Function at 0x41a400
Capabilities:
Delete service
Stop service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56330c
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x661850]
xor eax, ebp
mov dword [ebp - 0x20], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x180], ecx
push str.Wed_Sep_30_22:04:02_2015
push 0xd07
push 0x5771a8
push str.GameProcessGameProc.cpp
lea ecx, [ebp - 0xd]
call fcn.004024e0
mov dword [ebp - 4], 0
cmp dword [ebp + 8], 1
jne 0x41a61d
mov dword [ebp - 0x14], 0xff
fld dword [0x576100]
fstp dword [ebp - 0x18]
mov eax, dword [ebp - 0x180]
mov cl, byte [eax + 0x100b3e]
mov byte [ebp - 0x184], cl
cmp byte [ebp - 0x184], 0
je 0x41a4a8
cmp byte [ebp - 0x184], 1
je 0x41a4b3
cmp byte [ebp - 0x184], 2
je 0x41a49d
jmp 0x41a4bc
fld dword [0x5771a4]
fstp dword [ebp - 0x18]
jmp 0x41a4bc
fld dword [0x576100]
fstp dword [ebp - 0x18]
jmp 0x41a4bc
fld dword [0x5771a0]
fstp dword [ebp - 0x18]
mov edx, dword [ebp - 0x180]
fld dword [edx + 0x111298]
fld dword [ebp - 0x18]
fcompp
fnstsw ax
test ah, 5
jp 0x41a4f4
mov eax, dword [ebp - 0x180]
fld dword [eax + 0x111298]
fsub qword [0x576408]
mov ecx, dword [ebp - 0x180]
fstp dword [ecx + 0x111298]
jmp 0x41a53f
mov edx, dword [ebp - 0x180]
fld dword [edx + 0x111298]
fld dword [ebp - 0x18]
fcompp
fnstsw ax
test ah, 0x41
jne 0x41a52c
mov eax, dword [ebp - 0x180]
fld dword [eax + 0x111298]
fadd qword [0x576408]
mov ecx, dword [ebp - 0x180]
fstp dword [ecx + 0x111298]
jmp 0x41a53f
push 1
mov ecx, 0x69ec08
call fcn.004edfb0
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [ebp - 0x180]
fld dword [edx + 0x111298]
fnstcw word [ebp - 0x186]
movzx eax, word [ebp - 0x186]
or eax, 0xc00
mov dword [ebp - 0x18c], eax
fldcw word [ebp - 0x18c]
fistp dword [ebp - 0x190]
fldcw word [ebp - 0x186]
movzx ecx, byte [ebp - 0x190]
mov edx, dword [ebp - 0x180]
fld dword [edx + 0x111298]
fnstcw word [ebp - 0x192]
movzx eax, word [ebp - 0x192]
or eax, 0xc00
mov dword [ebp - 0x198], eax
fldcw word [ebp - 0x198]
fistp dword [ebp - 0x19c]
fldcw word [ebp - 0x192]
movzx eax, byte [ebp - 0x19c]
shl eax, 8
or ecx, eax
mov edx, dword [ebp - 0x180]
fld dword [edx + 0x111298]
fnstcw word [ebp - 0x19e]
movzx eax, word [ebp - 0x19e]
or eax, 0xc00
mov dword [ebp - 0x1a4], eax
fldcw word [ebp - 0x1a4]
fistp dword [ebp - 0x1a8]
fldcw word [ebp - 0x19e]
movzx eax, byte [ebp - 0x1a8]
shl eax, 0x10
or ecx, eax
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x180]
add ecx, 0x100b44
call fcn.004b1020
jmp 0x41b969
cmp dword [ebp + 8], 8
jne 0x41a680
mov edx, dword [ebp - 0x180]
fld dword [edx + 0xa50]
fsub qword [0x577198]
mov eax, dword [ebp - 0x180]
fstp dword [eax + 0xa50]
mov ecx, dword [ebp - 0x180]
fld dword [ecx + 0xa50]
fcomp qword [0x577198]
fnstsw ax
test ah, 0x41
jp 0x41a67b
mov edx, dword [ebp - 0x180]
fld1
fstp dword [edx + 0xa50]
push 8
mov ecx, 0x69ec08
call fcn.004edfb0
push eax
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x41b969
cmp dword [ebp + 8], 6
jne 0x41a7d7
mov eax, dword [ebp - 0x180]
movzx ecx, word [eax + 0x11270a]
test ecx, ecx
jle 0x41a72e
mov edx, dword [ebp - 0x180]
movzx eax, word [edx + 0xfb38a]
mov ecx, dword [ebp - 0x180]
movzx edx, byte [ecx + 0x112708]
add eax, edx
mov ecx, dword [ebp - 0x180]
movzx edx, word [ecx + 0xfb388]
cmp eax, edx
jl 0x41a6e8
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x180]
mov dx, word [ecx + 0xfb388]
mov word [eax + 0xfb38a], dx
jmp 0x41a711
mov eax, dword [ebp - 0x180]
movzx ecx, word [eax + 0xfb38a]
mov edx, dword [ebp - 0x180]
movzx eax, byte [edx + 0x112708]
add ecx, eax
mov edx, dword [ebp - 0x180]
mov word [edx + 0xfb38a], cx
mov eax, dword [ebp - 0x180]
