Function at 0x48c467
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b6280
mov eax, dword fs:[0]
push eax
mov eax, 0x1be0
call fcn.0049e0f0
mov eax, dword [0x4d0b90]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x152c], ecx
mov ecx, 0x4d2930
call fcn.0041bde0
mov dword [ebp - 0x1530], eax
mov ecx, 0x48a7100
call fcn.00411430
mov dword [ebp - 0x1534], eax
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x153c], eax
movzx eax, byte [ebp + 0xc]
cmp eax, 1
je 0x485411
mov ecx, dword [ebp - 0x153c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x153c]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0xb
je 0x48540a
mov ecx, dword [ebp - 0x153c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x153c]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0xc
je 0x48540a
mov ecx, dword [ebp - 0x153c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x153c]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0xe
jne 0x485411
mov al, 0xcf
jmp 0x48cba5
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x70], 0
mov edx, dword [ebp - 0x1534]
mov dword [edx + 0x7e9e0], 0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x1535], al
mov dword [ebp - 0x17d4], 0
mov dword [ebp - 0x1844], 0
mov dword [ebp - 0x17c0], 1
mov byte [ebp - 0x155a], 0
mov dword [ebp - 0x1620], 0
mov eax, dword [ebp - 0x152c]
movzx ecx, byte [eax + 0x6c]
cmp ecx, 1
jne 0x485699
mov dword [ebp - 0x15ec], 0
jmp 0x48549c
mov edx, dword [ebp - 0x15ec]
add edx, 1
mov dword [ebp - 0x15ec], edx
cmp dword [ebp - 0x15ec], 0x1adb0
jge 0x485699
mov eax, dword [ebp - 0x15ec]
shl eax, 4
mov ecx, dword [ebp - 0x152c]
cmp dword [ecx + eax + 0x1660b0], 0
jne 0x4854ca
jmp 0x485699
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
mov dword [ebp - 0x1980], eax
mov eax, dword [ebp - 0x15ec]
shl eax, 4
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax + 0x1660b0]
cmp edx, dword [ebp - 0x1980]
jne 0x485694
mov dword [ebp - 0x163c], 0
jmp 0x485524
mov eax, dword [ebp - 0x163c]
add eax, 1
mov dword [ebp - 0x163c], eax
cmp dword [ebp - 0x163c], 0x1a
jge 0x48555b
push 0x4c7fa4
mov ecx, dword [ebp - 0x163c]
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + ecx*4 + 0x3ea978]
push eax
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + 0x3ea974]
push edx
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
jmp 0x485515
mov eax, dword [ebp - 0x15ec]
shl eax, 4
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax + 0x1660b4]
sub edx, 0xb
mov dword [ebp - 0x15d4], edx
mov dword [ebp - 0x154c], 0
jmp 0x485595
mov eax, dword [ebp - 0x154c]
add eax, 1
mov dword [ebp - 0x154c], eax
cmp dword [ebp - 0x154c], 0x1a
jge 0x485692
mov ecx, dword [ebp - 0x15d4]
add ecx, dword [ebp - 0x154c]
js 0x485623
mov edx, dword [ebp - 0x15d4]
add edx, dword [ebp - 0x154c]
cmp edx, 0x1adb0
jge 0x485623
mov eax, dword [ebp - 0x15d4]
add eax, dword [ebp - 0x154c]
mov ecx, dword [ebp - 0x152c]
cmp dword [ecx + eax*4 + 0x313bf4], 0
je 0x485623
mov edx, dword [ebp - 0x15d4]
add edx, dword [ebp - 0x154c]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x313bf4]
push ecx
mov edx, dword [ebp - 0x154c]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x3ea978]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x3ea974]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
jmp 0x48568d
mov ecx, dword [ebp - 0x15d4]
add ecx, dword [ebp - 0x154c]
js 0x48568d
mov edx, dword [ebp - 0x15d4]
add edx, dword [ebp - 0x154c]
cmp edx, 0x1adb0
jge 0x48568d
mov eax, dword [ebp - 0x15d4]
add eax, dword [ebp - 0x154c]
mov ecx, dword [ebp - 0x152c]
cmp dword [ecx + eax*4 + 0x313bf4], 0
jne 0x48568d
push 0x4c7fa8
mov edx, dword [ebp - 0x154c]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x3ea978]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x3ea974]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
jmp 0x485586
jmp 0x485699
jmp 0x48548d
push 0
mov ecx, 0x489f860
call fcn.00485190
movzx ecx, byte [ebp - 0x1535]
mov dword [ebp - 0x1640], ecx
mov edx, dword [ebp - 0x1640]
sub edx, 2
mov dword [ebp - 0x1640], edx
cmp dword [ebp - 0x1640], 0xe4
ja case.0x4856de.4
mov eax, dword [ebp - 0x1640]
movzx ecx, byte [eax + 0x48ce30]
jmp dword [ecx*4 + 0x48cbc4]
push 1
push 0
mov ecx, dword [ebp - 0x152c]
call fcn.004851b0
jmp case.0x4856de.4
mov byte [ebp - 0x155a], 1
push 0
movzx edx, byte [ebp - 0x155a]
push edx
mov ecx, dword [ebp - 0x152c]
call fcn.004851b0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1818], eax
mov eax, dword [ebp - 0x1818]
push eax
mov ecx, 0x5433230
call fcn.0045a230
push 0x4c3d37
imul ecx, dword [ebp - 0x1818], 0x104
mov edx, dword [ebp - 0x1530]
lea eax, [edx + ecx + 0x26dec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1a2c], eax
push 0x4c3d47
imul ecx, dword [ebp - 0x1a2c], 0x104
mov edx, dword [ebp - 0x1530]
lea eax, [edx + ecx + 0x26dec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x485946
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0xa0]
call edx
mov dword [ebp - 0x1a40], eax
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax + 0x30]
mov eax, dword [edx + 0xa0]
call eax
mov dword [ebp - 0x1bac], eax
mov ecx, 0x489f1d0
call fcn.00460840
mov ecx, dword [ebp - 0x1a40]
mov dword [ebp - 0x16a0], ecx
cmp dword [ebp - 0x16a0], 0
je 0x48582f
cmp dword [ebp - 0x16a0], 1
je 0x4858d0
cmp dword [ebp - 0x16a0], 2
je 0x4858ec
jmp 0x485944
push 0
push 8
push 1
mov ecx, 0x489f1d0
call fcn.00460e30
push 0x5a
mov ecx, 0x5433230
call fcn.0045a230
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1570], eax
mov edx, dword [ebp - 0x1570]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1570]
mov edx, dword [eax + 0x14]
call edx
cmp eax, 0x11
jne 0x48588c
push 0x12
mov eax, dword [ebp - 0x1570]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1570]
mov eax, dword [edx + 0x20]
call eax
jmp 0x4858b9
mov ecx, dword [ebp - 0x1570]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1570]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0x13
jne 0x4858b9
push 0x14
mov ecx, dword [ebp - 0x1570]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1570]
mov eax, dword [edx + 0x20]
call eax
push 6
mov ecx, dword [ebp - 0x1570]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1570]
mov eax, dword [edx + 0x1c]
call eax
jmp 0x485944
mov ecx, dword [ebp - 0x152c]
call fcn.0048d340
push 0
push 0
mov ecx, dword [ebp - 0x152c]
call fcn.0048cfe0
jmp 0x485944
push 0
push 8
push 0x1f
mov ecx, 0x489f1d0
call fcn.00460e30
push 0x5a
mov ecx, 0x5433230
call fcn.0045a230
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1644], eax
push 0x12
mov ecx, dword [ebp - 0x1644]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1644]
mov eax, dword [edx + 0x20]
call eax
push 6
mov ecx, dword [ebp - 0x1644]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1644]
mov eax, dword [edx + 0x1c]
call eax
jmp 0x48597a
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0xa0]
call edx
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax + 0x30]
mov eax, dword [edx + 0xa0]
call eax
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x4859be
push 0x7fff
lea ecx, [ebp - 0xa28]
push ecx
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0xb0]
call edx
lea eax, [ebp - 0xa28]
push eax
mov ecx, 0x574bcd8
call fcn.00493600
jmp 0x4859e4
push 0x7fff
lea ecx, [ebp - 0xa28]
push ecx
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0xb0]
call edx
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x485a08
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d140
jmp 0x485a13
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x485a79
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax + 0x30]
mov eax, dword [edx + 0x48]
call eax
add eax, 4
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x7c], eax
mov edx, dword [ebp - 0x1530]
mov al, byte [edx + 0x79]
add al, 1
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x79], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d140
jmp 0x485a84
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x485ade
mov edx, dword [ebp - 0x1530]
movzx eax, byte [edx + 0x79]
test eax, eax
jle 0x485ade
mov ecx, dword [ebp - 0x1530]
mov dl, byte [ecx + 0x79]
sub dl, 1
mov eax, dword [ebp - 0x1530]
mov byte [eax + 0x79], dl
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov eax, dword [ebp - 0x1530]
mov ecx, dword [eax + edx*4 + 0x7c]
push ecx
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x28]
call edx
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x485b57
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
push edx
lea eax, [ebp - 0x640]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, 1
imul edx, ecx, 0x63
mov dword [ebp - 0x181c], edx
cmp dword [ebp - 0x181c], 0x3e8
jae 0x485b2b
jmp 0x485b30
call fcn.0049d88a
mov eax, dword [ebp - 0x181c]
mov byte [ebp + eax - 0x640], 0
lea ecx, [ebp - 0x640]
push ecx
mov edx, dword [ebp - 0x1530]
add edx, 9
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x485b62
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x485b97
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1a44], eax
mov eax, dword [ebp - 0x1a44]
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.00478290
xor al, al
jmp 0x48cba5
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x485c0d
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15d9], al
movzx ecx, byte [ebp - 0x15d9]
cmp ecx, 1
jne 0x485bdd
push 1
mov ecx, 0x489f860
call fcn.00468f40
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x32db8], 0
jmp 0x485c0d
push 0
mov ecx, 0x489f860
call fcn.00468f40
mov eax, dword [ebp - 0x1530]
mov dword [eax + 0x32db8], 1
mov ecx, 0x50a9e78
call fcn.0045a0c0
mov ecx, 0x4793b78
call fcn.00473470
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x485c4a
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1a48], eax
push 1
mov ecx, dword [ebp - 0x1a48]
push ecx
mov ecx, 0x489f860
call fcn.00468440
push 1
mov ecx, 0x489f860
call fcn.00468f40
jmp 0x485c5b
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1b7c], eax
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x485c76
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x3c990], 0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x485c91
mov eax, dword [ebp - 0x1530]
mov dword [eax + 0x3c990], 1
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x485d52
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x1561], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x1594], ax
lea ecx, [ebp - 0x1594]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x485d50
movzx ecx, byte [ebp - 0x1561]
cmp ecx, 0x41
jne 0x485d0d
movzx edx, word [ebp - 0x1594]
mov eax, dword [ebp - 0x1534]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x1820], ecx
jmp 0x485d27
movzx edx, word [ebp - 0x1594]
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx*4 + 0x2fdf0]
mov dword [ebp - 0x1820], ecx
call dword [sym.imp.WINMM.dll_timeGetTime]
mov edx, dword [ebp - 0x1820]
mov dword [edx], eax
movzx eax, word [ebp - 0x1594]
push eax
movzx ecx, byte [ebp - 0x1561]
push ecx
mov ecx, dword [ebp - 0x152c]
call fcn.00476ff0
jmp 0x485d68
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x485e4a
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x1559], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x1590], ax
lea edx, [ebp - 0x1590]
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x485e48
movzx edx, byte [ebp - 0x1559]
cmp edx, 0x41
jne 0x485de8
movzx eax, word [ebp - 0x1590]
mov ecx, dword [ebp - 0x1534]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x16c4], edx
jmp 0x485e02
movzx eax, word [ebp - 0x1590]
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax*4 + 0x2fdf0]
mov dword [ebp - 0x16c4], edx
mov ecx, 0x69dd128
call fcn.0048da70
movzx eax, al
test eax, eax
je 0x485e21
mov ecx, dword [ebp - 0x16c4]
mov dword [ecx], 1
jmp 0x485e2d
mov edx, dword [ebp - 0x16c4]
mov dword [edx], 0
movzx eax, word [ebp - 0x1590]
push eax
movzx ecx, byte [ebp - 0x1559]
push ecx
mov ecx, dword [ebp - 0x152c]
call fcn.00476ff0
jmp 0x485e60
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x485f65
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x1562], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x157c], ax
lea edx, [ebp - 0x157c]
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x485f63
movzx edx, byte [ebp - 0x1562]
cmp edx, 0x41
jne 0x485ee0
movzx eax, word [ebp - 0x157c]
mov ecx, dword [ebp - 0x1534]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x16c8], edx
jmp 0x485efa
movzx eax, word [ebp - 0x157c]
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax*4 + 0x2fdf0]
mov dword [ebp - 0x16c8], edx
push 1
mov ecx, 0x50a9e78
call fcn.00459d60
test eax, eax
jne 0x485f1a
push 0xd
mov ecx, 0x50a9e78
call fcn.00459d60
test eax, eax
je 0x485f3c
mov eax, dword [ebp - 0x16c8]
mov dword [eax], 1
mov ecx, 0x50a9e78
call fcn.00459e00
mov ecx, 0x50a9e78
call fcn.00459e30
jmp 0x485f48
mov ecx, dword [ebp - 0x16c8]
mov dword [ecx], 0
movzx edx, word [ebp - 0x157c]
push edx
movzx eax, byte [ebp - 0x1562]
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.00476ff0
jmp 0x485f7b
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48605f
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x1563], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x158c], ax
lea ecx, [ebp - 0x158c]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x48605d
movzx ecx, byte [ebp - 0x1563]
cmp ecx, 0x41
jne 0x485ffb
movzx edx, word [ebp - 0x158c]
mov eax, dword [ebp - 0x1534]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x16cc], ecx
jmp 0x486015
movzx edx, word [ebp - 0x158c]
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx*4 + 0x2fdf0]
mov dword [ebp - 0x16cc], ecx
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
and edx, 0x80
je 0x486036
mov eax, dword [ebp - 0x16cc]
mov dword [eax], 1
jmp 0x486042
mov ecx, dword [ebp - 0x16cc]
mov dword [ecx], 0
movzx edx, word [ebp - 0x158c]
push edx
movzx eax, byte [ebp - 0x1563]
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.00476ff0
jmp 0x486075
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48613c
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x1564], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x1588], ax
lea ecx, [ebp - 0x1588]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x48613a
movzx ecx, byte [ebp - 0x1564]
cmp ecx, 0x41
jne 0x4860f1
movzx edx, word [ebp - 0x1588]
mov eax, dword [ebp - 0x1534]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x1824], ecx
jmp 0x48610b
movzx edx, word [ebp - 0x1588]
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx*4 + 0x2fdf0]
mov dword [ebp - 0x1824], ecx
mov edx, dword [ebp - 0x1824]
mov eax, dword [ebp - 0x1530]
mov ecx, dword [eax + 0x30d90]
mov dword [edx], ecx
movzx edx, word [ebp - 0x1588]
push edx
movzx eax, byte [ebp - 0x1564]
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.00476ff0
jmp 0x486152
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x486219
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x1565], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x1584], ax
lea ecx, [ebp - 0x1584]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x486217
movzx ecx, byte [ebp - 0x1565]
cmp ecx, 0x41
jne 0x4861ce
movzx edx, word [ebp - 0x1584]
mov eax, dword [ebp - 0x1534]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x1828], ecx
jmp 0x4861e8
movzx edx, word [ebp - 0x1584]
