Function at 0x48d82c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff80
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x74], edx
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x5c], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x48fd8f
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x38], 0xffffffff
mov eax, dword [ebp - 4]
cmp byte [eax + 0x4c], 1
jne 0x48d8a8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov esi, dword [eax + 0xc]
dec esi
cmp esi, 0
jl 0x48d89e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 4]
mov ebx, dword [eax + esi*4]
mov eax, ebx
call fcn.004041cc
dec esi
cmp esi, 0xffffffff
jne 0x48d885
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov edx, dword [eax]
call dword [edx]
push 0
push 0
push 0
or ecx, 0xffffffff
or edx, 0xffffffff
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov bl, 1
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x4c]
mov byte [ebp - 0x39], al
dec al
je 0x48d8d9
sub al, 2
je 0x48d966
jmp 0x48d96f
mov eax, dword [ebp - 4]
cmp dword [eax + 0x48], 0xffffffff
jne 0x48d8e9
xor ebx, ebx
jmp 0x48fd74
mov eax, dword [ebp - 4]
mov byte [eax + 0x4c], 2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x38]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp - 4]
mov dword [edx + 0x50], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [0x47eca4]
jne 0x48d934
mov dl, 7
mov eax, dword [ebp - 4]
call fcn.004835ec
mov eax, dword [ebp - 4]
mov byte [eax + 0x4c], 1
jmp 0x48fd74
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x58], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x60], 0xffffffff
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x5c], edx
jmp 0x48d976
mov eax, dword [ebp - 4]
mov byte [eax + 0x4c], 2
jmp 0x48d976
xor ebx, ebx
jmp 0x48fd74
mov eax, dword [ebp - 4]
push eax
mov eax, dword [eax]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
call fcn.0048d80c
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x4c], 2
jmp 0x48fcff
cmp dword [ebp - 0x48], 0
je 0x48d9a5
mov eax, dword [ebp - 4]
call dword [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x48d9c2
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
movzx esi, byte [edx + eax]
mov eax, dword [ebp - 4]
inc dword [eax + 0x5c]
cmp esi, 0xe
jg 0x48da2b
je 0x48f594
cmp esi, 0xd
ja case.default.0x48da42
jmp dword [esi*4 + 0x48d9f3]
cmp esi, 0x15
jg 0x48da61
je 0x48eb59
add esi, 0xfffffff1
cmp esi, 5
ja case.default.0x48da42
jmp dword [esi*4 + 0x48da49]
cmp esi, 0x19
jg 0x48da88
je 0x48e570
sub esi, 0x16
je 0x48f296
dec esi
je 0x48f4e3
dec esi
je 0x48f432
jmp case.default.0x48da42
sub esi, 0x1a
je 0x48e5c4
sub esi, 0xe5
je 0x48fcff
jmp case.default.0x48da42
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
cmp byte [ebp - 9], 0
je 0x48db73
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x48dad8
and eax, 0x7f
bt dword [0x48fda0], eax
jae 0x48dae5
mov edx, dword [ebp - 0xd]
mov eax, dword [ebp - 0x11]
call fcn.00481410
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x48db33
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0047d068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x48db64
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.00498e4c
mov dl, 6
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
lea edx, [ebp - 0x1a]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
mov eax, dword [ebp - 0xd]
push eax
mov eax, dword [ebp - 0x16]
push eax
mov ecx, dword [ebp - 0x1a]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call fcn.00485320
test al, al
jne 0x48dc5c
cmp byte [ebp - 0x12], 0
je 0x48fd0c
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x48dbc7
and eax, 0x7f
bt dword [0x48fda0], eax
jae 0x48dbd4
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call fcn.00481410
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x48dc22
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0047d068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.00498e4c
jmp 0x48fd0c
cmp byte [ebp - 0x12], 0
je 0x48fcff
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x48dc7d
and eax, 0x7f
bt dword [0x48fda0], eax
jae 0x48dc8a
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call fcn.00481410
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x48dcd8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0047d068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.00498e4c
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x48dd2f
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
movzx eax, byte [edx + eax]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
inc dword [eax + 0x5c]
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
cmp byte [ebp - 9], 0
je 0x48de19
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x48dd7e
and eax, 0x7f
bt dword [0x48fda0], eax
jae 0x48dd8b
mov edx, dword [ebp - 0xd]
mov eax, dword [ebp - 0x11]
call fcn.00481410
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x48ddd9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0047d068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x48de0a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.00498e4c
mov dl, 6
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
lea edx, [ebp - 0x1a]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
mov eax, dword [ebp - 0xd]
push eax
mov eax, dword [ebp - 0x16]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x1a]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call fcn.00488664
test al, al
jne 0x48df06
cmp byte [ebp - 0x12], 0
je 0x48fd0c
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x48de71
and eax, 0x7f
bt dword [0x48fda0], eax
jae 0x48de7e
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call fcn.00481410
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x48decc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0047d068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.00498e4c
jmp 0x48fd0c
cmp byte [ebp - 0x12], 0
je 0x48fcff
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x48df27
and eax, 0x7f
bt dword [0x48fda0], eax
jae 0x48df34
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call fcn.00481410
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x48df82
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0047d068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.00498e4c
jmp 0x48fcff
lea edx, [ebp - 0x1a]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov edx, dword [ebp - 0x16]
call fcn.00499188
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 4
mov dword [ebp - 0x11], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0xd], eax
mov byte [ebp - 9], 0
mov eax, dword [ebp - 0xd]
push eax
mov eax, dword [ebp - 0x16]
push eax
mov ecx, dword [ebp - 0x1a]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call fcn.00485320
test al, al
jne 0x48e0cb
cmp byte [ebp - 0x12], 0
je 0x48fd0c
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x48e036
and eax, 0x7f
bt dword [0x48fda0], eax
jae 0x48e043
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call fcn.00481410
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x48e091
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0047d068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.00498e4c
jmp 0x48fd0c
cmp byte [ebp - 0x12], 0
je 0x48fcff
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x48e0ec
and eax, 0x7f
bt dword [0x48fda0], eax
jae 0x48e0f9
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call fcn.00481410
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x48e147
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0047d068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.00498e4c
jmp 0x48fcff
lea edx, [ebp - 0x1a]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
cmp byte [ebp - 0x12], 0
je 0x48e1b6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
mov dl, 6
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov dl, 0xd
mov eax, dword [ebp - 4]
call fcn.0048d420
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.00499188
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x16]
cmp byte [eax + 0xc], 0xd
jne 0x48e1ff
mov eax, dword [ebp - 0x1a]
mov eax, dword [eax]
mov edx, dword [ebp - 0x28]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x1a]
add eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0x28]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0xc], edx
jmp 0x48fcff
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x1a]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x16]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0xc], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
cmp dword [eax + 0xc], 0
jne 0x48e239
mov dl, 0xb
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x44]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x48e263
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
cmp byte [eax + 0xc], 0
jne 0x48e272
mov dl, 0xb
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.004990e0
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x48e2a2
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov eax, dword [eax + 0xc]
cmp eax, dword [ebp - 0x2c]
ja 0x48e2da
mov dl, 9
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov eax, dword [eax + edx*4]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
cmp eax, dword [0x47eca4]
jne 0x48e4df
xor eax, eax
push ebp
push 0x48e35b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x3c]
mov ebx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 4]
call dword [ebx + 0x14]
test al, al
jne 0x48e34e
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
jne 0x48e341
mov dl, 0x11
mov eax, dword [ebp - 4]
call fcn.004835ec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48fd0c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.00499188
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 4
mov dword [ebp - 0x11], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0xd], eax
mov byte [ebp - 9], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov edx, dword [ebp - 0x28]
mov dword [edx + 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 0x28]
mov dword [edx + 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [ebp - 0x28]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
dec eax
mov edx, dword [ebp - 4]
mov dword [edx + 0x60], eax
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x50], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x58], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x5c], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.004990e0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x48e59b
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.004990e0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.004990e0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x48e5fa
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x48e643
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x48e68c
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov byte [ebp - 0x41], 1
lea edx, [ebp - 0x1a]
movzx ecx, byte [ebp - 0x41]
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
cmp eax, 6
ja case.0x48e6ce.0
jmp dword [eax*4 + 0x48e6d5]
mov eax, dword [ebp - 0x1a]
cmp byte [eax], 0
setne byte [ebp - 0x41]
jmp 0x48e75f
mov eax, dword [ebp - 0x1a]
cmp byte [eax], 0
setne byte [ebp - 0x41]
jmp 0x48e75f
mov eax, dword [ebp - 0x1a]
cmp word [eax], 0
setne byte [ebp - 0x41]
jmp 0x48e75f
mov eax, dword [ebp - 0x1a]
cmp word [eax], 0
setne byte [ebp - 0x41]
jmp 0x48e75f
mov eax, dword [ebp - 0x1a]
cmp dword [eax], 0
setne byte [ebp - 0x41]
jmp 0x48e75f
mov eax, dword [ebp - 0x1a]
cmp dword [eax], 0
setne byte [ebp - 0x41]
jmp 0x48e75f
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.004835ec
cmp byte [ebp - 0x12], 0
je 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
jmp 0x48fd0c
cmp byte [ebp - 0x12], 0
je 0x48e770
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
cmp byte [ebp - 0x41], 0
je 0x48fcff
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x48e7a8
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov byte [ebp - 0x41], 1
lea edx, [ebp - 0x1a]
movzx ecx, byte [ebp - 0x41]
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
cmp eax, 6
ja case.0x48e7ea.0
jmp dword [eax*4 + 0x48e7f1]
mov eax, dword [ebp - 0x1a]
cmp byte [eax], 0
sete byte [ebp - 0x41]
jmp 0x48e87b
mov eax, dword [ebp - 0x1a]
cmp byte [eax], 0
sete byte [ebp - 0x41]
jmp 0x48e87b
mov eax, dword [ebp - 0x1a]
cmp word [eax], 0
sete byte [ebp - 0x41]
jmp 0x48e87b
mov eax, dword [ebp - 0x1a]
cmp word [eax], 0
sete byte [ebp - 0x41]
jmp 0x48e87b
mov eax, dword [ebp - 0x1a]
cmp dword [eax], 0
sete byte [ebp - 0x41]
jmp 0x48e87b
mov eax, dword [ebp - 0x1a]
cmp dword [eax], 0
sete byte [ebp - 0x41]
jmp 0x48e87b
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.004835ec
cmp byte [ebp - 0x12], 0
je 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
jmp 0x48fd0c
cmp byte [ebp - 0x12], 0
je 0x48e88c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
cmp byte [ebp - 0x41], 0
je 0x48fcff
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
dec eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
cmp dword [eax + 0xc], 0
jbe 0x48e9b0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
jmp 0x48e98c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
cmp eax, dword [ebx + 0xc]
jbe 0x48e911
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
dec eax
mov edx, dword [ebx + 0xc]
sub edx, eax
ja 0x48e911
dec edx
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.004990e0
inc dword [ebp - 0x4c]
jne 0x48e901
mov eax, dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x60], eax
cmp dword [ebx + 0x10], 0xffffffff
je 0x48e939
mov eax, dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x10], 0xffffffff
mov dword [ebp - 0x30], 1
jmp 0x48e9b0
cmp dword [ebx + 0x18], 0xffffffff
je 0x48e958
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x18], 0xffffffff
mov dword [ebp - 0x30], 1
jmp 0x48e9b0
mov eax, ebx
call fcn.004041cc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
call fcn.0047d114
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
cmp dword [eax + 0xc], 0
je 0x48e9b0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
mov eax, dword [ebx + 8]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x60]
je 0x48e8de
mov eax, dword [ebx + 8]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x60]
jbe 0x48e9b0
cmp dword [ebx + 8], 0xffffffff
jne 0x48e8de
cmp dword [ebp - 0x30], 0
jne 0x48fcff
mov dword [ebp - 0x38], 0xffffffff
mov eax, dword [ebp - 4]
cmp dword [eax + 0x60], 0xffffffff
jne 0x48e9d9
mov eax, dword [ebp - 4]
movzx edx, byte [ebp - 0x39]
mov byte [eax + 0x4c], dl
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
dec eax
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x60]
inc edx
sub edx, eax
jg 0x48ea02
dec edx
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.004990e0
inc dword [ebp - 0x4c]
jne 0x48e9f2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x44]
cmp eax, dword [edx + 0xc]
jb 0x48ea22
mov eax, dword [ebp - 4]
movzx edx, byte [ebp - 0x39]
mov byte [eax + 0x4c], dl
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x44]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 4]
mov dword [edx + 0x50], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x60], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.004990e0
mov eax, dword [ebp - 4]
cmp dword [eax + 0x50], 0
jne 0x48ea7e
mov eax, dword [ebp - 4]
movzx edx, byte [ebp - 0x39]
mov byte [eax + 0x4c], dl
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x58], eax
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x48eac1
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
mov eax, dword [eax + 0xc]
cmp eax, dword [ebp - 0x2c]
jae 0x48eaf9
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov edx, dword [eax + edx*4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.00499188
jmp 0x48fcff
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
cmp byte [ebp - 9], 0
je 0x48eb3e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
mov ecx, dword [ebp - 0xd]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call fcn.0048ce48
test al, al
je 0x48fd0c
jmp 0x48fcff
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
cmp byte [ebp - 9], 0
je 0x48eb7f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
mov ecx, dword [ebp - 0xd]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call fcn.0048d724
test al, al
je 0x48fd0c
jmp 0x48fcff
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
cmp byte [ebp - 9], 0
je 0x48ebc0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
mov ecx, dword [ebp - 0xd]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call fcn.0048cd10
test al, al
je 0x48fd0c
jmp 0x48fcff
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x48ec22
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
cmp byte [ebp - 9], 0
je 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
movzx eax, byte [edx + eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
inc dword [eax + 0x5c]
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
cmp eax, 6
ja case.0x48ec4b.0
jmp dword [eax*4 + 0x48ec52]
mov eax, dword [ebp - 0x11]
cmp byte [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x48ecfa
mov eax, dword [ebp - 0x11]
cmp byte [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x48ecfa
mov eax, dword [ebp - 0x11]
cmp word [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x48ecfa
mov eax, dword [ebp - 0x11]
cmp word [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x48ecfa
mov eax, dword [ebp - 0x11]
cmp dword [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x48ecfa
mov eax, dword [ebp - 0x11]
cmp dword [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x48ecfa
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.004835ec
cmp byte [ebp - 9], 0
je 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
jmp 0x48fd0c
cmp dword [ebp - 0x2c], 0
je 0x48ed0f
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x10]
xor al, 1
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
cmp byte [ebp - 9], 0
je 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x48ed49
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10], 0
je 0x48fcff
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x48fcff
mov dl, 1
mov eax, dword [0x47f604]
call fcn.0040419c
mov ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov dword [ebx + 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
mov dword [ebx + 0xc], eax
lea edx, [ebx + 0x10]
mov eax, dword [ebp - 4]
call fcn.0048cfc8
test al, al
jne 0x48edd0
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
mov eax, ebx
call fcn.004041cc
jmp 0x48fd0c
lea edx, [ebx + 0x14]
mov eax, dword [ebp - 4]
call fcn.0048cfc8
test al, al
jne 0x48edf5
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
mov eax, ebx
call fcn.004041cc
jmp 0x48fd0c
lea edx, [ebx + 0x18]
mov eax, dword [ebp - 4]
call fcn.0048cfc8
test al, al
jne 0x48ee1a
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
mov eax, ebx
call fcn.004041cc
jmp 0x48fd0c
lea edx, [ebx + 0x1c]
mov eax, dword [ebp - 4]
call fcn.0048cfc8
test al, al
jne 0x48ee3f
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
mov eax, ebx
call fcn.004041cc
jmp 0x48fd0c
cmp dword [ebx + 0x10], 0xffffffff
je 0x48ee4e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add dword [ebx + 0x10], eax
cmp dword [ebx + 0x14], 0xffffffff
je 0x48ee5d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add dword [ebx + 0x14], eax
cmp dword [ebx + 0x18], 0xffffffff
je 0x48ee6c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add dword [ebx + 0x18], eax
cmp dword [ebx + 0x1c], 0xffffffff
je 0x48ee7b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add dword [ebx + 0x1c], eax
cmp dword [ebx + 0x10], 0xffffffff
je 0x48ee8c
mov eax, dword [ebx + 0x10]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jae 0x48eebf
cmp dword [ebx + 0x14], 0xffffffff
je 0x48ee9d
mov eax, dword [ebx + 0x14]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jae 0x48eebf
cmp dword [ebx + 0x18], 0xffffffff
je 0x48eeae
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jae 0x48eebf
cmp dword [ebx + 0x1c], 0xffffffff
je 0x48eed5
mov eax, dword [ebx + 0x1c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x48eed5
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
mov eax, ebx
call fcn.004041cc
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov edx, ebx
call fcn.0047d0cc
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x48ef04
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
movzx eax, byte [edx + eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
inc dword [eax + 0x5c]
mov eax, dword [ebp - 0x2c]
sub eax, 1
jb 0x48efde
je 0x48f0c0
dec eax
je 0x48ef3e
dec eax
je 0x48f1ea
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
cmp dword [eax + 0xc], 0
jne 0x48ef59
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
test ebx, ebx
jne 0x48ef82
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov dword [ebx + 0x14], 0xffffffff
cmp dword [ebx + 0x18], 0xffffffff
je 0x48efa4
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x18], 0xffffffff
jmp 0x48fcff
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, ebx
call fcn.004041cc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
call fcn.0047d114
cmp dword [ebp - 0x38], 0xffffffff
je 0x48efd0
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x5c], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x5c], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
test ebx, ebx
jne 0x48f007
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
cmp dword [ebx + 0x10], 0xffffffff
je 0x48f022
mov eax, dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x10], 0xffffffff
jmp 0x48fcff
cmp dword [ebx + 0x18], 0xffffffff
je 0x48f03d
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x14], 0xffffffff
jmp 0x48fcff
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, ebx
call fcn.004041cc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
call fcn.0047d114
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
je 0x48f09e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x70], edx
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x7c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
push eax
mov eax, dword [ebp - 0x40]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x78]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x74]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x48fcff
cmp dword [ebp - 0x38], 0xffffffff
je 0x48f0b2
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x5c], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x5c], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
test ebx, ebx
jne 0x48f0e9
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
je 0x48f146
cmp dword [ebx + 0x14], 0xffffffff
je 0x48f146
cmp dword [ebx + 0x14], 0xfffffffe
je 0x48f146
mov eax, dword [ebx + 0x14]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x14], 0xfffffffe
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x7c]
mov byte [ebx + 0x20], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebx + 0x24], eax
lea eax, [ebx + 0x28]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x80]
call fcn.00405498
mov eax, dword [ebp - 4]
mov byte [eax + 0x7c], 0
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x70], edx
jmp 0x48fcff
cmp dword [ebx + 0x18], 0xffffffff
je 0x48f161
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x18], 0xffffffff
jmp 0x48fcff
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, ebx
call fcn.004041cc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
call fcn.0047d114
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
je 0x48f1c8
cmp dword [ebp - 0x2c], 0xffffffff
je 0x48f1c8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x70], edx
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x7c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
push eax
mov eax, dword [ebp - 0x40]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x78]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x74]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x48fcff
cmp dword [ebp - 0x38], 0xffffffff
je 0x48f1dc
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x5c], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x5c], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
test ebx, ebx
jne 0x48f213
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, ebx
call fcn.004041cc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
call fcn.0047d114
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
je 0x48f274
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x70], edx
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x7c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
push eax
mov eax, dword [ebp - 0x40]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x78]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x74]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x48fcff
cmp dword [ebp - 0x38], 0xffffffff
je 0x48f288
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x5c], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x5c], edx
jmp 0x48fcff
lea edx, [ebp - 0x11]
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
cmp byte [ebp - 9], 0
je 0x48f2cb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
mov dl, 6
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 0xd]
cmp byte [eax + 0xc], 0xd
je 0x48f2e3
mov dl, 6
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
lea edx, [ebp - 0x1a]
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
mov eax, dword [ebp - 0x11]
add eax, 8
cmp dword [eax], 0
je 0x48f315
mov eax, dword [ebp - 0x11]
add eax, 4
mov edx, dword [eax]
mov eax, dword [ebp - 0x11]
mov eax, dword [eax]
call fcn.004816c8
mov eax, dword [ebp - 0x16]
cmp byte [eax + 0xc], 0xd
jne 0x48f3ba
mov eax, dword [ebp - 0x1a]
cmp dword [eax], 0
je 0x48f39d
mov eax, dword [ebp - 0x1a]
add eax, 4
mov eax, dword [eax]
call fcn.004816ac
mov edx, dword [ebp - 0x11]
mov dword [edx], eax
mov eax, dword [ebp - 0x1a]
add eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0x11]
add edx, 4
mov dword [edx], eax
mov eax, dword [ebp - 0x11]
add eax, 8
mov dword [eax], 1
mov eax, dword [ebp - 0x11]
add eax, 4
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x1a]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11]
mov eax, dword [eax]
mov ecx, 1
call fcn.00484bd8
test al, al
jne 0x48f418
cmp byte [ebp - 0x12], 0
je 0x48f38e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
mov dl, 0xc
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 0x11]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 0x11]
add eax, 4
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 0x11]
add eax, 8
xor edx, edx
mov dword [eax], edx
jmp 0x48f418
mov eax, dword [ebp - 0x16]
call fcn.004816ac
mov edx, dword [ebp - 0x11]
mov dword [edx], eax
mov eax, dword [ebp - 0x11]
add eax, 4
mov edx, dword [ebp - 0x16]
mov dword [eax], edx
mov eax, dword [ebp - 0x11]
add eax, 8
mov dword [eax], 0xffffffff
mov eax, dword [ebp - 0x16]
push eax
mov eax, dword [ebp - 0x11]
mov eax, dword [eax]
mov ecx, 1
mov edx, dword [ebp - 0x1a]
call fcn.00484bd8
test al, al
jne 0x48f418
cmp byte [ebp - 0x12], 0
je 0x48f409
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
mov dl, 0xc
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
cmp byte [ebp - 0x12], 0
je 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
jmp 0x48fcff
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
cmp byte [ebp - 9], 0
je 0x48f467
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
mov dl, 6
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
cmp eax, 6
ja case.0x48f473.0
jmp dword [eax*4 + 0x48f47a]
mov eax, dword [ebp - 0x11]
dec byte [eax]
jmp 0x48fcff
mov eax, dword [ebp - 0x11]
dec byte [eax]
jmp 0x48fcff
mov eax, dword [ebp - 0x11]
dec word [eax]
jmp 0x48fcff
mov eax, dword [ebp - 0x11]
dec word [eax]
jmp 0x48fcff
mov eax, dword [ebp - 0x11]
dec dword [eax]
jmp 0x48fcff
mov eax, dword [ebp - 0x11]
dec dword [eax]
jmp 0x48fcff
mov dl, 0xc
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
cmp byte [ebp - 9], 0
je 0x48f518
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
mov dl, 6
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
cmp eax, 6
ja case.0x48f524.0
jmp dword [eax*4 + 0x48f52b]
mov eax, dword [ebp - 0x11]
inc byte [eax]
jmp 0x48fcff
mov eax, dword [ebp - 0x11]
inc byte [eax]
jmp 0x48fcff
mov eax, dword [ebp - 0x11]
inc word [eax]
jmp 0x48fcff
mov eax, dword [ebp - 0x11]
inc word [eax]
jmp 0x48fcff
mov eax, dword [ebp - 0x11]
inc dword [eax]
jmp 0x48fcff
mov eax, dword [ebp - 0x11]
inc dword [eax]
jmp 0x48fcff
mov dl, 0xc
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
lea edx, [ebp - 0x11]
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
cmp byte [ebp - 9], 0
je 0x48f5c9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
mov dl, 6
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 0xd]
cmp byte [eax + 0xc], 0xd
je 0x48f5e1
mov dl, 6
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
lea edx, [ebp - 0x1a]
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
cmp byte [ebp - 0x12], 0
je 0x48f616
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
mov dl, 6
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 0x16]
cmp byte [eax + 0xc], 0xd
jne 0x48f63e
mov eax, dword [ebp - 0x1a]
mov eax, dword [eax]
mov edx, dword [ebp - 0x11]
mov dword [edx], eax
mov eax, dword [ebp - 0x1a]
add eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0x11]
add edx, 4
mov dword [edx], eax
jmp 0x48fcff
mov eax, dword [ebp - 0x11]
mov edx, dword [ebp - 0x1a]
mov dword [eax], edx
mov eax, dword [ebp - 0x11]
add eax, 4
mov edx, dword [ebp - 0x16]
mov dword [eax], edx
jmp 0x48fcff
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
mov eax, dword [ebp - 0xd]
cmp byte [eax + 0xc], 0x15
je 0x48f694
cmp byte [ebp - 9], 0
je 0x48f685
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
mov dl, 0xc
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 0x11]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
cmp byte [ebp - 9], 0
je 0x48f6ad
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.004990e0
cmp dword [ebp - 0x2c], 0
jne 0x48f6e7
mov eax, dword [ebp - 0x11]
add eax, 8
cmp dword [eax], 0
je 0x48f6e7
mov eax, dword [ebp - 0x11]
add eax, 8
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x11]
add eax, 4
mov ecx, dword [eax]
mov edx, dword [ebp - 0xd]
mov eax, dword [ebp - 4]
call fcn.004977d8
test al, al
je 0x48fd0c
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov eax, dword [eax + 0xc]
cmp eax, dword [ebp - 0x2c]
jbe 0x48f700
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
cmp eax, dword [ebp - 0x2c]
jne 0x48f70f
mov dl, 9
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov eax, dword [eax + edx*4]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [0x47eca4]
jne 0x48f914
xor eax, eax
push ebp
push 0x48f790
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x3c]
mov ebx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 4]
call dword [ebx + 0x14]
test al, al
jne 0x48f783
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
jne 0x48f776
mov dl, 0x11
mov eax, dword [ebp - 4]
call fcn.004835ec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48fd0c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.00499188
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov edx, dword [ebp - 0x28]
mov dword [edx + 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 0x28]
mov dword [edx + 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [ebp - 0x28]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
dec eax
mov edx, dword [ebp - 4]
mov dword [edx + 0x60], eax
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x50], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x58], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x5c], edx
jmp 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x48f9ad
mov dl, 0xa
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
movzx eax, byte [edx + eax]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
inc dword [eax + 0x5c]
lea edx, [ebp - 0x23]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
cmp byte [ebp - 0x1b], 0
je 0x48fa97
mov eax, dword [ebp - 0x1f]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x48f9fc
and eax, 0x7f
bt dword [0x48fda0], eax
jae 0x48fa09
mov edx, dword [ebp - 0x1f]
mov eax, dword [ebp - 0x23]
call fcn.00481410
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x48fa57
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0047d068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x48fa88
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.00498e4c
mov dl, 6
mov eax, dword [ebp - 4]
call fcn.004835ec
jmp 0x48fd0c
lea edx, [ebp - 0x1a]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
je 0x48fd0c
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.0048c27c
test al, al
jne 0x48fb77
cmp byte [ebp - 0x12], 0
je 0x48fd0c
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x48fae2
and eax, 0x7f
bt dword [0x48fda0], eax
jae 0x48faef
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call fcn.00481410
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x48fb3d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0047d068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x48fd0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.00498e4c
jmp 0x48fd0c
mov eax, dword [ebp - 0x23]
push eax
mov eax, dword [ebp - 0x16]
push eax
mov eax, dword [ebp - 0xd]
push eax
mov eax, dword [ebp - 0x1f]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x11]
mov edx, dword [ebp - 0x1a]
mov eax, dword [ebp - 4]
call fcn.00486258
cmp byte [ebp - 9], 0
je 0x48fc46
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x48fbba
and eax, 0x7f
bt dword [0x48fda0], eax
jae 0x48fbc7
mov edx, dword [ebp - 0xd]
mov eax, dword [ebp - 0x11]
call fcn.00481410
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x48fc15
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0047d068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x48fc46
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.00498e4c
cmp byte [ebp - 0x12], 0
je 0x48fcff
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x48fc67
and eax, 0x7f
bt dword [0x48fda0], eax
jae 0x48fc74
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call fcn.00481410
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x48fcc2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0047d068
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x48fcff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.00498e4c
jmp 0x48fcff
mov dl, 5
mov eax, dword [ebp - 4]
call fcn.004835ec
mov eax, dword [ebp - 4]
cmp byte [eax + 0x4c], 2
je 0x48d999
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
cmp dword [eax + 0xc], 0
je 0x48fd25
mov eax, dword [ebp - 4]
cmp byte [eax + 0x4c], 2
je 0x48d98d
mov eax, dword [ebp - 4]
cmp byte [eax + 0x4c], 1
jne 0x48fd6a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov esi, dword [eax + 0xc]
dec esi
cmp esi, 0
jl 0x48fd4e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.004990e0
dec esi
cmp esi, 0xffffffff
jne 0x48fd3d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.00498e5c
mov eax, dword [ebp - 4]
cmp byte [eax + 0x11], 0
je 0x48fd6a
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
sete bl
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48fd96
lea eax, [ebp - 0x80]
mov edx, 0xa
call fcn.00405468
ret