movzx ecx, word [eax + 0x11270a]
sub ecx, 1
mov edx, dword [ebp - 0x180]
mov word [edx + 0x11270a], cx
mov eax, dword [ebp - 0x180]
movzx ecx, word [eax + 0x11270c]
test ecx, ecx
jle 0x41a7d2
mov edx, dword [ebp - 0x180]
movzx eax, word [edx + 0xfb38e]
mov ecx, dword [ebp - 0x180]
movzx edx, byte [ecx + 0x112709]
add eax, edx
movzx eax, ax
mov ecx, dword [ebp - 0x180]
cmp eax, dword [ecx + 0xff55b]
jb 0x41a78c
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x180]
mov cx, word [eax + 0xff55b]
mov word [edx + 0xfb38e], cx
jmp 0x41a7b5
mov edx, dword [ebp - 0x180]
movzx eax, word [edx + 0xfb38e]
mov ecx, dword [ebp - 0x180]
movzx edx, byte [ecx + 0x112709]
add eax, edx
mov ecx, dword [ebp - 0x180]
mov word [ecx + 0xfb38e], ax
mov edx, dword [ebp - 0x180]
movzx eax, word [edx + 0x11270a]
sub eax, 1
mov ecx, dword [ebp - 0x180]
mov word [ecx + 0x11270a], ax
jmp 0x41b969
cmp dword [ebp + 8], 3
jne 0x41a8f1
mov edx, dword [0x66a7e8]
add edx, 1
mov dword [0x66a7e8], edx
mov dword [ebp - 0x1c], 1
cmp dword [0x66a7e8], 0x32
jbe 0x41a8ec
mov ecx, 0x7d27e8
call fcn.004411b0
mov ecx, 0x7d27e8
call fcn.00447e50
mov ecx, 0x7d27e8
call fcn.00448050
mov ecx, 0x7d27e8
call fcn.00449f40
mov ecx, 0x7d27e8
call fcn.004447e0
mov eax, dword [ebp - 0x180]
movzx ecx, byte [eax + 0xfe115]
test ecx, ecx
jne 0x41a8e1
mov ecx, 0x7d27e8
call fcn.00444fa0
mov ecx, 0x7d27e8
call fcn.004437b0
mov ecx, 0x7d27e8
call fcn.004429b0
mov ecx, 0x7d27e8
call fcn.004484e0
mov ecx, 0x7d27e8
call fcn.00448680
mov ecx, 0x7d27e8
call fcn.00448820
mov ecx, 0x7d27e8
call fcn.004489b0
mov ecx, 0x7d27e8
call fcn.00448b40
mov ecx, 0x7d27e8
call fcn.004418b0
mov ecx, 0x7d27e8
call fcn.00441e40
mov ecx, 0x7d27e8
call fcn.00441b30
mov ecx, 0x7d27e8
call fcn.004419c0
mov ecx, 0x7d27e8
call fcn.004476f0
mov ecx, 0x7d27e8
call fcn.004417a0
mov ecx, 0x7d27e8
call fcn.004451f0
mov ecx, dword [ebp - 0x180]
call fcn.00413170
jmp 0x41b969
cmp dword [ebp + 8], 4
jne 0x41a9a8
push 0xf003f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x41a9a3
push 0xf01ff
push str.WINIO
mov edx, dword [ebp - 0x40]
push edx
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
je 0x41a958
lea eax, [ebp - 0x3c]
push eax
push 1
mov ecx, dword [ebp - 0x44]
push ecx
call dword [sym.imp.ADVAPI32.dll_ControlService]
mov edx, dword [ebp - 0x44]
push edx
call dword [sym.imp.ADVAPI32.dll_DeleteService]
mov eax, dword [ebp - 0x44]
push eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push 0xf01ff
push str.PortTalk
mov ecx, dword [ebp - 0x40]
push ecx
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
je 0x41a999
lea edx, [ebp - 0x3c]
push edx
push 1
mov eax, dword [ebp - 0x44]
push eax
call dword [sym.imp.ADVAPI32.dll_ControlService]
mov ecx, dword [ebp - 0x44]
push ecx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov edx, dword [ebp - 0x44]
push edx
call dword [sym.imp.ADVAPI32.dll_DeleteService]
mov eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x41b969
cmp dword [ebp + 8], 5
jne 0x41a9bd
mov ecx, 0x7d27e8
call fcn.00442280
jmp 0x41b969
cmp dword [ebp + 8], 7
jne 0x41b958
mov ecx, dword [ebp - 0x180]
add ecx, 0x113ee8
call fcn.004f67e0
test eax, eax
jbe 0x41b956
lea ecx, [ebp - 0x48]
call fcn.00437db0
mov dword [ebp - 0x4c], 0
lea ecx, [ebp - 0x170]
push ecx
mov ecx, dword [ebp - 0x180]
add ecx, 0x113ee8
call fcn.00437d00
mov edx, dword [eax]
mov dword [ebp - 0x48], edx
jmp 0x41aa1f
push 0
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x48]
call fcn.00437dd0
lea ecx, [ebp - 0x178]
push ecx
mov ecx, dword [ebp - 0x180]
add ecx, 0x113ee8
call fcn.0051cb30
push eax
lea ecx, [ebp - 0x48]
