp - 0x224]
push eax
call fcn.00441690
add esp, 4
test eax, eax
jne 0x48ba16
push 0
lea ecx, [ebp - 0x224]
push ecx
call fcn.00449250
add esp, 8
test eax, eax
jne 0x48ba16
jmp 0x4918e9
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
call eax
test eax, eax
je 0x4918d5
push 0x667d84
lea ecx, [ebp - 0xdf0]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x1f6c], eax
mov edx, dword [ebp - 0x1f6c]
mov dword [ebp - 0x1f70], edx
mov dword [ebp - 4], 3
mov ecx, dword [ebp - 0x1f70]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 4]
call ecx
add esp, 4
mov dword [ebp - 0xdec], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdf0]
call fcn.0040e840
cmp dword [ebp - 0xdec], 0
je 0x4918d5
cmp dword [0x6da4cc], 1
jne 0x48c50f
mov ecx, 0x6da630
call fcn.0049c860
mov dword [ebp - 0x228], 0
jmp 0x48bac0
mov edx, dword [ebp - 0x228]
add edx, 1
mov dword [ebp - 0x228], edx
mov ecx, 0x6da554
call fcn.0049c320
cmp dword [ebp - 0x228], eax
jge 0x48bb57
mov eax, dword [ebp - 0x228]
push eax
mov ecx, 0x6da554
call fcn.0049c360
push eax
lea ecx, [ebp - 0x314]
call fcn.0049a350
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x23c]
call fcn.004abfa0
mov byte [ebp - 4], 5
push 0x6da630
lea ecx, [ebp - 0x2dc]
call fcn.0040bf60
push eax
push SysReAllocStringLen
mov ecx, dword [ebp - 0x244]
push ecx
lea ecx, [ebp - 0x23c]
call fcn.004bd580
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x23c]
call fcn.004ac3f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x314]
call fcn.0049a470
jmp 0x48bab1
mov dword [ebp - 0x318], 0
jmp 0x48bb72
mov edx, dword [ebp - 0x318]
add edx, 1
mov dword [ebp - 0x318], edx
mov ecx, 0x6da630
call fcn.0049c840
cmp dword [ebp - 0x318], eax
jge 0x48c50f
push 0x667d78
lea eax, [ebp - 0xdf8]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x1f74], eax
mov ecx, dword [ebp - 0x1f74]
mov dword [ebp - 0x1f78], ecx
mov dword [ebp - 4], 6
mov ecx, dword [ebp - 0x1f78]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
call eax
add esp, 4
mov dword [ebp - 0xdf4], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdf8]
call fcn.0040e840
cmp dword [ebp - 0xdf4], 0
je 0x48c50a
mov ecx, dword [ebp - 0x318]
push ecx
mov ecx, 0x6da630
call fcn.0049c880
push eax
lea ecx, [ebp - 0x3c4]
call fcn.0049b110
mov dword [ebp - 4], 7
push 0xfde9
lea edx, [ebp - 0x3c4]
push edx
lea eax, [ebp - 0xe14]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x1f7c], eax
mov ecx, dword [ebp - 0x1f7c]
mov dword [ebp - 0x1f80], ecx
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x1f80]
call fcn.00419c10
push eax
push 0x667d6c
lea edx, [ebp - 0xe18]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x1f84], eax
mov eax, dword [ebp - 0x1f84]
mov dword [ebp - 0x1f88], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x1f88]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xe18]
call fcn.0040e840
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe14]
call fcn.0040bf10
push 0xfde9
lea eax, [ebp - 0x3a8]
push eax
lea ecx, [ebp - 0xe34]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x1f8c], eax
mov edx, dword [ebp - 0x1f8c]
mov dword [ebp - 0x1f90], edx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x1f90]
call fcn.00419c10
push eax
push 0x667d60
lea eax, [ebp - 0xe38]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x1f94], eax
mov ecx, dword [ebp - 0x1f94]
mov dword [ebp - 0x1f98], ecx
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x1f98]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xe38]
call fcn.0040e840
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe34]
call fcn.0040bf10
push 0xfde9
lea ecx, [ebp - 0x38c]
push ecx
lea edx, [ebp - 0xe54]
push edx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x1f9c], eax
mov eax, dword [ebp - 0x1f9c]
mov dword [ebp - 0x1fa0], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x1fa0]
call fcn.00419c10
push eax
push 0x66095c
lea ecx, [ebp - 0xe58]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x1fa4], eax
mov edx, dword [ebp - 0x1fa4]
mov dword [ebp - 0x1fa8], edx
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x1fa8]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 8
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xe58]
call fcn.0040e840
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe54]
call fcn.0040bf10
push 0xfde9
lea edx, [ebp - 0x370]
push edx
lea eax, [ebp - 0xe74]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x1fac], eax
mov ecx, dword [ebp - 0x1fac]
mov dword [ebp - 0x1fb0], ecx
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x1fb0]
call fcn.00419c10
push eax
push 0x667d50
lea edx, [ebp - 0xe78]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x1fb4], eax
mov eax, dword [ebp - 0x1fb4]
mov dword [ebp - 0x1fb8], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x1fb8]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xe78]
call fcn.0040e840
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe74]
call fcn.0040bf10
lea ecx, [ebp - 0x334]
call fcn.00419c30
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x1fbc], eax
cmp dword [ebp - 0x1fbc], 0xb
ja case.0x48beb3.8
mov ecx, dword [ebp - 0x1fbc]
jmp dword [ecx*4 + 0x4918f8]
push 0x667cfc
lea edx, [ebp - 0xe98]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x1fc0], eax
mov eax, dword [ebp - 0x1fc0]
mov dword [ebp - 0x1fc4], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x1fc4]
call fcn.00404a70
push eax
lea ecx, [ebp - 0xe94]
call fcn.00408a30
mov dword [ebp - 0x1fc8], eax
mov ecx, dword [ebp - 0x1fc8]
mov dword [ebp - 0x1fcc], ecx
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x1fcc]
push edx
lea ecx, [ebp - 0x334]
call fcn.00418a00
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xe94]
call fcn.00408aa0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xe98]
call fcn.00404a50
jmp case.0x48beb3.8
push 0x667ce4
lea eax, [ebp - 0xeb8]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x1fd0], eax
mov ecx, dword [ebp - 0x1fd0]
mov dword [ebp - 0x1fd4], ecx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1fd4]
call fcn.00404a70
push eax
lea ecx, [ebp - 0xeb4]
call fcn.00408a30
mov dword [ebp - 0x1fd8], eax
mov edx, dword [ebp - 0x1fd8]
mov dword [ebp - 0x1fdc], edx
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x1fdc]
push eax
lea ecx, [ebp - 0x334]
call fcn.00418a00
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xeb4]
call fcn.00408aa0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xeb8]
call fcn.00404a50
jmp case.0x48beb3.8
push 0x667cb8
lea ecx, [ebp - 0xed8]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x1fe0], eax
mov edx, dword [ebp - 0x1fe0]
mov dword [ebp - 0x1fe4], edx
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x1fe4]
call fcn.00404a70
push eax
lea ecx, [ebp - 0xed4]
call fcn.00408a30
mov dword [ebp - 0x1fe8], eax
mov eax, dword [ebp - 0x1fe8]
mov dword [ebp - 0x1fec], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x1fec]
push ecx
lea ecx, [ebp - 0x334]
call fcn.00418a00
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xed4]
call fcn.00408aa0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xed8]
call fcn.00404a50
jmp case.0x48beb3.8
push 0x667c98
lea edx, [ebp - 0xef8]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x1ff0], eax
mov eax, dword [ebp - 0x1ff0]
mov dword [ebp - 0x1ff4], eax
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x1ff4]
call fcn.00404a70
push eax
lea ecx, [ebp - 0xef4]
call fcn.00408a30
mov dword [ebp - 0x1ff8], eax
mov ecx, dword [ebp - 0x1ff8]
mov dword [ebp - 0x1ffc], ecx
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x1ffc]
push edx
lea ecx, [ebp - 0x334]
call fcn.00418a00
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xef4]
call fcn.00408aa0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xef8]
call fcn.00404a50
jmp case.0x48beb3.8
push 0x667c84
lea eax, [ebp - 0xf18]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2000], eax
mov ecx, dword [ebp - 0x2000]
mov dword [ebp - 0x2004], ecx
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x2004]
call fcn.00404a70
push eax
lea ecx, [ebp - 0xf14]
call fcn.00408a30
mov dword [ebp - 0x2008], eax
mov edx, dword [ebp - 0x2008]
mov dword [ebp - 0x200c], edx
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x200c]
push eax
lea ecx, [ebp - 0x334]
call fcn.00418a00
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0xf14]
call fcn.00408aa0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xf18]
call fcn.00404a50
jmp case.0x48beb3.8
push 0x667c68
lea ecx, [ebp - 0xf38]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2010], eax
mov edx, dword [ebp - 0x2010]
mov dword [ebp - 0x2014], edx
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x2014]
call fcn.00404a70
push eax
lea ecx, [ebp - 0xf34]
call fcn.00408a30
mov dword [ebp - 0x2018], eax
mov eax, dword [ebp - 0x2018]
mov dword [ebp - 0x201c], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x201c]
push ecx
lea ecx, [ebp - 0x334]
call fcn.00418a00
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xf34]
call fcn.00408aa0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xf38]
call fcn.00404a50
jmp case.0x48beb3.8
push 0x667c54
lea edx, [ebp - 0xf58]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2020], eax
mov eax, dword [ebp - 0x2020]
mov dword [ebp - 0x2024], eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x2024]
call fcn.00404a70
push eax
lea ecx, [ebp - 0xf54]
call fcn.00408a30
mov dword [ebp - 0x2028], eax
mov ecx, dword [ebp - 0x2028]
mov dword [ebp - 0x202c], ecx
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x202c]
push edx
lea ecx, [ebp - 0x334]
call fcn.00418a00
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xf54]
call fcn.00408aa0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xf58]
call fcn.00404a50
jmp case.0x48beb3.8
push 0x667c3c
lea eax, [ebp - 0xf78]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2030], eax
mov ecx, dword [ebp - 0x2030]
mov dword [ebp - 0x2034], ecx
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x2034]
call fcn.00404a70
push eax
lea ecx, [ebp - 0xf74]
call fcn.00408a30
mov dword [ebp - 0x2038], eax
mov edx, dword [ebp - 0x2038]
mov dword [ebp - 0x203c], edx
mov byte [ebp - 4], 0x20
mov eax, dword [ebp - 0x203c]
push eax
lea ecx, [ebp - 0x334]
call fcn.00418a00
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xf74]
call fcn.00408aa0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xf78]
call fcn.00404a50
jmp case.0x48beb3.8
push 0x667c2c
lea ecx, [ebp - 0xf98]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2040], eax
mov edx, dword [ebp - 0x2040]
mov dword [ebp - 0x2044], edx
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x2044]
call fcn.00404a70
push eax
lea ecx, [ebp - 0xf94]
call fcn.00408a30
mov dword [ebp - 0x2048], eax
mov eax, dword [ebp - 0x2048]
mov dword [ebp - 0x204c], eax
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x204c]
push ecx
lea ecx, [ebp - 0x334]
call fcn.00418a00
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xf94]
call fcn.00408aa0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xf98]
call fcn.00404a50
push 0xfde9
lea edx, [ebp - 0x334]
push edx
lea eax, [ebp - 0xfb4]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2050], eax
mov ecx, dword [ebp - 0x2050]
mov dword [ebp - 0x2054], ecx
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x2054]
call fcn.00419c10
push eax
push 0x667d44
lea edx, [ebp - 0xfb8]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2058], eax
mov eax, dword [ebp - 0x2058]
mov dword [ebp - 0x205c], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x205c]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xfb8]
call fcn.0040e840
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xfb4]
call fcn.0040bf10
push 0xfde9
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0xfd4]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2060], eax
mov edx, dword [ebp - 0x2060]
mov dword [ebp - 0x2064], edx
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x2064]
call fcn.00419c10
push eax
push 0x667d38
lea eax, [ebp - 0xfd8]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2068], eax
mov ecx, dword [ebp - 0x2068]
mov dword [ebp - 0x206c], ecx
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x206c]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xfd8]
call fcn.0040e840
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xfd4]
call fcn.0040bf10
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x10]
call edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
call ecx
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x334]
call fcn.00408aa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c4]
call fcn.0049b1c0
jmp 0x48bb63
cmp dword [0x6da4d0], 1
jne 0x48cf90
mov ecx, 0x6da644
call fcn.0049c8c0
mov dword [ebp - 0x3c8], 0
jmp 0x48c541
mov edx, dword [ebp - 0x3c8]
add edx, 1
mov dword [ebp - 0x3c8], edx
mov ecx, 0x6da568
call fcn.0049c380
cmp dword [ebp - 0x3c8], eax
jge 0x48c5d8
mov eax, dword [ebp - 0x3c8]
push eax
mov ecx, 0x6da568
call fcn.0049c3c0
push eax
lea ecx, [ebp - 0x474]
call fcn.0049a510
mov dword [ebp - 4], 0x27
lea ecx, [ebp - 0x3dc]
call fcn.004abfa0
mov byte [ebp - 4], 0x28
push 0x6da644
lea ecx, [ebp - 0x458]
call fcn.0040bf60
push eax
push SysReAllocStringLen
mov ecx, dword [ebp - 0x3e0]
push ecx
lea ecx, [ebp - 0x3dc]
call fcn.004bdc90
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x3dc]
call fcn.004ac3f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x474]
call fcn.0049a5f0
jmp 0x48c532
mov dword [ebp - 0x478], 0
jmp 0x48c5f3
mov edx, dword [ebp - 0x478]
add edx, 1
mov dword [ebp - 0x478], edx
mov ecx, 0x6da644
call fcn.0049c8a0
cmp dword [ebp - 0x478], eax
