Function at 0x4d9118
Capabilities:
Parse pe header

Disassembly:
test dword [0x9d4cb8], 0xffffff80
jne 0x4d9140
test dword [0x9d4cb8], 0xffffffff
jne 0x4dae78
call fcn.008a6df8
jmp fcn.004d9118
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x8b55de
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2a8
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x48], esi
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x14], ecx
test eax, eax
je 0x4dae62
lea ecx, [ebp - 0xe8]
call fcn.0044f6d0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.0041cbf8
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.0041cbf8
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.0041cbf8
mov dword [ebp - 4], 3
lea ecx, [ebp - 0xa8]
call fcn.004e4b6c
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x98]
call fcn.004e4b6c
mov dword [ebp - 4], 5
lea edi, [ebp - 0xa8]
lea esi, [ebp - 0x88]
lea ebx, [ebp - 0xb4]
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0xac]
mov ecx, dword [ebp + 8]
push eax
push edx
push ebx
push esi
push edi
call fcn.004ebd38
movzx eax, al
test eax, eax
jne 0x4d92f2
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x98]
call fcn.0040b540
mov dword [ebp - 4], 3
lea ecx, [ebp - 0xa8]
call fcn.0040b540
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 4], 6
mov dword [ebp - 4], 7
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 6
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 4], 8
mov dword [ebp - 4], 6
mov esi, dword [ebp - 0xc4]
mov ebx, dword [ebp - 0xc0]
cmp esi, ebx
je 0x4daa3f
mov ecx, esi
call fcn.00411784
add esi, 0x10
cmp esi, ebx
jne 0x4d92df
jmp 0x4daa39
lea eax, [ebp - 0xa8]
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0xc]
push eax
call fcn.00624870
movzx eax, al
test eax, eax
jne 0x4d9390
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 4], 9
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4daa8b
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x29c], eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 4], 0xb
mov dword [ebp - 4], 0xa
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4d934a
jmp 0x4daa82
lea ecx, [ebp - 0xe8]
lea edx, [ebp - 0xa8]
xor eax, eax
push 0x58585858
push eax
push eax
push eax
push edx
call fcn.0043c40c
test eax, eax
je 0x4d9435
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x26c], eax
mov dword [ebp - 4], 0x14
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4dac7b
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x264], eax
mov dword [ebp - 4], 0x15
mov dword [ebp - 4], 0x16
mov dword [ebp - 4], 0x15
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4d93ef
jmp 0x4dac72
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 0x6c]
mov edx, dword [eax + 0x6c]
mov dword [ebp - 0x3c], ecx
call dword [edx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
lea ecx, [edx + 0xac]
mov dword [edx + 0x68], eax
mov ebx, dword [edx + 0xac]
mov dword [edx + 0x80], eax
mov dword [edx + 0x84], eax
mov dword [ebp - 0x40], ecx
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
lea ecx, [edx + 0xec]
mov dword [edx + 0xa8], eax
mov ebx, dword [edx + 0xec]
mov dword [edx + 0xc0], eax
mov dword [edx + 0xc4], eax
mov dword [ebp - 0x38], ecx
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
lea ecx, [edx + 0x12c]
mov dword [edx + 0xe8], eax
mov ebx, dword [edx + 0x12c]
mov dword [edx + 0x100], eax
mov dword [edx + 0x104], eax
mov dword [ebp - 0x34], ecx
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
lea ecx, [edx + 0x16c]
mov dword [edx + 0x128], eax
mov ebx, dword [edx + 0x16c]
mov dword [edx + 0x140], eax
mov dword [edx + 0x144], eax
mov dword [ebp - 0x30], ecx
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
lea ecx, [edx + 0x1ac]
mov dword [edx + 0x168], eax
mov ebx, dword [edx + 0x1ac]
mov dword [edx + 0x180], eax
mov dword [edx + 0x184], eax
mov dword [ebp - 0x2c], ecx
call dword [ebx + 0x24]
xor ecx, ecx
mov ebx, dword [ebp - 0x14]
xor eax, eax
mov dword [ebx + 0x1a8], ecx
xor edx, edx
mov edi, dword [ebx + 0xc]
mov dword [ebx + 0x1c0], ecx
xor esi, esi
mov dword [ebx + 0x1c4], ecx
mov dword [ebx + 0x550], ecx
mov dword [ebx + 0x76c], ecx
mov dword [ebx + 0x770], ecx
fld qword [0xa09f78]
lea ecx, [edi + 0x344]
fstp qword [ebx + 0x760]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], edx
mov edx, ecx
mov eax, dword [edi + 0x344]
mov dword [ebp - 0x18], esi
test eax, eax
je 0x4d9573
inc dword [ebp - 0x18]
mov edx, dword [edx + 4]
mov eax, dword [edx]
test eax, eax
jne 0x4d9567
xor eax, eax
mov edx, dword [ebp - 0x18]
test edx, edx
mov dword [ebp - 0x1c], eax
jle 0x4d975e
xor edx, edx
mov eax, dword [ebp - 0x1c]
test eax, eax
jle 0x4d95b5
cmp eax, 6
jl 0x4d95aa
lea eax, [eax - 6]
mov ecx, dword [ecx + 4]
mov ebx, dword [ecx + 4]
mov esi, dword [ebx + 4]
mov edi, dword [esi + 4]
mov ecx, dword [edi + 4]
add edx, 5
cmp edx, eax
jle 0x4d9594
mov ecx, dword [ecx + 4]
inc edx
mov eax, dword [ebp - 0x1c]
cmp edx, eax
jl 0x4d95aa
mov eax, dword [ecx]
lea ecx, [ebp - 0x84]
xor edx, edx
mov dword [ebp - 0x20], eax
mov dword [ecx], edx
mov dword [ecx + 4], edx
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], edx
mov dword [ecx + 0x10], edx
mov dword [ecx + 0x14], edx
mov dword [ecx + 0x18], edx
mov dword [ecx + 0x1c], edx
lea edx, [ebp - 0x84]
push 0x14
push eax
push edx
call fcn.00898e60
add esp, 0xc
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0x84]
push eax
call fcn.004061ac
mov dword [ebp - 4], 0x1f
mov edi, dword [ebp - 0xb4]
test edi, edi
jne 0x4d961f
mov eax, dword [ebp - 0x64]
xor ecx, ecx
mov edx, 0xffffffff
test eax, eax
mov eax, edx
jne 0x4d961d
mov eax, ecx
jmp 0x4d966a
mov esi, dword [ebp - 0x64]
test esi, esi
je 0x4d9665
mov al, byte [edi]
mov dl, byte [esi]
cmp al, dl
jl 0x4d965e
jle 0x4d9637
mov eax, 1
jmp 0x4d966a
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x4d9657
or dl, dl
je 0x4d9653
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x4d9657
add edi, 2
add esi, 2
or dl, dl
jne 0x4d9637