call fcn.00405200
movzx edx, al
test edx, edx
je 0x41b956
lea ecx, [ebp - 0x48]
call fcn.00438780
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x41ae5a
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x50], 0
mov ecx, dword [ebp - 0x4c]
cmp dword [ecx + 2], 0xffffffff
jne 0x41aa8b
jmp 0x41ad98
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 2]
sub eax, 0x3e8
mov dword [ebp - 0x16c], eax
mov ecx, dword [ebp - 0x4c]
movzx edx, byte [ecx]
cmp edx, 0xc
jne 0x41aceb
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 6]
and ecx, 0xffff
movzx edx, cx
test edx, edx
jle 0x41ab01
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 6]
and ecx, 0xffff
movzx edx, cx
sub edx, 1
and edx, 0xffff
movzx eax, dx
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 6]
shr edx, 0x10
and edx, 0xffff
movzx ecx, dx
and ecx, 0xffff
movzx edx, cx
shl edx, 0x10
or eax, edx
mov ecx, dword [ebp - 0x4c]
mov dword [ecx + 6], eax
jmp 0x41ab0b
mov edx, dword [ebp - 0x4c]
mov dword [edx + 6], 0
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
and ecx, 0xffff
movzx edx, cx
test edx, edx
jle 0x41ab61
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
and ecx, 0xffff
movzx edx, cx
sub edx, 1
and edx, 0xffff
movzx eax, dx
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0xa]
shr edx, 0x10
and edx, 0xffff
movzx ecx, dx
and ecx, 0xffff
movzx edx, cx
shl edx, 0x10
or eax, edx
mov ecx, dword [ebp - 0x4c]
mov dword [ecx + 0xa], eax
jmp 0x41ab6b
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0xa], 0
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xe]
and ecx, 0xffff
movzx edx, cx
test edx, edx
jle 0x41abc1
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xe]
and ecx, 0xffff
movzx edx, cx
sub edx, 1
and edx, 0xffff
movzx eax, dx
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0xe]
shr edx, 0x10
and edx, 0xffff
movzx ecx, dx
and ecx, 0xffff
movzx edx, cx
shl edx, 0x10
or eax, edx
mov ecx, dword [ebp - 0x4c]
mov dword [ecx + 0xe], eax
jmp 0x41abcb
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0xe], 0
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x12]
and ecx, 0xffff
movzx edx, cx
test edx, edx
jle 0x41ac21
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x12]
and ecx, 0xffff
movzx edx, cx
sub edx, 1
and edx, 0xffff
movzx eax, dx
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0x12]
shr edx, 0x10
and edx, 0xffff
movzx ecx, dx
and ecx, 0xffff
movzx edx, cx
shl edx, 0x10
or eax, edx
mov ecx, dword [ebp - 0x4c]
mov dword [ecx + 0x12], eax
jmp 0x41ac2b
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x12], 0
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x16]
and ecx, 0xffff
movzx edx, cx
test edx, edx
jle 0x41ac81
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x16]
and ecx, 0xffff
movzx edx, cx
sub edx, 1
and edx, 0xffff
movzx eax, dx
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0x16]
shr edx, 0x10
and edx, 0xffff
movzx ecx, dx
and ecx, 0xffff
movzx edx, cx
shl edx, 0x10
or eax, edx
mov ecx, dword [ebp - 0x4c]
mov dword [ecx + 0x16], eax
jmp 0x41ac8b
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x16], 0
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x1a]
and ecx, 0xffff
movzx edx, cx
test edx, edx
jle 0x41ace1
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x1a]
and ecx, 0xffff
movzx edx, cx
sub edx, 1
and edx, 0xffff
movzx eax, dx
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0x1a]
shr edx, 0x10
and edx, 0xffff
movzx ecx, dx
and ecx, 0xffff
movzx edx, cx
shl edx, 0x10
or eax, edx
mov ecx, dword [ebp - 0x4c]
mov dword [ecx + 0x1a], eax
jmp 0x41aceb
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x1a], 0