jge 0x48cf90
push 0x667d78
lea eax, [ebp - 0xfe0]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2070], eax
mov ecx, dword [ebp - 0x2070]
mov dword [ebp - 0x2074], ecx
mov dword [ebp - 4], 0x29
mov ecx, dword [ebp - 0x2074]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
call eax
add esp, 4
mov dword [ebp - 0xfdc], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfe0]
call fcn.0040e840
cmp dword [ebp - 0xfdc], 0
je 0x48cf8b
mov ecx, dword [ebp - 0x478]
push ecx
mov ecx, 0x6da644
call fcn.0049c8e0
push eax
lea ecx, [ebp - 0x50c]
call fcn.0049b240
mov dword [ebp - 4], 0x2a
push 0xfde9
lea edx, [ebp - 0x50c]
push edx
lea eax, [ebp - 0xffc]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2078], eax
mov ecx, dword [ebp - 0x2078]
mov dword [ebp - 0x207c], ecx
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x207c]
call fcn.00419c10
push eax
push 0x667d6c
lea edx, [ebp - 0x1000]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2080], eax
mov eax, dword [ebp - 0x2080]
mov dword [ebp - 0x2084], eax
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x2084]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1000]
call fcn.0040e840
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xffc]
call fcn.0040bf10
push 0xfde9
lea eax, [ebp - 0x4f0]
push eax
lea ecx, [ebp - 0x101c]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2088], eax
mov edx, dword [ebp - 0x2088]
mov dword [ebp - 0x208c], edx
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x208c]
call fcn.00419c10
push eax
push 0x667d60
lea eax, [ebp - 0x1020]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2090], eax
mov ecx, dword [ebp - 0x2090]
mov dword [ebp - 0x2094], ecx
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x2094]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1020]
call fcn.0040e840
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x101c]
call fcn.0040bf10
push 0xfde9
lea ecx, [ebp - 0x4d4]
push ecx
lea edx, [ebp - 0x103c]
push edx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2098], eax
mov eax, dword [ebp - 0x2098]
mov dword [ebp - 0x209c], eax
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x209c]
call fcn.00419c10
push eax
push 0x66095c
lea ecx, [ebp - 0x1040]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x20a0], eax
mov edx, dword [ebp - 0x20a0]
mov dword [ebp - 0x20a4], edx
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x20a4]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 8
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1040]
call fcn.0040e840
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x103c]
call fcn.0040bf10
push 0xfde9
lea edx, [ebp - 0x4b8]
push edx
lea eax, [ebp - 0x105c]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x20a8], eax
mov ecx, dword [ebp - 0x20a8]
mov dword [ebp - 0x20ac], ecx
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x20ac]
call fcn.00419c10
push eax
push 0x667d50
lea edx, [ebp - 0x1060]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x20b0], eax
mov eax, dword [ebp - 0x20b0]
mov dword [ebp - 0x20b4], eax
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x20b4]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x1060]
call fcn.0040e840
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x105c]
call fcn.0040bf10
lea ecx, [ebp - 0x528]
call fcn.00419c30
mov byte [ebp - 4], 0x33
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x20b8], eax
cmp dword [ebp - 0x20b8], 0xb
ja case.0x48c934.8
mov ecx, dword [ebp - 0x20b8]
jmp dword [ecx*4 + 0x491928]
push 0x667cfc
lea edx, [ebp - 0x1080]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x20bc], eax
mov eax, dword [ebp - 0x20bc]
mov dword [ebp - 0x20c0], eax
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x20c0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x107c]
call fcn.00408a30
mov dword [ebp - 0x20c4], eax
mov ecx, dword [ebp - 0x20c4]
mov dword [ebp - 0x20c8], ecx
mov byte [ebp - 4], 0x35
mov edx, dword [ebp - 0x20c8]
push edx
lea ecx, [ebp - 0x528]
call fcn.00418a00
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x107c]
call fcn.00408aa0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1080]
call fcn.00404a50
jmp case.0x48c934.8
push 0x667ce4
lea eax, [ebp - 0x10a0]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x20cc], eax
mov ecx, dword [ebp - 0x20cc]
mov dword [ebp - 0x20d0], ecx
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x20d0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x109c]
call fcn.00408a30
mov dword [ebp - 0x20d4], eax
mov edx, dword [ebp - 0x20d4]
mov dword [ebp - 0x20d8], edx
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0x20d8]
push eax
lea ecx, [ebp - 0x528]
call fcn.00418a00
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x109c]
call fcn.00408aa0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x10a0]
call fcn.00404a50
jmp case.0x48c934.8
push 0x667cb8
lea ecx, [ebp - 0x10c0]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x20dc], eax
mov edx, dword [ebp - 0x20dc]
mov dword [ebp - 0x20e0], edx
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x20e0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x10bc]
call fcn.00408a30
mov dword [ebp - 0x20e4], eax
mov eax, dword [ebp - 0x20e4]
mov dword [ebp - 0x20e8], eax
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x20e8]
push ecx
lea ecx, [ebp - 0x528]
call fcn.00418a00
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x10bc]
call fcn.00408aa0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x10c0]
call fcn.00404a50
jmp case.0x48c934.8
push 0x667c98
lea edx, [ebp - 0x10e0]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x20ec], eax
mov eax, dword [ebp - 0x20ec]
mov dword [ebp - 0x20f0], eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x20f0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x10dc]
call fcn.00408a30
mov dword [ebp - 0x20f4], eax
mov ecx, dword [ebp - 0x20f4]
mov dword [ebp - 0x20f8], ecx
mov byte [ebp - 4], 0x3b
mov edx, dword [ebp - 0x20f8]
push edx
lea ecx, [ebp - 0x528]
call fcn.00418a00
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x10dc]
call fcn.00408aa0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x10e0]
call fcn.00404a50
jmp case.0x48c934.8
push 0x667c84
lea eax, [ebp - 0x1100]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x20fc], eax
mov ecx, dword [ebp - 0x20fc]
mov dword [ebp - 0x2100], ecx
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x2100]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x10fc]
call fcn.00408a30
mov dword [ebp - 0x2104], eax
mov edx, dword [ebp - 0x2104]
mov dword [ebp - 0x2108], edx
mov byte [ebp - 4], 0x3d
mov eax, dword [ebp - 0x2108]
push eax
lea ecx, [ebp - 0x528]
call fcn.00418a00
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x10fc]
call fcn.00408aa0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1100]
call fcn.00404a50
jmp case.0x48c934.8
push 0x667c68
lea ecx, [ebp - 0x1120]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x210c], eax
mov edx, dword [ebp - 0x210c]
mov dword [ebp - 0x2110], edx
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x2110]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x111c]
call fcn.00408a30
mov dword [ebp - 0x2114], eax
mov eax, dword [ebp - 0x2114]
mov dword [ebp - 0x2118], eax
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x2118]
push ecx
lea ecx, [ebp - 0x528]
call fcn.00418a00
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x111c]
call fcn.00408aa0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1120]
call fcn.00404a50
jmp case.0x48c934.8
push 0x667c54
lea edx, [ebp - 0x1140]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x211c], eax
mov eax, dword [ebp - 0x211c]
mov dword [ebp - 0x2120], eax
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x2120]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x113c]
call fcn.00408a30
mov dword [ebp - 0x2124], eax
mov ecx, dword [ebp - 0x2124]
mov dword [ebp - 0x2128], ecx
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x2128]
push edx
lea ecx, [ebp - 0x528]
call fcn.00418a00
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x113c]
call fcn.00408aa0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1140]
call fcn.00404a50
jmp case.0x48c934.8
push 0x667c3c
lea eax, [ebp - 0x1160]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x212c], eax
mov ecx, dword [ebp - 0x212c]
mov dword [ebp - 0x2130], ecx
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0x2130]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x115c]
call fcn.00408a30
mov dword [ebp - 0x2134], eax
mov edx, dword [ebp - 0x2134]
mov dword [ebp - 0x2138], edx
mov byte [ebp - 4], 0x43
mov eax, dword [ebp - 0x2138]
push eax
lea ecx, [ebp - 0x528]
call fcn.00418a00
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x115c]
call fcn.00408aa0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1160]
call fcn.00404a50
jmp case.0x48c934.8
push 0x667c2c
lea ecx, [ebp - 0x1180]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x213c], eax
mov edx, dword [ebp - 0x213c]
mov dword [ebp - 0x2140], edx
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x2140]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x117c]
call fcn.00408a30
mov dword [ebp - 0x2144], eax
mov eax, dword [ebp - 0x2144]
mov dword [ebp - 0x2148], eax
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x2148]
push ecx
lea ecx, [ebp - 0x528]
call fcn.00418a00
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x117c]
call fcn.00408aa0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1180]
call fcn.00404a50
push 0xfde9
lea edx, [ebp - 0x528]
push edx
lea eax, [ebp - 0x119c]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x214c], eax
mov ecx, dword [ebp - 0x214c]
mov dword [ebp - 0x2150], ecx
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x2150]
call fcn.00419c10
push eax
push 0x667d44
lea edx, [ebp - 0x11a0]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2154], eax
mov eax, dword [ebp - 0x2154]
mov dword [ebp - 0x2158], eax
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x2158]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x11a0]
call fcn.0040e840
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x119c]
call fcn.0040bf10
push 0xfde9
lea eax, [ebp - 0x49c]
push eax
lea ecx, [ebp - 0x11bc]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x215c], eax
mov edx, dword [ebp - 0x215c]
mov dword [ebp - 0x2160], edx
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x2160]
call fcn.00419c10
push eax
push 0x667d38
lea eax, [ebp - 0x11c0]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2164], eax
mov ecx, dword [ebp - 0x2164]
mov dword [ebp - 0x2168], ecx
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0x2168]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x11c0]
call fcn.0040e840
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x11bc]
call fcn.0040bf10
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x10]
call edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
call ecx
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x528]
call fcn.00408aa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50c]
call fcn.0049b2f0
jmp 0x48c5e4
cmp dword [0x6da4d4], 1
jne 0x48d967
mov dword [ebp - 0x52c], 0
jmp 0x48cfb8
mov edx, dword [ebp - 0x52c]
add edx, 1
mov dword [ebp - 0x52c], edx
mov ecx, 0x6da57c
call fcn.0049c3e0
cmp dword [ebp - 0x52c], eax
jge 0x48d967
push 0x667d78
lea eax, [ebp - 0x11c8]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x216c], eax
mov ecx, dword [ebp - 0x216c]
mov dword [ebp - 0x2170], ecx
mov dword [ebp - 4], 0x4a
mov ecx, dword [ebp - 0x2170]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
call eax
add esp, 4
mov dword [ebp - 0x11c4], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11c8]
call fcn.0040e840
cmp dword [ebp - 0x11c4], 0
je 0x48d962
mov ecx, dword [ebp - 0x52c]
push ecx
mov ecx, 0x6da57c
call fcn.0049c420
push eax
lea ecx, [ebp - 0x5fc]
call fcn.0049a670
mov dword [ebp - 4], 0x4b
push 0x667d2c
lea edx, [ebp - 0x11cc]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2174], eax
mov eax, dword [ebp - 0x2174]
mov dword [ebp - 0x2178], eax
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0x2178]
call fcn.0040e830
push eax
push 0x667d6c
lea ecx, [ebp - 0x11d0]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x217c], eax
mov edx, dword [ebp - 0x217c]
mov dword [ebp - 0x2180], edx
mov byte [ebp - 4], 0x4d
mov ecx, dword [ebp - 0x2180]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 8
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x11d0]
call fcn.0040e840
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x11cc]
call fcn.0040e840
push 0xfde9
lea edx, [ebp - 0x5e0]
push edx
lea eax, [ebp - 0x11ec]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2184], eax
mov ecx, dword [ebp - 0x2184]
mov dword [ebp - 0x2188], ecx
mov byte [ebp - 4], 0x4e
mov ecx, dword [ebp - 0x2188]
call fcn.00419c10
push eax
push 0x667d60
lea edx, [ebp - 0x11f0]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x218c], eax
mov eax, dword [ebp - 0x218c]
mov dword [ebp - 0x2190], eax
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x2190]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x11f0]
call fcn.0040e840
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x11ec]
call fcn.0040bf10
push 0xfde9
lea eax, [ebp - 0x5c4]
push eax
lea ecx, [ebp - 0x120c]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2194], eax
mov edx, dword [ebp - 0x2194]
mov dword [ebp - 0x2198], edx
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp - 0x2198]
call fcn.00419c10
push eax
push 0x66095c
lea eax, [ebp - 0x1210]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x219c], eax