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx*4 + 0x2fdf0]
mov dword [ebp - 0x1828], ecx
mov edx, dword [ebp - 0x1828]
mov eax, dword [ebp - 0x1530]
mov ecx, dword [eax + 0x30d94]
mov dword [edx], ecx
movzx edx, word [ebp - 0x1584]
push edx
movzx eax, byte [ebp - 0x1565]
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.00476ff0
jmp 0x48622f
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x4862f2
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1a4c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15da], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x15bc], ax
lea ecx, [ebp - 0x15bc]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x4862f0
movzx ecx, byte [ebp - 0x15da]
cmp ecx, 0x41
jne 0x4862bc
movzx edx, word [ebp - 0x15bc]
mov eax, dword [ebp - 0x1534]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x182c], ecx
jmp 0x4862d6
movzx edx, word [ebp - 0x15bc]
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx*4 + 0x2fdf0]
mov dword [ebp - 0x182c], ecx
mov edx, dword [ebp - 0x1a4c]
push edx
mov ecx, dword [ebp - 0x152c]
call fcn.00477a50
mov ecx, dword [ebp - 0x182c]
mov dword [ecx], eax
jmp 0x486308
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1a50], eax
mov edx, dword [ebp - 0x1a50]
push edx
mov ecx, 0x489f860
call fcn.004696a0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax + 0x30]
mov eax, dword [edx + 0x48]
call eax
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x70], eax
push 1
push 8
push 0x24
mov ecx, 0x489f1d0
call fcn.00460e30
mov edx, dword [ebp - 0x1534]
mov dword [edx + 0x7e9e0], 1
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1830], eax
mov eax, dword [ebp - 0x1830]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1830]
mov eax, dword [edx + 0x44]
call eax
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x486460
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x16bc], ax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15db], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x15c0], ax
lea ecx, [ebp - 0x15c0]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x48645e
movzx ecx, byte [ebp - 0x15db]
cmp ecx, 0x41
jne 0x48642a
movzx edx, word [ebp - 0x15c0]
mov eax, dword [ebp - 0x1534]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x1834], ecx
jmp 0x486444
movzx edx, word [ebp - 0x15c0]
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx*4 + 0x2fdf0]
mov dword [ebp - 0x1834], ecx
movzx edx, word [ebp - 0x16bc]
push edx
mov ecx, 0x489f1d0
call fcn.00465910
mov ecx, dword [ebp - 0x1834]
mov dword [ecx], eax
jmp 0x486476
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x4864db
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x70], eax
push 0
push 8
push 0x1e
mov ecx, 0x489f1d0
call fcn.00460e30
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1838], eax
push 6
mov edx, dword [ebp - 0x1838]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1838]
mov edx, dword [eax + 0x1c]
call edx
jmp case.0x4856de.4
mov ecx, 0x489f1d0
call fcn.00411390
push eax
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1a58], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x1a54], edx
mov ecx, 0x489f1d0
call fcn.00426da0
mov dword [ebp - 0x183c], eax
mov eax, dword [ebp - 0x183c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x183c]
mov eax, dword [edx + 0xc]
call eax
push eax
lea ecx, [ebp - 0x154]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 0x1a54]
push edx
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
push eax
push 1
mov ecx, dword [ebp - 0x1a58]
push ecx
lea edx, [ebp - 0x154]
push edx
mov ecx, dword [ebp - 0x152c]
call fcn.0048dac0
jmp case.0x4856de.4
mov dword [ebp - 0x1844], 1
mov ecx, 0x489f1d0
call fcn.00411390
push eax
lea eax, [ebp - 0x258]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1a60], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x1a5c], edx
mov ecx, 0x489f1d0
call fcn.00426da0
mov dword [ebp - 0x1840], eax
mov eax, dword [ebp - 0x1840]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1840]
mov eax, dword [edx + 0xc]
call eax
push eax
lea ecx, [ebp - 0x258]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 0x1a5c]
push edx
lea eax, [ebp - 0x258]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0
mov ecx, dword [ebp - 0x1844]
push ecx
mov edx, dword [ebp - 0x1a60]
push edx
lea eax, [ebp - 0x258]
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048dac0
jmp case.0x4856de.4
push 0x4c3d57
mov ecx, dword [ebp - 0x1530]
add ecx, 0x2dd40
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0
mov ecx, 0x489ee80
call fcn.00415a10
jmp case.0x4856de.4
push 0x4c3d67
mov edx, dword [ebp - 0x1530]
add edx, 0x2dd40
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, 0x489f1d0
call fcn.00441230
mov dword [ebp - 0x1a64], eax
push 1
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
push eax
mov eax, dword [ebp - 0x1a64]
push eax
mov ecx, 0x4927138
call fcn.00445d10
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x4866f7
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1848], eax
push 0x12
mov ecx, dword [ebp - 0x1848]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1848]
mov eax, dword [edx + 0x20]
call eax
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x486729
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x184c], eax
push 0x14
mov ecx, dword [ebp - 0x184c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x184c]
mov eax, dword [edx + 0x20]
call eax
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x486886
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1634], eax
mov ecx, 0x574bcd8
call fcn.00485120
mov dword [ebp - 0x1638], eax
mov ecx, 0x574bcd8
call fcn.0041cc20
mov dword [ebp - 0x1b80], eax
mov dword [ebp - 0x1598], 0
imul ecx, dword [ebp - 0x1634], 0x28
add ecx, dword [ebp - 0x1638]
mov edx, dword [ebp - 0x1598]
cmp dword [ecx + edx*4], 0x80a
je 0x486884
imul eax, dword [ebp - 0x1634], 0x28
add eax, dword [ebp - 0x1638]
mov ecx, dword [ebp - 0x1598]
mov edx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x1534]
cmp dword [eax + edx*4 + 0x1628], 1
jge 0x486870
cmp dword [ebp - 0x1598], 0
jne 0x4867d2
mov dword [ebp - 0x1850], 2
jmp 0x4867dc
mov dword [ebp - 0x1850], 1
imul ecx, dword [ebp - 0x1634], 0x28
add ecx, dword [ebp - 0x1638]
mov edx, dword [ebp - 0x1598]
mov eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x1534]
mov edx, dword [ebp - 0x1850]
mov dword [ecx + eax*4 + 0x1628], edx
imul eax, dword [ebp - 0x1634], 0x28
add eax, dword [ebp - 0x1638]
mov ecx, dword [ebp - 0x1598]
mov edx, dword [eax + ecx*4]
push edx
mov ecx, 0x489f1d0
call fcn.00466460
imul eax, dword [ebp - 0x1634], 0x28
add eax, dword [ebp - 0x1638]
mov ecx, dword [ebp - 0x1534]
mov edx, dword [ecx + 0x7f344]
mov ecx, dword [ebp - 0x1534]
mov esi, dword [ebp - 0x1598]
mov eax, dword [eax + esi*4]
mov dword [ecx + edx*4 + 0x7f348], eax
mov ecx, dword [ebp - 0x1534]
mov edx, dword [ecx + 0x7f344]
add edx, 1
mov eax, dword [ebp - 0x1534]
mov dword [eax + 0x7f344], edx
mov ecx, dword [ebp - 0x1598]
add ecx, 1
mov dword [ebp - 0x1598], ecx
jmp 0x486773
jmp 0x486891
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x486924
mov edx, dword [ebp - 0x1530]
cmp dword [edx + 0x30d90], 0
jg 0x4868cd
mov eax, dword [ebp - 0x1530]
cmp dword [eax + 0x30d94], 0
jg 0x4868cd
mov ecx, dword [ebp - 0x1530]
cmp dword [ecx + 0x30d98], 0
jle 0x4868e0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1b84], eax
jmp 0x486922
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1a68], eax
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov edx, dword [ebp - 0x1a68]
push edx
mov ecx, 0x4d2930
call fcn.0046ccd0
jmp 0x48692f
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x486a46
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax + 0x30]
mov eax, dword [edx + 0x48]
call eax
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov edx, dword [ebp - 0x1534]
mov eax, dword [edx + 0x7e310]
add eax, 0xa0
push eax
mov ecx, 0x4d2930
call fcn.0046ccd0
call fcn.00414cf0
test eax, eax
jne 0x4869ef
mov ecx, dword [ebp - 0x1534]
mov edx, dword [ecx + 0x7e310]
add edx, 0xa0
push edx
mov ecx, 0x489f1d0
call fcn.00460cc0
mov eax, dword [ebp - 0x1534]
mov ecx, dword [eax + 0x7e310]
add ecx, 0xa0
mov edx, dword [ebp - 0x1534]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0x1534]
mov ecx, dword [eax + 0x7e310]
add ecx, 1
and ecx, 0x80000007
jns 0x4869d7
dec ecx
or ecx, 0xfffffff8
inc ecx
mov edx, dword [ebp - 0x1534]
mov dword [edx + 0x7e310], ecx
mov ecx, 0x48a7100
call fcn.0045c390
jmp 0x486a46
mov ecx, 0x489f1d0
call fcn.004222b0
mov eax, dword [ebp - 0x1534]
mov ecx, dword [eax + 0x7e310]
add ecx, 0xa0
mov edx, dword [ebp - 0x1534]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0x1534]
mov ecx, dword [eax + 0x7e310]
add ecx, 1
and ecx, 0x80000007
jns 0x486a30
dec ecx
or ecx, 0xfffffff8
inc ecx
mov edx, dword [ebp - 0x1534]
mov dword [edx + 0x7e310], ecx
mov ecx, 0x48a7100
call fcn.0045c390
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x486cd9
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x153d], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x1554], ax
lea eax, [ebp - 0x1554]
push eax
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x486ccc
movzx edx, byte [ebp - 0x153d]
cmp edx, 0x41
jne 0x486acb
movzx eax, word [ebp - 0x1554]
mov ecx, dword [ebp - 0x1534]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x1544], edx
jmp 0x486ae5
movzx eax, word [ebp - 0x1554]
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax*4 + 0x2fdf0]
mov dword [ebp - 0x1544], edx
movzx eax, byte [ebp - 0x1535]
mov dword [ebp - 0x1660], eax
mov ecx, dword [ebp - 0x1660]
sub ecx, 0x19
mov dword [ebp - 0x1660], ecx
cmp dword [ebp - 0x1660], 0xd
ja case.0x486b14.6
mov edx, dword [ebp - 0x1660]
jmp dword [edx*4 + 0x48cf18]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, dword [ebp - 0x1544]
add eax, dword [ecx]
mov edx, dword [ebp - 0x1544]
mov dword [edx], eax
jmp 0x486c65
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, dword [ebp - 0x1544]
mov edx, dword [ecx]
sub edx, eax
mov eax, dword [ebp - 0x1544]
mov dword [eax], edx
jmp 0x486c65
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, dword [ebp - 0x1544]
imul eax, dword [ecx]
mov edx, dword [ebp - 0x1544]
mov dword [edx], eax
jmp 0x486c65
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, eax
mov edx, dword [ebp - 0x1544]
mov eax, dword [edx]
cdq
idiv ecx
mov ecx, dword [ebp - 0x1544]
mov dword [ecx], eax
jmp 0x486c65
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, eax
mov edx, dword [ebp - 0x1544]
mov eax, dword [edx]
cdq
idiv ecx
mov eax, dword [ebp - 0x1544]
mov dword [eax], edx
jmp 0x486c65
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, dword [ebp - 0x1544]
mov dword [ecx], eax
jmp 0x486c65
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x16f4], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
sub eax, dword [ebp - 0x16f4]
mov dword [ebp - 0x1624], eax
cmp dword [ebp - 0x1624], 0
jg 0x486c1b
mov dword [ebp - 0x1624], 1
mov edx, dword [ebp - 0x1624]
add edx, 1
mov dword [ebp - 0x1624], edx
call fcn.004a1587
cdq
idiv dword [ebp - 0x1624]
add edx, dword [ebp - 0x16f4]
mov eax, dword [ebp - 0x1544]
mov dword [eax], edx
jmp 0x486c65
mov ecx, dword [ebp - 0x1534]
movzx edx, byte [ecx + 6]
mov eax, dword [ebp - 0x1544]
mov dword [eax], edx
jmp 0x486c65
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
movzx ecx, word [ebp - 0x1554]
cmp ecx, 0x5b
jne 0x486c99
mov edx, 4
imul eax, edx, 0x5b
mov ecx, dword [ebp - 0x1530]
cmp dword [ecx + eax + 0x2fdf0], 0
jne 0x486c99
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x30f2c], 0
movzx eax, word [ebp - 0x1554]
push eax
movzx ecx, byte [ebp - 0x153d]
push ecx
mov ecx, dword [ebp - 0x152c]
call fcn.00476ff0
movzx edx, byte [ebp - 0x153d]
cmp edx, 0x41
jne 0x486cca
mov ecx, 0x48a7100
call fcn.0045c390
jmp 0x486cd7
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp 0x486cef
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
mov dword [ebp - 0x1628], 0xffffffff
mov ecx, 0x574bcd8
call fcn.00411450
mov dword [ebp - 0x16f8], eax
mov ecx, 0x574bcd8
call fcn.004850b0
mov dword [ebp - 0x1a6c], eax
mov dword [ebp - 0x165c], 0
mov eax, dword [ebp - 0x165c]
cmp eax, dword [ebp - 0x16f8]
jge 0x486da2
imul ecx, dword [ebp - 0x165c], 0x18
mov edx, dword [ebp - 0x1a6c]
mov eax, dword [edx + ecx + 0x10]
mov dword [ebp - 0x1628], eax
cmp dword [ebp - 0x1628], 0
jl 0x486d91
mov ecx, dword [ebp - 0x1628]
cmp ecx, dword [ebp - 0x16f8]
jge 0x486d91
mov edx, dword [ebp - 0x1628]
mov eax, dword [ebp - 0x1534]
cmp dword [eax + edx*4 + 0x25c8], 0
jne 0x486d91
mov ecx, dword [ebp - 0x1628]
mov edx, dword [ebp - 0x1534]
mov dword [edx + ecx*4 + 0x25c8], 1
mov eax, dword [ebp - 0x165c]
add eax, 1
mov dword [ebp - 0x165c], eax
jmp 0x486d28
mov ecx, 0x48a7100
call fcn.0045c390
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x486ea9
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x1854], edx
mov dword [ebp - 0x1630], 0xffffffff
mov ecx, 0x574bcd8
call fcn.00411450
mov dword [ebp - 0x16fc], eax
mov dword [ebp - 0x162c], 0
mov eax, dword [ebp - 0x162c]
cmp eax, dword [ebp - 0x16fc]
jge 0x486e59
mov ecx, dword [ebp - 0x162c]
push ecx
mov ecx, 0x574bcd8
call fcn.00428630
mov dword [ebp - 0x1a70], eax
mov edx, dword [ebp - 0x1a70]
push edx
mov eax, dword [ebp - 0x1854]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x486e48
mov ecx, dword [ebp - 0x162c]
mov dword [ebp - 0x1630], ecx
jmp 0x486e59
mov edx, dword [ebp - 0x162c]
add edx, 1
mov dword [ebp - 0x162c], edx
jmp 0x486dfd
cmp dword [ebp - 0x1630], 0
jl 0x486ea7
mov eax, dword [ebp - 0x1630]
cmp eax, dword [ebp - 0x16fc]
jge 0x486ea7
mov ecx, dword [ebp - 0x1630]
mov edx, dword [ebp - 0x1534]
cmp dword [edx + ecx*4 + 0x25c8], 0
jne 0x486ea7
mov eax, dword [ebp - 0x1630]
mov ecx, dword [ebp - 0x1534]
mov dword [ecx + eax*4 + 0x25c8], 1
mov ecx, 0x48a7100
call fcn.0045c390
jmp 0x486eb4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x486fc3
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x185c], eax
mov dword [ebp - 0x15fc], 0xffffffff
mov ecx, 0x574bcd8
call fcn.0041be00
mov dword [ebp - 0x1700], eax
mov dword [ebp - 0x15e8], 0
mov ecx, dword [ebp - 0x15e8]
cmp ecx, dword [ebp - 0x1700]
jge 0x486f73
mov edx, dword [ebp - 0x15e8]
push edx
mov ecx, 0x574bcd8
call fcn.004850d0
mov dword [ebp - 0x1858], eax
mov eax, dword [ebp - 0x1858]
push eax
mov ecx, dword [ebp - 0x185c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x486f62
mov edx, dword [ebp - 0x15e8]
mov dword [ebp - 0x15fc], edx
mov eax, dword [ebp - 0x1530]
mov ecx, dword [ebp - 0x15e8]
mov dword [eax + 0x32dbc], ecx
jmp 0x486f73
mov edx, dword [ebp - 0x15e8]
add edx, 1
mov dword [ebp - 0x15e8], edx
jmp 0x486f05
cmp dword [ebp - 0x15fc], 0
jl 0x486fc1
mov eax, dword [ebp - 0x15fc]
cmp eax, dword [ebp - 0x1700]
jge 0x486fc1
mov ecx, dword [ebp - 0x15fc]
mov edx, dword [ebp - 0x1534]
cmp dword [edx + ecx*4 + 0x7dfe8], 0
jne 0x486fc1
mov eax, dword [ebp - 0x15fc]
mov ecx, dword [ebp - 0x1534]
mov dword [ecx + eax*4 + 0x7dfe8], 1
mov ecx, 0x48a7100
call fcn.0045c390
jmp 0x486fce
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
mov dword [ebp - 0x1600], 0xffffffff
mov ecx, 0x574bcd8
call fcn.00411470
mov dword [ebp - 0x1704], eax
mov ecx, 0x574bcd8
call fcn.00485100
mov dword [ebp - 0x1860], eax
mov dword [ebp - 0x1658], 0