cmp dword [ebp - 0x16c], 0
jg 0x41ad00
mov eax, dword [ebp - 0x4c]
mov dword [eax + 2], 0
jmp 0x41ad0c
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x16c]
mov dword [ecx + 2], edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 2]
mov dword [ebp - 0x168], ecx
mov eax, dword [ebp - 0x168]
xor edx, edx
mov ecx, 0x3e8
div ecx
cmp eax, 0xe10
jb 0x41ad50
mov edx, dword [ebp - 0x164]
add edx, 1
mov dword [ebp - 0x164], edx
mov eax, dword [ebp - 0x168]
sub eax, 0x36ee80
mov dword [ebp - 0x168], eax
jmp 0x41ad18
mov eax, dword [ebp - 0x168]
xor edx, edx
mov ecx, 0x3e8
div ecx
cmp eax, 0x3c
jb 0x41ad86
mov edx, dword [ebp - 0x160]
add edx, 1
mov dword [ebp - 0x160], edx
mov eax, dword [ebp - 0x168]
sub eax, 0xea60
mov dword [ebp - 0x168], eax
jmp 0x41ad50
mov eax, dword [ebp - 0x168]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x164], 0
je 0x41adc9
mov edx, dword [ebp - 0x50]
push edx
mov eax, dword [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x164]
push ecx
push str._d_d
lea edx, [ebp - 0x15c]
push edx
call fcn.005456a9
add esp, 0x14
jmp 0x41ae2c
cmp dword [ebp - 0x160], 0
je 0x41adf3
mov eax, dword [ebp - 0x50]
push eax
mov ecx, dword [ebp - 0x160]
push ecx
push 0x577168
lea edx, [ebp - 0x15c]
push edx
call fcn.005456a9
add esp, 0x10
jmp 0x41ae2c
cmp dword [ebp - 0x50], 0
je 0x41ae13
mov eax, dword [ebp - 0x50]
push eax
push 0x577160
lea ecx, [ebp - 0x15c]
push ecx
call fcn.005456a9
add esp, 0xc
jmp 0x41ae2c
push 0x576358
push 0x575830
lea edx, [ebp - 0x15c]
push edx
call fcn.005456a9
add esp, 0xc
mov eax, dword [ebp - 0x4c]
movzx ecx, byte [eax]
mov dword [ebp - 0x1ac], ecx
mov edx, dword [ebp - 0x1ac]
sub edx, 1
mov dword [ebp - 0x1ac], edx
cmp dword [ebp - 0x1ac], 0x14
ja case.default.0x41ae5a
mov eax, dword [ebp - 0x1ac]
jmp dword [eax*4 + 0x41b9a4]
lea ecx, [ebp - 0x15c]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 6]
push eax
push 0x577130
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41ae5a
lea edx, [ebp - 0x15c]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 6]
push ecx
push 0x577100
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41ae5a
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 6], 0
jne 0x41aee8
lea ecx, [ebp - 0x15c]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0xa]
push eax
push 0x5770d0
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41af16
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 6]
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x1b0]
sub ecx, 1
mov dword [ebp - 0x1b0], ecx
cmp dword [ebp - 0x1b0], 6
ja case.default.0x41af16
mov edx, dword [ebp - 0x1b0]
jmp dword [edx*4 + 0x41b9f8]
lea eax, [ebp - 0x15c]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0xa]
push edx
push 0x5770a4
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41af16
lea ecx, [ebp - 0x15c]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0xa]
push eax
push 0x577078
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41af16
lea edx, [ebp - 0x15c]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
push ecx
push 0x57704c
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41af16
lea eax, [ebp - 0x15c]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0xa]
push edx
push 0x577020
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41af16
lea ecx, [ebp - 0x15c]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0xa]
push eax
push 0x576ff0
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41af16
lea edx, [ebp - 0x15c]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
push ecx
push 0x576fc0
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41af16
lea eax, [ebp - 0x15c]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0xa]
push edx
push 0x576f90
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41ae5a
mov ecx, dword [ebp - 0x4c]
cmp dword [ecx + 6], 0
jne 0x41b06a
lea edx, [ebp - 0x15c]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
push ecx
push 0x576f60
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b098
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 6]
mov dword [ebp - 0x1b4], ecx
mov edx, dword [ebp - 0x1b4]
sub edx, 1
mov dword [ebp - 0x1b4], edx
cmp dword [ebp - 0x1b4], 6
ja case.default.0x41b098
mov eax, dword [ebp - 0x1b4]
jmp dword [eax*4 + 0x41ba14]
lea ecx, [ebp - 0x15c]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0xa]
push eax
push 0x576f30
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b098
lea edx, [ebp - 0x15c]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
push ecx
push 0x576f00
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b098
lea eax, [ebp - 0x15c]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0xa]
push edx
push 0x576ed0
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b098
lea ecx, [ebp - 0x15c]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0xa]
push eax
push 0x576ea0
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b098
lea edx, [ebp - 0x15c]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
push ecx
push 0x576e6c
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b098
lea eax, [ebp - 0x15c]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0xa]
push edx
push 0x576e38
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b098
lea ecx, [ebp - 0x15c]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0xa]
push eax
push 0x576e04
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41ae5a
mov edx, dword [ebp - 0x4c]
movzx eax, byte [edx + 1]
test eax, eax
jne 0x41b1fa
lea ecx, [ebp - 0x15c]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0xe]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0xa]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 6]
push ecx
push 0x576db8
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0x18
jmp 0x41b238
mov eax, dword [ebp - 0x4c]
movzx ecx, byte [eax + 1]
cmp ecx, 1
jne 0x41b238
lea edx, [ebp - 0x15c]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xe]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0xa]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 6]
push edx
push 0x576d68
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0x18
jmp case.default.0x41ae5a
lea ecx, [ebp - 0x15c]
push ecx
push 0x576d20
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0xc
jmp case.default.0x41ae5a
lea eax, [ebp - 0x15c]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0x1a]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x16]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0x12]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0xe]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 6]
push eax
push 0x576c98
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0x24
jmp case.default.0x41ae5a
lea edx, [ebp - 0x15c]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 6]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0x1a]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x16]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0x12]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0xe]
push edx
push 0x576c10
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0x24
jmp case.default.0x41ae5a
lea ecx, [ebp - 0x15c]
push ecx
push 0x576bd8
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0xc
jmp case.default.0x41ae5a