mov ecx, dword [ebp - 0x219c]
mov dword [ebp - 0x21a0], ecx
mov byte [ebp - 4], 0x51
mov ecx, dword [ebp - 0x21a0]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x1210]
call fcn.0040e840
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x120c]
call fcn.0040bf10
push 0xfde9
lea ecx, [ebp - 0x54c]
push ecx
lea edx, [ebp - 0x122c]
push edx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x21a4], eax
mov eax, dword [ebp - 0x21a4]
mov dword [ebp - 0x21a8], eax
mov byte [ebp - 4], 0x52
mov ecx, dword [ebp - 0x21a8]
call fcn.00419c10
push eax
push 0x667d50
lea ecx, [ebp - 0x1230]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x21ac], eax
mov edx, dword [ebp - 0x21ac]
mov dword [ebp - 0x21b0], edx
mov byte [ebp - 4], 0x53
mov ecx, dword [ebp - 0x21b0]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 8
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x1230]
call fcn.0040e840
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x122c]
call fcn.0040bf10
lea ecx, [ebp - 0x618]
call fcn.00419c30
mov byte [ebp - 4], 0x54
mov edx, dword [ebp - 0x56c]
mov dword [ebp - 0x21b4], edx
cmp dword [ebp - 0x21b4], 0xb
ja case.0x48d2f2.8
mov eax, dword [ebp - 0x21b4]
jmp dword [eax*4 + 0x491958]
push 0x667cfc
lea ecx, [ebp - 0x1250]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x21b8], eax
mov edx, dword [ebp - 0x21b8]
mov dword [ebp - 0x21bc], edx
mov byte [ebp - 4], 0x55
mov ecx, dword [ebp - 0x21bc]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x124c]
call fcn.00408a30
mov dword [ebp - 0x21c0], eax
mov eax, dword [ebp - 0x21c0]
mov dword [ebp - 0x21c4], eax
mov byte [ebp - 4], 0x56
mov ecx, dword [ebp - 0x21c4]
push ecx
lea ecx, [ebp - 0x618]
call fcn.00418a00
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x124c]
call fcn.00408aa0
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x1250]
call fcn.00404a50
jmp case.0x48d2f2.8
push 0x667ce4
lea edx, [ebp - 0x1270]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x21c8], eax
mov eax, dword [ebp - 0x21c8]
mov dword [ebp - 0x21cc], eax
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0x21cc]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x126c]
call fcn.00408a30
mov dword [ebp - 0x21d0], eax
mov ecx, dword [ebp - 0x21d0]
mov dword [ebp - 0x21d4], ecx
mov byte [ebp - 4], 0x58
mov edx, dword [ebp - 0x21d4]
push edx
lea ecx, [ebp - 0x618]
call fcn.00418a00
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x126c]
call fcn.00408aa0
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x1270]
call fcn.00404a50
jmp case.0x48d2f2.8
push 0x667cb8
lea eax, [ebp - 0x1290]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x21d8], eax
mov ecx, dword [ebp - 0x21d8]
mov dword [ebp - 0x21dc], ecx
mov byte [ebp - 4], 0x59
mov ecx, dword [ebp - 0x21dc]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x128c]
call fcn.00408a30
mov dword [ebp - 0x21e0], eax
mov edx, dword [ebp - 0x21e0]
mov dword [ebp - 0x21e4], edx
mov byte [ebp - 4], 0x5a
mov eax, dword [ebp - 0x21e4]
push eax
lea ecx, [ebp - 0x618]
call fcn.00418a00
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x128c]
call fcn.00408aa0
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x1290]
call fcn.00404a50
jmp case.0x48d2f2.8
push 0x667c98
lea ecx, [ebp - 0x12b0]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x21e8], eax
mov edx, dword [ebp - 0x21e8]
mov dword [ebp - 0x21ec], edx
mov byte [ebp - 4], 0x5b
mov ecx, dword [ebp - 0x21ec]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x12ac]
call fcn.00408a30
mov dword [ebp - 0x21f0], eax
mov eax, dword [ebp - 0x21f0]
mov dword [ebp - 0x21f4], eax
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0x21f4]
push ecx
lea ecx, [ebp - 0x618]
call fcn.00418a00
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x12ac]
call fcn.00408aa0
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x12b0]
call fcn.00404a50
jmp case.0x48d2f2.8
push 0x667c84
lea edx, [ebp - 0x12d0]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x21f8], eax
mov eax, dword [ebp - 0x21f8]
mov dword [ebp - 0x21fc], eax
mov byte [ebp - 4], 0x5d
mov ecx, dword [ebp - 0x21fc]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x12cc]
call fcn.00408a30
mov dword [ebp - 0x2200], eax
mov ecx, dword [ebp - 0x2200]
mov dword [ebp - 0x2204], ecx
mov byte [ebp - 4], 0x5e
mov edx, dword [ebp - 0x2204]
push edx
lea ecx, [ebp - 0x618]
call fcn.00418a00
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x12cc]
call fcn.00408aa0
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x12d0]
call fcn.00404a50
jmp case.0x48d2f2.8
push 0x667c68
lea eax, [ebp - 0x12f0]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2208], eax
mov ecx, dword [ebp - 0x2208]
mov dword [ebp - 0x220c], ecx
mov byte [ebp - 4], 0x5f
mov ecx, dword [ebp - 0x220c]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x12ec]
call fcn.00408a30
mov dword [ebp - 0x2210], eax
mov edx, dword [ebp - 0x2210]
mov dword [ebp - 0x2214], edx
mov byte [ebp - 4], 0x60
mov eax, dword [ebp - 0x2214]
push eax
lea ecx, [ebp - 0x618]
call fcn.00418a00
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x12ec]
call fcn.00408aa0
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x12f0]
call fcn.00404a50
jmp case.0x48d2f2.8
push 0x667c54
lea ecx, [ebp - 0x1310]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2218], eax
mov edx, dword [ebp - 0x2218]
mov dword [ebp - 0x221c], edx
mov byte [ebp - 4], 0x61
mov ecx, dword [ebp - 0x221c]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x130c]
call fcn.00408a30
mov dword [ebp - 0x2220], eax
mov eax, dword [ebp - 0x2220]
mov dword [ebp - 0x2224], eax
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0x2224]
push ecx
lea ecx, [ebp - 0x618]
call fcn.00418a00
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x130c]
call fcn.00408aa0
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x1310]
call fcn.00404a50
jmp case.0x48d2f2.8
push 0x667c3c
lea edx, [ebp - 0x1330]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2228], eax
mov eax, dword [ebp - 0x2228]
mov dword [ebp - 0x222c], eax
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0x222c]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x132c]
call fcn.00408a30
mov dword [ebp - 0x2230], eax
mov ecx, dword [ebp - 0x2230]
mov dword [ebp - 0x2234], ecx
mov byte [ebp - 4], 0x64
mov edx, dword [ebp - 0x2234]
push edx
lea ecx, [ebp - 0x618]
call fcn.00418a00
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x132c]
call fcn.00408aa0
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x1330]
call fcn.00404a50
jmp case.0x48d2f2.8
push 0x667c2c
lea eax, [ebp - 0x1350]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2238], eax
mov ecx, dword [ebp - 0x2238]
mov dword [ebp - 0x223c], ecx
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0x223c]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x134c]
call fcn.00408a30
mov dword [ebp - 0x2240], eax
mov edx, dword [ebp - 0x2240]
mov dword [ebp - 0x2244], edx
mov byte [ebp - 4], 0x66
mov eax, dword [ebp - 0x2244]
push eax
lea ecx, [ebp - 0x618]
call fcn.00418a00
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x134c]
call fcn.00408aa0
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x1350]
call fcn.00404a50
push 0xfde9
lea ecx, [ebp - 0x618]
push ecx
lea edx, [ebp - 0x136c]
push edx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2248], eax
mov eax, dword [ebp - 0x2248]
mov dword [ebp - 0x224c], eax
mov byte [ebp - 4], 0x67
mov ecx, dword [ebp - 0x224c]
call fcn.00419c10
push eax
push 0x667d44
lea ecx, [ebp - 0x1370]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2250], eax
mov edx, dword [ebp - 0x2250]
mov dword [ebp - 0x2254], edx
mov byte [ebp - 4], 0x68
mov ecx, dword [ebp - 0x2254]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 8
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x1370]
call fcn.0040e840
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x136c]
call fcn.0040bf10
cmp dword [ebp - 0x530], 1
jne 0x48d8dc
push 0x660770
push 0x667d38
lea edx, [ebp - 0x1374]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2258], eax
mov eax, dword [ebp - 0x2258]
mov dword [ebp - 0x225c], eax
mov byte [ebp - 4], 0x69
mov ecx, dword [ebp - 0x225c]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x1374]
call fcn.0040e840
jmp 0x48d931
push 0x667e54
push 0x667d38
lea eax, [ebp - 0x1378]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2260], eax
mov ecx, dword [ebp - 0x2260]
mov dword [ebp - 0x2264], ecx
mov byte [ebp - 4], 0x6a
mov ecx, dword [ebp - 0x2264]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x1378]
call fcn.0040e840
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x10]
call edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
call ecx
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x618]
call fcn.00408aa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5fc]
call fcn.0049a780
jmp 0x48cfa9
cmp dword [0x6da4d8], 1
jne 0x48e32c
mov dword [ebp - 0x61c], 0
jmp 0x48d98f
mov edx, dword [ebp - 0x61c]
add edx, 1
mov dword [ebp - 0x61c], edx
mov ecx, 0x6da590
call fcn.0049c440
cmp dword [ebp - 0x61c], eax
jge 0x48e32c
push 0x667d78
lea eax, [ebp - 0x1380]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2268], eax
mov ecx, dword [ebp - 0x2268]
mov dword [ebp - 0x226c], ecx
mov dword [ebp - 4], 0x6b
mov ecx, dword [ebp - 0x226c]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
call eax
add esp, 4
mov dword [ebp - 0x137c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1380]
call fcn.0040e840
cmp dword [ebp - 0x137c], 0
je 0x48e327
mov ecx, dword [ebp - 0x61c]
push ecx
mov ecx, 0x6da590
call fcn.0049c480
push eax
lea ecx, [ebp - 0x70c]
call fcn.0049a820
mov dword [ebp - 4], 0x6c
push 0xfde9
lea edx, [ebp - 0x680]
push edx
lea eax, [ebp - 0x139c]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2270], eax
mov ecx, dword [ebp - 0x2270]
mov dword [ebp - 0x2274], ecx
mov byte [ebp - 4], 0x6d
mov ecx, dword [ebp - 0x2274]
call fcn.00419c10
push eax
push 0x667d6c
lea edx, [ebp - 0x13a0]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2278], eax
mov eax, dword [ebp - 0x2278]
mov dword [ebp - 0x227c], eax
mov byte [ebp - 4], 0x6e
mov ecx, dword [ebp - 0x227c]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x13a0]
call fcn.0040e840
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x139c]
call fcn.0040bf10
push 0xfde9
lea eax, [ebp - 0x6f0]
push eax
lea ecx, [ebp - 0x13bc]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2280], eax
mov edx, dword [ebp - 0x2280]
mov dword [ebp - 0x2284], edx
mov byte [ebp - 4], 0x6f
mov ecx, dword [ebp - 0x2284]
call fcn.00419c10
push eax
push 0x667d60
lea eax, [ebp - 0x13c0]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2288], eax
mov ecx, dword [ebp - 0x2288]
mov dword [ebp - 0x228c], ecx
mov byte [ebp - 4], 0x70
mov ecx, dword [ebp - 0x228c]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x13c0]
call fcn.0040e840
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x13bc]
call fcn.0040bf10
push 0xfde9
lea ecx, [ebp - 0x6d4]
push ecx
lea edx, [ebp - 0x13dc]
push edx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2290], eax
mov eax, dword [ebp - 0x2290]
mov dword [ebp - 0x2294], eax
mov byte [ebp - 4], 0x71
mov ecx, dword [ebp - 0x2294]
call fcn.00419c10
push eax
push 0x66095c
lea ecx, [ebp - 0x13e0]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2298], eax
mov edx, dword [ebp - 0x2298]
mov dword [ebp - 0x229c], edx
mov byte [ebp - 4], 0x72
mov ecx, dword [ebp - 0x229c]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 8
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x13e0]
call fcn.0040e840
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x13dc]
call fcn.0040bf10
push 0xfde9
lea edx, [ebp - 0x644]
push edx
lea eax, [ebp - 0x13fc]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x22a0], eax
mov ecx, dword [ebp - 0x22a0]
mov dword [ebp - 0x22a4], ecx
mov byte [ebp - 4], 0x73
mov ecx, dword [ebp - 0x22a4]
call fcn.00419c10
push eax
push 0x667d50
lea edx, [ebp - 0x1400]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x22a8], eax
mov eax, dword [ebp - 0x22a8]
mov dword [ebp - 0x22ac], eax
mov byte [ebp - 4], 0x74
mov ecx, dword [ebp - 0x22ac]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x1400]
call fcn.0040e840
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x13fc]
call fcn.0040bf10
lea ecx, [ebp - 0x728]
call fcn.00419c30
mov byte [ebp - 4], 0x75
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0x22b0], eax
cmp dword [ebp - 0x22b0], 0xb
ja case.0x48dcd0.8
mov ecx, dword [ebp - 0x22b0]
jmp dword [ecx*4 + 0x491988]
push 0x667cfc
lea edx, [ebp - 0x1420]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x22b4], eax
mov eax, dword [ebp - 0x22b4]
mov dword [ebp - 0x22b8], eax
mov byte [ebp - 4], 0x76
mov ecx, dword [ebp - 0x22b8]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x141c]
call fcn.00408a30
mov dword [ebp - 0x22bc], eax
mov ecx, dword [ebp - 0x22bc]
mov dword [ebp - 0x22c0], ecx
mov byte [ebp - 4], 0x77
mov edx, dword [ebp - 0x22c0]
push edx
lea ecx, [ebp - 0x728]
call fcn.00418a00
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x141c]
call fcn.00408aa0
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x1420]
call fcn.00404a50
jmp case.0x48dcd0.8
push 0x667ce4
lea eax, [ebp - 0x1440]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x22c4], eax
mov ecx, dword [ebp - 0x22c4]
mov dword [ebp - 0x22c8], ecx
mov byte [ebp - 4], 0x78
mov ecx, dword [ebp - 0x22c8]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x143c]
call fcn.00408a30
mov dword [ebp - 0x22cc], eax
mov edx, dword [ebp - 0x22cc]
mov dword [ebp - 0x22d0], edx