mov edx, dword [ebp - 0x1658]
cmp edx, dword [ebp - 0x1704]
jge 0x487081
imul eax, dword [ebp - 0x1658], 0x18
mov ecx, dword [ebp - 0x1860]
mov edx, dword [ecx + eax + 0x10]
mov dword [ebp - 0x1600], edx
cmp dword [ebp - 0x1600], 0
jl 0x487070
mov eax, dword [ebp - 0x1600]
cmp eax, dword [ebp - 0x1704]
jge 0x487070
mov ecx, dword [ebp - 0x1600]
mov edx, dword [ebp - 0x1534]
cmp dword [edx + ecx*4 + 0x3ba8], 0
jne 0x487070
mov eax, dword [ebp - 0x1600]
mov ecx, dword [ebp - 0x1534]
mov dword [ecx + eax*4 + 0x3ba8], 1
mov edx, dword [ebp - 0x1658]
add edx, 1
mov dword [ebp - 0x1658], edx
jmp 0x487007
mov ecx, 0x48a7100
call fcn.0045c390
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x487188
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x1868], edx
mov dword [ebp - 0x1608], 0xffffffff
mov ecx, 0x574bcd8
call fcn.00411470
mov dword [ebp - 0x1708], eax
mov dword [ebp - 0x1604], 0
mov eax, dword [ebp - 0x1604]
cmp eax, dword [ebp - 0x1708]
jge 0x487138
mov ecx, dword [ebp - 0x1604]
push ecx
mov ecx, 0x574bcd8
call fcn.00426e00
mov dword [ebp - 0x1864], eax
mov edx, dword [ebp - 0x1864]
push edx
mov eax, dword [ebp - 0x1868]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x487127
mov ecx, dword [ebp - 0x1604]
mov dword [ebp - 0x1608], ecx
jmp 0x487138
mov edx, dword [ebp - 0x1604]
add edx, 1
mov dword [ebp - 0x1604], edx
jmp 0x4870dc
cmp dword [ebp - 0x1608], 0
jl 0x487186
mov eax, dword [ebp - 0x1608]
cmp eax, dword [ebp - 0x1708]
jge 0x487186
mov ecx, dword [ebp - 0x1608]
mov edx, dword [ebp - 0x1534]
cmp dword [edx + ecx*4 + 0x3ba8], 0
jne 0x487186
mov eax, dword [ebp - 0x1608]
mov ecx, dword [ebp - 0x1534]
mov dword [ecx + eax*4 + 0x3ba8], 1
mov ecx, 0x48a7100
call fcn.0045c390
jmp 0x487193
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x487696
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15dc], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x15c4], ax
lea edx, [ebp - 0x15c4]
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x48767e
movzx edx, byte [ebp - 0x15dc]
cmp edx, 0x41
jne 0x487223
mov ecx, 0x48a7100
call fcn.00411430
mov dword [ebp - 0x186c], eax
movzx eax, word [ebp - 0x15c4]
mov ecx, dword [ebp - 0x186c]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x15d8], edx
jmp 0x48723d
movzx eax, word [ebp - 0x15c4]
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax*4 + 0x2fdf0]
mov dword [ebp - 0x15d8], edx
movzx eax, byte [ebp - 0x1535]
mov dword [ebp - 0x1654], eax
mov ecx, dword [ebp - 0x1654]
sub ecx, 0x2d
mov dword [ebp - 0x1654], ecx
cmp dword [ebp - 0x1654], 5
ja case.default.0x48726c
mov edx, dword [ebp - 0x1654]
jmp dword [edx*4 + 0x48cf50]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, dword [ebp - 0x15d8]
cmp dword [ecx], eax
jne 0x487310
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x7c], eax
mov edx, dword [ebp - 0x1530]
mov al, byte [edx + 0x79]
add al, 1
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x79], al
mov edx, dword [ebp - 0x1530]
movzx eax, byte [edx + 0x79]
cmp eax, 0xa
jle 0x4872f7
push 0
mov ecx, 0x489f1d0
call fcn.00411310
push eax
push 0x4c7fac
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d140
jmp 0x48731b
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.default.0x48726c
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, dword [ebp - 0x15d8]
cmp dword [ecx], eax
je 0x4873bd
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x7c], eax
mov edx, dword [ebp - 0x1530]
mov al, byte [edx + 0x79]
add al, 1
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x79], al
mov edx, dword [ebp - 0x1530]
movzx eax, byte [edx + 0x79]
cmp eax, 0xa
jle 0x4873a4
push 0
mov ecx, 0x489f1d0
call fcn.00411310
push eax
push 0x4c7fcc
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d140
jmp 0x4873c8
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.default.0x48726c
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, dword [ebp - 0x15d8]
cmp dword [ecx], eax
jge 0x48746a
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x7c], eax
mov edx, dword [ebp - 0x1530]
mov al, byte [edx + 0x79]
add al, 1
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x79], al
mov edx, dword [ebp - 0x1530]
movzx eax, byte [edx + 0x79]
cmp eax, 0xa
jle 0x487451
push 0
mov ecx, 0x489f1d0
call fcn.00411310
push eax
push 0x4c7fec
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d140
jmp 0x487475
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.default.0x48726c
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, dword [ebp - 0x15d8]
cmp dword [ecx], eax
jle 0x487517
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x7c], eax
mov edx, dword [ebp - 0x1530]
mov al, byte [edx + 0x79]
add al, 1
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x79], al
mov edx, dword [ebp - 0x1530]
movzx eax, byte [edx + 0x79]
cmp eax, 0xa
jle 0x4874fe
push 0
mov ecx, 0x489f1d0
call fcn.00411310
push eax
push 0x4c800c
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d140
jmp 0x487522
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.default.0x48726c
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, dword [ebp - 0x15d8]
cmp dword [ecx], eax
jg 0x4875c4
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x7c], eax
mov edx, dword [ebp - 0x1530]
mov al, byte [edx + 0x79]
add al, 1
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x79], al
mov edx, dword [ebp - 0x1530]
movzx eax, byte [edx + 0x79]
cmp eax, 0xa
jle 0x4875ab
push 0
mov ecx, 0x489f1d0
call fcn.00411310
push eax
push 0x4c802c
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d140
jmp 0x4875cf
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.default.0x48726c
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, dword [ebp - 0x15d8]
cmp dword [ecx], eax
jl 0x487671
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x7c], eax
mov edx, dword [ebp - 0x1530]
mov al, byte [edx + 0x79]
add al, 1
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x79], al
mov edx, dword [ebp - 0x1530]
movzx eax, byte [edx + 0x79]
cmp eax, 0xa
jle 0x487658
push 0
mov ecx, 0x489f1d0
call fcn.00411310
push eax
push str.GOSUB
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d140
jmp case.default.0x48726c
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp 0x487694
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp 0x4876b7
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x487937
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x1566], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x15d0], ax
lea ecx, [ebp - 0x15d0]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x48791f
mov dword [ebp - 0x15a0], 0
movzx ecx, byte [ebp - 0x1566]
cmp ecx, 0x41
jne 0x487751
mov ecx, 0x48a7100
call fcn.00411430
mov dword [ebp - 0x1870], eax
movzx edx, word [ebp - 0x15d0]
mov eax, dword [ebp - 0x1870]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x15a0], ecx
jmp 0x487777
movzx edx, byte [ebp - 0x1566]
cmp edx, 0x40
jne 0x487777
movzx eax, word [ebp - 0x15d0]
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax*4 + 0x2fdf0]
mov dword [ebp - 0x15a0], edx
movzx eax, byte [ebp - 0x1535]
mov dword [ebp - 0x1650], eax
mov ecx, dword [ebp - 0x1650]
sub ecx, 0x27
mov dword [ebp - 0x1650], ecx
cmp dword [ebp - 0x1650], 0x18
ja case.0x4877ad.6
mov edx, dword [ebp - 0x1650]
movzx eax, byte [edx + 0x48cf84]
jmp dword [eax*4 + 0x48cf68]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, dword [ebp - 0x15a0]
cmp dword [ecx], eax
jne 0x4877e2
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d140
jmp 0x4877ed
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4877ad.6
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov edx, dword [ebp - 0x15a0]
cmp dword [edx], eax
je 0x487820
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d140
jmp 0x48782b
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4877ad.6
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, dword [ebp - 0x15a0]
cmp dword [ecx], eax
jge 0x48785e
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d140
jmp 0x487869
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4877ad.6
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov edx, dword [ebp - 0x15a0]
cmp dword [edx], eax
jle 0x48789c
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d140
jmp 0x4878a7
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4877ad.6
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, dword [ebp - 0x15a0]
cmp dword [ecx], eax
jg 0x4878d7
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d140
jmp 0x4878e2
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4877ad.6
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov edx, dword [ebp - 0x15a0]
cmp dword [edx], eax
jl 0x487912
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d140
jmp case.0x4877ad.6
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp 0x487935
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp 0x487958
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x1874], edx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x170c], eax
cmp dword [ebp - 0x170c], 0
je 0x487998
cmp dword [ebp - 0x170c], 3
je 0x487998
jmp 0x4879d4
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x26dd0], 0
mov edx, dword [ebp - 0x1530]
mov byte [edx + 0x3bc6c], 0
push 0
mov eax, dword [ebp - 0x1874]
push eax
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 0xd8]
call eax
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x1878], edx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1710], eax
cmp dword [ebp - 0x1710], 0
je 0x487a17
cmp dword [ebp - 0x1710], 3
je 0x487a17
jmp 0x487c7b
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
mulss xmm0, dword [0x4c8f9c]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0xb04], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
divss xmm0, dword [0x4c916c]
movss dword [ebp - 0xafc], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0xaf8], xmm0
movss xmm0, dword [ebp - 0xaf8]
mulss xmm0, dword [ebp - 0xafc]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x1ba8], xmm0
movsd xmm0, qword [ebp - 0xb04]
call fcn.004b4880
movsd xmm1, qword [ebp - 0x1ba8]
mulsd xmm1, xmm0
movsd qword [ebp - 0xaf4], xmm1
movss xmm0, dword [ebp - 0xaf8]
mulss xmm0, dword [ebp - 0xafc]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x1bcc], xmm0
movsd xmm0, qword [ebp - 0xb04]
call fcn.004a60a0
movsd xmm1, qword [ebp - 0x1bcc]
mulsd xmm1, xmm0
movsd qword [ebp - 0xaec], xmm1
cvtss2sd xmm0, dword [ebp - 0xaf8]
mulsd xmm0, qword [0x4c9038]
cvtss2sd xmm1, dword [ebp - 0xafc]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1bb4], xmm0
movsd xmm0, qword [ebp - 0xb04]
call fcn.004b4880
movsd xmm1, qword [ebp - 0x1bb4]
mulsd xmm1, xmm0
movsd qword [ebp - 0xae4], xmm1
cvtss2sd xmm0, dword [ebp - 0xaf8]
mulsd xmm0, qword [0x4c9038]
cvtss2sd xmm1, dword [ebp - 0xafc]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1bbc], xmm0
movsd xmm0, qword [ebp - 0xb04]
call fcn.004a60a0
movsd xmm1, qword [ebp - 0x1bbc]
mulsd xmm1, xmm0
movsd qword [ebp - 0xadc], xmm1
cvtss2sd xmm0, dword [ebp - 0xaf8]
mulsd xmm0, qword [0x4c9040]
cvtss2sd xmm1, dword [ebp - 0xafc]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1bc4], xmm0
movsd xmm0, qword [ebp - 0xb04]
call fcn.004b4880
movsd xmm1, qword [ebp - 0x1bc4]
mulsd xmm1, xmm0
movsd qword [ebp - 0xad4], xmm1
cvtss2sd xmm0, dword [ebp - 0xaf8]
mulsd xmm0, qword [0x4c9040]
cvtss2sd xmm1, dword [ebp - 0xafc]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1a78], xmm0
movsd xmm0, qword [ebp - 0xb04]
call fcn.004a60a0
movsd xmm1, qword [ebp - 0x1a78]
mulsd xmm1, xmm0
movsd qword [ebp - 0xacc], xmm1
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0xac4], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0xac0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0xabc], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0xab8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
divss xmm0, dword [0x4c916c]
movss dword [ebp - 0xab4], xmm0
lea ecx, [ebp - 0xb0c]
push ecx
push 0
mov edx, dword [ebp - 0x1878]
push edx
mov ecx, 0x574b5f8
call fcn.0044a0f0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x187c], edx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1714], eax
cmp dword [ebp - 0x1714], 0
je 0x487cbb
cmp dword [ebp - 0x1714], 3
je 0x487cbb
jmp 0x487ccc
mov ecx, dword [ebp - 0x187c]
push ecx
mov ecx, 0x574b5f8
call fcn.00412f20
jmp case.0x4856de.4
mov edx, dword [ebp + 8]
mov dword [ebp - 0x16d4], edx
cmp dword [ebp - 0x16d4], 0
je 0x487cfe
cmp dword [ebp - 0x16d4], 2
je 0x487d88
cmp dword [ebp - 0x16d4], 3
je 0x487cfe
jmp 0x487d9e
mov eax, dword [ebp - 0x1530]
mov dword [eax + 0x26dd0], 1
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x26ddc], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x26de4], eax
mov eax, dword [ebp - 0x1530]
mov ecx, dword [eax + 0x26de4]
push ecx
push 0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1530]
cvtsi2ss xmm0, dword [edx + 0x26ddc]
push ecx
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0
mov ecx, 0x574b5f8
call fcn.0044a880
jmp 0x487d9e
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1718], eax
cmp dword [ebp - 0x1718], 0
je 0x487dc0
cmp dword [ebp - 0x1718], 3
je 0x487dc0
jmp 0x487de9
mov ecx, dword [ebp - 0x1530]
cmp dword [ecx + 0x26dd0], 0
jle 0x487de9
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x26dd0], 0
mov ecx, 0x574b5f8
call fcn.0044a830
jmp case.0x4856de.4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x171c], eax
cmp dword [ebp - 0x171c], 0
je 0x487e0b
cmp dword [ebp - 0x171c], 3
je 0x487e0b
jmp 0x487e24
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x32dd0], eax
jmp 0x487e2f
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
mov edx, dword [ebp + 8]
mov dword [ebp - 0x1720], edx
cmp dword [ebp - 0x1720], 0
je 0x487e51
cmp dword [ebp - 0x1720], 3
je 0x487e51
jmp 0x487e98
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
mov eax, dword [ebp - 0x1530]
fstp qword [eax + 0x32dd8]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
mov ecx, dword [ebp - 0x1530]
fstp qword [ecx + 0x32de0]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
mov edx, dword [ebp - 0x1530]
fstp qword [edx + 0x32de8]
jmp 0x487ea5
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
fstp st(0)
jmp case.0x4856de.4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1724], eax
cmp dword [ebp - 0x1724], 0
je 0x487eca
cmp dword [ebp - 0x1724], 3
je 0x487eca
jmp 0x48800c
mov dword [ebp - 0x15a4], 0
mov dword [ebp - 0x15a4], 0
jmp 0x487eef
mov ecx, dword [ebp - 0x15a4]
add ecx, 1
mov dword [ebp - 0x15a4], ecx
cmp dword [ebp - 0x15a4], 5
jge 0x487f89
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
cvtsi2ss xmm0, eax
cvtss2sd xmm0, xmm0
mov edx, dword [ebp - 0x15a4]
movsd qword [ebp + edx*8 - 0xdd0], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
cvtsi2ss xmm0, eax
cvtss2sd xmm0, xmm0
mov eax, dword [ebp - 0x15a4]
movsd qword [ebp + eax*8 - 0xd80], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
cvtsi2ss xmm0, eax
cvtss2sd xmm0, xmm0
mov ecx, dword [ebp - 0x15a4]
movsd qword [ebp + ecx*8 - 0xd30], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
cvtsi2ss xmm0, eax
cvtss2sd xmm0, xmm0
mov edx, dword [ebp - 0x15a4]
movsd qword [ebp + edx*8 - 0xce0], xmm0
jmp 0x487ee0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0xc8c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0xc88], eax
mov edi, dword [ebp - 0x1530]
add edi, 0x3bb20
mov ecx, 0x54
lea esi, [ebp - 0xdd0]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x1530]
mov byte [eax + 0x3bc6c], 1
lea ecx, [ebp - 0xce0]
push ecx
lea edx, [ebp - 0xd30]
push edx
lea eax, [ebp - 0xd80]
push eax
lea ecx, [ebp - 0xdd0]
push ecx
mov edx, dword [ebp - 0xc88]
push edx
mov eax, dword [ebp - 0xc8c]
push eax
push 0x1f5
mov ecx, 0x574b5f8
call fcn.0044af60
jmp 0x48807e
mov dword [ebp - 0x1678], 0
mov dword [ebp - 0x1678], 0
jmp 0x488031
mov ecx, dword [ebp - 0x1678]
add ecx, 1
mov dword [ebp - 0x1678], ecx
cmp dword [ebp - 0x1678], 5
jge 0x488068
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp 0x488022
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
mov edx, dword [ebp + 8]
mov dword [ebp - 0x1728], edx
cmp dword [ebp - 0x1728], 0
je 0x4880a3
cmp dword [ebp - 0x1728], 3
je 0x4880a3
jmp 0x488241
mov dword [ebp - 0x159c], 0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x160c], eax
mov eax, dword [ebp - 0x160c]
mov dword [ebp - 0x16d8], eax
mov ecx, dword [ebp - 0x160c]
push ecx
mov ecx, 0x574b5f8
call fcn.004222d0
lea edx, [eax*4 + 0x27f]
mov dword [ebp - 0x160c], edx
mov dword [ebp - 0x159c], 0
jmp 0x488103
mov eax, dword [ebp - 0x159c]
add eax, 1
mov dword [ebp - 0x159c], eax
cmp dword [ebp - 0x159c], 5
jge 0x488189
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
cvtsi2sd xmm0, eax
mov ecx, dword [ebp - 0x159c]
movsd qword [ebp + ecx*8 - 0xf20], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
cvtsi2sd xmm0, eax
mov edx, dword [ebp - 0x159c]
movsd qword [ebp + edx*8 - 0xed0], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
cvtsi2sd xmm0, eax
mov eax, dword [ebp - 0x159c]
movsd qword [ebp + eax*8 - 0xe80], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
cvtsi2sd xmm0, eax
mov ecx, dword [ebp - 0x159c]
movsd qword [ebp + ecx*8 - 0xe30], xmm0
jmp 0x4880f4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0xddc], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0xdd8], eax
imul edx, dword [ebp - 0x16d8], 0x150
mov eax, dword [ebp - 0x1530]
lea edi, [eax + edx + 0x3bc70]
mov ecx, 0x54
lea esi, [ebp - 0xf20]
rep movsd dword es:[edi], dword [esi]
imul ecx, dword [ebp - 0x16d8], 0x150
mov edx, dword [ebp - 0x1530]
mov eax, dword [ebp - 0x160c]
mov dword [edx + ecx + 0x3bdb0], eax
imul ecx, dword [ebp - 0x16d8], 0x150
mov edx, dword [ebp - 0x1530]
mov byte [edx + ecx + 0x3bdbc], 1
lea eax, [ebp - 0xe30]
push eax
lea ecx, [ebp - 0xe80]
push ecx
lea edx, [ebp - 0xed0]
push edx
lea eax, [ebp - 0xf20]
push eax
mov ecx, dword [ebp - 0xdd8]
push ecx
mov edx, dword [ebp - 0xddc]
push edx
mov eax, dword [ebp - 0x160c]
push eax
mov ecx, 0x574b5f8
call fcn.0044af60
jmp 0x4882b3
mov dword [ebp - 0x1664], 0
mov dword [ebp - 0x1664], 0
jmp 0x488266
mov ecx, dword [ebp - 0x1664]
add ecx, 1
mov dword [ebp - 0x1664], ecx
cmp dword [ebp - 0x1664], 5
jge 0x48829d
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp 0x488257
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1888], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1884], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1880], eax
mov edx, dword [ebp - 0x1880]
push edx
push 0
push ecx
movss xmm0, dword [ebp - 0x1884]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1888]
movss dword [esp], xmm0
push 0
mov ecx, 0x574b5f8
call fcn.0044a520
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1890], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x188c], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
fstp qword [ebp - 0x1aa8]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
fstp qword [ebp - 0x1aa0]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
fstp qword [ebp - 0x1a98]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
fstp qword [ebp - 0x1a90]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
fstp qword [ebp - 0x1a88]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
fstp qword [ebp - 0x1a80]
cvtsd2ss xmm0, qword [ebp - 0x1a80]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1a88]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1a90]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1a98]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1aa0]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1aa8]
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x188c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1890]
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.0044aca0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x4884a3
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x189c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1894], eax
mov eax, dword [ebp - 0x1894]
cdq
and edx, 0xf
add eax, edx
sar eax, 4
push eax
mov eax, dword [ebp - 0x1898]
push eax
mov ecx, dword [ebp - 0x189c]
push ecx
mov ecx, 0x574b5f8
call fcn.00452550
jmp 0x4884c4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48851a
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x18a4], eax
push 0
mov ecx, dword [ebp - 0x18a0]
push ecx
mov edx, dword [ebp - 0x18a4]
push edx
mov ecx, 0x574b5f8
call fcn.00454250
jmp 0x488530
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x18b0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x18ac], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x18a8], eax
mov eax, dword [ebp - 0x18a8]
push eax
mov ecx, dword [ebp - 0x18ac]
push ecx
mov edx, dword [ebp - 0x18b0]
push edx
mov ecx, 0x574b5f8
call fcn.00454ca0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x18bc], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x18b8], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15dd], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x18b4], eax
push 0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0
push 0
mov eax, dword [ebp - 0x18b4]
push eax
movzx ecx, byte [ebp - 0x15dd]
push ecx
push ecx
movss xmm0, dword [ebp - 0x18b8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x18bc]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x18c0]
push edx
mov ecx, 0x574b5f8
call fcn.00454750
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48871f
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x18c8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x172c], edx
mov eax, dword [ebp - 0x172c]
push eax
mov ecx, 0x574bcd8
call fcn.00493780
mov dword [ebp - 0x16dc], eax
cmp dword [ebp - 0x16dc], 0
jge 0x4886ab
mov ecx, dword [ebp - 0x172c]
push ecx
call fcn.004a194b
add esp, 4
mov dword [ebp - 0x16dc], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1730], eax
cvtsi2sd xmm0, dword [ebp - 0x1730]
mov edx, dword [ebp - 0x1730]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4c94d0]
movsd qword [ebp - 0x1ab0], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1ab0]
movss dword [ebp - 0x18c4], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x18c4]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x16dc]
push eax
mov ecx, dword [ebp - 0x18c8]
push ecx
mov ecx, 0x574b5f8
call fcn.00454960
jmp 0x488740
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48877f
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0xac]
call edx
fstp dword [ebp - 0x18cc]
fld dword [ebp - 0x18cc]
mov eax, dword [ebp - 0x1530]
fstp qword [eax + 0x3b7c8]
jmp 0x48879b
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0xac]
call edx
fstp st(0)
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x488813
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1734], eax
imul eax, dword [ebp - 0x1734], 0x150
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + eax + 0x3bdbc], 0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x18d0], eax
mov ecx, dword [ebp - 0x18d0]
push ecx
mov edx, dword [ebp - 0x1734]
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 0xdc]
call eax
jmp 0x488829
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x488859
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x18d4], eax
mov ecx, dword [ebp - 0x1530]
mov edx, dword [ebp - 0x18d4]
mov dword [ecx + 0x3b7fc], edx
jmp 0x488864
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x4888ab
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x18d8], eax
mov eax, dword [ebp - 0x18d8]
push eax
mov ecx, dword [ebp - 0x18dc]
push ecx
mov ecx, 0x574b5f8
call fcn.00455070
jmp 0x4888c1
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x488909
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x18e0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x18e4], eax
mov edx, dword [ebp - 0x18e0]
mov eax, dword [ebp - 0x1530]
mov ecx, dword [ebp - 0x18e4]
mov dword [eax + edx*4 + 0x3b800], ecx
jmp 0x48891f
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x4889b3
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x18e8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x18ec], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x18f0], eax
mov dword [ebp - 0x1610], 0
mov edx, dword [ebp - 0x18e8]
mov dword [ebp - 0x1610], edx
jmp 0x488988
mov eax, dword [ebp - 0x1610]
add eax, 1
mov dword [ebp - 0x1610], eax
mov ecx, dword [ebp - 0x1610]
cmp ecx, dword [ebp - 0x18ec]
jg 0x4889b1
mov edx, dword [ebp - 0x1610]
mov eax, dword [ebp - 0x1530]
mov ecx, dword [ebp - 0x18f0]
mov dword [eax + edx*4 + 0x3b800], ecx
jmp 0x488979
jmp 0x4889d4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x488a1b
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x18f8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x18f4], eax
mov edx, dword [ebp - 0x18f4]
push edx
mov eax, dword [ebp - 0x18f8]
push eax
mov ecx, 0x574b5f8
call fcn.00452460
jmp 0x488a31
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x488a60
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
push ecx
mov ecx, 0x574b5f8
call fcn.00452650
jmp 0x488a6b
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x488ab8
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1738], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov edx, dword [ebp - 0x1738]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x1650], eax
mov edx, dword [ebp - 0x1738]
push edx
mov ecx, 0x574b5f8
call fcn.00452510
jmp 0x488ace
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x488bb5
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1904], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x173c], edx
mov eax, dword [ebp - 0x173c]
push eax
mov ecx, 0x574bcd8
call fcn.00493780
mov dword [ebp - 0x16e0], eax
cmp dword [ebp - 0x16e0], 0
jge 0x488b41
mov ecx, dword [ebp - 0x173c]
push ecx
call fcn.004a194b
add esp, 4
mov dword [ebp - 0x16e0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1740], eax
cvtsi2sd xmm0, dword [ebp - 0x1740]
mov edx, dword [ebp - 0x1740]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4c94d0]
movsd qword [ebp - 0x1ab8], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1ab8]
movss dword [ebp - 0x1900], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1900]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x16e0]
push eax
mov ecx, dword [ebp - 0x1904]
push ecx
mov ecx, 0x574b5f8
call fcn.00452090
jmp 0x488bd6
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x488c2a
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x190c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x1908], eax
mov ecx, dword [ebp - 0x1908]
push ecx
mov edx, dword [ebp - 0x190c]
push edx
mov ecx, 0x574b5f8
call fcn.00453ca0
jmp 0x488c40
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1914], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1910], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1744], eax
mov byte [ebp - 0x15de], 0
mov ecx, 0x69dd128
call fcn.0048da70
movzx eax, al
test eax, eax
je 0x488c9a
mov dword [ebp - 0x1744], 1
movzx ecx, byte [ebp - 0x15de]
push ecx
mov edx, dword [ebp - 0x1744]
push edx
mov eax, dword [ebp - 0x1910]
push eax
mov ecx, dword [ebp - 0x1914]
push ecx
mov ecx, 0x574b5f8
call fcn.0044d480
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x488f6b
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15df], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x1918], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
mulss xmm0, dword [0x4c8f9c]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0xaa4], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
divss xmm0, dword [0x4c916c]
movss dword [ebp - 0xa9c], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0xa98], xmm0
movss xmm0, dword [ebp - 0xa98]
mulss xmm0, dword [ebp - 0xa9c]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x1ac0], xmm0
movsd xmm0, qword [ebp - 0xaa4]
call fcn.004b4880
movsd xmm1, qword [ebp - 0x1ac0]
mulsd xmm1, xmm0
movsd qword [ebp - 0xa94], xmm1
movss xmm0, dword [ebp - 0xa98]
mulss xmm0, dword [ebp - 0xa9c]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x1ac8], xmm0
movsd xmm0, qword [ebp - 0xaa4]
call fcn.004a60a0
movsd xmm1, qword [ebp - 0x1ac8]
mulsd xmm1, xmm0
movsd qword [ebp - 0xa8c], xmm1
cvtss2sd xmm0, dword [ebp - 0xa98]
mulsd xmm0, qword [0x4c9038]
cvtss2sd xmm1, dword [ebp - 0xa9c]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1ad0], xmm0
movsd xmm0, qword [ebp - 0xaa4]
call fcn.004b4880
movsd xmm1, qword [ebp - 0x1ad0]
mulsd xmm1, xmm0
movsd qword [ebp - 0xa84], xmm1
cvtss2sd xmm0, dword [ebp - 0xa98]
mulsd xmm0, qword [0x4c9038]
cvtss2sd xmm1, dword [ebp - 0xa9c]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1ad8], xmm0
movsd xmm0, qword [ebp - 0xaa4]
call fcn.004a60a0
movsd xmm1, qword [ebp - 0x1ad8]
mulsd xmm1, xmm0
movsd qword [ebp - 0xa7c], xmm1
cvtss2sd xmm0, dword [ebp - 0xa98]
mulsd xmm0, qword [0x4c9040]
cvtss2sd xmm1, dword [ebp - 0xa9c]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1ae0], xmm0
movsd xmm0, qword [ebp - 0xaa4]
call fcn.004b4880
movsd xmm1, qword [ebp - 0x1ae0]
mulsd xmm1, xmm0
movsd qword [ebp - 0xa74], xmm1
cvtss2sd xmm0, dword [ebp - 0xa98]
mulsd xmm0, qword [0x4c9040]
cvtss2sd xmm1, dword [ebp - 0xa9c]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1ae8], xmm0
movsd xmm0, qword [ebp - 0xaa4]
call fcn.004a60a0
movsd xmm1, qword [ebp - 0x1ae8]
mulsd xmm1, xmm0
movsd qword [ebp - 0xa6c], xmm1
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0xa64], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0xa5c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0xa58], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
divss xmm0, dword [0x4c916c]
movss dword [ebp - 0xa54], xmm0
lea ecx, [ebp - 0xaac]
push ecx
push 0
movzx edx, byte [ebp - 0x15df]
push edx
mov eax, dword [ebp - 0x1918]
push eax
mov ecx, 0x574b5f8
call fcn.0044b340
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x488fcc
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15e0], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x191c], edx
mov eax, dword [ebp - 0x191c]
push eax
movzx ecx, byte [ebp - 0x15e0]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 0xe0]
call edx
jmp 0x488fe2
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1920], eax
push 0
mov eax, dword [ebp - 0x1920]
push eax
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 0xdc]
call eax
jmp case.0x4856de.4
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1748], eax
push 0xb
mov ecx, dword [ebp - 0x1748]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1748]
mov eax, dword [edx + 0x20]
call eax
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15e1], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1928], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1924], xmm0
push ecx
movss xmm0, dword [ebp - 0x1924]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1928]
movss dword [esp], xmm0
movzx ecx, byte [ebp - 0x15e1]
push ecx
mov ecx, 0x574b5f8
call fcn.00449ac0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x1567], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1930], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x192c], xmm0
movzx edx, byte [ebp - 0x1567]
cmp edx, 5
jl 0x489107
jmp 0x489135
push ecx
movss xmm0, dword [ebp - 0x192c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1930]
movss dword [esp], xmm0
movzx eax, byte [ebp - 0x1567]
push eax
mov ecx, 0x574b5f8
call fcn.00449b40
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x4891cd
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15aa], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15a9], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15e4], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15e3], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15e2], al
movzx ecx, byte [ebp - 0x15e2]
push ecx
movzx edx, byte [ebp - 0x15e3]
push edx
movzx eax, byte [ebp - 0x15e4]
push eax
movzx ecx, byte [ebp - 0x15a9]
push ecx
movzx edx, byte [ebp - 0x15aa]
push edx
mov ecx, 0x574b5f8
call fcn.00449c10
jmp 0x489204
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1940], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x193c], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1938], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15ab], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1934], eax
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0
push 0
mov eax, dword [ebp - 0x1934]
push eax
movzx ecx, byte [ebp - 0x15ab]
push ecx
push ecx
movss xmm0, dword [ebp - 0x1938]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x193c]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1940]
push edx
mov ecx, 0x574b5f8
call fcn.0044c930
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x194c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1948], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1944], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
fstp qword [ebp - 0x1b18]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
fstp qword [ebp - 0x1b10]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
fstp qword [ebp - 0x1b08]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
fstp qword [ebp - 0x1b00]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
fstp qword [ebp - 0x1af8]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
fstp qword [ebp - 0x1af0]
cvtsd2ss xmm0, qword [ebp - 0x1af0]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1af8]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b00]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b08]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b10]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b18]
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1944]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1948]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x194c]
push eax
mov ecx, 0x574b5f8
call fcn.0044ce20
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x195c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1958], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1954], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15ac], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1950], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d110
fstp qword [ebp - 0x1b20]
mov byte [ebp - 0x1568], 0
movzx ecx, byte [ebp - 0x15ac]
cmp ecx, 1
jne 0x48946f
mov byte [ebp - 0x1568], 1
cvtsd2ss xmm0, qword [ebp - 0x1b20]
push ecx
movss dword [esp], xmm0
movzx edx, byte [ebp - 0x1568]
push edx
push 0
mov eax, dword [ebp - 0x1950]
push eax
push 0
push ecx
movss xmm0, dword [ebp - 0x1954]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1958]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x195c]
push ecx
mov ecx, 0x574b5f8
call fcn.0044c930
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15ae], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1968], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1964], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15ad], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1960], eax
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0
push 1
mov edx, dword [ebp - 0x1960]
push edx
movzx eax, byte [ebp - 0x15ad]
push eax
push ecx
movss xmm0, dword [ebp - 0x1964]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1968]
movss dword [esp], xmm0
movzx ecx, byte [ebp - 0x15ae]
push ecx
mov ecx, 0x574b5f8
call fcn.0044c930
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1750], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x196c], eax
mov ecx, 0x69dd128
call fcn.0048da70
movzx edx, al
test edx, edx
je 0x4895f7
push 0
mov eax, dword [ebp - 0x1750]
mov dword [ebp - 0x174c], eax
cvtsi2sd xmm0, dword [ebp - 0x174c]
mov ecx, dword [ebp - 0x174c]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4c94d0]
movsd qword [ebp - 0x1b28], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b28]
divss xmm0, dword [0x4c943c]
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.004144c0
jmp 0x48964c
mov edx, dword [ebp - 0x196c]
push edx
mov eax, dword [ebp - 0x1750]
mov dword [ebp - 0x1754], eax
cvtsi2sd xmm0, dword [ebp - 0x1754]
mov ecx, dword [ebp - 0x1754]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4c94d0]
movsd qword [ebp - 0x1b30], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b30]
divss xmm0, dword [0x4c943c]
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.004144c0
push 0xb
mov edx, dword [ebp - 0x153c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x153c]
mov edx, dword [eax + 0x20]
call edx
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1768], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1764], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x175c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1970], eax
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1b88], eax
mov eax, dword [ebp - 0x1530]
mov byte [eax + 0x30f58], 0
mov ecx, dword [ebp - 0x1530]
xorps xmm0, xmm0
movsd qword [ecx + 0x30f60], xmm0
mov edx, dword [ebp - 0x1530]
xorps xmm0, xmm0
movsd qword [edx + 0x30f68], xmm0
mov eax, dword [ebp - 0x1530]
mov dword [eax + 0x30f70], 0
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x30f74], 0
mov ecx, 0x69dd128
call fcn.0048da70
movzx edx, al
test edx, edx
je 0x48978a
push 0
mov eax, dword [ebp - 0x175c]
mov dword [ebp - 0x1758], eax
cvtsi2sd xmm0, dword [ebp - 0x1758]
mov ecx, dword [ebp - 0x1758]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4c94d0]
movsd qword [ebp - 0x1b38], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b38]
divss xmm0, dword [0x4c943c]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x1764]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x1768]
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.00449f90
jmp 0x4897fb
mov edx, dword [ebp - 0x1970]
push edx
mov eax, dword [ebp - 0x175c]
mov dword [ebp - 0x1760], eax
cvtsi2sd xmm0, dword [ebp - 0x1760]
mov ecx, dword [ebp - 0x1760]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4c94d0]
movsd qword [ebp - 0x1b40], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b40]
divss xmm0, dword [0x4c943c]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x1764]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x1768]
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.00449f90
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x16ec], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x16e8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x16e4], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1770], eax
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1b8c], eax
mov edx, dword [ebp - 0x1530]
mov byte [edx + 0x30f58], 1
cvtsi2ss xmm0, dword [ebp - 0x16ec]
cvtss2sd xmm0, xmm0
mov eax, dword [ebp - 0x1530]
movsd qword [eax + 0x30f60], xmm0
cvtsi2ss xmm0, dword [ebp - 0x16e8]
cvtss2sd xmm0, xmm0
mov ecx, dword [ebp - 0x1530]
movsd qword [ecx + 0x30f68], xmm0
mov edx, dword [ebp - 0x1530]
mov eax, dword [ebp - 0x16e4]
mov dword [edx + 0x30f70], eax
mov ecx, dword [ebp - 0x1530]
mov edx, dword [ebp - 0x1770]
mov dword [ecx + 0x30f74], edx
mov ecx, 0x69dd128
call fcn.0048da70
movzx eax, al
test eax, eax
je 0x48993a
push 0
mov ecx, dword [ebp - 0x16e4]
mov dword [ebp - 0x176c], ecx
cvtsi2sd xmm0, dword [ebp - 0x176c]
mov edx, dword [ebp - 0x176c]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4c94d0]
movsd qword [ebp - 0x1b48], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b48]
divss xmm0, dword [0x4c943c]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x16e8]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x16ec]
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.00449f90
jmp 0x4899ab
mov eax, dword [ebp - 0x1770]
push eax
mov ecx, dword [ebp - 0x16e4]
mov dword [ebp - 0x1774], ecx
cvtsi2sd xmm0, dword [ebp - 0x1774]
mov edx, dword [ebp - 0x1774]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4c94d0]
movsd qword [ebp - 0x1b50], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b50]
divss xmm0, dword [0x4c943c]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x16e8]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x16ec]
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.00449f90
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1684], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1680], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x167c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x177c], eax
mov eax, dword [ebp - 0x1530]
mov byte [eax + 0x30f58], 1
cvtsi2sd xmm0, dword [ebp - 0x1684]
mov ecx, dword [ebp - 0x1530]
movsd qword [ecx + 0x30f60], xmm0
cvtsi2sd xmm0, dword [ebp - 0x1680]
mov edx, dword [ebp - 0x1530]
movsd qword [edx + 0x30f68], xmm0
mov eax, dword [ebp - 0x1530]
mov ecx, dword [ebp - 0x167c]
mov dword [eax + 0x30f70], ecx
mov edx, dword [ebp - 0x1530]
mov eax, dword [ebp - 0x177c]
mov dword [edx + 0x30f74], eax
mov ecx, 0x69dd128
call fcn.0048da70
movzx ecx, al
test ecx, ecx
je 0x489ad8
push 0
mov edx, dword [ebp - 0x167c]
mov dword [ebp - 0x1778], edx
cvtsi2sd xmm0, dword [ebp - 0x1778]
mov eax, dword [ebp - 0x1778]
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4c94d0]
movsd qword [ebp - 0x1b58], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b58]
divss xmm0, dword [0x4c943c]
push ecx
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1680]
neg ecx
cvtsi2ss xmm0, ecx
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1684]
neg edx
cvtsi2ss xmm0, edx
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.00449f90
jmp 0x489b51
mov eax, dword [ebp - 0x177c]
push eax
mov ecx, dword [ebp - 0x167c]
mov dword [ebp - 0x1780], ecx
cvtsi2sd xmm0, dword [ebp - 0x1780]
mov edx, dword [ebp - 0x1780]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4c94d0]
movsd qword [ebp - 0x1b60], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b60]
divss xmm0, dword [0x4c943c]
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x1680]
neg eax
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1684]
neg ecx
cvtsi2ss xmm0, ecx
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.00449f90
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1974], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1978], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1614], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1790], eax
mov edx, dword [ebp - 0x1614]
mov dword [ebp - 0x1784], edx
cvtsi2sd xmm0, dword [ebp - 0x1784]
mov eax, dword [ebp - 0x1784]
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4c94d0]
subsd xmm0, qword [0x4c9080]
divsd xmm0, qword [0x4c9080]
cvtsi2sd xmm1, dword [ebp - 0x1974]
mulsd xmm0, xmm1
cvttsd2si ecx, xmm0
mov dword [ebp - 0x168c], ecx
mov edx, dword [ebp - 0x1614]
mov dword [ebp - 0x1788], edx
cvtsi2sd xmm0, dword [ebp - 0x1788]
mov eax, dword [ebp - 0x1788]
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4c94d0]
subsd xmm0, qword [0x4c9080]
divsd xmm0, qword [0x4c9080]
cvtsi2sd xmm1, dword [ebp - 0x1978]
mulsd xmm0, xmm1
cvttsd2si ecx, xmm0
mov dword [ebp - 0x1688], ecx
mov edx, dword [ebp - 0x1530]
mov byte [edx + 0x30f58], 1
cvtsi2sd xmm0, dword [ebp - 0x168c]
mov eax, dword [ebp - 0x1530]
movsd qword [eax + 0x30f60], xmm0
cvtsi2sd xmm0, dword [ebp - 0x1688]
mov ecx, dword [ebp - 0x1530]
movsd qword [ecx + 0x30f68], xmm0
mov edx, dword [ebp - 0x1530]
mov eax, dword [ebp - 0x1614]
mov dword [edx + 0x30f70], eax
mov ecx, dword [ebp - 0x1530]
mov edx, dword [ebp - 0x1790]
mov dword [ecx + 0x30f74], edx
mov ecx, 0x69dd128
call fcn.0048da70
movzx eax, al
test eax, eax
je 0x489d16
push 0
mov ecx, dword [ebp - 0x1614]
mov dword [ebp - 0x178c], ecx
cvtsi2sd xmm0, dword [ebp - 0x178c]
mov edx, dword [ebp - 0x178c]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4c94d0]
movsd qword [ebp - 0x1b68], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b68]
divss xmm0, dword [0x4c943c]
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x1688]
neg eax
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x168c]
neg ecx
cvtsi2ss xmm0, ecx
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.00449f90
jmp 0x489d8f
mov edx, dword [ebp - 0x1790]
push edx
mov eax, dword [ebp - 0x1614]
mov dword [ebp - 0x1794], eax
cvtsi2sd xmm0, dword [ebp - 0x1794]
mov ecx, dword [ebp - 0x1794]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4c94d0]
movsd qword [ebp - 0x1b70], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b70]
divss xmm0, dword [0x4c943c]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1688]
neg edx
cvtsi2ss xmm0, edx
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x168c]
neg eax
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.00449f90
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x17a8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x17a4], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x17a0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1a28], eax
mov ecx, dword [ebp - 0x197c]
mov dword [ebp - 0x1798], ecx
cvtsi2sd xmm0, dword [ebp - 0x1798]
mov edx, dword [ebp - 0x1798]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4c94d0]
movsd qword [ebp - 0x1b78], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b78]
divss xmm0, dword [0x4c943c]
cvtss2sd xmm0, xmm0
mov eax, dword [ebp - 0x1530]
mulsd xmm0, qword [eax + 0x3b7c8]
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x179c], xmm0
mov ecx, 0x69dd128
call fcn.0048da70
movzx ecx, al
test ecx, ecx
je 0x489e95
push 0
push ecx
movss xmm0, dword [ebp - 0x179c]
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x17a0]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x17a4]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x17a8]
push edx
mov ecx, 0x574b5f8
call fcn.0044d230
jmp 0x489ed7
mov eax, dword [ebp - 0x1a28]
push eax
push ecx
movss xmm0, dword [ebp - 0x179c]
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x17a0]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x17a4]
push ecx
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x17a8]
push ecx
mov ecx, 0x574b5f8
call fcn.0044d230
jmp case.0x4856de.4
lea ecx, [ebp - 0x1224]
call fcn.004122a0
push 0x304
push 0
lea edx, [ebp - 0x1224]
push edx
call fcn.0049ed40
add esp, 0xc
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
movzx eax, al
mov dword [ebp - 0x1224], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
movzx ecx, ax
mov dword [ebp - 0x11e8], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
movzx edx, ax
mov dword [ebp - 0x11e4], edx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1208], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1204], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x114c], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1148], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x11b0], eax
mov dword [ebp - 0x121c], 1
movss xmm0, dword [0x4c8fcc]
movss dword [ebp - 0x1200], xmm0
push ecx
movss xmm0, dword [0x4c9244]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4c9244]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4c9244]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4c9244]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1bdc]
call fcn.00411280
mov ecx, dword [eax]
mov dword [ebp - 0x11f8], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x11f4], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x11f0], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x11ec], edx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
movzx eax, al
cmp eax, 1
jne 0x48a0cb
mov ecx, dword [ebp - 0x121c]
or ecx, 0x10000002
mov dword [ebp - 0x121c], ecx
xorps xmm0, xmm0
movss dword [ebp - 0x1200], xmm0
movss xmm0, dword [0x4c8fcc]
movss dword [ebp - 0x1144], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4c9244]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4c9244]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4c9244]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1bec]
call fcn.00411280
mov edx, dword [eax]
mov dword [ebp - 0x11f8], edx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x11f4], ecx
mov edx, dword [eax + 8]
mov dword [ebp - 0x11f0], edx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x11ec], eax
cmp dword [ebp - 0x11b0], 0
jne 0x48a0de
mov dword [ebp - 0x11b0], 0x10
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x1984], edx
mov eax, dword [ebp - 0x1984]
push eax
lea ecx, [ebp - 0x1224]
push ecx
mov ecx, 0x574b5f8
call fcn.0044d5f0
jmp case.0x4856de.4
lea ecx, [ebp - 0x1528]
call fcn.004122a0
push 0x304
push 0
lea edx, [ebp - 0x1528]
push edx
call fcn.0049ed40
add esp, 0xc
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
movzx eax, al
mov dword [ebp - 0x1528], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1450], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
movss dword [ebp - 0x144c], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x14b4], eax
mov dword [ebp - 0x1520], 1
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
movzx ecx, al
cmp ecx, 1
jne 0x48a1c7
mov edx, dword [ebp - 0x1520]
or edx, 0x10000004
mov dword [ebp - 0x1520], edx
xorps xmm0, xmm0
movss dword [ebp - 0x1448], xmm0
cmp dword [ebp - 0x14b4], 0
jne 0x48a1da
mov dword [ebp - 0x14b4], 0x10
lea eax, [ebp - 0x1528]
push eax
mov ecx, 0x574b5f8
call fcn.0044d810
jmp case.0x4856de.4
mov dword [ebp - 0x17c0], 0
mov byte [ebp - 0x156a], 0
movzx ecx, byte [ebp - 0x1535]
cmp ecx, 0xba
jne 0x48a217
mov byte [ebp - 0x156a], 1
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x17c4], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x1536], al
movzx edx, byte [ebp - 0x1536]
cmp edx, 0x43
je 0x48a25b
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
movzx eax, ax
mov dword [ebp - 0x17ac], eax
jmp 0x48a26c
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x17ac], eax
mov ecx, dword [ebp - 0x17ac]
mov dword [ebp - 0x17bc], ecx
movzx edx, byte [ebp - 0x1536]
cmp edx, 0xc4
je 0x48a814
mov al, byte [ebp - 0x1536]
mov byte [ebp - 0xc80], al
mov ecx, dword [ebp - 0x17bc]
mov dword [ebp - 0xc7c], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
movzx edx, al
mov dword [ebp - 0x1668], edx
mov eax, dword [ebp - 0x1668]
sub eax, 0xbc
mov dword [ebp - 0x1668], eax
cmp dword [ebp - 0x1668], 0xe
ja case.0x48a2db.5
mov ecx, dword [ebp - 0x1668]
jmp dword [ecx*4 + 0x48cfa0]
mov dword [ebp - 0xc78], 0x59
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov edx, 4
imul ecx, edx, 0
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
cvttss2si edx, xmm0
mov eax, 4
shl eax, 0
mov dword [ebp + eax - 0xc74], edx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
cvttss2si ecx, xmm0
mov edx, 4
shl edx, 1
mov dword [ebp + edx - 0xc74], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
movzx eax, al
mov ecx, 4
imul edx, ecx, 3
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, 4
shl ecx, 2
mov dword [ebp + ecx - 0xc74], eax
jmp case.0x48a2db.5
mov dword [ebp - 0xc78], 0x99
jmp case.0x48a2db.5
mov dword [ebp - 0xc78], 0x81
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov edx, 4
imul ecx, edx, 0
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x17b0], eax
mov ecx, dword [ebp - 0x17b0]
push ecx
mov ecx, 0x574bcd8
call fcn.00493780
mov dword [ebp - 0x1690], eax
cmp dword [ebp - 0x1690], 0
jge 0x48a40b
mov edx, dword [ebp - 0x17b0]
push edx
call fcn.004a194b
add esp, 4
mov dword [ebp - 0x1690], eax
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x1690]
mov dword [ebp + eax - 0xc74], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov edx, 4
shl edx, 1
mov dword [ebp + edx - 0xc74], eax
jmp case.0x48a2db.5
mov dword [ebp - 0xc78], 0x47
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, 4
imul edx, ecx, 0
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, 4
shl ecx, 0
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov edx, 4
shl edx, 1
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, 4
imul edx, ecx, 3
mov dword [ebp + edx - 0xc74], eax
jmp case.0x48a2db.5
mov dword [ebp - 0xc78], 0x7c
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, 4
imul edx, ecx, 0
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, 4
shl ecx, 0
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov edx, 4
shl edx, 1
mov dword [ebp + edx - 0xc74], eax
jmp case.0x48a2db.5
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15af], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x16b8], ax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x1569], al
movzx eax, byte [ebp - 0x1569]
cmp eax, 0x43
je 0x48a566
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
movzx ecx, ax
mov dword [ebp - 0x17b4], ecx
jmp 0x48a577
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x17b4], eax
mov edx, dword [ebp - 0x17b4]
mov dword [ebp - 0x1988], edx
mov dword [ebp - 0xc78], 0x1e
movzx eax, byte [ebp - 0x15af]
mov ecx, 4
imul edx, ecx, 0
mov dword [ebp + edx - 0xc74], eax
movzx eax, word [ebp - 0x16b8]
mov ecx, 4
shl ecx, 0
mov dword [ebp + ecx - 0xc74], eax
movzx edx, byte [ebp - 0x1569]
mov eax, 4
shl eax, 1
mov dword [ebp + eax - 0xc74], edx
mov ecx, 4
imul edx, ecx, 3
mov eax, dword [ebp - 0x1988]
mov dword [ebp + edx - 0xc74], eax
jmp case.0x48a2db.5
mov dword [ebp - 0xc78], 0x90
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
movzx ecx, ax
mov edx, 4
imul eax, edx, 0
mov dword [ebp + eax - 0xc74], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, 4
shl ecx, 0
mov dword [ebp + ecx - 0xc74], eax
jmp case.0x48a2db.5
mov dword [ebp - 0xc78], 0x9b
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x198c], eax
mov ecx, dword [ebp - 0x198c]
push ecx
lea edx, [ebp - 0xbfc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, 4
imul edx, ecx, 0
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, 4
shl ecx, 0
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov edx, 4
shl edx, 1
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, 4
imul edx, ecx, 3
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, 4
shl ecx, 2
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov edx, 4
imul ecx, edx, 5
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov edx, 4
imul ecx, edx, 6
mov dword [ebp + ecx - 0xc74], eax
jmp case.0x48a2db.5
mov dword [ebp - 0xc78], 0x9e
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov edx, 4
imul ecx, edx, 0
mov dword [ebp + ecx - 0xc74], eax
jmp case.0x48a2db.5
mov dword [ebp - 0xc78], 0x5f
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov edx, 4
imul ecx, edx, 0
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov edx, 4
shl edx, 0
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, 4
shl ecx, 1
mov dword [ebp + ecx - 0xc74], eax
movzx edx, byte [ebp - 0x156a]
push edx
mov eax, dword [ebp - 0x17c4]
push eax
lea ecx, [ebp - 0xc80]
push ecx
mov ecx, dword [ebp - 0x152c]
call fcn.00482e10
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x1536], al
movzx edx, byte [ebp - 0x1536]
cmp edx, 0x43
je 0x48a7f2
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
movzx eax, ax
mov dword [ebp - 0x17b8], eax
jmp 0x48a803
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x17b8], eax
mov ecx, dword [ebp - 0x17b8]
mov dword [ebp - 0x17bc], ecx
jmp 0x48a278
mov edx, dword [ebp - 0x17c0]
push edx
mov eax, dword [ebp - 0x17c4]
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.00482ff0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.004830c0
jmp case.0x4856de.4
push 0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.004832b0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.004833a0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x26cb0], eax
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1694], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
mov dword [ebp - 0x1698], eax
mov edx, dword [ebp - 0x1694]
push edx
mov ecx, 0x574b760
call fcn.0045e830
mov eax, dword [ebp - 0x1698]
push eax
mov ecx, 0x574b760
call fcn.0045e890
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x32dc0], 1
mov edx, dword [ebp - 0x1530]
mov eax, dword [ebp - 0x1694]
mov dword [edx + 0x32dc4], eax
mov ecx, dword [ebp - 0x1530]
mov edx, dword [ebp - 0x1698]
mov dword [ecx + 0x32dc8], edx
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, 0x4793ad0
call fcn.00476860
movzx eax, al
test eax, eax
je 0x48a983
push 1
mov ecx, 0x574b760
call fcn.0045e9c0
mov ecx, dword [ebp - 0x1694]
push ecx
mov ecx, 0x4793ad0
call fcn.00476e60
movzx edx, al
test edx, edx
jne 0x48a95a
jmp case.0x4856de.4
mov eax, dword [ebp - 0x1698]
push eax
mov ecx, 0x4793ad0
call fcn.00476ee0
movzx ecx, al
test ecx, ecx
jne 0x48a977
jmp case.0x4856de.4
mov ecx, 0x4793ad0
call fcn.00476e10
jmp 0x48a98f
push 0
mov ecx, 0x574b760
call fcn.0045e9c0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x156b], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x1580], ax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x156c], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x1578], ax
lea edx, [ebp - 0x1580]
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x48aa6d
movzx edx, byte [ebp - 0x156b]
cmp edx, 0x41
jne 0x48aa24
movzx eax, word [ebp - 0x1580]
mov ecx, dword [ebp - 0x1534]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x17c8], edx
jmp 0x48aa3e
movzx eax, word [ebp - 0x1580]
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax*4 + 0x2fdf0]
mov dword [ebp - 0x17c8], edx
mov eax, dword [ebp - 0x17c8]
mov ecx, dword [ebp - 0x1530]
mov edx, dword [ecx + 0x32dc4]
mov dword [eax], edx
movzx eax, word [ebp - 0x1580]
push eax
movzx ecx, byte [ebp - 0x156b]
push ecx
mov ecx, dword [ebp - 0x152c]
call fcn.00476ff0
lea edx, [ebp - 0x1578]
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x48ab00
movzx edx, byte [ebp - 0x156c]
cmp edx, 0x41
jne 0x48aab7
movzx eax, word [ebp - 0x1578]
mov ecx, dword [ebp - 0x1534]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x17cc], edx
jmp 0x48aad1
movzx eax, word [ebp - 0x1578]
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax*4 + 0x2fdf0]
mov dword [ebp - 0x17cc], edx
mov eax, dword [ebp - 0x17cc]
mov ecx, dword [ebp - 0x1530]
mov edx, dword [ecx + 0x32dc8]
mov dword [eax], edx
movzx eax, word [ebp - 0x1578]
push eax
movzx ecx, byte [ebp - 0x156c]
push ecx
mov ecx, dword [ebp - 0x152c]
call fcn.00476ff0
jmp case.0x4856de.4
push 0
mov ecx, 0x574b760
call fcn.0045e830
push 0
mov ecx, 0x574b760
call fcn.0045e890
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x32dc0], 0
mov eax, dword [ebp - 0x1530]
mov dword [eax + 0x32dc4], 0
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x32dc8], 0
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, 0x4793ad0
call fcn.00476860
movzx edx, al
test edx, edx
je 0x48ab7a
mov ecx, 0x4793ad0
call fcn.00476de0
push 1
mov ecx, 0x574b760
call fcn.0045e9c0
jmp 0x48ab86
push 0
mov ecx, 0x574b760
call fcn.0045e9c0
jmp case.0x4856de.4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1990], eax
cmp dword [ebp - 0x1990], 0
je 0x48ab9f
jmp 0x48abaa
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x1994], ecx
cmp dword [ebp - 0x1994], 0
je 0x48abc3
jmp 0x48abce
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x15f8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x15f0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1998], eax
push 0
mov edx, dword [ebp - 0x15f8]
push edx
push 0x1f7
mov ecx, 0x4927138
call fcn.00445d10
push 0
mov eax, dword [ebp - 0x15f0]
push eax
push 0x1f8
mov ecx, 0x4927138
call fcn.00445d10
push 0
mov ecx, dword [ebp - 0x1998]
push ecx
push 0x1f9
mov ecx, 0x4927138
call fcn.00445d10
push 0
mov edx, dword [ebp - 0x15f8]
push edx
push 0x280
mov ecx, 0x4927138
call fcn.00445d10
push 0
mov eax, dword [ebp - 0x15f0]
push eax
push 0x281
mov ecx, 0x4927138
call fcn.00445d10
push 0
mov ecx, dword [ebp - 0x15f8]
push ecx
push 0x284
mov ecx, 0x4927138
call fcn.00445d10
push 0
mov edx, dword [ebp - 0x15f0]
push edx
push 0x285
mov ecx, 0x4927138
call fcn.00445d10
push 0
mov eax, dword [ebp - 0x15f8]
push eax
push 0x288
mov ecx, 0x4927138
call fcn.00445d10
push 0
mov ecx, dword [ebp - 0x15f0]
push ecx
push 0x289
mov ecx, 0x4927138
call fcn.00445d10
push 0
mov edx, dword [ebp - 0x15f8]
push edx
push 0x28c
mov ecx, 0x4927138
call fcn.00445d10
push 0
mov eax, dword [ebp - 0x15f0]
push eax
push 0x28d
mov ecx, 0x4927138
call fcn.00445d10
push 0
mov ecx, dword [ebp - 0x15f8]
push ecx
push 0x290
mov ecx, 0x4927138
call fcn.00445d10
push 0
mov edx, dword [ebp - 0x15f0]
push edx
push 0x291
mov ecx, 0x4927138
call fcn.00445d10
jmp case.0x4856de.4
xor eax, eax
mov ecx, dword [ebp - 0x1530]
add ecx, 0x30f34
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov dword [ecx + 0x18], eax
mov dword [ecx + 0x1c], eax
mov dword [ecx + 0x20], eax
mov dword [ebp - 0xb30], 0x47
mov dword [ebp - 0xb2c], 1
mov dword [ebp - 0xb14], 1
movss xmm0, dword [0x4c8fcc]
movss dword [ebp - 0xb1c], xmm0
movss xmm0, dword [0x4c8fcc]
movss dword [ebp - 0xb18], xmm0
mov dword [ebp - 0xb10], 0
lea edx, [ebp - 0xb30]
push edx
mov ecx, 0x574b5f8
call fcn.0044da20
jmp case.0x4856de.4
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x17d0], eax
push 0x19
mov eax, dword [ebp - 0x17d0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x17d0]
mov eax, dword [edx + 0x20]
call eax
jmp case.0x4856de.4
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x15a8], eax
mov ecx, dword [ebp - 0x15a8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x15a8]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x169c], eax
cmp dword [ebp - 0x169c], 0x19
je 0x48ae3d
cmp dword [ebp - 0x169c], 0x1a
je 0x48ae54
cmp dword [ebp - 0x169c], 0x1b
je 0x48ae6b
jmp 0x48ae80
push 0
mov ecx, dword [ebp - 0x15a8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x15a8]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48ae80
push 0x11
mov ecx, dword [ebp - 0x15a8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x15a8]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48ae80
push 0x13
mov ecx, dword [ebp - 0x15a8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x15a8]
mov eax, dword [edx + 0x20]
call eax
jmp case.0x4856de.4
mov dword [ebp - 0x17d4], 1
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x199c], ecx
cmp dword [ebp - 0x199c], 0
je 0x48aea6
jmp 0x48b1a8
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
movzx edx, al
mov dword [ebp - 0x19a0], edx
mov eax, dword [ebp - 0x19a0]
mov dword [ebp - 0xa4c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0xa48], eax
mov ecx, dword [ebp - 0x1534]
movzx edx, byte [ecx + 1]
cmp edx, 2
jne 0x48aef2
mov dword [ebp - 0xa48], 0
jmp 0x48af0d
mov ecx, 0x69dd128
call fcn.0048da70
movzx eax, al
test eax, eax
je 0x48af0d
mov dword [ebp - 0xa48], 0xa
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x26de8], 0
mov edx, dword [ebp - 0x1530]
mov byte [edx + 0x26de9], 0
mov eax, dword [ebp - 0x1530]
mov byte [eax + 0x26dea], 0
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x26deb], 0
mov edx, dword [ebp - 0xa4c]
mov dword [ebp - 0x16f0], edx
cmp dword [ebp - 0x16f0], 0x28
je 0x48af75
cmp dword [ebp - 0x16f0], 0x46
je 0x48b017
cmp dword [ebp - 0x16f0], 0x47
je 0x48b03b
jmp 0x48b125
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0xa44], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0xa43], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0xa42], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0xa41], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0xa40], al
mov eax, dword [ebp - 0x1530]
mov cl, byte [ebp - 0xa44]
mov byte [eax + 0x26de8], cl
mov edx, dword [ebp - 0x1530]
mov al, byte [ebp - 0xa43]
mov byte [edx + 0x26de9], al
mov ecx, dword [ebp - 0x1530]
mov dl, byte [ebp - 0xa42]
mov byte [ecx + 0x26dea], dl
mov eax, dword [ebp - 0x1530]
mov cl, byte [ebp - 0xa40]
mov byte [eax + 0x26deb], cl
jmp 0x48b165
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
cvtsi2ss xmm0, eax
divss xmm0, dword [0x4c943c]
movss dword [ebp - 0xa3c], xmm0
jmp 0x48b165
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0xa30], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
cvtsi2ss xmm0, eax
movss dword [ebp - 0xa38], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
cvtsi2ss xmm0, eax
movss dword [ebp - 0xa34], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0xa2c], eax
cmp dword [ebp - 0xa30], 0
jne 0x48b09e
mov dword [ebp - 0xa30], 1
cmp dword [ebp - 0xa2c], 0
je 0x48b0e3
cmp dword [ebp - 0xa48], 1
jne 0x48b123
cmp dword [ebp - 0xa30], 1
jne 0x48b123
movss xmm0, dword [ebp - 0xa38]
ucomiss xmm0, dword [0x4c8fcc]
lahf
test ah, 0x44
jp 0x48b123
movss xmm0, dword [ebp - 0xa34]
ucomiss xmm0, dword [0x4c8fcc]
lahf
test ah, 0x44
jp 0x48b123
xor edx, edx
mov eax, dword [ebp - 0x1530]
add eax, 0x30f34
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], edx
mov dword [eax + 0x18], edx
mov dword [eax + 0x1c], edx
mov dword [eax + 0x20], edx
mov edi, dword [ebp - 0x1530]
add edi, 0x30f34
mov ecx, 9
lea esi, [ebp - 0xa4c]
rep movsd dword es:[edi], dword [esi]
jmp 0x48b165
mov ecx, dword [ebp - 0x1534]
movzx edx, byte [ecx + 1]
cmp edx, 2
jne 0x48b140
mov dword [ebp - 0xa4c], 0
jmp 0x48b165
mov ecx, 0x69dd128
call fcn.0048da70
movzx eax, al
test eax, eax
je 0x48b165
mov dword [ebp - 0xa4c], 0
mov dword [ebp - 0xa48], 0xa
lea ecx, [ebp - 0xa4c]
push ecx
mov ecx, 0x574b5f8
call fcn.0044da20
cmp dword [ebp - 0x17d4], 0
jne 0x48b1a6
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x17d8], eax
push 0xb
mov edx, dword [ebp - 0x17d8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x17d8]
mov edx, dword [eax + 0x20]
call edx
jmp 0x48b1b3
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
jmp case.0x4856de.4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x19a4], eax
cmp dword [ebp - 0x19a4], 0
je 0x48b1cc
jmp 0x48b1e5
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x1678], eax
jmp 0x48b1f0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x1678], 0
jmp case.0x4856de.4
mov eax, dword [ebp - 0x1530]
mov dword [eax + 0x1678], 0
mov ecx, 0x4793b64
call fcn.0046c100
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b292
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15b2], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15b1], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15b0], al
movzx ecx, byte [ebp - 0x15b0]
push ecx
movzx edx, byte [ebp - 0x15b1]
push edx
movzx eax, byte [ebp - 0x15b2]
push eax
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 0xe8]
call eax
jmp 0x48b2b3
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b321
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15b5], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15b4], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15b3], al
movzx ecx, byte [ebp - 0x15b3]
push ecx
movzx edx, byte [ebp - 0x15b4]
push edx
movzx eax, byte [ebp - 0x15b5]
push eax
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 0xec]
call eax
jmp 0x48b342
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b3b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15b8], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15b7], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x15b6], al
movzx ecx, byte [ebp - 0x15b6]
push ecx
movzx edx, byte [ebp - 0x15b7]
push edx
movzx eax, byte [ebp - 0x15b8]
push eax
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 0xf0]
call eax
jmp 0x48b3d1
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b42c
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
movzx ecx, al
mov dword [ebp - 0x17dc], ecx
push 1
push 1
mov edx, dword [ebp - 0x17dc]
push edx
mov ecx, 0x489f1d0
call fcn.00463ff0
push 0xa
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x17dc]
push ecx
call fcn.00484640
add esp, 0xc
lea edx, [ebp - 0x1c]
push edx
push 0
mov ecx, 0x574b760
call fcn.0045e550
jmp 0x48b437
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b45f
push 1
mov ecx, 0x489f1d0
call fcn.00464950
push 0x4c806c
push 0
mov ecx, 0x574b760
call fcn.0045e550
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b4c3
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
movzx eax, ax
cdq
mov ecx, 0x3e8
idiv ecx
mov word [ebp - 0x15c8], ax
movzx edx, word [ebp - 0x15c8]
test edx, edx
jne 0x48b49e
mov eax, 1
mov word [ebp - 0x15c8], ax
push 1
movzx ecx, word [ebp - 0x15c8]
push ecx
mov ecx, 0x489f1d0
call fcn.004648b0
push 0x4c8070
push 0
mov ecx, 0x574b760
call fcn.0045e550
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b4d9
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b515
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x19a8], eax
mov edx, dword [ebp - 0x19a8]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
push ecx
mov ecx, 0x489f1d0
call fcn.004655e0
jmp 0x48b520
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b56a
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x16b0], ax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
push eax
movzx ecx, word [ebp - 0x16b0]
push ecx
mov ecx, 0x489f1d0
call fcn.00465360
jmp 0x48b580
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b5b1
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x16c0], ax
movzx edx, word [ebp - 0x16c0]
push edx
mov ecx, 0x489f1d0
call fcn.004658b0
jmp 0x48b5bc
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b5d1
mov ecx, 0x489f1d0
call fcn.00465860
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b6a9
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x1558], ax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x19ac], eax
mov eax, dword [ebp - 0x19ac]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
push edx
movzx eax, word [ebp - 0x1558]
sub eax, 1
imul ecx, eax, 0x104
mov edx, dword [ebp - 0x1530]
lea eax, [edx + ecx + 0x2de4c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
movzx ecx, word [ebp - 0x1558]
mov dword [ebp - 0x19b0], ecx
mov edx, dword [ebp - 0x19b0]
push edx
movzx eax, word [ebp - 0x1558]
sub eax, 1
imul ecx, eax, 0x104
mov edx, dword [ebp - 0x1530]
lea eax, [edx + ecx + 0x2de4c]
push eax
mov ecx, 0x489f1d0
call fcn.00465960
movzx ecx, word [ebp - 0x1558]
sub ecx, 1
imul edx, ecx, 0x104
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx + 0x2de4c]
push ecx
movzx edx, word [ebp - 0x1558]
push edx
mov ecx, 0x574b760
call fcn.0045e550
jmp 0x48b6bf
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b7dd
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x1548], ax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x16a4], eax
mov eax, dword [ebp - 0x16a4]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
push edx
movzx eax, word [ebp - 0x1548]
sub eax, 1
imul ecx, eax, 0x104
mov edx, dword [ebp - 0x1530]
lea eax, [edx + ecx + 0x2de4c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x16a4], eax
mov ecx, dword [ebp - 0x16a4]
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + ecx*4 + 0x79204]
push eax
movzx ecx, word [ebp - 0x1548]
sub ecx, 1
imul edx, ecx, 0xa
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx + 0x2fcc4]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
movzx edx, word [ebp - 0x1548]
mov dword [ebp - 0x19b4], edx
mov eax, dword [ebp - 0x19b4]
push eax
movzx ecx, word [ebp - 0x1548]
sub ecx, 1
imul edx, ecx, 0x104
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx + 0x2de4c]
push ecx
mov ecx, 0x489f1d0
call fcn.00465960
movzx edx, word [ebp - 0x1548]
sub edx, 1
imul eax, edx, 0x104
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax + 0x2de4c]
push edx
movzx eax, word [ebp - 0x1548]
push eax
mov ecx, 0x574b760
call fcn.0045e550
jmp 0x48b7fe
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b87b
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
mov word [ebp - 0x15cc], ax
movzx ecx, word [ebp - 0x15cc]
sub ecx, 1
imul edx, ecx, 0x104
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx + 0x2de4c]
mov edx, 1
imul eax, edx, 0
mov byte [ecx + eax], 0
movzx ecx, word [ebp - 0x15cc]
mov dword [ebp - 0x19b8], ecx
mov edx, dword [ebp - 0x19b8]
push edx
mov ecx, 0x489f1d0
call fcn.00465ba0
push 0x4c8074
movzx eax, word [ebp - 0x15cc]
push eax
mov ecx, 0x574b760
call fcn.0045e550
jmp 0x48b886
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b907
mov dword [ebp - 0x15f4], 0
jmp 0x48b8ac
mov ecx, dword [ebp - 0x15f4]
add ecx, 1
mov dword [ebp - 0x15f4], ecx
cmp dword [ebp - 0x15f4], 0x15
jge 0x48b907
imul edx, dword [ebp - 0x15f4], 0x104
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx + 0x2de4c]
mov edx, 1
imul eax, edx, 0
mov byte [ecx + eax], 0
mov ecx, dword [ebp - 0x15f4]
add ecx, 1
push ecx
mov ecx, 0x489f1d0
call fcn.00465ba0
push 0x4c8078
mov edx, dword [ebp - 0x15f4]
add edx, 1
push edx
mov ecx, 0x574b760
call fcn.0045e550
jmp 0x48b89d
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b945
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x19bc], eax
push 0
mov eax, dword [ebp - 0x19bc]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
push edx
mov ecx, 0x489f1d0
call fcn.004631f0
jmp 0x48b950
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48b965
mov ecx, 0x489f1d0
call fcn.00463500
jmp case.0x4856de.4
mov dword [ebp - 0x1618], 0
mov ecx, 0x574bcd8
call fcn.00411490
add eax, 1
mov dword [ebp - 0x19c0], eax
mov eax, dword [ebp - 0x1618]
cmp eax, dword [ebp - 0x19c0]
jge 0x48b9d3
mov ecx, dword [ebp - 0x1618]
mov edx, dword [ebp - 0x1534]
cmp dword [edx + ecx*4 + 0x3888], 0
jne 0x48b9c2
mov eax, dword [ebp - 0x1618]
mov ecx, dword [ebp - 0x1534]
mov dword [ecx + eax*4 + 0x3888], 1
mov edx, dword [ebp - 0x1618]
add edx, 1
mov dword [ebp - 0x1618], edx
jmp 0x48b987
mov ecx, 0x48a7100
call fcn.0045c390
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48ba58
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
movzx eax, al
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0x166c], 0
jge 0x48ba0f
mov dword [ebp - 0x166c], 0
mov ecx, 0x48a7100
call fcn.00411430
mov dword [ebp - 0x17e0], eax
mov ecx, dword [ebp - 0x166c]
mov edx, dword [ebp - 0x17e0]
cmp dword [edx + ecx*4 + 0x3888], 0
jne 0x48ba56
mov eax, dword [ebp - 0x166c]
mov ecx, dword [ebp - 0x17e0]
mov dword [ecx + eax*4 + 0x3888], 1
mov ecx, 0x48a7100
call fcn.0045c390
jmp 0x48ba63
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48bb35
mov edx, dword [ebp - 0x1530]
cmp dword [edx + 0x30d90], 0
jle 0x48bb2e
mov ecx, 0x489f1d0
call fcn.00460840
push 0
push 8
push 7
mov ecx, 0x489f1d0
call fcn.00460e30
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1574], eax
push 0x5a
mov ecx, 0x5433230
call fcn.0045a230
mov eax, dword [ebp - 0x1574]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1574]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0x11
jne 0x48baec
push 0x12
mov ecx, dword [ebp - 0x1574]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1574]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48bb19
mov ecx, dword [ebp - 0x1574]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1574]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0x13
jne 0x48bb19
push 0x14
mov ecx, dword [ebp - 0x1574]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1574]
mov eax, dword [edx + 0x20]
call eax
push 6
mov ecx, dword [ebp - 0x1574]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1574]
mov eax, dword [edx + 0x1c]
call eax
mov al, 0xcf
jmp 0x48cba5
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48bb8d
mov ecx, dword [ebp - 0x1530]
cmp dword [ecx + 0x30d94], 0
jle 0x48bb86
push 0
push 8
push 0x1d
mov ecx, 0x489f1d0
call fcn.00460e30
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x17e4], eax
push 6
mov edx, dword [ebp - 0x17e4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x17e4]
mov edx, dword [eax + 0x1c]
call edx
mov al, 0xcf
jmp 0x48cba5
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48bc7e
mov eax, dword [ebp - 0x1530]
cmp dword [eax + 0x30d98], 0
jle 0x48bc77
mov ecx, 0x489f1d0
call fcn.00460840
push 0
push 8
push 0x19
mov ecx, 0x489f1d0
call fcn.00460e30
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1550], eax
push 0x5a
mov ecx, 0x5433230
call fcn.0045a230
mov ecx, 0x489f860
call fcn.00467090
mov ecx, dword [ebp - 0x1550]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1550]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0x11
jne 0x48bc20
push 0x12
mov ecx, dword [ebp - 0x1550]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1550]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48bc4d
mov ecx, dword [ebp - 0x1550]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1550]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0x13
jne 0x48bc4d
push 0x14
mov ecx, dword [ebp - 0x1550]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1550]
mov eax, dword [edx + 0x20]
call eax
push 0
mov ecx, dword [ebp - 0x1550]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1550]
mov eax, dword [edx + 0x20]
call eax
push 6
mov ecx, dword [ebp - 0x1550]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1550]
mov eax, dword [edx + 0x1c]
call eax
mov al, 0xcf
jmp 0x48cba5
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48bcc3
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
movzx ecx, al
sub ecx, 1
mov dword [ebp - 0x19c4], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
movzx edx, al
mov eax, dword [ebp - 0x19c4]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + eax*4 + 0x31108], edx
jmp 0x48bcd9
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
jmp case.0x4856de.4
mov dword [ebp - 0x1620], 1
cmp dword [ebp + 8], 0
jne 0x48c018
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x70], 0
mov eax, dword [ebp - 0x1530]
cmp dword [eax + 0x31158], 2
je 0x48bd4a
cmp dword [ebp - 0x1620], 1
je 0x48bd4a
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x31158], 0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
movzx edx, al
mov dword [ebp - 0x16ac], edx
push 0
mov ecx, 0x489f860
call fcn.004696a0
mov dword [ebp - 0x16a8], 0
mov dword [ebp - 0x1670], 0
jmp 0x48bd8f
mov eax, dword [ebp - 0x1670]
add eax, 1
mov dword [ebp - 0x1670], eax
mov ecx, dword [ebp - 0x1670]
cmp ecx, dword [ebp - 0x16ac]
jge 0x48bdc4
mov edx, dword [ebp - 0x1670]
mov eax, dword [ebp - 0x1530]
cmp dword [eax + edx*4 + 0x31108], 1
jne 0x48bdc2
mov ecx, dword [ebp - 0x16a8]
add ecx, 1
mov dword [ebp - 0x16a8], ecx
jmp 0x48bd80
mov edx, dword [ebp - 0x16ac]
push edx
mov eax, dword [ebp - 0x16a8]
push eax
mov ecx, 0x508d9c8
call fcn.0041cb90
lea ecx, [ebp - 0x1a3c]
call fcn.004942b0
mov dword [ebp - 4], 0
push 0x4c3d77
lea ecx, [ebp - 0x1a3c]
call fcn.00494370
mov dword [ebp - 0x161c], 0
mov dword [ebp - 0x1674], 0
jmp 0x48be23
mov ecx, dword [ebp - 0x1674]
add ecx, 1
mov dword [ebp - 0x1674], ecx
mov edx, dword [ebp - 0x1674]
cmp edx, dword [ebp - 0x16ac]
jge 0x48bf40
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x17e8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x19c8], eax
mov eax, dword [ebp - 0x19c8]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x16d0], edx
mov eax, dword [ebp - 0x1674]
mov ecx, dword [ebp - 0x1530]
cmp dword [ecx + eax*4 + 0x31108], 1
jne 0x48bf3b
cmp dword [ebp - 0x1620], 1
je 0x48beb4
mov edx, dword [ebp - 0x16d0]
push edx
mov eax, dword [ebp - 0x161c]
push eax
mov ecx, dword [ebp - 0x17e8]
push ecx
mov ecx, 0x508d9c8
call fcn.0046ee00
jmp 0x48bed3
mov edx, dword [ebp - 0x16d0]
push edx
mov eax, dword [ebp - 0x161c]
push eax
mov ecx, dword [ebp - 0x17e8]
push ecx
mov ecx, 0x508d9c8
call fcn.0046f9a0
push 0xa
lea edx, [ebp - 0x50]
push edx
mov eax, dword [ebp - 0x161c]
add eax, 1
push eax
call fcn.0048dc70
add esp, 0xc
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x1a3c]
call fcn.004943c0
push 0x4c807c
lea ecx, [ebp - 0x1a3c]
call fcn.004943c0
mov edx, dword [ebp - 0x16d0]
push edx
lea ecx, [ebp - 0x1a3c]
call fcn.004943c0
push 0x4c8080
lea ecx, [ebp - 0x1a3c]
call fcn.004943c0
mov eax, dword [ebp - 0x161c]
add eax, 1
mov dword [ebp - 0x161c], eax
jmp 0x48be14
cmp dword [ebp - 0x1620], 1
je 0x48bf55
mov ecx, 0x508d9c8
call fcn.0046f040
jmp 0x48bf5f
mov ecx, 0x508d9c8
call fcn.0046fb60
mov ecx, dword [ebp - 0x1530]
cmp dword [ecx + 0x3c990], 0
jle 0x48bf9a
push 6
mov edx, dword [ebp - 0x153c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x153c]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a3c]
call fcn.004942f0
jmp case.0x4856de.4
cmp dword [ebp - 0x1620], 1
je 0x48bfef
mov eax, dword [ebp - 0x1530]
cmp dword [eax + 0x30d90], 0
jg 0x48bfc1
mov ecx, dword [ebp - 0x1530]
cmp dword [ecx + 0x30d94], 0
jle 0x48bfd8
push 6
mov edx, dword [ebp - 0x153c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x153c]
mov edx, dword [eax + 0x20]
call edx
jmp 0x48bfed
push 3
mov eax, dword [ebp - 0x153c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x153c]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48c004
push 6
mov ecx, dword [ebp - 0x153c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x153c]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a3c]
call fcn.004942f0
jmp 0x48c062
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
movzx ecx, al
mov dword [ebp - 0x19cc], ecx
mov dword [ebp - 0x16b4], 0
jmp 0x48c047
mov edx, dword [ebp - 0x16b4]
add edx, 1
mov dword [ebp - 0x16b4], edx
mov eax, dword [ebp - 0x16b4]
cmp eax, dword [ebp - 0x19cc]
jge 0x48c062
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
jmp 0x48c038
jmp case.0x4856de.4
cmp dword [ebp + 8], 1
jne 0x48c092
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
movzx ecx, al
mov edx, dword [ebp - 0x152c]
cmp ecx, dword [edx + 0xc7414]
jne 0x48c090
mov al, 0xd2
jmp 0x48cba5
jmp 0x48c09d
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48c0b4
push 2
mov ecx, 0x508d9c8
call fcn.0046f010
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48c128
push 0
mov ecx, 0x508d9c8
call fcn.0046f010
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1530]
mov byte [edx + ecx + 0x3115c], 0
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1530]
mov byte [edx + ecx + 0x32d90], 0
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1530]
mov byte [edx + ecx + 0x32da4], 0
push 0x1b30
push 0
mov eax, dword [ebp - 0x1530]
add eax, 0x31260
push eax
call fcn.0049ed40
add esp, 0xc
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x17ec], edx
cmp dword [ebp + 8], 0
jne 0x48c17c
mov eax, dword [ebp - 0x17ec]
push eax
mov ecx, dword [ebp - 0x1530]
add ecx, 0x3115c
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 0x17ec]
push edx
mov ecx, 0x508d9c8
call fcn.00485140
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
sub eax, 1
mov dword [ebp - 0x1560], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
imul eax, dword [ebp - 0x1560], 0x15c
mov ecx, dword [ebp - 0x1530]
movss dword [ecx + eax + 0x31264], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
imul edx, dword [ebp - 0x1560], 0x15c
mov eax, dword [ebp - 0x1530]
movss dword [eax + edx + 0x31268], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
imul ecx, dword [ebp - 0x1560], 0x15c
mov edx, dword [ebp - 0x1530]
movss dword [edx + ecx + 0x3126c], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
imul eax, dword [ebp - 0x1560], 0x15c
mov ecx, dword [ebp - 0x1530]
movss dword [ecx + eax + 0x31270], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
imul edx, dword [ebp - 0x1560], 0x15c
mov eax, dword [ebp - 0x1530]
movss dword [eax + edx + 0x31274], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
imul ecx, dword [ebp - 0x1560], 0x15c
mov edx, dword [ebp - 0x1530]
movss dword [edx + ecx + 0x31278], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
imul eax, dword [ebp - 0x1560], 0x15c
mov ecx, dword [ebp - 0x1530]
movss dword [ecx + eax + 0x3127c], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
imul edx, dword [ebp - 0x1560], 0x15c
mov eax, dword [ebp - 0x1530]
movss dword [eax + edx + 0x31280], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
imul ecx, dword [ebp - 0x1560], 0x15c
mov edx, dword [ebp - 0x1530]
movss dword [edx + ecx + 0x31284], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
cvtsi2ss xmm0, eax
imul eax, dword [ebp - 0x1560], 0x15c
mov ecx, dword [ebp - 0x1530]
movss dword [ecx + eax + 0x31288], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d8e0
imul edx, dword [ebp - 0x1560], 0x15c
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx + 0x3128c], eax
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x19d0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x19d4], edx
mov eax, dword [ebp - 0x19d0]
push eax
mov ecx, dword [ebp - 0x1530]
add ecx, 0x32d90
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 0x19d4]
push edx
mov eax, dword [ebp - 0x1530]
add eax, 0x32da4
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x1b90], ecx
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48c415
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1648], eax
mov edx, dword [ebp - 0x1648]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1648]
mov edx, dword [eax + 0x14]
call edx
mov ecx, dword [ebp - 0x152c]
mov dword [ecx + 0x3ead0c], eax
push 0x15
mov edx, dword [ebp - 0x1648]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1648]
mov edx, dword [eax + 0x20]
call edx
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48c462
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x17f0], eax
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + 0x3ead0c]
push ecx
mov edx, dword [ebp - 0x17f0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x17f0]
mov edx, dword [eax + 0x20]
call edx
mov eax, dword [ebp - 0x152c]
mov dword [eax + 0x3ead0c], 0xffffffff
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48c4cb
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x19d8], eax
mov ecx, dword [ebp - 0x19d8]
push ecx
mov ecx, 0x489f1d0
call fcn.00485090
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
and edx, 0x80
jne 0x48c4c9
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x17f4], eax
push 0x10
mov eax, dword [ebp - 0x17f4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x17f4]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48c4e5
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x9c]
call edx
jmp case.0x4856de.4
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x17f8], eax
push 2
mov eax, dword [ebp - 0x17f8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x17f8]
mov eax, dword [edx + 0x20]
call eax
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
jmp case.0x4856de.4
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x17fc], eax
push 9
mov edx, dword [ebp - 0x17fc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x17fc]
mov edx, dword [eax + 0x20]
call edx
jmp case.0x4856de.4
cmp dword [ebp + 8], 0
jne 0x48c6d4
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax + 0x30]
mov eax, dword [edx + 0x48]
call eax
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x153e], al
mov dword [ebp - 0x164c], 0
mov ecx, 0x489f860
call fcn.00485170
movzx edx, byte [ebp - 0x153e]
cmp edx, 0xe3
je 0x48c6cf
mov al, byte [ebp - 0x153e]
mov byte [ebp - 0x1800], al
cmp byte [ebp - 0x1800], 0xdf
je 0x48c5f6
cmp byte [ebp - 0x1800], 0xe4
je 0x48c6a8
jmp 0x48c6b9
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x19dc], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x19e0], eax
mov ecx, dword [ebp - 0x19dc]
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + ecx*4 + 0x79204]
mov dword [ebp - 0x19e8], eax
mov ecx, dword [ebp - 0x19e0]
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + ecx*4 + 0x79204]
mov dword [ebp - 0x19e4], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
movzx ecx, ax
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 8]
call edx
cmp dword [ebp + 8], 0
jne 0x48c693
mov eax, dword [ebp - 0x164c]
push eax
mov ecx, dword [ebp - 0x19e4]
push ecx
mov edx, dword [ebp - 0x19e8]
push edx
push 0
mov ecx, 0x489f860
call fcn.004675c0
cmp dword [ebp - 0x164c], 0xffffffff
je 0x48c6a6
mov dword [ebp - 0x164c], 0
jmp 0x48c6b9
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x164c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x153e], al
jmp 0x48c5bc
jmp 0x48c788
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x153f], al
mov dword [ebp - 0x1b94], 0
movzx eax, byte [ebp - 0x153f]
cmp eax, 0xe3
je 0x48c788
mov cl, byte [ebp - 0x153f]
mov byte [ebp - 0x1804], cl
cmp byte [ebp - 0x1804], 0xdf
je 0x48c721
cmp byte [ebp - 0x1804], 0xe4
je 0x48c767
jmp 0x48c772
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1b98], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1b9c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
movzx edx, ax
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 8]
call eax
jmp 0x48c772
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d080
mov byte [ebp - 0x153f], al
jmp 0x48c6ef
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x19ec], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x19f0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x19f4], eax
mov edx, dword [ebp - 0x19ec]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x180c], ecx
mov edx, dword [ebp - 0x19f0]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x19fc], ecx
mov edx, dword [ebp - 0x19f4]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x19f8], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
movzx edx, ax
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp + 8], 0
jne 0x48c8d3
push 0
mov ecx, dword [ebp - 0x19f8]
push ecx
mov edx, dword [ebp - 0x19fc]
push edx
mov eax, dword [ebp - 0x180c]
push eax
mov ecx, 0x489f860
call fcn.004675c0
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1808], eax
push 1
mov ecx, dword [ebp - 0x1808]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1808]
mov eax, dword [edx + 0x20]
call eax
push 0
mov ecx, dword [ebp - 0x180c]
push ecx
mov ecx, 0x489f1d0
call fcn.004631f0
mov ecx, 0x489f860
call fcn.0046aa90
push 1
mov ecx, 0x489f860
call fcn.00485190
push 0
mov ecx, 0x4d2930
call fcn.0046e9c0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1a00], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1a04], eax
mov edx, dword [ebp - 0x1a00]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x1a0c], ecx
mov edx, dword [ebp - 0x1a04]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x1a08], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
movzx edx, ax
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp + 8], 0
jne 0x48c9d2
push 0
mov ecx, dword [ebp - 0x1a08]
push ecx
mov edx, dword [ebp - 0x1a0c]
push edx
push 0
mov ecx, 0x489f860
call fcn.004675c0
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1810], eax
push 1
mov eax, dword [ebp - 0x1810]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1810]
mov eax, dword [edx + 0x20]
call eax
push 1
mov ecx, 0x489f860
call fcn.00485190
push 0
mov ecx, 0x4d2930
call fcn.0046e9c0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1a10], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1a14], eax
mov edx, dword [ebp - 0x1a10]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x1a1c], ecx
mov edx, dword [ebp - 0x1a14]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x1a18], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
movzx edx, ax
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp + 8], 0
jne 0x48caaa
push 0
mov ecx, dword [ebp - 0x1a18]
push ecx
push 0
mov edx, dword [ebp - 0x1a1c]
push edx
mov ecx, 0x489f860
call fcn.004675c0
push 1
mov ecx, 0x489f860
call fcn.00485190
push 0
mov ecx, 0x4d2930
call fcn.0046e9c0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax + 0x30]
mov eax, dword [edx + 0x48]
call eax
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1a20], eax
mov edx, dword [ebp - 0x1a20]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x1a24], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0e0
movzx edx, ax
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp + 8], 0
jne 0x48cb7a
push 0
mov ecx, dword [ebp - 0x1a24]
push ecx
push 0
push 0
mov ecx, 0x489f860
call fcn.004675c0
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1814], eax
push 1
mov edx, dword [ebp - 0x1814]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1814]
mov edx, dword [eax + 0x20]
call edx
push 1
mov ecx, 0x489f860
call fcn.00485190
push 0
mov ecx, 0x4d2930
call fcn.0046e9c0
jmp case.0x4856de.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d0b0
mov dword [ebp - 0x1ba0], eax
mov eax, dword [ebp - 0x152c]
mov cl, byte [ebp - 0x1535]
mov byte [eax + 0xc741d], cl
mov al, byte [ebp - 0x1535]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049d498
mov esp, ebp
pop ebp
ret 8