lea eax, [ebp - 0x15c]
push eax
push 0x576ba0
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0xc
jmp case.default.0x41ae5a
mov edx, dword [ebp - 0x4c]
movzx eax, byte [edx + 1]
test eax, eax
jne 0x41b36a
lea ecx, [ebp - 0x15c]
push ecx
push 0x576b60
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0xc
jmp 0x41b393
mov eax, dword [ebp - 0x4c]
movzx ecx, byte [eax + 1]
cmp ecx, 1
jne 0x41b393
lea edx, [ebp - 0x15c]
push edx
push 0x576b08
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0xc
jmp case.default.0x41ae5a
lea ecx, [ebp - 0x15c]
push ecx
push 0x576ac0
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0xc
jmp case.default.0x41ae5a
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x12]
and ecx, 0xffff
movzx edx, cx
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x12]
shr ecx, 0x10
and ecx, 0xffff
movzx edx, cx
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x1a]
and ecx, 0xffff
movzx edx, cx
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x1a]
shr ecx, 0x10
and ecx, 0xffff
movzx edx, cx
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x16]
and ecx, 0xffff
movzx edx, cx
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x16]
shr ecx, 0x10
and ecx, 0xffff
movzx edx, cx
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xe]
and ecx, 0xffff
movzx edx, cx
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xe]
shr ecx, 0x10
and ecx, 0xffff
movzx edx, cx
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
and ecx, 0xffff
movzx edx, cx
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
shr ecx, 0x10
and ecx, 0xffff
movzx edx, cx
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 6]
and ecx, 0xffff
movzx edx, cx
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 6]
shr ecx, 0x10
and ecx, 0xffff
movzx edx, cx
push edx
push 0x576a18
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0x38
jmp case.default.0x41ae5a
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 6]
mov dword [ebp - 0x1b8], edx
mov eax, dword [ebp - 0x1b8]
sub eax, 1
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 6
ja case.default.0x41b4d6
mov ecx, dword [ebp - 0x1b8]
jmp dword [ecx*4 + 0x41ba30]
lea edx, [ebp - 0x15c]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
push ecx
push 0x5769e0
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b4d6
lea eax, [ebp - 0x15c]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0xa]
push edx
push 0x5769ac
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b4d6
lea ecx, [ebp - 0x15c]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0xa]
push eax
push 0x576978
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b4d6
lea edx, [ebp - 0x15c]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
push ecx
push 0x576944
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b4d6
lea eax, [ebp - 0x15c]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0xa]
push edx
push 0x57690c
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b4d6
lea ecx, [ebp - 0x15c]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0xa]
push eax
push 0x5768d4
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b4d6
lea edx, [ebp - 0x15c]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
push ecx
push 0x57689c
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41ae5a
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 6]
mov dword [ebp - 0x1bc], ecx
cmp dword [ebp - 0x1bc], 1
je 0x41b621
cmp dword [ebp - 0x1bc], 2
je 0x41b640
cmp dword [ebp - 0x1bc], 3
je 0x41b660
jmp 0x41b67e
lea edx, [ebp - 0x15c]
push edx
push 0x576870
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0xc
jmp 0x41b67e
lea ecx, [ebp - 0x15c]
push ecx
push 0x576844
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0xc
jmp 0x41b67e
lea eax, [ebp - 0x15c]
push eax
push 0x576818
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0xc
jmp case.default.0x41ae5a
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 6]
mov dword [ebp - 0x1c0], eax
mov ecx, dword [ebp - 0x1c0]
sub ecx, 1
mov dword [ebp - 0x1c0], ecx
cmp dword [ebp - 0x1c0], 6
ja case.default.0x41b6b1
mov edx, dword [ebp - 0x1c0]
jmp dword [edx*4 + 0x41ba4c]
lea eax, [ebp - 0x15c]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0xa]
push edx
push 0x5767e4
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b6b1
lea ecx, [ebp - 0x15c]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0xa]
push eax
push 0x5767b0
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b6b1
lea edx, [ebp - 0x15c]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
push ecx
push 0x57677c
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b6b1
lea eax, [ebp - 0x15c]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0xa]
push edx
push 0x576748
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b6b1
lea ecx, [ebp - 0x15c]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx + 0xa]
push eax
push 0x576710
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b6b1
lea edx, [ebp - 0x15c]
push edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0xa]
push ecx
push 0x5766d8
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41b6b1
lea eax, [ebp - 0x15c]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 0xa]
push edx
push 0x5766a0
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41ae5a
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + 6]
mov dword [ebp - 0x1c4], edx
mov eax, dword [ebp - 0x1c4]
sub eax, 1
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 4
ja case.default.0x41b800
mov ecx, dword [ebp - 0x1c4]
jmp dword [ecx*4 + 0x41ba68]
lea edx, [ebp - 0x15c]
push edx
push 0x576658
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0xc
jmp case.default.0x41b800
lea ecx, [ebp - 0x15c]
push ecx
push 0x576608
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0xc
jmp case.default.0x41b800
lea eax, [ebp - 0x15c]
push eax
push 0x5765dc
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0xc
jmp case.default.0x41b800
lea edx, [ebp - 0x15c]
push edx
push 0x5765b0
mov eax, dword [ebp - 0x4c]
add eax, 0x126
push eax
call fcn.005456a9
add esp, 0xc
jmp case.default.0x41b800
lea ecx, [ebp - 0x15c]
push ecx
push 0x576574
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0xc
jmp case.default.0x41ae5a
lea eax, [ebp - 0x15c]
push eax
mov ecx, dword [ebp - 0x4c]
fld qword [ecx + 0x1e]
fmul qword [0x576330]
sub esp, 8
fstp qword [esp]
push 0x576548
mov edx, dword [ebp - 0x4c]
add edx, 0x126
push edx
call fcn.005456a9
add esp, 0x14
jmp case.default.0x41ae5a
lea eax, [ebp - 0x15c]
push eax
push 0x576520
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0xc
jmp case.default.0x41ae5a
lea edx, [ebp - 0x15c]
push edx
mov eax, dword [ebp - 0x4c]
add eax, 0x26
push eax
push 0x576510
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0x10
jmp case.default.0x41ae5a
lea edx, [ebp - 0x15c]
push edx
mov eax, dword [ebp - 0x4c]
fld qword [eax + 0x1e]
fmul qword [0x576330]
sub esp, 8
fstp qword [esp]
push 0x5764e4
mov ecx, dword [ebp - 0x4c]
add ecx, 0x126
push ecx
call fcn.005456a9
add esp, 0x14
jmp 0x41aa0e
jmp 0x41b969
cmp dword [ebp + 8], 2
jne 0x41b969
mov ecx, dword [ebp - 0x180]
call fcn.0041ba80
mov dword [ebp - 0x17c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x20]
xor ecx, ebp
call fcn.0054514c
mov esp, ebp
pop ebp
ret 8