mov byte [ebp - 4], 0x79
mov eax, dword [ebp - 0x22d0]
push eax
lea ecx, [ebp - 0x728]
call fcn.00418a00
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x143c]
call fcn.00408aa0
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x1440]
call fcn.00404a50
jmp case.0x48dcd0.8
push 0x667cb8
lea ecx, [ebp - 0x1460]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x22d4], eax
mov edx, dword [ebp - 0x22d4]
mov dword [ebp - 0x22d8], edx
mov byte [ebp - 4], 0x7a
mov ecx, dword [ebp - 0x22d8]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x145c]
call fcn.00408a30
mov dword [ebp - 0x22dc], eax
mov eax, dword [ebp - 0x22dc]
mov dword [ebp - 0x22e0], eax
mov byte [ebp - 4], 0x7b
mov ecx, dword [ebp - 0x22e0]
push ecx
lea ecx, [ebp - 0x728]
call fcn.00418a00
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x145c]
call fcn.00408aa0
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x1460]
call fcn.00404a50
jmp case.0x48dcd0.8
push 0x667c98
lea edx, [ebp - 0x1480]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x22e4], eax
mov eax, dword [ebp - 0x22e4]
mov dword [ebp - 0x22e8], eax
mov byte [ebp - 4], 0x7c
mov ecx, dword [ebp - 0x22e8]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x147c]
call fcn.00408a30
mov dword [ebp - 0x22ec], eax
mov ecx, dword [ebp - 0x22ec]
mov dword [ebp - 0x22f0], ecx
mov byte [ebp - 4], 0x7d
mov edx, dword [ebp - 0x22f0]
push edx
lea ecx, [ebp - 0x728]
call fcn.00418a00
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x147c]
call fcn.00408aa0
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x1480]
call fcn.00404a50
jmp case.0x48dcd0.8
push 0x667c84
lea eax, [ebp - 0x14a0]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x22f4], eax
mov ecx, dword [ebp - 0x22f4]
mov dword [ebp - 0x22f8], ecx
mov byte [ebp - 4], 0x7e
mov ecx, dword [ebp - 0x22f8]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x149c]
call fcn.00408a30
mov dword [ebp - 0x22fc], eax
mov edx, dword [ebp - 0x22fc]
mov dword [ebp - 0x2300], edx
mov byte [ebp - 4], 0x7f
mov eax, dword [ebp - 0x2300]
push eax
lea ecx, [ebp - 0x728]
call fcn.00418a00
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x149c]
call fcn.00408aa0
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x14a0]
call fcn.00404a50
jmp case.0x48dcd0.8
push 0x667c68
lea ecx, [ebp - 0x14c0]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2304], eax
mov edx, dword [ebp - 0x2304]
mov dword [ebp - 0x2308], edx
mov byte [ebp - 4], 0x80
mov ecx, dword [ebp - 0x2308]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x14bc]
call fcn.00408a30
mov dword [ebp - 0x230c], eax
mov eax, dword [ebp - 0x230c]
mov dword [ebp - 0x2310], eax
mov byte [ebp - 4], 0x81
mov ecx, dword [ebp - 0x2310]
push ecx
lea ecx, [ebp - 0x728]
call fcn.00418a00
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x14bc]
call fcn.00408aa0
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x14c0]
call fcn.00404a50
jmp case.0x48dcd0.8
push 0x667c54
lea edx, [ebp - 0x14e0]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2314], eax
mov eax, dword [ebp - 0x2314]
mov dword [ebp - 0x2318], eax
mov byte [ebp - 4], 0x82
mov ecx, dword [ebp - 0x2318]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x14dc]
call fcn.00408a30
mov dword [ebp - 0x231c], eax
mov ecx, dword [ebp - 0x231c]
mov dword [ebp - 0x2320], ecx
mov byte [ebp - 4], 0x83
mov edx, dword [ebp - 0x2320]
push edx
lea ecx, [ebp - 0x728]
call fcn.00418a00
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x14dc]
call fcn.00408aa0
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x14e0]
call fcn.00404a50
jmp case.0x48dcd0.8
push 0x667c3c
lea eax, [ebp - 0x1500]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2324], eax
mov ecx, dword [ebp - 0x2324]
mov dword [ebp - 0x2328], ecx
mov byte [ebp - 4], 0x84
mov ecx, dword [ebp - 0x2328]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x14fc]
call fcn.00408a30
mov dword [ebp - 0x232c], eax
mov edx, dword [ebp - 0x232c]
mov dword [ebp - 0x2330], edx
mov byte [ebp - 4], 0x85
mov eax, dword [ebp - 0x2330]
push eax
lea ecx, [ebp - 0x728]
call fcn.00418a00
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x14fc]
call fcn.00408aa0
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x1500]
call fcn.00404a50
jmp case.0x48dcd0.8
push 0x667c2c
lea ecx, [ebp - 0x1520]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2334], eax
mov edx, dword [ebp - 0x2334]
mov dword [ebp - 0x2338], edx
mov byte [ebp - 4], 0x86
mov ecx, dword [ebp - 0x2338]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x151c]
call fcn.00408a30
mov dword [ebp - 0x233c], eax
mov eax, dword [ebp - 0x233c]
mov dword [ebp - 0x2340], eax
mov byte [ebp - 4], 0x87
mov ecx, dword [ebp - 0x2340]
push ecx
lea ecx, [ebp - 0x728]
call fcn.00418a00
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x151c]
call fcn.00408aa0
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x1520]
call fcn.00404a50
push 0xfde9
lea edx, [ebp - 0x728]
push edx
lea eax, [ebp - 0x153c]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2344], eax
mov ecx, dword [ebp - 0x2344]
mov dword [ebp - 0x2348], ecx
mov byte [ebp - 4], 0x88
mov ecx, dword [ebp - 0x2348]
call fcn.00419c10
push eax
push 0x667d44
lea edx, [ebp - 0x1540]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x234c], eax
mov eax, dword [ebp - 0x234c]
mov dword [ebp - 0x2350], eax
mov byte [ebp - 4], 0x89
mov ecx, dword [ebp - 0x2350]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x1540]
call fcn.0040e840
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x153c]
call fcn.0040bf10
push 0xfde9
lea eax, [ebp - 0x664]
push eax
lea ecx, [ebp - 0x155c]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2354], eax
mov edx, dword [ebp - 0x2354]
mov dword [ebp - 0x2358], edx
mov byte [ebp - 4], 0x8a
mov ecx, dword [ebp - 0x2358]
call fcn.00419c10
push eax
push 0x667d38
lea eax, [ebp - 0x1560]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x235c], eax
mov ecx, dword [ebp - 0x235c]
mov dword [ebp - 0x2360], ecx
mov byte [ebp - 4], 0x8b
mov ecx, dword [ebp - 0x2360]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x1560]
call fcn.0040e840
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x155c]
call fcn.0040bf10
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x10]
call edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
call ecx
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x728]
call fcn.00408aa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70c]
call fcn.0049a950
jmp 0x48d980
cmp dword [0x6da4dc], 1
jne 0x48edad
mov ecx, 0x6da658
call fcn.0049c920
mov dword [ebp - 0x72c], 0
jmp 0x48e35e
mov edx, dword [ebp - 0x72c]
add edx, 1
mov dword [ebp - 0x72c], edx
mov ecx, 0x6da5a4
call fcn.0049c4a0
cmp dword [ebp - 0x72c], eax
jge 0x48e3f5
mov eax, dword [ebp - 0x72c]
push eax
mov ecx, 0x6da5a4
call fcn.0049c4e0
push eax
lea ecx, [ebp - 0x7c4]
call fcn.0049aa00
mov dword [ebp - 4], 0x8c
lea ecx, [ebp - 0x7d8]
call fcn.004abfa0
mov byte [ebp - 4], 0x8d
push 0x6da658
lea ecx, [ebp - 0x7a8]
call fcn.0040bf60
push eax
push SysReAllocStringLen
mov ecx, dword [ebp - 0x734]
push ecx
lea ecx, [ebp - 0x7d8]
call fcn.004be3a0
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x7d8]
call fcn.004ac3f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c4]
call fcn.0049aad0
jmp 0x48e34f
mov dword [ebp - 0x7dc], 0
jmp 0x48e410
mov edx, dword [ebp - 0x7dc]
add edx, 1
mov dword [ebp - 0x7dc], edx
mov ecx, 0x6da658
call fcn.0049c900
cmp dword [ebp - 0x7dc], eax
jge 0x48edad
push 0x667d78
lea eax, [ebp - 0x1568]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2364], eax
mov ecx, dword [ebp - 0x2364]
mov dword [ebp - 0x2368], ecx
mov dword [ebp - 4], 0x8e
mov ecx, dword [ebp - 0x2368]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
call eax
add esp, 4
mov dword [ebp - 0x1564], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1568]
call fcn.0040e840
cmp dword [ebp - 0x1564], 0
je 0x48eda8
mov ecx, dword [ebp - 0x7dc]
push ecx
mov ecx, 0x6da658
call fcn.0049c940
push eax
lea ecx, [ebp - 0x86c]
call fcn.0049b370
mov dword [ebp - 4], 0x8f
push 0xfde9
lea edx, [ebp - 0x86c]
push edx
lea eax, [ebp - 0x1584]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x236c], eax
mov ecx, dword [ebp - 0x236c]
mov dword [ebp - 0x2370], ecx
mov byte [ebp - 4], 0x90
mov ecx, dword [ebp - 0x2370]
call fcn.00419c10
push eax
push 0x667d6c
lea edx, [ebp - 0x1588]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2374], eax
mov eax, dword [ebp - 0x2374]
mov dword [ebp - 0x2378], eax
mov byte [ebp - 4], 0x91
mov ecx, dword [ebp - 0x2378]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0x1588]
call fcn.0040e840
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x1584]
call fcn.0040bf10
push 0xfde9
lea eax, [ebp - 0x850]
push eax
lea ecx, [ebp - 0x15a4]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x237c], eax
mov edx, dword [ebp - 0x237c]
mov dword [ebp - 0x2380], edx
mov byte [ebp - 4], 0x92
mov ecx, dword [ebp - 0x2380]
call fcn.00419c10
push eax
push 0x667d60
lea eax, [ebp - 0x15a8]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2384], eax
mov ecx, dword [ebp - 0x2384]
mov dword [ebp - 0x2388], ecx
mov byte [ebp - 4], 0x93
mov ecx, dword [ebp - 0x2388]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x15a8]
call fcn.0040e840
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x15a4]
call fcn.0040bf10
push 0xfde9
lea ecx, [ebp - 0x834]
push ecx
lea edx, [ebp - 0x15c4]
push edx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x238c], eax
mov eax, dword [ebp - 0x238c]
mov dword [ebp - 0x2390], eax
mov byte [ebp - 4], 0x94
mov ecx, dword [ebp - 0x2390]
call fcn.00419c10
push eax
push 0x66095c
lea ecx, [ebp - 0x15c8]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2394], eax
mov edx, dword [ebp - 0x2394]
mov dword [ebp - 0x2398], edx
mov byte [ebp - 4], 0x95
mov ecx, dword [ebp - 0x2398]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 8
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x15c8]
call fcn.0040e840
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x15c4]
call fcn.0040bf10
push 0xfde9
lea edx, [ebp - 0x818]
push edx
lea eax, [ebp - 0x15e4]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x239c], eax
mov ecx, dword [ebp - 0x239c]
mov dword [ebp - 0x23a0], ecx
mov byte [ebp - 4], 0x96
mov ecx, dword [ebp - 0x23a0]
call fcn.00419c10
push eax
push 0x667d50
lea edx, [ebp - 0x15e8]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x23a4], eax
mov eax, dword [ebp - 0x23a4]
mov dword [ebp - 0x23a8], eax
mov byte [ebp - 4], 0x97
mov ecx, dword [ebp - 0x23a8]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x15e8]
call fcn.0040e840
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x15e4]
call fcn.0040bf10
lea ecx, [ebp - 0x888]
call fcn.00419c30
mov byte [ebp - 4], 0x98
mov eax, dword [ebp - 0x7e0]
mov dword [ebp - 0x23ac], eax
cmp dword [ebp - 0x23ac], 0xb
ja case.0x48e751.8
mov ecx, dword [ebp - 0x23ac]
jmp dword [ecx*4 + 0x4919b8]
push 0x667cfc
lea edx, [ebp - 0x1608]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x23b0], eax
mov eax, dword [ebp - 0x23b0]
mov dword [ebp - 0x23b4], eax
mov byte [ebp - 4], 0x99
mov ecx, dword [ebp - 0x23b4]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1604]
call fcn.00408a30
mov dword [ebp - 0x23b8], eax
mov ecx, dword [ebp - 0x23b8]
mov dword [ebp - 0x23bc], ecx
mov byte [ebp - 4], 0x9a
mov edx, dword [ebp - 0x23bc]
push edx
lea ecx, [ebp - 0x888]
call fcn.00418a00
mov byte [ebp - 4], 0x99
lea ecx, [ebp - 0x1604]
call fcn.00408aa0
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x1608]
call fcn.00404a50
jmp case.0x48e751.8
push 0x667ce4
lea eax, [ebp - 0x1628]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x23c0], eax
mov ecx, dword [ebp - 0x23c0]
mov dword [ebp - 0x23c4], ecx
mov byte [ebp - 4], 0x9b
mov ecx, dword [ebp - 0x23c4]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1624]
call fcn.00408a30
mov dword [ebp - 0x23c8], eax
mov edx, dword [ebp - 0x23c8]
mov dword [ebp - 0x23cc], edx
mov byte [ebp - 4], 0x9c
mov eax, dword [ebp - 0x23cc]
push eax
lea ecx, [ebp - 0x888]
call fcn.00418a00
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0x1624]
call fcn.00408aa0
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x1628]
call fcn.00404a50
jmp case.0x48e751.8
push 0x667cb8
lea ecx, [ebp - 0x1648]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x23d0], eax
mov edx, dword [ebp - 0x23d0]
mov dword [ebp - 0x23d4], edx
mov byte [ebp - 4], 0x9d
mov ecx, dword [ebp - 0x23d4]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1644]
call fcn.00408a30
mov dword [ebp - 0x23d8], eax
mov eax, dword [ebp - 0x23d8]
mov dword [ebp - 0x23dc], eax
mov byte [ebp - 4], 0x9e
mov ecx, dword [ebp - 0x23dc]
push ecx
lea ecx, [ebp - 0x888]
call fcn.00418a00
mov byte [ebp - 4], 0x9d
lea ecx, [ebp - 0x1644]
call fcn.00408aa0
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x1648]
call fcn.00404a50
jmp case.0x48e751.8
push 0x667c98
lea edx, [ebp - 0x1668]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x23e0], eax
mov eax, dword [ebp - 0x23e0]
mov dword [ebp - 0x23e4], eax
mov byte [ebp - 4], 0x9f
mov ecx, dword [ebp - 0x23e4]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1664]
call fcn.00408a30
mov dword [ebp - 0x23e8], eax
mov ecx, dword [ebp - 0x23e8]
mov dword [ebp - 0x23ec], ecx
mov byte [ebp - 4], 0xa0
mov edx, dword [ebp - 0x23ec]
push edx
lea ecx, [ebp - 0x888]
call fcn.00418a00
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0x1664]
call fcn.00408aa0
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x1668]
call fcn.00404a50
jmp case.0x48e751.8
push 0x667c84