xor eax, eax
jmp 0x4d965c
sbb eax, eax
or eax, 1
jmp 0x4d966a
mov eax, 0xffffffff
jmp 0x4d966a
mov eax, 1
mov edx, 1
xor ebx, ebx
cmp eax, 0
cmove ebx, edx
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x64]
call fcn.00406220
cmp ebx, 0
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmovne edx, eax
lea ecx, [ebp - 0x60]
lea ebx, [ebp - 0x84]
mov dword [ebp - 0x24], edx
push ebx
call fcn.004061ac
mov dword [ebp - 4], 0x20
mov edi, dword [ebp - 0xb0]
test edi, edi
jne 0x4d96c9
mov eax, dword [ebp - 0x60]
xor ecx, ecx
mov edx, 0xffffffff
test eax, eax
mov eax, edx
jne 0x4d96c7
mov eax, ecx
jmp 0x4d9714
mov esi, dword [ebp - 0x60]
test esi, esi
je 0x4d970f
mov al, byte [edi]
mov dl, byte [esi]
cmp al, dl
jl 0x4d9708
jle 0x4d96e1
mov eax, 1
jmp 0x4d9714
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x4d9701
or dl, dl
je 0x4d96fd
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x4d9701
add edi, 2
add esi, 2
or dl, dl
jne 0x4d96e1
xor eax, eax
jmp 0x4d9706
sbb eax, eax
or eax, 1
jmp 0x4d9714
mov eax, 0xffffffff
jmp 0x4d9714
mov eax, 1
mov edx, 1
xor ebx, ebx
cmp eax, 0
cmove ebx, edx
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x60]
call fcn.00406220
cmp ebx, 0
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
cmovne edx, eax
mov ecx, dword [ebp - 0x1c]
inc ecx
mov dword [ebp - 0x28], edx
mov ebx, dword [ebp - 0x18]
cmp ecx, ebx
mov dword [ebp - 0x1c], ecx
jge 0x4d975e
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
add ecx, 0x344
jmp 0x4d9583
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x4da7d1
mov edx, eax
movzx ebx, byte [edx + 0x28]
mov eax, dword [ebp - 0x14]
mov word [eax + 0x75a], bx
mov ebx, dword [edx + 0x18]
mov ecx, dword [ebp - 0x28]
sub ebx, dword [edx + 0x14]
test ecx, ecx
je 0x4d9793
mov eax, ecx
mov edx, dword [eax + 0x18]
sub edx, dword [eax + 0x14]
cmp edx, ebx
cmovb ebx, edx
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov dword [edx + 0x770], 1
mov dword [edx + 0x740], 0x10
mov ecx, dword [eax + 0x24]
mov dword [edx + 0x744], ecx
cvtsi2ss xmm0, ecx
comiss xmm0, dword [0xa09fac]
jae 0x4d9848
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 4], 0x2c
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], edx
je 0x4da01d
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 4], 0x2d
mov dword [ebp - 4], 0x2e
mov dword [ebp - 4], 0x2d
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x1c]
add eax, 0x10
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
cmp eax, edx
jne 0x4d9802
jmp 0x4da014
fld qword [0xa09f78]
mov esi, edx
mov edx, dword [esi + 0xc]
fstp qword [esi + 0x760]
mov edi, dword [eax + 0x14]
add edi, edi
lea ecx, [ebp - 0xe8]
add edi, dword [edx + 0x34c]
mov dword [esi + 0x60], edi
push 0
push edi
call fcn.0043bd5c
mov edx, 1
mov al, byte [ebp + 0xc]
mov dword [esi + 0x76c], ebx
test al, al
mov dword [esi + 0x14], 0
je 0x4d98b2
lea esi, [ebp - 0xe8]
lea edx, [ebx + ebx]
xor eax, eax
push eax
mov ecx, dword [ebp - 0x14]
push eax
push edx
push esi
call fcn.004dcb88
mov ecx, 1
xor edx, edx
cmp eax, 0
cmove edx, ecx
test edx, edx
je 0x4d9cbf
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x4d9b43
mov esi, dword [ebp - 0x14]
mov edx, dword [esi + 0xc]
mov edi, dword [eax + 0x14]
add edi, edi
lea ecx, [ebp - 0xe8]
add edi, dword [edx + 0x34c]
mov dword [esi + 0x60], edi
push 0
push edi
call fcn.0043bd5c
fld qword [0xa09f78]
mov edx, esi
mov eax, dword [ebp - 0x28]
fstp qword [edx + 0x760]
mov ecx, dword [eax + 0x24]
mov dword [edx + 0x744], ecx
cvtsi2ss xmm0, ecx
comiss xmm0, dword [0xa09fac]
jae 0x4d9993
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 4], 0x42
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4da20d
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x184], eax
mov dword [ebp - 4], 0x43
mov dword [ebp - 4], 0x44
mov dword [ebp - 4], 0x43
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4d994d
jmp 0x4da204
mov edx, 1
mov al, byte [ebp + 0xc]
mov dword [esi + 0x76c], ebx
test al, al
je 0x4d99c7
lea eax, [ebp - 0xe8]
add ebx, ebx
mov ecx, esi
push 1
push 0
push ebx
push eax
call fcn.004dcb88
mov ecx, 1
xor edx, edx
cmp eax, 0
cmove edx, ecx
test edx, edx
je 0x4d99dc
mov eax, esi
mov dword [eax + 0x770], 2
jmp 0x4d9b43
mov eax, esi
mov edx, dword [eax + 0x6c]
mov ecx, dword [ebp - 0x3c]
call dword [edx + 0x24]
xor eax, eax
mov edx, esi
mov ebx, dword [edx + 0xac]
mov dword [edx + 0x68], eax
mov ecx, dword [ebp - 0x40]
mov dword [edx + 0x80], eax
mov dword [edx + 0x84], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, esi
mov ebx, dword [edx + 0xec]
mov dword [edx + 0xa8], eax
mov ecx, dword [ebp - 0x38]
mov dword [edx + 0xc0], eax
mov dword [edx + 0xc4], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, esi
mov ebx, dword [edx + 0x12c]
mov dword [edx + 0xe8], eax
mov ecx, dword [ebp - 0x34]
mov dword [edx + 0x100], eax
mov dword [edx + 0x104], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, esi
mov ebx, dword [edx + 0x16c]
mov dword [edx + 0x128], eax
mov ecx, dword [ebp - 0x30]
mov dword [edx + 0x140], eax
mov dword [edx + 0x144], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, esi
mov ebx, dword [edx + 0x1ac]
mov dword [edx + 0x168], eax
mov ecx, dword [ebp - 0x2c]
mov dword [edx + 0x180], eax
mov dword [edx + 0x184], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, esi
mov dword [edx + 0x1a8], eax
mov dword [edx + 0x1c0], eax
mov dword [edx + 0x1c4], eax
mov dword [edx + 0x550], eax
mov dword [edx + 0x76c], eax
mov dword [edx + 0x770], eax
fld qword [0xa09f78]
fstp qword [edx + 0x760]
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x154], eax
mov dword [ebp - 4], 0x4d
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x38], edx
je 0x4da3fd
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 4], 0x4e
mov dword [ebp - 4], 0x4f
mov dword [ebp - 4], 0x4e
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
cmp eax, edx
jne 0x4d9afd
jmp 0x4da3f4
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax + 0x1c]
mov esi, dword [eax + 0x20]
sub esi, ecx
mov edx, dword [ebp - 0x14]
sub ecx, dword [eax + 0x14]
fld qword [0xa09f78]
fdiv qword [edx + 0x760]
mov dword [ebp - 0x54], ecx
fild dword [ebp - 0x54]
fmul st(1)
fstp qword [ebp - 0x5c]
mov edx, dword [ebp - 0x5c]
mov ebx, dword [ebp - 0x58]
mov ecx, ebx
shr ecx, 0x14
and ecx, 0x7ff
cmp ecx, 0x3fe
jle 0x4d9ba5
mov eax, ebx
neg ecx
add ecx, 0x41e
shld eax, edx, 0xb
or eax, 0x80000000
shr eax, cl
mov edx, eax
neg edx
cmp ebx, 0
cmovge edx, eax
jmp 0x4d9ba7
xor edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x76c]
cmp edx, eax
jbe 0x4d9bbc
fstp st(0)
xor ecx, ecx
xor edx, edx
jmp 0x4d9c04
mov dword [ebp - 0x54], esi
fild dword [ebp - 0x54]
fmulp st(1)
fstp qword [ebp - 0x5c]
mov edi, dword [ebp - 0x5c]
mov ebx, dword [ebp - 0x58]
mov ecx, ebx
shr ecx, 0x14
and ecx, 0x7ff
cmp ecx, 0x3fe
jle 0x4d9c02
mov esi, ebx
neg ecx
add ecx, 0x41e
shld esi, edi, 0xb
or esi, 0x80000000
shr esi, cl
mov ecx, esi
neg ecx
cmp ebx, 0
cmovge ecx, esi
jmp 0x4d9c04
xor ecx, ecx
lea esi, [edx + ecx]
mov edi, eax
sub edi, edx
cmp esi, eax
mov eax, dword [ebp - 0x14]
cmovae ecx, edi
mov dword [eax + 0x554], edx
mov dword [eax + 0x558], ecx
xor edx, edx
mov dword [eax + 0x55c], edx
mov byte [eax + 0x560], dl
mov dword [eax + 0x564], 0x3f800000
mov byte [eax + 0x561], 3
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 4], 0x58
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4da5ed
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x114], eax
mov dword [ebp - 4], 0x59
mov dword [ebp - 4], 0x5a
mov dword [ebp - 4], 0x59
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4d9c79
jmp 0x4da5e4
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 0x6c]
mov ecx, dword [ebp - 0x3c]
call dword [edx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
mov ebx, dword [edx + 0xac]
mov dword [edx + 0x68], eax
mov ecx, dword [ebp - 0x40]
mov dword [edx + 0x80], eax
mov dword [edx + 0x84], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
mov ebx, dword [edx + 0xec]
mov dword [edx + 0xa8], eax
mov ecx, dword [ebp - 0x38]
mov dword [edx + 0xc0], eax
mov dword [edx + 0xc4], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
mov ebx, dword [edx + 0x12c]
mov dword [edx + 0xe8], eax
mov ecx, dword [ebp - 0x34]
mov dword [edx + 0x100], eax
mov dword [edx + 0x104], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
mov ebx, dword [edx + 0x16c]
mov dword [edx + 0x128], eax
mov ecx, dword [ebp - 0x30]
mov dword [edx + 0x140], eax
mov dword [edx + 0x144], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
mov ebx, dword [edx + 0x1ac]
mov dword [edx + 0x168], eax
mov ecx, dword [ebp - 0x2c]
mov dword [edx + 0x180], eax
mov dword [edx + 0x184], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x1a8], eax
mov dword [edx + 0x1c0], eax
mov dword [edx + 0x1c4], eax
mov dword [edx + 0x550], eax
mov dword [edx + 0x76c], eax
mov dword [edx + 0x770], eax
fld qword [0xa09f78]
fstp qword [edx + 0x760]
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 4], 0x37
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], edx
je 0x4d9e2d
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 4], 0x38
mov dword [ebp - 4], 0x39
mov dword [ebp - 4], 0x38
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x28]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x28]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
cmp eax, edx
jne 0x4d9de3
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x28], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 4], 0x3a
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], edx
je 0x4d9ec9
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 4], 0x3b
mov dword [ebp - 4], 0x3c
mov dword [ebp - 4], 0x3b
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x28]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x28]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
cmp eax, edx
jne 0x4d9e7f
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x28], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 4], 0x3d
mov dword [ebp - 4], 0x3e
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0x3d
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x19c], eax
mov dword [ebp - 4], 0x3f
mov dword [ebp - 4], 0x3d
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], edx
je 0x4d9fd1
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x194], eax
mov dword [ebp - 4], 0x40
mov dword [ebp - 4], 0x41
mov dword [ebp - 4], 0x40
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x28]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x28]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
cmp eax, edx
jne 0x4d9f87
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x28], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 4
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 4], 0x2f
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], edx
je 0x4da0b9
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 4], 0x30
mov dword [ebp - 4], 0x31
mov dword [ebp - 4], 0x30
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x1c]
add eax, 0x10
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
cmp eax, edx
jne 0x4da06f
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x1c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 4], 0x32
mov dword [ebp - 4], 0x33
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0x32
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 4], 0x34
mov dword [ebp - 4], 0x32
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], edx
je 0x4da1c1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 4], 0x35
mov dword [ebp - 4], 0x36
mov dword [ebp - 4], 0x35
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x1c]
add eax, 0x10
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
cmp eax, edx
jne 0x4da177
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1c], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 2
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x17c], eax
mov dword [ebp - 4], 0x45
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4da2a9
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x174], eax
mov dword [ebp - 4], 0x46
mov dword [ebp - 4], 0x47
mov dword [ebp - 4], 0x46
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4da25f
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 4], 0x48
mov dword [ebp - 4], 0x49
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0x48
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x164], eax
mov dword [ebp - 4], 0x4a
mov dword [ebp - 4], 0x48
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4da3b1
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 4], 0x4b
mov dword [ebp - 4], 0x4c
mov dword [ebp - 4], 0x4b
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4da367
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 2
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x144], eax
mov dword [ebp - 4], 0x50
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x38], edx
je 0x4da499
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 4], 0x51
mov dword [ebp - 4], 0x52
mov dword [ebp - 4], 0x51
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
cmp eax, edx
jne 0x4da44f
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x2c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0x53
mov dword [ebp - 4], 0x54
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0x53
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 4], 0x55
mov dword [ebp - 4], 0x53
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x38], edx
je 0x4da5a1
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x124], eax
mov dword [ebp - 4], 0x56
mov dword [ebp - 4], 0x57
mov dword [ebp - 4], 0x56
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
cmp eax, edx
jne 0x4da557
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x2c], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 4
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 4], 0x5b
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4da689
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x104], eax
mov dword [ebp - 4], 0x5c
mov dword [ebp - 4], 0x5d
mov dword [ebp - 4], 0x5c
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4da63f
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0xfc], eax
mov dword [ebp - 4], 0x5e
mov dword [ebp - 4], 0x5f
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0x5e
lea eax, [ebp - 0xc8]
mov dword [ebp - 0xf4], eax
mov dword [ebp - 4], 0x60
mov dword [ebp - 4], 0x5e
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4da791
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xec], eax
mov dword [ebp - 4], 0x61
mov dword [ebp - 4], 0x62
mov dword [ebp - 4], 0x61
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4da747
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
xor eax, eax
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x234], eax
mov dword [ebp - 4], 0x21
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4da852
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 4], 0x22
mov dword [ebp - 4], 0x23
mov dword [ebp - 4], 0x22
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4da808
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x224], eax
mov dword [ebp - 4], 0x24
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4da8ee
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x21c], eax
mov dword [ebp - 4], 0x25
mov dword [ebp - 4], 0x26
mov dword [ebp - 4], 0x25
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4da8a4
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 0x27
mov dword [ebp - 4], 0x28
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0x27
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x20c], eax
mov dword [ebp - 4], 0x29
mov dword [ebp - 4], 0x27
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4da9f6
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x204], eax
mov dword [ebp - 4], 0x2a
mov dword [ebp - 4], 0x2b
mov dword [ebp - 4], 0x2a
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4da9ac
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 1
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov esi, dword [ebp - 0xc4]
push esi
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 1
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x294], eax
mov dword [ebp - 4], 0xc
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4dab27
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28c], eax
mov dword [ebp - 4], 0xd
mov dword [ebp - 4], 0xe
mov dword [ebp - 4], 0xd
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4daadd
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x284], eax
mov dword [ebp - 4], 0xf
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0xf
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x27c], eax
mov dword [ebp - 4], 0x11
mov dword [ebp - 4], 0xf
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4dac2f
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x274], eax
mov dword [ebp - 4], 0x12
mov dword [ebp - 4], 0x13
mov dword [ebp - 4], 0x12
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4dabe5
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 1
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 4], 0x17
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4dad17
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x254], eax
mov dword [ebp - 4], 0x18
mov dword [ebp - 4], 0x19
mov dword [ebp - 4], 0x18
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4daccd
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 4], 0x1a
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0x1a
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x244], eax
mov dword [ebp - 4], 0x1c
mov dword [ebp - 4], 0x1a
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4dae1f
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 4], 0x1d
mov dword [ebp - 4], 0x1e
mov dword [ebp - 4], 0x1d
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4dadd5
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 1
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x8b5b32
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2a8
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x48], esi
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x14], ecx
test eax, eax
je 0x4dcb73
lea ecx, [ebp - 0xe8]
call fcn.0044f6d0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.0041cbf8
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.0041cbf8
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.0041cbf8
mov dword [ebp - 4], 3
lea ecx, [ebp - 0xa8]
call fcn.004e4b6c
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x98]
call fcn.004e4b6c
mov dword [ebp - 4], 5
lea edi, [ebp - 0xa8]
lea esi, [ebp - 0x88]
lea ebx, [ebp - 0xb4]
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0xac]
mov ecx, dword [ebp + 8]
push eax
push edx
push ebx
push esi
push edi
call fcn.004ebd38
movzx eax, al
test eax, eax
jne 0x4db02a
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x98]
call fcn.0040b540
mov dword [ebp - 4], 3
lea ecx, [ebp - 0xa8]
call fcn.0040b540
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 4], 6
mov dword [ebp - 4], 7
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 6
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 4], 8
mov dword [ebp - 4], 6
mov esi, dword [ebp - 0xc4]
mov ebx, dword [ebp - 0xc0]
cmp esi, ebx
je 0x4dc750
mov ecx, esi
call fcn.00411784
add esi, 0x10
cmp esi, ebx
jne 0x4db017
jmp 0x4dc74a
lea eax, [ebp - 0xa8]
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0xc]
push eax
call fcn.00624870
movzx eax, al
test eax, eax
jne 0x4db0c8
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 4], 9
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4dc79c
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x29c], eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 4], 0xb
mov dword [ebp - 4], 0xa
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4db082
jmp 0x4dc793
lea ecx, [ebp - 0xe8]
lea edx, [ebp - 0xa8]
xor eax, eax
push 0x58585858
push eax
push eax
push eax
push edx
call fcn.0043c40c
test eax, eax
je 0x4db16d
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x26c], eax
mov dword [ebp - 4], 0x14
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4dc98c
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x264], eax
mov dword [ebp - 4], 0x15
mov dword [ebp - 4], 0x16
mov dword [ebp - 4], 0x15
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4db127
jmp 0x4dc983
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 0x6c]
mov edx, dword [eax + 0x6c]
mov dword [ebp - 0x3c], ecx
call dword [edx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
lea ecx, [edx + 0xac]
mov dword [edx + 0x68], eax
mov ebx, dword [edx + 0xac]
mov dword [edx + 0x80], eax
mov dword [edx + 0x84], eax
mov dword [ebp - 0x40], ecx
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
lea ecx, [edx + 0xec]
mov dword [edx + 0xa8], eax
mov ebx, dword [edx + 0xec]
mov dword [edx + 0xc0], eax
mov dword [edx + 0xc4], eax
mov dword [ebp - 0x38], ecx
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
lea ecx, [edx + 0x12c]
mov dword [edx + 0xe8], eax
mov ebx, dword [edx + 0x12c]
mov dword [edx + 0x100], eax
mov dword [edx + 0x104], eax
mov dword [ebp - 0x34], ecx
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
lea ecx, [edx + 0x16c]
mov dword [edx + 0x128], eax
mov ebx, dword [edx + 0x16c]
mov dword [edx + 0x140], eax
mov dword [edx + 0x144], eax
mov dword [ebp - 0x30], ecx
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
lea ecx, [edx + 0x1ac]
mov dword [edx + 0x168], eax
mov ebx, dword [edx + 0x1ac]
mov dword [edx + 0x180], eax
mov dword [edx + 0x184], eax
mov dword [ebp - 0x2c], ecx
call dword [ebx + 0x24]
xor ecx, ecx
mov ebx, dword [ebp - 0x14]
xor eax, eax
mov dword [ebx + 0x1a8], ecx
xor edx, edx
mov edi, dword [ebx + 0xc]
mov dword [ebx + 0x1c0], ecx
xor esi, esi
mov dword [ebx + 0x1c4], ecx
mov dword [ebx + 0x550], ecx
mov dword [ebx + 0x76c], ecx
mov dword [ebx + 0x770], ecx
fld qword [0xa09fa0]
lea ecx, [edi + 0x344]
fstp qword [ebx + 0x760]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], edx
mov edx, ecx
mov eax, dword [edi + 0x344]
mov dword [ebp - 0x18], esi
test eax, eax
je 0x4db2ab
inc dword [ebp - 0x18]
mov edx, dword [edx + 4]
mov eax, dword [edx]
test eax, eax
jne 0x4db29f
xor eax, eax
mov edx, dword [ebp - 0x18]
test edx, edx
mov dword [ebp - 0x1c], eax
jle 0x4db47c
xor edx, edx
mov eax, dword [ebp - 0x1c]
test eax, eax
jle 0x4db2ed
cmp eax, 6
jl 0x4db2e2
lea eax, [eax - 6]
mov ecx, dword [ecx + 4]
mov ebx, dword [ecx + 4]
mov esi, dword [ebx + 4]
mov edi, dword [esi + 4]
mov ecx, dword [edi + 4]
add edx, 5
cmp edx, eax
jle 0x4db2cc
mov ecx, dword [ecx + 4]
inc edx
mov eax, dword [ebp - 0x1c]
cmp edx, eax
jl 0x4db2e2
mov eax, dword [ecx]
lea ecx, [ebp - 0x84]
xor edx, edx
mov dword [ebp - 0x20], eax
mov dword [ecx], edx
mov dword [ecx + 4], edx
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], edx
mov dword [ecx + 0x10], edx
mov dword [ecx + 0x14], edx
mov dword [ecx + 0x18], edx
mov dword [ecx + 0x1c], edx
lea edx, [ebp - 0x84]
push 0x14
push eax
push edx
call fcn.00898e60
add esp, 0xc
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0x84]
push eax
call fcn.004061ac
mov dword [ebp - 4], 0x1f
mov edi, dword [ebp - 0xb4]
test edi, edi
jne 0x4db355
mov eax, dword [ebp - 0x64]
test eax, eax
jne 0x4db34e
xor eax, eax
jmp 0x4db3a0
mov eax, 0xffffffff
jmp 0x4db3a0
mov esi, dword [ebp - 0x64]
test esi, esi
je 0x4db39b
mov al, byte [edi]
mov dl, byte [esi]
cmp al, dl
jl 0x4db394
jle 0x4db36d
mov eax, 1
jmp 0x4db3a0
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x4db38d
or dl, dl
je 0x4db389
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x4db38d
add edi, 2
add esi, 2
or dl, dl
jne 0x4db36d
xor eax, eax
jmp 0x4db392
sbb eax, eax
or eax, 1
jmp 0x4db3a0
mov eax, 0xffffffff
jmp 0x4db3a0
mov eax, 1
xor ebx, ebx
test eax, eax
sete bl
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x64]
call fcn.00406220
test ebx, ebx
je 0x4db3c0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x60]
lea eax, [ebp - 0x84]
push eax
call fcn.004061ac
mov dword [ebp - 4], 0x20
mov edi, dword [ebp - 0xb0]
test edi, edi
jne 0x4db3f2
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x4db3eb
xor eax, eax
jmp 0x4db43d
mov eax, 0xffffffff
jmp 0x4db43d
mov esi, dword [ebp - 0x60]
test esi, esi
je 0x4db438
mov al, byte [edi]
mov dl, byte [esi]
cmp al, dl
jl 0x4db431
jle 0x4db40a
mov eax, 1
jmp 0x4db43d
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x4db42a
or dl, dl
je 0x4db426
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x4db42a
add edi, 2
add esi, 2
or dl, dl
jne 0x4db40a
xor eax, eax
jmp 0x4db42f
sbb eax, eax
or eax, 1
jmp 0x4db43d
mov eax, 0xffffffff
jmp 0x4db43d
mov eax, 1
xor ebx, ebx
test eax, eax
sete bl
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x60]
call fcn.00406220
test ebx, ebx
je 0x4db45d
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1c]
inc eax
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
cmp eax, edx
jge 0x4db47c
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
add ecx, 0x344
jmp 0x4db2bb
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x4dc4e2
mov edx, eax
movzx ebx, byte [edx + 0x28]
mov eax, dword [ebp - 0x14]
mov word [eax + 0x75a], bx
mov ebx, dword [edx + 0x18]
mov ecx, dword [ebp - 0x28]
sub ebx, dword [edx + 0x14]
test ecx, ecx
je 0x4db4b2
mov eax, ecx
mov edx, dword [eax + 0x18]
sub edx, dword [eax + 0x14]
cmp edx, ebx
jae 0x4db4b2
mov ebx, edx
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x24]
mov dword [ecx + 0x770], 1
mov dword [ecx + 0x740], 0x10
mov esi, dword [edx + 0x24]
mov dword [ecx + 0x744], esi
mov dword [ebp - 0x54], esi
fild dword [ebp - 0x54]
fcomp qword [0xa09f98]
fnstsw ax
sahf
jae 0x4db56b
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 4], 0x2c
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], edx
je 0x4dbd2e
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 4], 0x2d
mov dword [ebp - 4], 0x2e
mov dword [ebp - 4], 0x2d
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x1c]
add eax, 0x10
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
cmp eax, edx
jne 0x4db525
jmp 0x4dbd25
fld qword [0xa09fa0]
mov esi, ecx
mov edx, dword [esi + 0xc]
fstp qword [esi + 0x760]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax + 0x14]
add edi, edi
lea ecx, [ebp - 0xe8]
add edi, dword [edx + 0x34c]
mov dword [esi + 0x60], edi
push 0
push edi
call fcn.0043bd5c
mov edx, 1
mov al, byte [ebp + 0xc]
mov dword [esi + 0x76c], ebx
test al, al
mov dword [esi + 0x14], 0
je 0x4db5d2
lea esi, [ebp - 0xe8]
lea edx, [ebx + ebx]
xor eax, eax
push eax
mov ecx, dword [ebp - 0x14]
push eax
push edx
push esi
call fcn.004dcb88
xor edx, edx
test eax, eax
sete dl
test edx, edx
je 0x4db9d0
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x4db861
mov esi, dword [ebp - 0x14]
mov edx, dword [esi + 0xc]
mov edi, dword [eax + 0x14]
add edi, edi
lea ecx, [ebp - 0xe8]
add edi, dword [edx + 0x34c]
mov dword [esi + 0x60], edi
push 0
push edi
call fcn.0043bd5c
fld qword [0xa09fa0]
mov ecx, esi
mov edx, dword [ebp - 0x28]
fstp qword [ecx + 0x760]
mov esi, dword [edx + 0x24]
mov dword [ecx + 0x744], esi
mov dword [ebp - 0x54], esi
fild dword [ebp - 0x54]
fcomp qword [0xa09f98]
fnstsw ax
sahf
jae 0x4db6b7
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 4], 0x42
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4dbf1e
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x184], eax
mov dword [ebp - 4], 0x43
mov dword [ebp - 4], 0x44
mov dword [ebp - 4], 0x43
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4db671
jmp 0x4dbf15
mov esi, ecx
mov edx, 1
mov al, byte [ebp + 0xc]
mov dword [esi + 0x76c], ebx
test al, al
je 0x4db6e5
lea eax, [ebp - 0xe8]
add ebx, ebx
push 1
push 0
push ebx
push eax
call fcn.004dcb88
xor edx, edx
test eax, eax
sete dl
test edx, edx
je 0x4db6fa
mov eax, esi
mov dword [eax + 0x770], 2
jmp 0x4db861
mov eax, esi
mov edx, dword [eax + 0x6c]
mov ecx, dword [ebp - 0x3c]
call dword [edx + 0x24]
xor eax, eax
mov edx, esi
mov ebx, dword [edx + 0xac]
mov dword [edx + 0x68], eax
mov ecx, dword [ebp - 0x40]
mov dword [edx + 0x80], eax
mov dword [edx + 0x84], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, esi
mov ebx, dword [edx + 0xec]
mov dword [edx + 0xa8], eax
mov ecx, dword [ebp - 0x38]
mov dword [edx + 0xc0], eax
mov dword [edx + 0xc4], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, esi
mov ebx, dword [edx + 0x12c]
mov dword [edx + 0xe8], eax
mov ecx, dword [ebp - 0x34]
mov dword [edx + 0x100], eax
mov dword [edx + 0x104], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, esi
mov ebx, dword [edx + 0x16c]
mov dword [edx + 0x128], eax
mov ecx, dword [ebp - 0x30]
mov dword [edx + 0x140], eax
mov dword [edx + 0x144], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, esi
mov ebx, dword [edx + 0x1ac]
mov dword [edx + 0x168], eax
mov ecx, dword [ebp - 0x2c]
mov dword [edx + 0x180], eax
mov dword [edx + 0x184], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, esi
mov dword [edx + 0x1a8], eax
mov dword [edx + 0x1c0], eax
mov dword [edx + 0x1c4], eax
mov dword [edx + 0x550], eax
mov dword [edx + 0x76c], eax
mov dword [edx + 0x770], eax
fld qword [0xa09fa0]
fstp qword [edx + 0x760]
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x154], eax
mov dword [ebp - 4], 0x4d
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x38], edx
je 0x4dc10e
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 4], 0x4e
mov dword [ebp - 4], 0x4f
mov dword [ebp - 4], 0x4e
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
cmp eax, edx
jne 0x4db81b
jmp 0x4dc105
mov edx, dword [ebp - 0x24]
mov ebx, dword [edx + 0x1c]
mov eax, dword [edx + 0x20]
sub eax, ebx
mov ecx, dword [ebp - 0x14]
sub ebx, dword [edx + 0x14]
fld qword [0xa09fa0]
fdiv qword [ecx + 0x760]
mov dword [ebp - 0x54], ebx
fild dword [ebp - 0x54]
fmul st(1)
fstp qword [ebp - 0x5c]
mov ebx, dword [ebp - 0x5c]
mov esi, dword [ebp - 0x58]
mov ecx, esi
shr ecx, 0x14
and ecx, 0x7ff
cmp ecx, 0x3fe
jle 0x4db8c0
mov edx, esi
neg ecx
add ecx, 0x41e
shld edx, ebx, 0xb
or edx, 0x80000000
shr edx, cl
test esi, esi
jge 0x4db8c2
neg edx
jmp 0x4db8c2
xor edx, edx
mov dword [ebp - 0x54], eax
fild dword [ebp - 0x54]
fmulp st(1)
fstp qword [ebp - 0x5c]
mov ebx, dword [ebp - 0x5c]
mov esi, dword [ebp - 0x58]
mov ecx, esi
shr ecx, 0x14
and ecx, 0x7ff
cmp ecx, 0x3fe
jle 0x4db903
mov eax, esi
neg ecx
add ecx, 0x41e
shld eax, ebx, 0xb
or eax, 0x80000000
shr eax, cl
test esi, esi
jge 0x4db905
neg eax
jmp 0x4db905
xor eax, eax
mov ecx, dword [ebp - 0x14]
mov ebx, dword [ecx + 0x76c]
cmp edx, ebx
jbe 0x4db916
xor eax, eax
xor edx, edx
lea ecx, [eax + edx]
cmp ecx, ebx
jb 0x4db921
mov eax, ebx
sub eax, edx
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x554], edx
mov dword [ecx + 0x558], eax
xor eax, eax
mov dword [ecx + 0x55c], eax
mov byte [ecx + 0x560], al
mov dword [ecx + 0x564], 0x3f800000
mov byte [ecx + 0x561], 3
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 4], 0x58
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4dc2fe
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x114], eax
mov dword [ebp - 4], 0x59
mov dword [ebp - 4], 0x5a
mov dword [ebp - 4], 0x59
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4db98a
jmp 0x4dc2f5
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 0x6c]
mov ecx, dword [ebp - 0x3c]
call dword [edx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
mov ebx, dword [edx + 0xac]
mov dword [edx + 0x68], eax
mov ecx, dword [ebp - 0x40]
mov dword [edx + 0x80], eax
mov dword [edx + 0x84], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
mov ebx, dword [edx + 0xec]
mov dword [edx + 0xa8], eax
mov ecx, dword [ebp - 0x38]
mov dword [edx + 0xc0], eax
mov dword [edx + 0xc4], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
mov ebx, dword [edx + 0x12c]
mov dword [edx + 0xe8], eax
mov ecx, dword [ebp - 0x34]
mov dword [edx + 0x100], eax
mov dword [edx + 0x104], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
mov ebx, dword [edx + 0x16c]
mov dword [edx + 0x128], eax
mov ecx, dword [ebp - 0x30]
mov dword [edx + 0x140], eax
mov dword [edx + 0x144], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
mov ebx, dword [edx + 0x1ac]
mov dword [edx + 0x168], eax
mov ecx, dword [ebp - 0x2c]
mov dword [edx + 0x180], eax
mov dword [edx + 0x184], eax
call dword [ebx + 0x24]
xor eax, eax
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x1a8], eax
mov dword [edx + 0x1c0], eax
mov dword [edx + 0x1c4], eax
mov dword [edx + 0x550], eax
mov dword [edx + 0x76c], eax
mov dword [edx + 0x770], eax
fld qword [0xa09fa0]
fstp qword [edx + 0x760]
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 4], 0x37
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4dbb3e
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 4], 0x38
mov dword [ebp - 4], 0x39
mov dword [ebp - 4], 0x38
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4dbaf4
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 4], 0x3a
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4dbbda
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 4], 0x3b
mov dword [ebp - 4], 0x3c
mov dword [ebp - 4], 0x3b
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4dbb90
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 4], 0x3d
mov dword [ebp - 4], 0x3e
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0x3d
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x19c], eax
mov dword [ebp - 4], 0x3f
mov dword [ebp - 4], 0x3d
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4dbce2
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x194], eax
mov dword [ebp - 4], 0x40
mov dword [ebp - 4], 0x41
mov dword [ebp - 4], 0x40
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4dbc98
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 4
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 4], 0x2f
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], edx
je 0x4dbdca
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 4], 0x30
mov dword [ebp - 4], 0x31
mov dword [ebp - 4], 0x30
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x1c]
add eax, 0x10
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
cmp eax, edx
jne 0x4dbd80
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x1c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 4], 0x32
mov dword [ebp - 4], 0x33
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0x32
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 4], 0x34
mov dword [ebp - 4], 0x32
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], edx
je 0x4dbed2
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 4], 0x35
mov dword [ebp - 4], 0x36
mov dword [ebp - 4], 0x35
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x1c]
add eax, 0x10
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
cmp eax, edx
jne 0x4dbe88
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1c], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 2
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x17c], eax
mov dword [ebp - 4], 0x45
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4dbfba
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x174], eax
mov dword [ebp - 4], 0x46
mov dword [ebp - 4], 0x47
mov dword [ebp - 4], 0x46
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4dbf70
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 4], 0x48
mov dword [ebp - 4], 0x49
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0x48
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x164], eax
mov dword [ebp - 4], 0x4a
mov dword [ebp - 4], 0x48
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4dc0c2
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 4], 0x4b
mov dword [ebp - 4], 0x4c
mov dword [ebp - 4], 0x4b
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4dc078
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 2