lea eax, [ebp - 0x1688]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x23f0], eax
mov ecx, dword [ebp - 0x23f0]
mov dword [ebp - 0x23f4], ecx
mov byte [ebp - 4], 0xa1
mov ecx, dword [ebp - 0x23f4]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1684]
call fcn.00408a30
mov dword [ebp - 0x23f8], eax
mov edx, dword [ebp - 0x23f8]
mov dword [ebp - 0x23fc], edx
mov byte [ebp - 4], 0xa2
mov eax, dword [ebp - 0x23fc]
push eax
lea ecx, [ebp - 0x888]
call fcn.00418a00
mov byte [ebp - 4], 0xa1
lea ecx, [ebp - 0x1684]
call fcn.00408aa0
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x1688]
call fcn.00404a50
jmp case.0x48e751.8
push 0x667c68
lea ecx, [ebp - 0x16a8]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2400], eax
mov edx, dword [ebp - 0x2400]
mov dword [ebp - 0x2404], edx
mov byte [ebp - 4], 0xa3
mov ecx, dword [ebp - 0x2404]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x16a4]
call fcn.00408a30
mov dword [ebp - 0x2408], eax
mov eax, dword [ebp - 0x2408]
mov dword [ebp - 0x240c], eax
mov byte [ebp - 4], 0xa4
mov ecx, dword [ebp - 0x240c]
push ecx
lea ecx, [ebp - 0x888]
call fcn.00418a00
mov byte [ebp - 4], 0xa3
lea ecx, [ebp - 0x16a4]
call fcn.00408aa0
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x16a8]
call fcn.00404a50
jmp case.0x48e751.8
push 0x667c54
lea edx, [ebp - 0x16c8]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2410], eax
mov eax, dword [ebp - 0x2410]
mov dword [ebp - 0x2414], eax
mov byte [ebp - 4], 0xa5
mov ecx, dword [ebp - 0x2414]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x16c4]
call fcn.00408a30
mov dword [ebp - 0x2418], eax
mov ecx, dword [ebp - 0x2418]
mov dword [ebp - 0x241c], ecx
mov byte [ebp - 4], 0xa6
mov edx, dword [ebp - 0x241c]
push edx
lea ecx, [ebp - 0x888]
call fcn.00418a00
mov byte [ebp - 4], 0xa5
lea ecx, [ebp - 0x16c4]
call fcn.00408aa0
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x16c8]
call fcn.00404a50
jmp case.0x48e751.8
push 0x667c3c
lea eax, [ebp - 0x16e8]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2420], eax
mov ecx, dword [ebp - 0x2420]
mov dword [ebp - 0x2424], ecx
mov byte [ebp - 4], 0xa7
mov ecx, dword [ebp - 0x2424]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x16e4]
call fcn.00408a30
mov dword [ebp - 0x2428], eax
mov edx, dword [ebp - 0x2428]
mov dword [ebp - 0x242c], edx
mov byte [ebp - 4], 0xa8
mov eax, dword [ebp - 0x242c]
push eax
lea ecx, [ebp - 0x888]
call fcn.00418a00
mov byte [ebp - 4], 0xa7
lea ecx, [ebp - 0x16e4]
call fcn.00408aa0
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x16e8]
call fcn.00404a50
jmp case.0x48e751.8
push 0x667c2c
lea ecx, [ebp - 0x1708]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2430], eax
mov edx, dword [ebp - 0x2430]
mov dword [ebp - 0x2434], edx
mov byte [ebp - 4], 0xa9
mov ecx, dword [ebp - 0x2434]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1704]
call fcn.00408a30
mov dword [ebp - 0x2438], eax
mov eax, dword [ebp - 0x2438]
mov dword [ebp - 0x243c], eax
mov byte [ebp - 4], 0xaa
mov ecx, dword [ebp - 0x243c]
push ecx
lea ecx, [ebp - 0x888]
call fcn.00418a00
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0x1704]
call fcn.00408aa0
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x1708]
call fcn.00404a50
push 0xfde9
lea edx, [ebp - 0x888]
push edx
lea eax, [ebp - 0x1724]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2440], eax
mov ecx, dword [ebp - 0x2440]
mov dword [ebp - 0x2444], ecx
mov byte [ebp - 4], 0xab
mov ecx, dword [ebp - 0x2444]
call fcn.00419c10
push eax
push 0x667d44
lea edx, [ebp - 0x1728]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2448], eax
mov eax, dword [ebp - 0x2448]
mov dword [ebp - 0x244c], eax
mov byte [ebp - 4], 0xac
mov ecx, dword [ebp - 0x244c]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0xab
lea ecx, [ebp - 0x1728]
call fcn.0040e840
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x1724]
call fcn.0040bf10
push 0xfde9
lea eax, [ebp - 0x7fc]
push eax
lea ecx, [ebp - 0x1744]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2450], eax
mov edx, dword [ebp - 0x2450]
mov dword [ebp - 0x2454], edx
mov byte [ebp - 4], 0xad
mov ecx, dword [ebp - 0x2454]
call fcn.00419c10
push eax
push 0x667d38
lea eax, [ebp - 0x1748]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2458], eax
mov ecx, dword [ebp - 0x2458]
mov dword [ebp - 0x245c], ecx
mov byte [ebp - 4], 0xae
mov ecx, dword [ebp - 0x245c]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0xad
lea ecx, [ebp - 0x1748]
call fcn.0040e840
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x1744]
call fcn.0040bf10
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x10]
call edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
call ecx
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x888]
call fcn.00408aa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x86c]
call fcn.0049b420
jmp 0x48e401
cmp dword [0x6da4e0], 1
jne 0x48f82e
mov ecx, 0x6da66c
call fcn.0049c980
mov dword [ebp - 0x88c], 0
jmp 0x48eddf
mov edx, dword [ebp - 0x88c]
add edx, 1
mov dword [ebp - 0x88c], edx
mov ecx, 0x6da5b8
call fcn.0049c500
cmp dword [ebp - 0x88c], eax
jge 0x48ee76
mov eax, dword [ebp - 0x88c]
push eax
mov ecx, 0x6da5b8
call fcn.0049c540
push eax
lea ecx, [ebp - 0x93c]
call fcn.0049ab50
mov dword [ebp - 4], 0xaf
lea ecx, [ebp - 0x950]
call fcn.004abfa0
mov byte [ebp - 4], 0xb0
push 0x6da66c
lea ecx, [ebp - 0x920]
call fcn.0040bf60
push eax
push reloc.SHLWAPI.dll_ParseURLW
mov ecx, dword [ebp - 0x890]
push ecx
lea ecx, [ebp - 0x950]
call fcn.004beab0
mov byte [ebp - 4], 0xaf
lea ecx, [ebp - 0x950]
call fcn.004ac3f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x93c]
call fcn.0049ac30
jmp 0x48edd0
mov dword [ebp - 0x954], 0
jmp 0x48ee91
mov edx, dword [ebp - 0x954]
add edx, 1
mov dword [ebp - 0x954], edx
mov ecx, 0x6da66c
call fcn.0049c960
cmp dword [ebp - 0x954], eax
jge 0x48f82e
push 0x667d78
lea eax, [ebp - 0x1750]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2460], eax
mov ecx, dword [ebp - 0x2460]
mov dword [ebp - 0x2464], ecx
mov dword [ebp - 4], 0xb1
mov ecx, dword [ebp - 0x2464]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
call eax
add esp, 4
mov dword [ebp - 0x174c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1750]
call fcn.0040e840
cmp dword [ebp - 0x174c], 0
je 0x48f829
mov ecx, dword [ebp - 0x954]
push ecx
mov ecx, 0x6da66c
call fcn.0049c9a0
push eax
lea ecx, [ebp - 0xa04]
call fcn.0049b4a0
mov dword [ebp - 4], 0xb2
push 0xfde9
lea edx, [ebp - 0xa04]
push edx
lea eax, [ebp - 0x176c]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2468], eax
mov ecx, dword [ebp - 0x2468]
mov dword [ebp - 0x246c], ecx
mov byte [ebp - 4], 0xb3
mov ecx, dword [ebp - 0x246c]
call fcn.00419c10
push eax
push 0x667d6c
lea edx, [ebp - 0x1770]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2470], eax
mov eax, dword [ebp - 0x2470]
mov dword [ebp - 0x2474], eax
mov byte [ebp - 4], 0xb4
mov ecx, dword [ebp - 0x2474]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0xb3
lea ecx, [ebp - 0x1770]
call fcn.0040e840
mov byte [ebp - 4], 0xb2
lea ecx, [ebp - 0x176c]
call fcn.0040bf10
push 0xfde9
lea eax, [ebp - 0x9e8]
push eax
lea ecx, [ebp - 0x178c]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2478], eax
mov edx, dword [ebp - 0x2478]
mov dword [ebp - 0x247c], edx
mov byte [ebp - 4], 0xb5
mov ecx, dword [ebp - 0x247c]
call fcn.00419c10
push eax
push 0x667d60
lea eax, [ebp - 0x1790]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2480], eax
mov ecx, dword [ebp - 0x2480]
mov dword [ebp - 0x2484], ecx
mov byte [ebp - 4], 0xb6
mov ecx, dword [ebp - 0x2484]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0xb5
lea ecx, [ebp - 0x1790]
call fcn.0040e840
mov byte [ebp - 4], 0xb2
lea ecx, [ebp - 0x178c]
call fcn.0040bf10
push 0xfde9
lea ecx, [ebp - 0x9cc]
push ecx
lea edx, [ebp - 0x17ac]
push edx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2488], eax
mov eax, dword [ebp - 0x2488]
mov dword [ebp - 0x248c], eax
mov byte [ebp - 4], 0xb7
mov ecx, dword [ebp - 0x248c]
call fcn.00419c10
push eax
push 0x66095c
lea ecx, [ebp - 0x17b0]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2490], eax
mov edx, dword [ebp - 0x2490]
mov dword [ebp - 0x2494], edx
mov byte [ebp - 4], 0xb8
mov ecx, dword [ebp - 0x2494]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 8
mov byte [ebp - 4], 0xb7
lea ecx, [ebp - 0x17b0]
call fcn.0040e840
mov byte [ebp - 4], 0xb2
lea ecx, [ebp - 0x17ac]
call fcn.0040bf10
push 0xfde9
lea edx, [ebp - 0x9b0]
push edx
lea eax, [ebp - 0x17cc]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2498], eax
mov ecx, dword [ebp - 0x2498]
mov dword [ebp - 0x249c], ecx
mov byte [ebp - 4], 0xb9
mov ecx, dword [ebp - 0x249c]
call fcn.00419c10
push eax
push 0x667d50
lea edx, [ebp - 0x17d0]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x24a0], eax
mov eax, dword [ebp - 0x24a0]
mov dword [ebp - 0x24a4], eax
mov byte [ebp - 4], 0xba
mov ecx, dword [ebp - 0x24a4]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0xb9
lea ecx, [ebp - 0x17d0]
call fcn.0040e840
mov byte [ebp - 4], 0xb2
lea ecx, [ebp - 0x17cc]
call fcn.0040bf10
lea ecx, [ebp - 0x970]
call fcn.00419c30
mov byte [ebp - 4], 0xbb
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0x24a8], eax
cmp dword [ebp - 0x24a8], 0xb
ja case.0x48f1d2.8
mov ecx, dword [ebp - 0x24a8]
jmp dword [ecx*4 + 0x4919e8]
push 0x667cfc
lea edx, [ebp - 0x17f0]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x24ac], eax
mov eax, dword [ebp - 0x24ac]
mov dword [ebp - 0x24b0], eax
mov byte [ebp - 4], 0xbc
mov ecx, dword [ebp - 0x24b0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x17ec]
call fcn.00408a30
mov dword [ebp - 0x24b4], eax
mov ecx, dword [ebp - 0x24b4]
mov dword [ebp - 0x24b8], ecx
mov byte [ebp - 4], 0xbd
mov edx, dword [ebp - 0x24b8]
push edx
lea ecx, [ebp - 0x970]
call fcn.00418a00
mov byte [ebp - 4], 0xbc
lea ecx, [ebp - 0x17ec]
call fcn.00408aa0
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x17f0]
call fcn.00404a50
jmp case.0x48f1d2.8
push 0x667ce4
lea eax, [ebp - 0x1810]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x24bc], eax
mov ecx, dword [ebp - 0x24bc]
mov dword [ebp - 0x24c0], ecx
mov byte [ebp - 4], 0xbe
mov ecx, dword [ebp - 0x24c0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x180c]
call fcn.00408a30
mov dword [ebp - 0x24c4], eax
mov edx, dword [ebp - 0x24c4]
mov dword [ebp - 0x24c8], edx
mov byte [ebp - 4], 0xbf
mov eax, dword [ebp - 0x24c8]
push eax
lea ecx, [ebp - 0x970]
call fcn.00418a00
mov byte [ebp - 4], 0xbe
lea ecx, [ebp - 0x180c]
call fcn.00408aa0
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x1810]
call fcn.00404a50
jmp case.0x48f1d2.8
push 0x667cb8
lea ecx, [ebp - 0x1830]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x24cc], eax
mov edx, dword [ebp - 0x24cc]
mov dword [ebp - 0x24d0], edx
mov byte [ebp - 4], 0xc0
mov ecx, dword [ebp - 0x24d0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x182c]
call fcn.00408a30
mov dword [ebp - 0x24d4], eax
mov eax, dword [ebp - 0x24d4]
mov dword [ebp - 0x24d8], eax
mov byte [ebp - 4], 0xc1
mov ecx, dword [ebp - 0x24d8]
push ecx
lea ecx, [ebp - 0x970]
call fcn.00418a00
mov byte [ebp - 4], 0xc0
lea ecx, [ebp - 0x182c]
call fcn.00408aa0
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x1830]
call fcn.00404a50
jmp case.0x48f1d2.8
push 0x667c98
lea edx, [ebp - 0x1850]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x24dc], eax
mov eax, dword [ebp - 0x24dc]
mov dword [ebp - 0x24e0], eax
mov byte [ebp - 4], 0xc2
mov ecx, dword [ebp - 0x24e0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x184c]
call fcn.00408a30
mov dword [ebp - 0x24e4], eax
mov ecx, dword [ebp - 0x24e4]
mov dword [ebp - 0x24e8], ecx
mov byte [ebp - 4], 0xc3
mov edx, dword [ebp - 0x24e8]
push edx
lea ecx, [ebp - 0x970]
call fcn.00418a00
mov byte [ebp - 4], 0xc2
lea ecx, [ebp - 0x184c]
call fcn.00408aa0
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x1850]
call fcn.00404a50
jmp case.0x48f1d2.8
push 0x667c84
lea eax, [ebp - 0x1870]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x24ec], eax
mov ecx, dword [ebp - 0x24ec]
mov dword [ebp - 0x24f0], ecx
mov byte [ebp - 4], 0xc4
mov ecx, dword [ebp - 0x24f0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x186c]
call fcn.00408a30
mov dword [ebp - 0x24f4], eax
mov edx, dword [ebp - 0x24f4]
mov dword [ebp - 0x24f8], edx
mov byte [ebp - 4], 0xc5
mov eax, dword [ebp - 0x24f8]
push eax
lea ecx, [ebp - 0x970]
call fcn.00418a00
mov byte [ebp - 4], 0xc4
lea ecx, [ebp - 0x186c]
call fcn.00408aa0
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x1870]
call fcn.00404a50
jmp case.0x48f1d2.8
push 0x667c68
lea ecx, [ebp - 0x1890]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x24fc], eax
mov edx, dword [ebp - 0x24fc]
mov dword [ebp - 0x2500], edx
mov byte [ebp - 4], 0xc6
mov ecx, dword [ebp - 0x2500]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x188c]
call fcn.00408a30
mov dword [ebp - 0x2504], eax
mov eax, dword [ebp - 0x2504]
mov dword [ebp - 0x2508], eax
mov byte [ebp - 4], 0xc7
mov ecx, dword [ebp - 0x2508]
push ecx
lea ecx, [ebp - 0x970]
call fcn.00418a00
mov byte [ebp - 4], 0xc6
lea ecx, [ebp - 0x188c]
call fcn.00408aa0
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x1890]
call fcn.00404a50
jmp case.0x48f1d2.8
push 0x667c54
lea edx, [ebp - 0x18b0]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x250c], eax
mov eax, dword [ebp - 0x250c]
mov dword [ebp - 0x2510], eax
mov byte [ebp - 4], 0xc8
mov ecx, dword [ebp - 0x2510]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x18ac]
call fcn.00408a30
mov dword [ebp - 0x2514], eax
mov ecx, dword [ebp - 0x2514]
mov dword [ebp - 0x2518], ecx
mov byte [ebp - 4], 0xc9
mov edx, dword [ebp - 0x2518]
push edx
lea ecx, [ebp - 0x970]
call fcn.00418a00
mov byte [ebp - 4], 0xc8
lea ecx, [ebp - 0x18ac]
call fcn.00408aa0
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x18b0]
call fcn.00404a50
jmp case.0x48f1d2.8
push 0x667c3c
lea eax, [ebp - 0x18d0]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x251c], eax
mov ecx, dword [ebp - 0x251c]
mov dword [ebp - 0x2520], ecx
mov byte [ebp - 4], 0xca
mov ecx, dword [ebp - 0x2520]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x18cc]
call fcn.00408a30
mov dword [ebp - 0x2524], eax
mov edx, dword [ebp - 0x2524]
mov dword [ebp - 0x2528], edx
mov byte [ebp - 4], 0xcb
mov eax, dword [ebp - 0x2528]
push eax
lea ecx, [ebp - 0x970]
call fcn.00418a00
mov byte [ebp - 4], 0xca
lea ecx, [ebp - 0x18cc]
call fcn.00408aa0
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x18d0]
call fcn.00404a50
jmp case.0x48f1d2.8
push 0x667c2c
lea ecx, [ebp - 0x18f0]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x252c], eax
mov edx, dword [ebp - 0x252c]
mov dword [ebp - 0x2530], edx
mov byte [ebp - 4], 0xcc
mov ecx, dword [ebp - 0x2530]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x18ec]
call fcn.00408a30
mov dword [ebp - 0x2534], eax
mov eax, dword [ebp - 0x2534]
mov dword [ebp - 0x2538], eax
mov byte [ebp - 4], 0xcd
mov ecx, dword [ebp - 0x2538]
push ecx
lea ecx, [ebp - 0x970]
call fcn.00418a00
mov byte [ebp - 4], 0xcc
lea ecx, [ebp - 0x18ec]
call fcn.00408aa0
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x18f0]
call fcn.00404a50
push 0xfde9
lea edx, [ebp - 0x970]
push edx
lea eax, [ebp - 0x190c]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x253c], eax
mov ecx, dword [ebp - 0x253c]
mov dword [ebp - 0x2540], ecx
mov byte [ebp - 4], 0xce
mov ecx, dword [ebp - 0x2540]
call fcn.00419c10
push eax
push 0x667d44
lea edx, [ebp - 0x1910]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2544], eax
mov eax, dword [ebp - 0x2544]
mov dword [ebp - 0x2548], eax
mov byte [ebp - 4], 0xcf
mov ecx, dword [ebp - 0x2548]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0xce
lea ecx, [ebp - 0x1910]
call fcn.0040e840
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x190c]
call fcn.0040bf10
push 0xfde9
lea eax, [ebp - 0x994]
push eax
lea ecx, [ebp - 0x192c]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x254c], eax
mov edx, dword [ebp - 0x254c]
mov dword [ebp - 0x2550], edx
mov byte [ebp - 4], 0xd0
mov ecx, dword [ebp - 0x2550]
call fcn.00419c10
push eax
push 0x667d38
lea eax, [ebp - 0x1930]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2554], eax
mov ecx, dword [ebp - 0x2554]
mov dword [ebp - 0x2558], ecx
mov byte [ebp - 4], 0xd1
mov ecx, dword [ebp - 0x2558]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0xd0
lea ecx, [ebp - 0x1930]
call fcn.0040e840
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x192c]
call fcn.0040bf10
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x10]
call edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
call ecx
mov byte [ebp - 4], 0xb2
lea ecx, [ebp - 0x970]
call fcn.00408aa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa04]
call fcn.0049b550
jmp 0x48ee82
cmp dword [0x6da4e4], 1
jne 0x490264
mov dword [ebp - 0xa08], 0
jmp 0x48f856
mov edx, dword [ebp - 0xa08]
add edx, 1
mov dword [ebp - 0xa08], edx
mov ecx, 0x6da5cc
call fcn.0049c560
cmp dword [ebp - 0xa08], eax
jge 0x490264
push 0x667d78
lea eax, [ebp - 0x1938]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x255c], eax
mov ecx, dword [ebp - 0x255c]
mov dword [ebp - 0x2560], ecx
mov dword [ebp - 4], 0xd2
mov ecx, dword [ebp - 0x2560]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
call eax
add esp, 4
mov dword [ebp - 0x1934], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1938]
call fcn.0040e840
cmp dword [ebp - 0x1934], 0
je 0x49025f
mov ecx, dword [ebp - 0xa08]
push ecx
mov ecx, 0x6da5cc
call fcn.0049c5a0
push eax
lea ecx, [ebp - 0xad4]
call fcn.0049acc0
mov dword [ebp - 4], 0xd3
push 0x667d20
lea edx, [ebp - 0x1958]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2564], eax
mov eax, dword [ebp - 0x2564]
mov dword [ebp - 0x2568], eax
mov byte [ebp - 4], 0xd4
mov ecx, dword [ebp - 0x2568]
call fcn.0040e830
push eax
lea ecx, [ebp - 0x1954]
call fcn.0040bea0
mov dword [ebp - 0x256c], eax
mov ecx, dword [ebp - 0x256c]
mov dword [ebp - 0x2570], ecx
mov byte [ebp - 4], 0xd5
mov ecx, dword [ebp - 0x2570]
call fcn.00419c10
push eax
push 0x667d6c
lea edx, [ebp - 0x195c]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2574], eax
mov eax, dword [ebp - 0x2574]
mov dword [ebp - 0x2578], eax
mov byte [ebp - 4], 0xd6
mov ecx, dword [ebp - 0x2578]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0x195c]
call fcn.0040e840
mov byte [ebp - 4], 0xd4
lea ecx, [ebp - 0x1954]
call fcn.0040bf10
mov byte [ebp - 4], 0xd3
lea ecx, [ebp - 0x1958]
call fcn.0040e840
push 0xfde9
lea eax, [ebp - 0xab8]
push eax
lea ecx, [ebp - 0x1978]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x257c], eax
mov edx, dword [ebp - 0x257c]
mov dword [ebp - 0x2580], edx
mov byte [ebp - 4], 0xd7
mov ecx, dword [ebp - 0x2580]
call fcn.00419c10
push eax
push 0x667d60
lea eax, [ebp - 0x197c]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2584], eax
mov ecx, dword [ebp - 0x2584]
mov dword [ebp - 0x2588], ecx
mov byte [ebp - 4], 0xd8
mov ecx, dword [ebp - 0x2588]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0xd7
lea ecx, [ebp - 0x197c]
call fcn.0040e840
mov byte [ebp - 4], 0xd3
lea ecx, [ebp - 0x1978]
call fcn.0040bf10
push 0xfde9
lea ecx, [ebp - 0xa9c]
push ecx
lea edx, [ebp - 0x1998]
push edx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x258c], eax
mov eax, dword [ebp - 0x258c]
mov dword [ebp - 0x2590], eax
mov byte [ebp - 4], 0xd9
mov ecx, dword [ebp - 0x2590]
call fcn.00419c10
push eax
push 0x66095c
lea ecx, [ebp - 0x19b8]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2594], eax
mov edx, dword [ebp - 0x2594]
mov dword [ebp - 0x2598], edx
mov byte [ebp - 4], 0xda
mov ecx, dword [ebp - 0x2598]
call fcn.0040e830
push eax
lea ecx, [ebp - 0x19b4]
call fcn.0040bea0
mov dword [ebp - 0x259c], eax
mov eax, dword [ebp - 0x259c]
mov dword [ebp - 0x25a0], eax
mov byte [ebp - 4], 0xdb
mov ecx, dword [ebp - 0x25a0]
call fcn.00419c10
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x19b4]
call fcn.0040bf10
mov byte [ebp - 4], 0xd9
lea ecx, [ebp - 0x19b8]
call fcn.0040e840
mov byte [ebp - 4], 0xd3
lea ecx, [ebp - 0x1998]
call fcn.0040bf10
push 0xfde9
lea eax, [ebp - 0xa40]
push eax
lea ecx, [ebp - 0x19d4]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x25a4], eax
mov edx, dword [ebp - 0x25a4]
mov dword [ebp - 0x25a8], edx
mov byte [ebp - 4], 0xdc
mov ecx, dword [ebp - 0x25a8]
call fcn.00419c10
push eax
push 0x667d50
lea eax, [ebp - 0x19d8]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x25ac], eax
mov ecx, dword [ebp - 0x25ac]
mov dword [ebp - 0x25b0], ecx
mov byte [ebp - 4], 0xdd
mov ecx, dword [ebp - 0x25b0]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0xdc
lea ecx, [ebp - 0x19d8]
call fcn.0040e840
mov byte [ebp - 4], 0xd3
lea ecx, [ebp - 0x19d4]
call fcn.0040bf10
lea ecx, [ebp - 0xa24]
call fcn.00419c30
mov byte [ebp - 4], 0xde
mov ecx, dword [ebp - 0xa60]
mov dword [ebp - 0x25b4], ecx
cmp dword [ebp - 0x25b4], 0xb
ja case.0x48fc08.8
mov edx, dword [ebp - 0x25b4]
jmp dword [edx*4 + 0x491a18]
push 0x667cfc
lea eax, [ebp - 0x19f8]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x25b8], eax
mov ecx, dword [ebp - 0x25b8]
mov dword [ebp - 0x25bc], ecx
mov byte [ebp - 4], 0xdf
mov ecx, dword [ebp - 0x25bc]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x19f4]
call fcn.00408a30
mov dword [ebp - 0x25c0], eax
mov edx, dword [ebp - 0x25c0]
mov dword [ebp - 0x25c4], edx
mov byte [ebp - 4], 0xe0
mov eax, dword [ebp - 0x25c4]
push eax
lea ecx, [ebp - 0xa24]
call fcn.00418a00
mov byte [ebp - 4], 0xdf
lea ecx, [ebp - 0x19f4]
call fcn.00408aa0
mov byte [ebp - 4], 0xde
lea ecx, [ebp - 0x19f8]
call fcn.00404a50
jmp case.0x48fc08.8
push 0x667ce4
lea ecx, [ebp - 0x1a18]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x25c8], eax
mov edx, dword [ebp - 0x25c8]
mov dword [ebp - 0x25cc], edx
mov byte [ebp - 4], 0xe1
mov ecx, dword [ebp - 0x25cc]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1a14]
call fcn.00408a30
mov dword [ebp - 0x25d0], eax
mov eax, dword [ebp - 0x25d0]
mov dword [ebp - 0x25d4], eax
mov byte [ebp - 4], 0xe2
mov ecx, dword [ebp - 0x25d4]
push ecx
lea ecx, [ebp - 0xa24]
call fcn.00418a00
mov byte [ebp - 4], 0xe1
lea ecx, [ebp - 0x1a14]
call fcn.00408aa0
mov byte [ebp - 4], 0xde
lea ecx, [ebp - 0x1a18]
call fcn.00404a50
jmp case.0x48fc08.8
push 0x667cb8
lea edx, [ebp - 0x1a38]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x25d8], eax
mov eax, dword [ebp - 0x25d8]
mov dword [ebp - 0x25dc], eax
mov byte [ebp - 4], 0xe3
mov ecx, dword [ebp - 0x25dc]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1a34]
call fcn.00408a30
mov dword [ebp - 0x25e0], eax
mov ecx, dword [ebp - 0x25e0]
mov dword [ebp - 0x25e4], ecx
mov byte [ebp - 4], 0xe4
mov edx, dword [ebp - 0x25e4]
push edx
lea ecx, [ebp - 0xa24]
call fcn.00418a00
mov byte [ebp - 4], 0xe3
lea ecx, [ebp - 0x1a34]
call fcn.00408aa0
mov byte [ebp - 4], 0xde
lea ecx, [ebp - 0x1a38]
call fcn.00404a50
jmp case.0x48fc08.8
push 0x667c98
lea eax, [ebp - 0x1a58]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x25e8], eax
mov ecx, dword [ebp - 0x25e8]
mov dword [ebp - 0x25ec], ecx
mov byte [ebp - 4], 0xe5
mov ecx, dword [ebp - 0x25ec]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1a54]
call fcn.00408a30
mov dword [ebp - 0x25f0], eax
mov edx, dword [ebp - 0x25f0]
mov dword [ebp - 0x25f4], edx
mov byte [ebp - 4], 0xe6
mov eax, dword [ebp - 0x25f4]
push eax
lea ecx, [ebp - 0xa24]
call fcn.00418a00
mov byte [ebp - 4], 0xe5
lea ecx, [ebp - 0x1a54]
call fcn.00408aa0
mov byte [ebp - 4], 0xde
lea ecx, [ebp - 0x1a58]
call fcn.00404a50
jmp case.0x48fc08.8
push 0x667c84
lea ecx, [ebp - 0x1a78]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x25f8], eax
mov edx, dword [ebp - 0x25f8]
mov dword [ebp - 0x25fc], edx
mov byte [ebp - 4], 0xe7
mov ecx, dword [ebp - 0x25fc]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1a74]
call fcn.00408a30
mov dword [ebp - 0x2600], eax
mov eax, dword [ebp - 0x2600]
mov dword [ebp - 0x2604], eax
mov byte [ebp - 4], pe_nt_image_headers32
mov ecx, dword [ebp - 0x2604]
push ecx
lea ecx, [ebp - 0xa24]
call fcn.00418a00
mov byte [ebp - 4], 0xe7
lea ecx, [ebp - 0x1a74]
call fcn.00408aa0
mov byte [ebp - 4], 0xde
lea ecx, [ebp - 0x1a78]
call fcn.00404a50
jmp case.0x48fc08.8
push 0x667c68
lea edx, [ebp - 0x1a98]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2608], eax
mov eax, dword [ebp - 0x2608]
mov dword [ebp - 0x260c], eax
mov byte [ebp - 4], 0xe9
mov ecx, dword [ebp - 0x260c]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1a94]
call fcn.00408a30
mov dword [ebp - 0x2610], eax
mov ecx, dword [ebp - 0x2610]
mov dword [ebp - 0x2614], ecx
mov byte [ebp - 4], 0xea
mov edx, dword [ebp - 0x2614]
push edx
lea ecx, [ebp - 0xa24]
call fcn.00418a00
mov byte [ebp - 4], 0xe9
lea ecx, [ebp - 0x1a94]
call fcn.00408aa0
mov byte [ebp - 4], 0xde
lea ecx, [ebp - 0x1a98]
call fcn.00404a50
jmp case.0x48fc08.8
push 0x667c54
lea eax, [ebp - 0x1ab8]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2618], eax
mov ecx, dword [ebp - 0x2618]
mov dword [ebp - 0x261c], ecx
mov byte [ebp - 4], 0xeb
mov ecx, dword [ebp - 0x261c]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1ab4]
call fcn.00408a30
mov dword [ebp - 0x2620], eax
mov edx, dword [ebp - 0x2620]
mov dword [ebp - 0x2624], edx
mov byte [ebp - 4], 0xec
mov eax, dword [ebp - 0x2624]
push eax
lea ecx, [ebp - 0xa24]
call fcn.00418a00
mov byte [ebp - 4], 0xeb
lea ecx, [ebp - 0x1ab4]
call fcn.00408aa0
mov byte [ebp - 4], 0xde
lea ecx, [ebp - 0x1ab8]
call fcn.00404a50
jmp case.0x48fc08.8
push 0x667c3c
lea ecx, [ebp - 0x1ad8]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2628], eax
mov edx, dword [ebp - 0x2628]
mov dword [ebp - 0x262c], edx
mov byte [ebp - 4], 0xed
mov ecx, dword [ebp - 0x262c]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1ad4]
call fcn.00408a30
mov dword [ebp - 0x2630], eax
mov eax, dword [ebp - 0x2630]
mov dword [ebp - 0x2634], eax
mov byte [ebp - 4], 0xee
mov ecx, dword [ebp - 0x2634]
push ecx
lea ecx, [ebp - 0xa24]
call fcn.00418a00
mov byte [ebp - 4], 0xed
lea ecx, [ebp - 0x1ad4]
call fcn.00408aa0
mov byte [ebp - 4], 0xde
lea ecx, [ebp - 0x1ad8]
call fcn.00404a50
jmp case.0x48fc08.8
push 0x667c2c
lea edx, [ebp - 0x1af8]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2638], eax
mov eax, dword [ebp - 0x2638]
mov dword [ebp - 0x263c], eax
mov byte [ebp - 4], 0xef
mov ecx, dword [ebp - 0x263c]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1af4]
call fcn.00408a30
mov dword [ebp - 0x2640], eax
mov ecx, dword [ebp - 0x2640]
mov dword [ebp - 0x2644], ecx
mov byte [ebp - 4], 0xf0
mov edx, dword [ebp - 0x2644]
push edx
lea ecx, [ebp - 0xa24]
call fcn.00418a00
mov byte [ebp - 4], 0xef
lea ecx, [ebp - 0x1af4]
call fcn.00408aa0
mov byte [ebp - 4], 0xde
lea ecx, [ebp - 0x1af8]
call fcn.00404a50
push 0xfde9
lea eax, [ebp - 0xa24]
push eax
lea ecx, [ebp - 0x1b14]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2648], eax
mov edx, dword [ebp - 0x2648]
mov dword [ebp - 0x264c], edx
mov byte [ebp - 4], 0xf1
mov ecx, dword [ebp - 0x264c]
call fcn.00419c10
push eax
push 0x667d44
lea eax, [ebp - 0x1b18]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2650], eax
mov ecx, dword [ebp - 0x2650]
mov dword [ebp - 0x2654], ecx
mov byte [ebp - 4], 0xf2
mov ecx, dword [ebp - 0x2654]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0xf1