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x144], eax
mov dword [ebp - 4], 0x50
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x40], edx
je 0x4dc1aa
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 4], 0x51
mov dword [ebp - 4], 0x52
mov dword [ebp - 4], 0x51
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], eax
cmp eax, edx
jne 0x4dc160
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x2c], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0x53
mov dword [ebp - 4], 0x54
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0x53
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 4], 0x55
mov dword [ebp - 4], 0x53
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x38], edx
je 0x4dc2b2
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x124], eax
mov dword [ebp - 4], 0x56
mov dword [ebp - 4], 0x57
mov dword [ebp - 4], 0x56
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x28]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x28]
add eax, 0x10
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
cmp eax, edx
jne 0x4dc268
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x28], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 4
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 4], 0x5b
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4dc39a
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x104], eax
mov dword [ebp - 4], 0x5c
mov dword [ebp - 4], 0x5d
mov dword [ebp - 4], 0x5c
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4dc350
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0xfc], eax
mov dword [ebp - 4], 0x5e
mov dword [ebp - 4], 0x5f
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0x5e
lea eax, [ebp - 0xc8]
mov dword [ebp - 0xf4], eax
mov dword [ebp - 4], 0x60
mov dword [ebp - 4], 0x5e
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], edx
je 0x4dc4a2
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xec], eax
mov dword [ebp - 4], 0x61
mov dword [ebp - 4], 0x62
mov dword [ebp - 4], 0x61
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4dc458
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
xor eax, eax
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov dword [ebp - 4], 4
lea eax, [ebp - 0x98]
mov dword [ebp - 0x234], eax
mov dword [ebp - 4], 0x21
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], edx
je 0x4dc563
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 4], 0x22
mov dword [ebp - 4], 0x23
mov dword [ebp - 4], 0x22
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4dc519
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x224], eax
mov dword [ebp - 4], 0x24
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], edx
je 0x4dc5ff
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x21c], eax
mov dword [ebp - 4], 0x25
mov dword [ebp - 4], 0x26
mov dword [ebp - 4], 0x25
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4dc5b5
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 0x27
mov dword [ebp - 4], 0x28
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0x27
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x20c], eax
mov dword [ebp - 4], 0x29
mov dword [ebp - 4], 0x27
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], edx
je 0x4dc707
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x204], eax
mov dword [ebp - 4], 0x2a
mov dword [ebp - 4], 0x2b
mov dword [ebp - 4], 0x2a
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x24]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
cmp eax, edx
jne 0x4dc6bd
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x24], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 1
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov esi, dword [ebp - 0xc4]
push esi
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 1
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x294], eax
mov dword [ebp - 4], 0xc
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4dc838
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28c], eax
mov dword [ebp - 4], 0xd
mov dword [ebp - 4], 0xe
mov dword [ebp - 4], 0xd
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4dc7ee
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x284], eax
mov dword [ebp - 4], 0xf
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0xf
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x27c], eax
mov dword [ebp - 4], 0x11
mov dword [ebp - 4], 0xf
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4dc940
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x274], eax
mov dword [ebp - 4], 0x12
mov dword [ebp - 4], 0x13
mov dword [ebp - 4], 0x12
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4dc8f6
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 1
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 4], 0x17
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4dca28
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x254], eax
mov dword [ebp - 4], 0x18
mov dword [ebp - 4], 0x19
mov dword [ebp - 4], 0x18
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4dc9de
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xac]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.00406220
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.00406220
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 4], 0x1a
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0xe8], 0x9f6a40
lea ecx, [ebp - 0xe8]
call fcn.0043c3e0
mov dword [ebp - 4], 0x1a
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x244], eax
mov dword [ebp - 4], 0x1c
mov dword [ebp - 4], 0x1a
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4dcb30
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 4], 0x1d
mov dword [ebp - 4], 0x1e
mov dword [ebp - 4], 0x1d
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4dcae6
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 1
mov edi, dword [ebp - 0x4c]
mov dword [ebp - 0xc4], edx
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xe8], 0x9f6a18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8