lea ecx, [ebp - 0x1b18]
call fcn.0040e840
mov byte [ebp - 4], 0xde
lea ecx, [ebp - 0x1b14]
call fcn.0040bf10
push 0xfde9
lea ecx, [ebp - 0xa5c]
push ecx
lea edx, [ebp - 0x1b34]
push edx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2658], eax
mov eax, dword [ebp - 0x2658]
mov dword [ebp - 0x265c], eax
mov byte [ebp - 4], 0xf3
mov ecx, dword [ebp - 0x265c]
call fcn.00419c10
push eax
push 0x667d38
lea ecx, [ebp - 0x1b38]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2660], eax
mov edx, dword [ebp - 0x2660]
mov dword [ebp - 0x2664], edx
mov byte [ebp - 4], 0xf4
mov ecx, dword [ebp - 0x2664]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 8
mov byte [ebp - 4], 0xf3
lea ecx, [ebp - 0x1b38]
call fcn.0040e840
mov byte [ebp - 4], 0xde
lea ecx, [ebp - 0x1b34]
call fcn.0040bf10
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x14]
call edx
mov byte [ebp - 4], 0xd3
lea ecx, [ebp - 0xa24]
call fcn.00408aa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xad4]
call fcn.0049ada0
jmp 0x48f847
cmp dword [0x6da4e8], 1
jne 0x490cf1
mov ecx, 0x6da680
call fcn.0049c9e0
mov dword [ebp - 0xad8], 0
jmp 0x490296
mov eax, dword [ebp - 0xad8]
add eax, 1
mov dword [ebp - 0xad8], eax
mov ecx, 0x6da5e0
call fcn.0049c5c0
cmp dword [ebp - 0xad8], eax
jge 0x49032d
mov ecx, dword [ebp - 0xad8]
push ecx
mov ecx, 0x6da5e0
call fcn.0049c600
push eax
lea ecx, [ebp - 0xb9c]
call fcn.0049ae30
mov dword [ebp - 4], 0xf5
lea ecx, [ebp - 0xaec]
call fcn.004abfa0
mov byte [ebp - 4], 0xf6
push 0x6da680
lea ecx, [ebp - 0xb80]
call fcn.0040bf60
push eax
push reloc.SHLWAPI.dll_ParseURLW
mov edx, dword [ebp - 0xaf4]
push edx
lea ecx, [ebp - 0xaec]
call fcn.004bf190
mov byte [ebp - 4], 0xf5
lea ecx, [ebp - 0xaec]
call fcn.004ac3f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb9c]
call fcn.0049af10
jmp 0x490287
mov dword [ebp - 0xba0], 0
jmp 0x490348
mov eax, dword [ebp - 0xba0]
add eax, 1
mov dword [ebp - 0xba0], eax
mov ecx, 0x6da680
call fcn.0049c9c0
cmp dword [ebp - 0xba0], eax
jge 0x490cf1
push 0x667d78
lea ecx, [ebp - 0x1b40]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2668], eax
mov edx, dword [ebp - 0x2668]
mov dword [ebp - 0x266c], edx
mov dword [ebp - 4], 0xf7
mov ecx, dword [ebp - 0x266c]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 8]
call ecx
add esp, 4
mov dword [ebp - 0x1b3c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b40]
call fcn.0040e840
cmp dword [ebp - 0x1b3c], 0
je 0x490cec
mov edx, dword [ebp - 0xba0]
push edx
mov ecx, 0x6da680
call fcn.0049ca00
push eax
lea ecx, [ebp - 0xc4c]
call fcn.0049b5d0
mov dword [ebp - 4], 0xf8
push 0xfde9
lea eax, [ebp - 0xc4c]
push eax
lea ecx, [ebp - 0x1b5c]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2670], eax
mov edx, dword [ebp - 0x2670]
mov dword [ebp - 0x2674], edx
mov byte [ebp - 4], 0xf9
mov ecx, dword [ebp - 0x2674]
call fcn.00419c10
push eax
push 0x667d6c
lea eax, [ebp - 0x1b60]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2678], eax
mov ecx, dword [ebp - 0x2678]
mov dword [ebp - 0x267c], ecx
mov byte [ebp - 4], 0xfa
mov ecx, dword [ebp - 0x267c]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0xf9
lea ecx, [ebp - 0x1b60]
call fcn.0040e840
mov byte [ebp - 4], 0xf8
lea ecx, [ebp - 0x1b5c]
call fcn.0040bf10
push 0xfde9
lea ecx, [ebp - 0xc30]
push ecx
lea edx, [ebp - 0x1b7c]
push edx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2680], eax
mov eax, dword [ebp - 0x2680]
mov dword [ebp - 0x2684], eax
mov byte [ebp - 4], 0xfb
mov ecx, dword [ebp - 0x2684]
call fcn.00419c10
push eax
push 0x667d60
lea ecx, [ebp - 0x1b80]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2688], eax
mov edx, dword [ebp - 0x2688]
mov dword [ebp - 0x268c], edx
mov byte [ebp - 4], 0xfc
mov ecx, dword [ebp - 0x268c]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 8
mov byte [ebp - 4], 0xfb
lea ecx, [ebp - 0x1b80]
call fcn.0040e840
mov byte [ebp - 4], 0xf8
lea ecx, [ebp - 0x1b7c]
call fcn.0040bf10
push 0xfde9
lea edx, [ebp - 0xc14]
push edx
lea eax, [ebp - 0x1b9c]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2690], eax
mov ecx, dword [ebp - 0x2690]
mov dword [ebp - 0x2694], ecx
mov byte [ebp - 4], 0xfd
mov ecx, dword [ebp - 0x2694]
call fcn.00419c10
push eax
push 0x66095c
lea edx, [ebp - 0x1ba0]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2698], eax
mov eax, dword [ebp - 0x2698]
mov dword [ebp - 0x269c], eax
mov byte [ebp - 4], 0xfe
mov ecx, dword [ebp - 0x269c]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0x1ba0]
call fcn.0040e840
mov byte [ebp - 4], 0xf8
lea ecx, [ebp - 0x1b9c]
call fcn.0040bf10
push 0xfde9
lea eax, [ebp - 0xbf8]
push eax
lea ecx, [ebp - 0x1bbc]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x26a0], eax
mov edx, dword [ebp - 0x26a0]
mov dword [ebp - 0x26a4], edx
mov byte [ebp - 4], 0xff
mov ecx, dword [ebp - 0x26a4]
call fcn.00419c10
push eax
push 0x667d50
lea eax, [ebp - 0x1bc0]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x26a8], eax
mov ecx, dword [ebp - 0x26a8]
mov dword [ebp - 0x26ac], ecx
mov dword [ebp - 4], 0x100
mov ecx, dword [ebp - 0x26ac]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov dword [ebp - 4], 0xff
lea ecx, [ebp - 0x1bc0]
call fcn.0040e840
mov byte [ebp - 4], 0xf8
lea ecx, [ebp - 0x1bbc]
call fcn.0040bf10
lea ecx, [ebp - 0xbbc]
call fcn.00419c30
mov dword [ebp - 4], 0x101
mov ecx, dword [ebp - 0xbc0]
mov dword [ebp - 0x26b0], ecx
cmp dword [ebp - 0x26b0], 0xb
ja case.0x490692.8
mov edx, dword [ebp - 0x26b0]
jmp dword [edx*4 + 0x491a48]
push 0x667cfc
lea eax, [ebp - 0x1be0]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x26b4], eax
mov ecx, dword [ebp - 0x26b4]
mov dword [ebp - 0x26b8], ecx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x26b8]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1bdc]
call fcn.00408a30
mov dword [ebp - 0x26bc], eax
mov edx, dword [ebp - 0x26bc]
mov dword [ebp - 0x26c0], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x26c0]
push eax
lea ecx, [ebp - 0xbbc]
call fcn.00418a00
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1bdc]
call fcn.00408aa0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1be0]
call fcn.00404a50
jmp case.0x490692.8
push 0x667ce4
lea ecx, [ebp - 0x1c00]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x26c4], eax
mov edx, dword [ebp - 0x26c4]
mov dword [ebp - 0x26c8], edx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x26c8]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1bfc]
call fcn.00408a30
mov dword [ebp - 0x26cc], eax
mov eax, dword [ebp - 0x26cc]
mov dword [ebp - 0x26d0], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x26d0]
push ecx
lea ecx, [ebp - 0xbbc]
call fcn.00418a00
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1bfc]
call fcn.00408aa0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c00]
call fcn.00404a50
jmp case.0x490692.8
push 0x667cb8
lea edx, [ebp - 0x1c20]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x26d4], eax
mov eax, dword [ebp - 0x26d4]
mov dword [ebp - 0x26d8], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x26d8]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1c1c]
call fcn.00408a30
mov dword [ebp - 0x26dc], eax
mov ecx, dword [ebp - 0x26dc]
mov dword [ebp - 0x26e0], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x26e0]
push edx
lea ecx, [ebp - 0xbbc]
call fcn.00418a00
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c1c]
call fcn.00408aa0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c20]
call fcn.00404a50
jmp case.0x490692.8
push 0x667c98
lea eax, [ebp - 0x1c40]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x26e4], eax
mov ecx, dword [ebp - 0x26e4]
mov dword [ebp - 0x26e8], ecx
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x26e8]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1c3c]
call fcn.00408a30
mov dword [ebp - 0x26ec], eax
mov edx, dword [ebp - 0x26ec]
mov dword [ebp - 0x26f0], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x26f0]
push eax
lea ecx, [ebp - 0xbbc]
call fcn.00418a00
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1c3c]
call fcn.00408aa0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c40]
call fcn.00404a50
jmp case.0x490692.8
push 0x667c84
lea ecx, [ebp - 0x1c60]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x26f4], eax
mov edx, dword [ebp - 0x26f4]
mov dword [ebp - 0x26f8], edx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x26f8]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1c5c]
call fcn.00408a30
mov dword [ebp - 0x26fc], eax
mov eax, dword [ebp - 0x26fc]
mov dword [ebp - 0x2700], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x2700]
push ecx
lea ecx, [ebp - 0xbbc]
call fcn.00418a00
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1c5c]
call fcn.00408aa0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c60]
call fcn.00404a50
jmp case.0x490692.8
push 0x667c68
lea edx, [ebp - 0x1c80]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2704], eax
mov eax, dword [ebp - 0x2704]
mov dword [ebp - 0x2708], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x2708]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1c7c]
call fcn.00408a30
mov dword [ebp - 0x270c], eax
mov ecx, dword [ebp - 0x270c]
mov dword [ebp - 0x2710], ecx
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x2710]
push edx
lea ecx, [ebp - 0xbbc]
call fcn.00418a00
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1c7c]
call fcn.00408aa0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c80]
call fcn.00404a50
jmp case.0x490692.8
push 0x667c54
lea eax, [ebp - 0x1ca0]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2714], eax
mov ecx, dword [ebp - 0x2714]
mov dword [ebp - 0x2718], ecx
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x2718]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1c9c]
call fcn.00408a30
mov dword [ebp - 0x271c], eax
mov edx, dword [ebp - 0x271c]
mov dword [ebp - 0x2720], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x2720]
push eax
lea ecx, [ebp - 0xbbc]
call fcn.00418a00
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1c9c]
call fcn.00408aa0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1ca0]
call fcn.00404a50
jmp case.0x490692.8
push 0x667c3c
lea ecx, [ebp - 0x1cc0]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2724], eax
mov edx, dword [ebp - 0x2724]
mov dword [ebp - 0x2728], edx
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x2728]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1cbc]
call fcn.00408a30
mov dword [ebp - 0x272c], eax
mov eax, dword [ebp - 0x272c]
mov dword [ebp - 0x2730], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x2730]
push ecx
lea ecx, [ebp - 0xbbc]
call fcn.00418a00
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1cbc]
call fcn.00408aa0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1cc0]
call fcn.00404a50
jmp case.0x490692.8
push 0x667c2c
lea edx, [ebp - 0x1ce0]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2734], eax
mov eax, dword [ebp - 0x2734]
mov dword [ebp - 0x2738], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x2738]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1cdc]
call fcn.00408a30
mov dword [ebp - 0x273c], eax
mov ecx, dword [ebp - 0x273c]
mov dword [ebp - 0x2740], ecx
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x2740]
push edx
lea ecx, [ebp - 0xbbc]
call fcn.00418a00
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1cdc]
call fcn.00408aa0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1ce0]
call fcn.00404a50
push 0xfde9
lea eax, [ebp - 0xbbc]
push eax
lea ecx, [ebp - 0x1cfc]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2744], eax
mov edx, dword [ebp - 0x2744]
mov dword [ebp - 0x2748], edx
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x2748]
call fcn.00419c10
push eax
push 0x667d44
lea eax, [ebp - 0x1d00]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x274c], eax
mov ecx, dword [ebp - 0x274c]
mov dword [ebp - 0x2750], ecx
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x2750]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1d00]
call fcn.0040e840
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1cfc]
call fcn.0040bf10
push 0xfde9
lea ecx, [ebp - 0xbdc]
push ecx
lea edx, [ebp - 0x1d1c]
push edx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2754], eax
mov eax, dword [ebp - 0x2754]
mov dword [ebp - 0x2758], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x2758]
call fcn.00419c10
push eax
push 0x667d38
lea ecx, [ebp - 0x1d20]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x275c], eax
mov edx, dword [ebp - 0x275c]
mov dword [ebp - 0x2760], edx
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x2760]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 8
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x1d20]
call fcn.0040e840
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1d1c]
call fcn.0040bf10
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x14]
call edx
mov dword [ebp - 4], 0xf8
lea ecx, [ebp - 0xbbc]
call fcn.00408aa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc4c]
call fcn.0049b680
jmp 0x490339
cmp dword [0x6da4ec], 1
jne 0x491774
mov ecx, 0x6da694
call fcn.0049ca40
mov dword [ebp - 0xc50], 0
jmp 0x490d23
mov eax, dword [ebp - 0xc50]
add eax, 1
mov dword [ebp - 0xc50], eax
mov ecx, 0x6da5f4
call fcn.0049c620
cmp dword [ebp - 0xc50], eax
jge 0x490dbc
mov ecx, dword [ebp - 0xc50]
push ecx
mov ecx, 0x6da5f4
call fcn.0049c660
push eax
lea ecx, [ebp - 0xcfc]
call fcn.0049afa0
mov dword [ebp - 4], 0x118
lea ecx, [ebp - 0xc64]
call fcn.004abfa0
mov byte [ebp - 4], 0x19
push 0x6da694
lea ecx, [ebp - 0xce0]
call fcn.0040bf60
push eax
mov edx, dword [ebp - 0xc8c]
push edx
mov eax, dword [ebp - 0xc6c]
push eax
lea ecx, [ebp - 0xc64]
call fcn.004bf8a0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xc64]
call fcn.004ac3f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcfc]
call fcn.0049b060
jmp 0x490d14
mov dword [ebp - 0xd00], 0
jmp 0x490dd7
mov ecx, dword [ebp - 0xd00]
add ecx, 1
mov dword [ebp - 0xd00], ecx
mov ecx, 0x6da694
call fcn.0049ca20
cmp dword [ebp - 0xd00], eax
jge 0x491774
push 0x667d78
lea edx, [ebp - 0x1d28]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2764], eax
mov eax, dword [ebp - 0x2764]
mov dword [ebp - 0x2768], eax
mov dword [ebp - 4], 0x11a
mov ecx, dword [ebp - 0x2768]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 8]
call edx
add esp, 4
mov dword [ebp - 0x1d24], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d28]
call fcn.0040e840
cmp dword [ebp - 0x1d24], 0
je 0x49176f
mov eax, dword [ebp - 0xd00]
push eax
mov ecx, 0x6da694
call fcn.0049ca60
push eax
lea ecx, [ebp - 0xd94]
call fcn.0049b700
mov dword [ebp - 4], 0x11b
push 0xfde9
lea ecx, [ebp - 0xd94]
push ecx
lea edx, [ebp - 0x1d44]
push edx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x276c], eax
mov eax, dword [ebp - 0x276c]
mov dword [ebp - 0x2770], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x2770]
call fcn.00419c10
push eax
push 0x667d6c
lea ecx, [ebp - 0x1d48]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2774], eax
mov edx, dword [ebp - 0x2774]
mov dword [ebp - 0x2778], edx
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x2778]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 8
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1d48]
call fcn.0040e840
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1d44]
call fcn.0040bf10
push 0xfde9
lea edx, [ebp - 0xd78]
push edx
lea eax, [ebp - 0x1d64]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x277c], eax
mov ecx, dword [ebp - 0x277c]
mov dword [ebp - 0x2780], ecx
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x2780]
call fcn.00419c10
push eax
push 0x667d60
lea edx, [ebp - 0x1d68]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2784], eax
mov eax, dword [ebp - 0x2784]
mov dword [ebp - 0x2788], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x2788]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1d68]
call fcn.0040e840
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1d64]
call fcn.0040bf10
push 0xfde9
lea eax, [ebp - 0xd5c]
push eax
lea ecx, [ebp - 0x1d84]
push ecx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x278c], eax
mov edx, dword [ebp - 0x278c]
mov dword [ebp - 0x2790], edx
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x2790]
call fcn.00419c10
push eax
push 0x66095c
lea eax, [ebp - 0x1d88]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2794], eax
mov ecx, dword [ebp - 0x2794]
mov dword [ebp - 0x2798], ecx
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x2798]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
call eax
add esp, 8
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1d88]
call fcn.0040e840
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1d84]
call fcn.0040bf10
push 0xfde9
lea ecx, [ebp - 0xd40]
push ecx
lea edx, [ebp - 0x1da4]
push edx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x279c], eax
mov eax, dword [ebp - 0x279c]
mov dword [ebp - 0x27a0], eax
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x27a0]
call fcn.00419c10
push eax
push 0x667d50
lea ecx, [ebp - 0x1da8]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x27a4], eax
mov edx, dword [ebp - 0x27a4]
mov dword [ebp - 0x27a8], edx
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x27a8]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 8
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1da8]
call fcn.0040e840
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1da4]
call fcn.0040bf10
lea ecx, [ebp - 0xdb0]
call fcn.00419c30
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0xd08]
mov dword [ebp - 0x27ac], edx
cmp dword [ebp - 0x27ac], 0xb
ja case.0x491118.8
mov eax, dword [ebp - 0x27ac]
jmp dword [eax*4 + 0x491a78]
push 0x667cfc
lea ecx, [ebp - 0x1dc8]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x27b0], eax
mov edx, dword [ebp - 0x27b0]
mov dword [ebp - 0x27b4], edx
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x27b4]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1dc4]
call fcn.00408a30
mov dword [ebp - 0x27b8], eax
mov eax, dword [ebp - 0x27b8]
mov dword [ebp - 0x27bc], eax
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x27bc]
push ecx
lea ecx, [ebp - 0xdb0]
call fcn.00418a00
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1dc4]
call fcn.00408aa0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1dc8]
call fcn.00404a50
jmp case.0x491118.8
push 0x667ce4
lea edx, [ebp - 0x1de8]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x27c0], eax
mov eax, dword [ebp - 0x27c0]
mov dword [ebp - 0x27c4], eax
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x27c4]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1de4]
call fcn.00408a30
mov dword [ebp - 0x27c8], eax
mov ecx, dword [ebp - 0x27c8]
mov dword [ebp - 0x27cc], ecx
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x27cc]
push edx
lea ecx, [ebp - 0xdb0]
call fcn.00418a00
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1de4]
call fcn.00408aa0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1de8]
call fcn.00404a50
jmp case.0x491118.8
push 0x667cb8
lea eax, [ebp - 0x1e08]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x27d0], eax
mov ecx, dword [ebp - 0x27d0]
mov dword [ebp - 0x27d4], ecx
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x27d4]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1e04]
call fcn.00408a30
mov dword [ebp - 0x27d8], eax
mov edx, dword [ebp - 0x27d8]
mov dword [ebp - 0x27dc], edx
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0x27dc]
push eax
lea ecx, [ebp - 0xdb0]
call fcn.00418a00
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x1e04]
call fcn.00408aa0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1e08]
call fcn.00404a50
jmp case.0x491118.8
push 0x667c98
lea ecx, [ebp - 0x1e28]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x27e0], eax
mov edx, dword [ebp - 0x27e0]
mov dword [ebp - 0x27e4], edx
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x27e4]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1e24]
call fcn.00408a30
mov dword [ebp - 0x27e8], eax
mov eax, dword [ebp - 0x27e8]
mov dword [ebp - 0x27ec], eax
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x27ec]
push ecx
lea ecx, [ebp - 0xdb0]
call fcn.00418a00
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1e24]
call fcn.00408aa0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1e28]
call fcn.00404a50
jmp case.0x491118.8
push 0x667c84
lea edx, [ebp - 0x1e48]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x27f0], eax
mov eax, dword [ebp - 0x27f0]
mov dword [ebp - 0x27f4], eax
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x27f4]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1e44]
call fcn.00408a30
mov dword [ebp - 0x27f8], eax
mov ecx, dword [ebp - 0x27f8]
mov dword [ebp - 0x27fc], ecx
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0x27fc]
push edx
lea ecx, [ebp - 0xdb0]
call fcn.00418a00
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1e44]
call fcn.00408aa0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1e48]
call fcn.00404a50
jmp case.0x491118.8
push 0x667c68
lea eax, [ebp - 0x1e68]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2800], eax
mov ecx, dword [ebp - 0x2800]
mov dword [ebp - 0x2804], ecx
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x2804]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1e64]
call fcn.00408a30
mov dword [ebp - 0x2808], eax
mov edx, dword [ebp - 0x2808]
mov dword [ebp - 0x280c], edx
mov byte [ebp - 4], 0x30
mov eax, dword [ebp - 0x280c]
push eax
lea ecx, [ebp - 0xdb0]
call fcn.00418a00
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1e64]
call fcn.00408aa0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1e68]
call fcn.00404a50
jmp case.0x491118.8
push 0x667c54
lea ecx, [ebp - 0x1e88]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2810], eax
mov edx, dword [ebp - 0x2810]
mov dword [ebp - 0x2814], edx
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x2814]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1e84]
call fcn.00408a30
mov dword [ebp - 0x2818], eax
mov eax, dword [ebp - 0x2818]
mov dword [ebp - 0x281c], eax
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x281c]
push ecx
lea ecx, [ebp - 0xdb0]
call fcn.00418a00
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x1e84]
call fcn.00408aa0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1e88]
call fcn.00404a50
jmp case.0x491118.8
push 0x667c3c
lea edx, [ebp - 0x1ea8]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2820], eax
mov eax, dword [ebp - 0x2820]
mov dword [ebp - 0x2824], eax
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x2824]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1ea4]
call fcn.00408a30
mov dword [ebp - 0x2828], eax
mov ecx, dword [ebp - 0x2828]
mov dword [ebp - 0x282c], ecx
mov byte [ebp - 4], 0x34
mov edx, dword [ebp - 0x282c]
push edx
lea ecx, [ebp - 0xdb0]
call fcn.00418a00
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1ea4]
call fcn.00408aa0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1ea8]
call fcn.00404a50
jmp case.0x491118.8
push 0x667c2c
lea eax, [ebp - 0x1ec8]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2830], eax
mov ecx, dword [ebp - 0x2830]
mov dword [ebp - 0x2834], ecx
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x2834]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1ec4]
call fcn.00408a30
mov dword [ebp - 0x2838], eax
mov edx, dword [ebp - 0x2838]
mov dword [ebp - 0x283c], edx
mov byte [ebp - 4], 0x36
mov eax, dword [ebp - 0x283c]
push eax
lea ecx, [ebp - 0xdb0]
call fcn.00418a00
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x1ec4]
call fcn.00408aa0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1ec8]
call fcn.00404a50
push 0xfde9
lea ecx, [ebp - 0xdb0]
push ecx
lea edx, [ebp - 0x1ee4]
push edx
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2840], eax
mov eax, dword [ebp - 0x2840]
mov dword [ebp - 0x2844], eax
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x2844]
call fcn.00419c10
push eax
push 0x667d44
lea ecx, [ebp - 0x1ee8]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2848], eax
mov edx, dword [ebp - 0x2848]
mov dword [ebp - 0x284c], edx
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x284c]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 8
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x1ee8]
call fcn.0040e840
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1ee4]
call fcn.0040bf10
push 0xfde9
lea edx, [ebp - 0xd24]
push edx
lea eax, [ebp - 0x1f04]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2850], eax
mov ecx, dword [ebp - 0x2850]
mov dword [ebp - 0x2854], ecx
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x2854]
call fcn.00419c10
push eax
push 0x667d38
lea edx, [ebp - 0x1f08]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x2858], eax
mov eax, dword [ebp - 0x2858]
mov dword [ebp - 0x285c], eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x285c]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
call edx
add esp, 8
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x1f08]
call fcn.0040e840
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1f04]
call fcn.0040bf10
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x10]
call ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x14]
call eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xdb0]
call fcn.00408aa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd94]
call fcn.0049b7b0
jmp 0x490dc8
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x18]
call edx
test eax, eax
je 0x4918d5
push 0
call fcn.00446920
add esp, 4
push edx
push eax
lea ecx, [ebp - 0xdbc]
call fcn.0040bcd0
push 0x667e20
lea eax, [ebp - 0x1f0c]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x2860], eax
mov ecx, dword [ebp - 0x2860]
mov dword [ebp - 0x2864], ecx
mov dword [ebp - 4], 0x13b
mov ecx, dword [ebp - 0x2864]
call fcn.00404a70
push eax
lea edx, [ebp - 0xdb4]
push edx
lea ecx, [ebp - 0xdbc]
call fcn.0049a0b0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x1f0c]
call fcn.00404a50
lea ecx, [ebp - 0xdb4]
call fcn.00404a70
push eax
lea ecx, [ebp - 0xdd8]
call fcn.00408a30
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0xdd8]
call fcn.0040bf60
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.00441a10
add esp, 8
lea ecx, [ebp - 0x224]
push ecx
lea ecx, [ebp - 0x1f2c]
call fcn.00408a30
mov byte [ebp - 4], 0x3f
push 0xfde9
lea edx, [ebp - 0x1f2c]
push edx
lea eax, [ebp - 0x1f48]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x2868], eax
mov ecx, dword [ebp - 0x2868]
mov dword [ebp - 0x286c], ecx
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x286c]
call fcn.00419c10
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x1c]
call eax
add esp, 4
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x1f0d], al
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x1f48]
call fcn.0040bf10
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x1f2c]
call fcn.00408aa0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0xdd8]
call fcn.00408aa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdb4]
call fcn.00404a50
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x20]
call eax
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.0044a1e0
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret