Function at 0x4c4609
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
mov eax, 0x638d82
call fcn.00600064
mov eax, 0x269c
call fcn.006021b0
mov eax, dword [0x6b55d0]
and dword [ebp - 0x22a4], 0
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x22a8], esi
call fcn.00401ca8
push 0x657250
mov ebx, eax
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
xor edi, edi
inc edi
cmp dword [ebp + 8], eax
jne 0x4c4687
mov ecx, dword [ebp + 0xc]
push dword [ecx + 4]
lea eax, [esi + 0x1d4]
push eax
call fcn.006008a0
lea eax, [esi + 0x1d4]
push str.main
push eax
call fcn.006021f0
add esp, 0x10
test eax, eax
jne 0x4c467b
lea eax, [esi + 0x254]
push 0x644d7c
push eax
call fcn.006021f0
test eax, eax
pop ecx
pop ecx
jne 0x4c467b
push 3
jmp 0x4c467c
push edi
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
call dword [eax + 0x60]
push str.LoadMainMenu
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c46aa
and dword [esi + 0x3a0], 0
mov dword [ebx + 0x390], edi
push str.LoadProfilesMenu
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c4981
push edi
lea ecx, [esi - 4]
push str.proframe
call fcn.004bb8e6
mov eax, dword [ebx + 8]
and dword [ebp - 0x229c], 0
and dword [ebp - 0x2290], 0
mov dword [esi + 0x3ac], eax
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [ebp - 0x2290]
cmp byte [eax + ecx + 4], 0
jne 0x4c47c5
push dword [ebp - 0x229c]
lea eax, [ebp - 0x80]
push str.prof_d_img
push eax
call fcn.00493ef3
add esp, 0xc
mov eax, dword [esi + 0x1d0]
and dword [ebp - 4], 0
mov edi, dword [eax]
push 0
lea ecx, [ebp - 0x80]
call fcn.00493639
mov ecx, dword [esi + 0x1d0]
push eax
call dword [edi + 0x28]
test al, al
je 0x4c47b6
mov ecx, dword [esi + 0x1d0]
mov edi, dword [ecx]
xor eax, eax
push eax
push 0x6a59ac
push 0x6a593c
push eax
push eax
lea ecx, [ebp - 0x80]
call fcn.00493639
mov ecx, dword [esi + 0x1d0]
push eax
call dword [edi + 0x2c]
push eax
call fcn.0060161a
xor edi, edi
add esp, 0x14
inc edi
test eax, eax
mov dword [ebp - 0x2294], eax
je 0x4c47b9
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [ebp - 0x2290]
mov eax, dword [eax + ecx + 0x18]
sub esp, 0x1c
mov ecx, esp
inc eax
mov dword [ebp - 0x22bc], esp
push eax
push str.male__d.tga
push ecx
call fcn.00493ef3
mov ecx, dword [ebp - 0x2294]
add esp, 0xc
call fcn.004b5f6a
jmp 0x4c47b9
xor edi, edi
inc edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80]
call fcn.00402a58
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [ebp - 0x229c]
cmp dword [eax], ecx
je 0x4c48fe
lea eax, [esi + 0x254]
push str.profile_startup
push eax
call fcn.006021f0
test eax, eax
pop ecx
pop ecx
je 0x4c48fe
push dword [ebp - 0x229c]
lea eax, [ebp - 0x48]
push str.prof_d_text
push eax
call fcn.00493ef3
add esp, 0xc
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], edi
call fcn.00493639
push eax
lea ecx, [esi - 4]
call fcn.004bb87e
push dword [ebp - 0x229c]
lea eax, [ebp - 0x2330]
push str.load_prof_d_text
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.00494014
lea ecx, [ebp - 0x2330]
mov byte [ebp - 4], 1
call fcn.00402a58
push edi
lea ecx, [ebp - 0x48]
call fcn.00493639
push eax
lea ecx, [esi - 4]
call fcn.004bb8e6
push dword [ebp - 0x229c]
lea eax, [ebp - 0x2c]
push str.create_prof_d_text
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 3
call fcn.00494014
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.00402a58
push edi
lea ecx, [ebp - 0x48]
call fcn.00493639
push eax
lea ecx, [esi - 4]
call fcn.004bb8e6
push dword [ebp - 0x229c]
lea eax, [ebp - 0x2314]
push str.prof_d_img
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.00494014
lea ecx, [ebp - 0x2314]
mov byte [ebp - 4], 1
call fcn.00402a58
lea ecx, [ebp - 0x48]
call fcn.00493639
push eax
lea ecx, [esi - 4]
call fcn.004bb87e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00402a58
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [ebp - 0x2290]
cmp byte [eax + ecx + 4], 0
je 0x4c4961
push dword [ebp - 0x229c]
lea eax, [ebp - 0x64]
push str.load_prof_d_text
push eax
call fcn.00493ef3
add esp, 0xc
push 0
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 5
call fcn.00493639
push eax
lea ecx, [esi - 4]
call fcn.004bb8e6
lea ecx, [ebp - 0x64]
call fcn.00493639
push eax
lea ecx, [esi - 4]
call fcn.004bb87e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00402a58
inc dword [ebp - 0x229c]
add dword [ebp - 0x2290], 0x30c
cmp dword [ebp - 0x2290], 0x924
jl 0x4c46e9
push str.LoadCurProfImg
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c4a3c
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov eax, dword [ecx + eax + 0x18]
inc eax
push eax
lea eax, [ebp - 0x64]
push str.male__d.tga
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push 0
push str.curprof_img
mov dword [ebp - 4], 6
call dword [eax + 0x28]
test al, al
je 0x4c4a30
mov ecx, dword [esi + 0x1d0]
mov edx, dword [ecx]
xor eax, eax
push eax
push 0x6a59ac
push 0x6a593c
push eax
push eax
push str.curprof_img
call dword [edx + 0x2c]
push eax
call fcn.0060161a
add esp, 0x14
test eax, eax
mov dword [ebp - 0x2294], eax
je 0x4c4a30
sub esp, 0x1c
lea eax, [ebp - 0x64]
mov ecx, esp
mov dword [ebp - 0x22bc], esp
push eax
call fcn.00493bdb
mov ecx, dword [ebp - 0x2294]
call fcn.004b5f6a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00402a58
push str.SwapProfileSelection
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c4b8e
and dword [ebp - 0x2290], 0
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [ebp - 0x2290]
cmp byte [eax + ecx + 4], 0
je 0x4c4b0d
add dword [ebp - 0x2290], 0x30c
cmp dword [ebp - 0x2290], 0x924
jl 0x4c4a5d
lea eax, [esi + 0x1d4]
push str.profile_main
push eax
call fcn.006008a0
pop ecx
pop ecx
mov byte [esi + 8], 1
jmp 0x4c4b8e
mov ecx, dword [esi + 0x3ac]
push 2
pop edx
cmp ecx, edx
jne 0x4c4ac7
cmp dword [ebx + 8], 0
jne 0x4c4ac7
and dword [esi + 0x3ac], 0
inc dword [ebx + 8]
jmp 0x4c4b0d
test ecx, ecx
jne 0x4c4adb
cmp dword [ebx + 8], edx
jne 0x4c4adb
mov dword [esi + 0x3ac], edx
dec dword [ebx + 8]
jmp 0x4c4b0d
mov eax, dword [ebx + 8]
cmp ecx, eax
jge 0x4c4af6
mov dword [esi + 0x3ac], eax
mov eax, dword [ebx + 8]
cmp eax, edx
je 0x4c4af2
inc eax
jmp 0x4c4b0a
xor eax, eax
jmp 0x4c4b0a
jle 0x4c4b0d
mov dword [esi + 0x3ac], eax
mov eax, dword [ebx + 8]
test eax, eax
je 0x4c4b08
dec eax
jmp 0x4c4b0a
mov eax, edx
mov dword [ebx + 8], eax
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
cmp byte [ecx + eax + 4], 0
jne 0x4c4aa8
mov eax, dword [ebx + 8]
and dword [ebp - 0x2290], 0
mov dword [esi + 0x3ac], eax
push dword [ebp - 0x2290]
lea eax, [ebp - 0x64]
push str.load_prof_d_text
push eax
call fcn.00493ef3
add esp, 0xc
mov eax, dword [ebp - 0x2290]
cmp eax, dword [ebx + 8]
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x64]
jne 0x4c4b63
push edi
jmp 0x4c4b65
push 0
call fcn.00493639
lea ecx, [esi - 4]
push eax
call fcn.004bb91e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00402a58
inc dword [ebp - 0x2290]
cmp dword [ebp - 0x2290], 3
jl 0x4c4b34
push str.ChangeCreationProfile
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c4c0e
and dword [ebp - 0x2290], 0
push dword [ebp - 0x2290]
lea eax, [ebp - 0x64]
push str.create_prof_d_text
push eax
call fcn.00493ef3
add esp, 0xc
mov eax, dword [ebp - 0x2290]
cmp eax, dword [ebx + 8]
mov dword [ebp - 4], 8
jne 0x4c4be0
cmp byte [esi + 0x3b4], 0
jne 0x4c4be0
push edi
jmp 0x4c4be2
push 0
lea ecx, [ebp - 0x64]
call fcn.00493639
lea ecx, [esi - 4]
push eax
call fcn.004bb91e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00402a58
inc dword [ebp - 0x2290]
cmp dword [ebp - 0x2290], 3
jl 0x4c4bab
push str.SelectCreationProfile
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c4cbb
push 0x641cfa
mov byte [esi + 0x3b4], 1
call fcn.00401ca8
add eax, 0x1098
push eax
call fcn.006008a0
push dword [ebx + 8]
lea eax, [ebp - 0x64]
push str.create_prof_d_text
push eax
call fcn.00493ef3
add esp, 0x14
push 0
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 9
call fcn.00493639
push eax
lea ecx, [esi - 4]
call fcn.004bb91e
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
cmp byte [ecx + eax + 4], 0
lea eax, [esi + 0x1d4]
je 0x4c4c96
push str.profile_character_selection
jmp 0x4c4c9b
push str.profile_create_2
push eax
call fcn.006008a0
pop ecx
pop ecx
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push edi
call dword [eax + 0x60]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00402a58
push str.ProfileCreationBack
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c4cf9
mov eax, dword [esi + 0x3ac]
mov dword [ebx + 8], eax
lea eax, [esi + 0x1d4]
push str.profile_main
push eax
call fcn.006008a0
pop ecx
pop ecx
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push edi
call dword [eax + 0x60]
push str.RememberProfile
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c4d18
mov eax, dword [ebx + 8]
mov dword [esi + 0x3b0], eax
push str.RecallProfile
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c4d37
mov eax, dword [esi + 0x3b0]
mov dword [ebx + 8], eax
push str.ProceedToLoadProfile
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c4d6d
cmp byte [ebx + 0x13ea], 0
je 0x4c4d6d
lea eax, [esi + 0x1d4]
push str.profile_load
push eax
call fcn.006008a0
pop ecx
pop ecx
mov byte [esi + 8], 1
push str.ResetLoadedStatus
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c4d8a
mov byte [ebx + 0x13ea], 0
push str.CheckProfileToLoad
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c4dd7
cmp byte [ebx + 0x13ea], 0
je 0x4c4db0
push str.profile_load_safety
jmp 0x4c4dbd
lea ecx, [esi - 4]
call fcn.004bfdca
push str.profile_main
lea eax, [esi + 0x1d4]
push eax
call fcn.006008a0
pop ecx
pop ecx
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push edi
call dword [eax + 0x60]
push str.QuitCreationMode
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c4df4
mov byte [esi + 0x3b4], 0
push str.ResetAllProfiles
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c4e19
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, eax
call fcn.004ce584
push str.TryFinishProfileCreation
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c4f5c
lea eax, [ebx + 0x1098]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.00493ef3
pop ecx
pop ecx
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0xa
call fcn.00493f41
push 0x641cfa
lea ecx, [ebp - 0x64]
call fcn.00493e85
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xb
call fcn.004937c0
neg al
sbb al, al
inc al
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x229d], al
mov byte [ebp - 4], 0xa
call fcn.00402a58
cmp byte [ebp - 0x229d], 0
je 0x4c4f50
lea eax, [esi + 0x3b4]
cmp byte [eax], 0
je 0x4c4eab
mov byte [eax], 0
push str.profile_main
jmp 0x4c4eb0
push str.main
lea eax, [esi + 0x1d4]
push eax
call fcn.006008a0
pop ecx
pop ecx
lea ecx, [ebp - 0x48]
mov byte [esi + 8], 1
call fcn.004935c3
push eax
lea eax, [ebx + 0x1098]
push eax
call fcn.006008a0
pop ecx
pop ecx
lea eax, [ebx + 0x1098]
push eax
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, eax
call fcn.004ce59f
mov eax, dword [ebx + 0x304]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2294]
imul ecx, ecx, 0x30c
mov dword [ecx + eax + 0x5c], edx
mov eax, dword [ebx + 0x308]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2294]
imul ecx, ecx, 0x30c
push edi
mov dword [ecx + eax + 0x60], edx
call fcn.0041649f
mov ecx, eax
call fcn.004cfe56
lea ecx, [esi - 4]
call fcn.004bfdca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00402a58
push str.StartupProfile
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c4fb7
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
cmp byte [ecx + eax + 4], 0
je 0x4c4f90
push str.profile_character_selection
jmp 0x4c4f9d
lea ecx, [esi - 4]
call fcn.004bfdca
push str.main
lea eax, [esi + 0x1d4]
push eax
call fcn.006008a0
pop ecx
pop ecx
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push edi
call dword [eax + 0x60]
push str.OverwriteProfileSelection
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5019
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
cmp byte [ecx + eax + 4], 0
jne 0x4c5019
push 0x641cfa
call fcn.00401ca8
add eax, 0x1098
push eax
call fcn.006008a0
lea eax, [esi + 0x1d4]
push str.profile_create_2
push eax
call fcn.006008a0
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
add esp, 0x10
push edi
call dword [eax + 0x60]
push str.SaveCharacterSelection
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5064
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, eax
call fcn.004bb591
mov eax, dword [ebx + 0x378]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2294]
imul ecx, ecx, 0x30c
mov dword [ecx + eax + 0x18], edx
push str.LoadProfileSettings
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5082
lea ecx, [esi - 4]
call fcn.004bfdca
push str.CancelProfileOverwrite
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c50cc
lea eax, [esi + 0x3b4]
cmp byte [eax], 0
je 0x4c50ad
mov byte [eax], 0
push str.profile_create_1
jmp 0x4c50b2
push str.profile_startup
lea eax, [esi + 0x1d4]
push eax
call fcn.006008a0
pop ecx
pop ecx
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push edi
call dword [eax + 0x60]
push str.CheckOverwriteVisibility
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5173
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
cmp byte [ecx + eax + 4], 0
jne 0x4c513f
push str.prosel
lea ecx, [ebp - 0x64]
call fcn.00493e85
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x22a4], edi
call dword [eax + 0x30]
mov edx, dword [eax]
lea ecx, [ebp - 0x64]
push ecx
mov ecx, eax
call dword [edx + 0x20]
mov ecx, eax
call fcn.004937c0
test al, al
mov byte [ebp - 0x22a9], 0
jne 0x4c5146
mov byte [ebp - 0x22a9], 1
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x22a4], 1
je 0x4c515b
lea ecx, [ebp - 0x64]
call fcn.00402a58
cmp byte [ebp - 0x22a9], 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ecx]
je 0x4c5170
call dword [eax + 0x3c]
jmp 0x4c5173
call dword [eax + 0x38]
push str.CreateDataBackup
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5195
call fcn.00401ca8
mov ecx, eax
call fcn.004036ad
push str.ReloadDataBackup
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c51b7
call fcn.00401ca8
mov ecx, eax
call fcn.004036c3
push str.LoadOptionsMenu
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5253
push dword [esi + 0x1b8]
lea eax, [ebp - 0x64]
push str.suboption_d
push eax
call fcn.00493ef3
add esp, 0xc
mov eax, dword [esi + 0x1d0]
mov edi, dword [eax]
push 0
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0xd
call fcn.00493639
mov ecx, dword [esi + 0x1d0]
push eax
call dword [edi + 0x28]
test al, al
je 0x4c5244
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
call dword [eax + 0x30]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x4c]
mov eax, dword [esi + 0x1d0]
mov edi, dword [eax]
push 0
lea ecx, [ebp - 0x64]
call fcn.00493639
mov ecx, dword [esi + 0x1d0]
push eax
call dword [edi + 0x2c]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x48]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00402a58
xor edi, edi
inc edi
push str.SetLastSub
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c528f
lea eax, [ebp - 0x2294]
push eax
mov eax, dword [ebp + 0xc]
push 0x6452f0
push dword [eax + 4]
call fcn.00602e01
mov eax, dword [ebp - 0x2294]
add esp, 0xc
mov dword [esi + 0x1b8], eax
push str.ResetOptionsSettings
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5419
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov eax, dword [ecx + eax + 0x40]
push edi
mov ecx, ebx
mov dword [ebx + 0xc], eax
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov eax, dword [ecx + eax + 0x44]
push edi
mov ecx, ebx
mov dword [ebx + 0x2c], eax
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov eax, dword [ecx + eax + 0x48]
push edi
mov ecx, ebx
mov dword [ebx + 0x30], eax
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov eax, dword [ecx + eax + 0x4c]
push edi
mov ecx, ebx
mov dword [ebx + 0x34], eax
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov eax, dword [ecx + eax + 0x50]
and dword [ebp - 0x2290], 0
mov dword [ebx + 0x54], eax
lea eax, [ebx + 0x38]
mov dword [ebp - 0x2298], eax
push dword [ebp - 0x2290]
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004bb664
mov ecx, dword [ebp - 0x2298]
inc dword [ebp - 0x2290]
add dword [ebp - 0x2298], 4
cmp dword [ebp - 0x2290], 4
mov dword [ecx], eax
jl 0x4c532c
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov eax, dword [ecx + eax + 0x180]
push edi
mov ecx, ebx
mov dword [ebx + 0x48], eax
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov eax, dword [ecx + eax + 0x184]
push edi
mov ecx, ebx
mov dword [ebx + 0x4c], eax
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov eax, dword [ecx + eax + 0x54]
cmp eax, dword [ebx + 0x5c]
mov dword [ebx + 0x58], eax
je 0x4c53ce
push eax
call fcn.00405df9
mov ecx, eax
call fcn.0047d1fb
test al, al
je 0x4c53c8
mov eax, dword [ebx + 0x58]
mov dword [ebx + 0x5c], eax
jmp 0x4c53ce
mov eax, dword [ebx + 0x5c]
mov dword [ebx + 0x58], eax
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov eax, dword [ecx + eax + 0x54]
push edi
mov ecx, ebx
mov dword [ebx + 0x58], eax
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov eax, dword [ecx + eax + 0x5c]
push edi
mov ecx, ebx
mov dword [ebx + 0x304], eax
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov eax, dword [ecx + eax + 0x60]
mov dword [ebx + 0x308], eax
push str.SaveOptionsSettings
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c55e8
mov eax, dword [ebx + 0xc]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2294]
imul ecx, ecx, 0x30c
mov dword [ecx + eax + 0x40], edx
mov eax, dword [ebx + 0x2c]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2294]
imul ecx, ecx, 0x30c
mov dword [ecx + eax + 0x44], edx
mov eax, dword [ebx + 0x30]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2294]
imul ecx, ecx, 0x30c
mov dword [ecx + eax + 0x48], edx
mov eax, dword [ebx + 0x34]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2294]
imul ecx, ecx, 0x30c
mov dword [ecx + eax + 0x4c], edx
mov eax, dword [ebx + 0x54]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2294]
imul ecx, ecx, 0x30c
and dword [ebp - 0x2290], 0
mov dword [ecx + eax + 0x50], edx
lea eax, [ebx + 0x38]
mov dword [ebp - 0x2298], eax
mov eax, dword [ebp - 0x2298]
push dword [eax]
mov ecx, ebx
push dword [ebp - 0x2290]
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004bb64a
inc dword [ebp - 0x2290]
add dword [ebp - 0x2298], 4
cmp dword [ebp - 0x2290], 4
jl 0x4c54f2
mov eax, dword [ebx + 0x58]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2294]
imul ecx, ecx, 0x30c
mov dword [ecx + eax + 0x54], edx
mov eax, dword [ebx + 0x310]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2294]
imul ecx, ecx, 0x30c
mov dword [ecx + eax + 0x58], edx
mov eax, dword [ebx + 0x304]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2294]
imul ecx, ecx, 0x30c
mov dword [ecx + eax + 0x5c], edx
mov eax, dword [ebx + 0x308]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2294]
imul ecx, ecx, 0x30c
mov dword [ecx + eax + 0x60], edx
push dword [ebx + 0x48]
mov ecx, ebx
push 0
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004bb67a
push dword [ebx + 0x4c]
mov ecx, ebx
push edi
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004bb67a
mov byte [esi + 0x1bc], 1
push str.RememberKeyAssignment
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5663
and dword [ebp - 0x2298], 0
lea eax, [ebx + 0x60]
and dword [ebp - 0x2290], 0
mov dword [ebp - 0x229c], eax
push dword [ebp - 0x2290]
mov ecx, ebx
push dword [ebp - 0x2298]
push edi
call fcn.0040368a
mov ecx, eax
call fcn.00464b67
mov ecx, dword [ebp - 0x229c]
inc dword [ebp - 0x2290]
add dword [ebp - 0x229c], 4
cmp dword [ebp - 0x2290], 0x11
mov dword [ecx], eax
jl 0x4c5615
inc dword [ebp - 0x2298]
cmp dword [ebp - 0x2298], 3
mov eax, dword [ebp - 0x229c]
jl 0x4c5608
push str.RestoreKeyAssignment
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c56de
and dword [ebp - 0x229c], 0
lea eax, [ebx + 0x60]
and dword [ebp - 0x2298], 0
mov dword [ebp - 0x2290], eax
mov eax, dword [ebp - 0x2290]
push dword [eax]
mov ecx, ebx
push dword [ebp - 0x2298]
push dword [ebp - 0x229c]
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004bb5e1
inc dword [ebp - 0x2298]
add dword [ebp - 0x2290], 4
cmp dword [ebp - 0x2298], 0x11
jl 0x4c5690
inc dword [ebp - 0x229c]
cmp dword [ebp - 0x229c], 3
mov eax, dword [ebp - 0x2290]
jl 0x4c5683
push str.ResetKeyAssignment
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c570a
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, eax
call fcn.004bb607
mov byte [esi + 0x1bc], 1
push str.ChangeKeyAssignment
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5767
lea eax, [esi + 0x1c4]
push eax
mov eax, dword [ebp + 0xc]
lea ecx, [esi + 0x1c0]
push ecx
push str._d__d
push dword [eax + 4]
call fcn.00602e01
add esp, 0x10
call fcn.0046485c
and dword [eax + 0x6c], 0
push 0xffffffffffffffff
push dword [esi + 0x1c4]
mov ecx, ebx
push dword [esi + 0x1c0]
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004bb5e1
push str.AcceptKeyAssignment
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5784
mov byte [esi + 0x1bc], 1
push str.RememberPadAssignment
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5802
and dword [ebp - 0x229c], 0
lea eax, [ebx + 0xe8]
and dword [ebp - 0x2298], 0
mov dword [ebp - 0x2290], eax
push dword [ebp - 0x2298]
mov ecx, ebx
push dword [ebp - 0x229c]
push edi
call fcn.0040368a
mov ecx, eax
call fcn.00464b89
mov ecx, dword [ebp - 0x2290]
inc dword [ebp - 0x2298]
add dword [ebp - 0x2290], 4
cmp dword [ebp - 0x2298], 8
mov dword [ecx], eax
jl 0x4c57b4
inc dword [ebp - 0x229c]
cmp dword [ebp - 0x229c], 2
mov eax, dword [ebp - 0x2290]
jl 0x4c57a7
push str.RestorePadAssignment
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5880
and dword [ebp - 0x229c], 0
lea eax, [ebx + 0xe8]
and dword [ebp - 0x2298], 0
mov dword [ebp - 0x2290], eax
mov eax, dword [ebp - 0x2290]
push dword [eax]
mov ecx, ebx
push dword [ebp - 0x2298]
push dword [ebp - 0x229c]
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004bb618
inc dword [ebp - 0x2298]
add dword [ebp - 0x2290], 4
cmp dword [ebp - 0x2298], 8
jl 0x4c5832
inc dword [ebp - 0x229c]
cmp dword [ebp - 0x229c], 2
mov eax, dword [ebp - 0x2290]
jl 0x4c5825
push str.ResetPadAssignment
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c58ac
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, eax
call fcn.004bb639
mov byte [esi + 0x1bc], 1
push str.ChangePadAssignment
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c594d
lea eax, [esi + 0x1cc]
push eax
mov eax, dword [ebp + 0xc]
lea ecx, [esi + 0x1c8]
push ecx
push str._d__d
push dword [eax + 4]
call fcn.00602e01
mov eax, dword [esi + 0x1c8]
add esp, 0x10
mov dword [ebp - 0x22a4], eax
call fcn.0046474a
mov ecx, eax
call fcn.00464402
cmp eax, dword [ebp - 0x22a4]
jle 0x4c593f
push dword [ebp - 0x22a4]
call fcn.0046474a
mov ecx, eax
call fcn.0046440a
or dword [eax + 0x28c], 0xffffffff
push 0xffffffffffffffff
push dword [esi + 0x1cc]
mov ecx, ebx
push dword [esi + 0x1c8]
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004bb618
jmp 0x4c594d
or dword [esi + 0x1c8], 0xffffffff
or dword [esi + 0x1cc], 0xffffffff
push str.AcceptPadAssignment
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c596a
mov byte [esi + 0x1bc], 1
push str.ChangeVideoMode
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c59a1
push dword [ebx + 0x58]
call fcn.00405df9
mov ecx, eax
call fcn.0047d1fb
test al, al
je 0x4c599b
mov eax, dword [ebx + 0x58]
mov dword [ebx + 0x5c], eax
jmp 0x4c59a1
mov eax, dword [ebx + 0x5c]
mov dword [ebx + 0x58], eax
push str.OptionsSave
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c59d2
lea eax, [esi + 0x1bc]
cmp byte [eax], 0
je 0x4c59d2
push edi
mov byte [eax], 0
call fcn.0041649f
mov ecx, eax
call fcn.004cfe56
push str.SwapUnitsType
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5a3f
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov eax, dword [ecx + eax + 0x50]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov edx, dword [eax]
xor ecx, ecx
cmp dword [ebp - 0x2294], ecx
push edi
sete cl
imul edx, edx, 0x30c
mov dword [edx + eax + 0x50], ecx
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov eax, dword [ecx + eax + 0x50]
mov dword [ebx + 0x54], eax
mov byte [esi + 0x1bc], 1
push str.SwapJoypadMode
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5af0
lea eax, [ebp - 0x2298]
push eax
mov eax, dword [ebp + 0xc]
push 0x6452f0
push dword [eax + 4]
call fcn.00602e01
mov eax, dword [ebp - 0x2298]
add esp, 0xc
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0xc3
add ecx, dword [ebp - 0x2294]
mov eax, dword [eax + ecx*4 + 0x5c]
xor ecx, ecx
test eax, eax
sete cl
push ecx
push dword [ebp - 0x2298]
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004bb5ca
mov eax, dword [ebp - 0x2298]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0xc3
add ecx, dword [ebp - 0x2294]
mov eax, dword [eax + ecx*4 + 0x5c]
mov ecx, dword [ebp - 0x2298]
mov dword [ebx + ecx*4 + 0x304], eax
mov byte [esi + 0x1bc], 1
push str.PlayBikeSound
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5b16
call fcn.00405e98
push str.engine
call fcn.00486566
pop ecx
push str.PlaySfxSound
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5b3c
call fcn.00405e98
push str.sfx_sound
call fcn.00486566
pop ecx
push str.UpdateItemVisibility
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5b9b
mov edi, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp + 8]
push eax
push str._d__s
push dword [edi + 4]
call fcn.00602e01
mov ecx, dword [esi + 0x1d0]
add esp, 0x10
lea eax, [ebp - 0x114]
push eax
call fcn.004b4c4a
test eax, eax
je 0x4cb6c6
mov eax, dword [eax]
mov ecx, dword [edi]
cmp eax, dword [ebp + 8]
mov eax, dword [ecx]
jne 0x4c5cc3
jmp 0x4c5bf8
push str.UpdateItemVisibilityOnFalse
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5c00
mov edi, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp + 8]
push eax
push str._d__s
push dword [edi + 4]
call fcn.00602e01
mov ecx, dword [esi + 0x1d0]
add esp, 0x10
lea eax, [ebp - 0x114]
push eax
call fcn.004b4c4a
test eax, eax
je 0x4cb6c6
mov eax, dword [eax]
mov ecx, dword [edi]
cmp eax, dword [ebp + 8]
mov eax, dword [ecx]
je 0x4c5cc3
call dword [eax + 0x38]
jmp 0x4cb6c6
push str.UpdateShowAlter
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5c66
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp + 8]
push eax
push str._d__s
push dword [ebx + 4]
call fcn.00602e01
mov ecx, dword [esi + 0x1d0]
add esp, 0x10
lea eax, [ebp - 0x114]
push eax
call fcn.004b4c4a
test eax, eax
je 0x4cb6c6
mov eax, dword [eax]
mov ecx, dword [ebx]
cmp eax, dword [ebp + 8]
mov eax, dword [ecx]
jne 0x4c5c5c
push edi
jmp 0x4c5c5e
push 0
call dword [eax + 0x44]
jmp 0x4cb6c6
push str.UpdateItemHide
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5ccb
mov edi, dword [ebp + 0xc]
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp + 8]
push eax
push str._d__s
push dword [edi + 4]
call fcn.00602e01
mov ecx, dword [esi + 0x1d0]
add esp, 0x10
lea eax, [ebp - 0x114]
push eax
call fcn.004b4c4a
test eax, eax
je 0x4cb6c6
mov eax, dword [eax]
cmp eax, dword [ebp + 8]
je 0x4cb6c6
mov ecx, dword [edi]
mov eax, dword [ecx]
call dword [eax + 0x3c]
jmp 0x4cb6c6
push str.StoreMenu
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5cfb
lea eax, [esi + 0x2d4]
push eax
mov eax, dword [ebp + 0xc]
push 0x64bc80
push dword [eax + 4]
call fcn.00602e01
add esp, 0xc
push str.RestoreMenu
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5d88
push str.gangwar_return
lea ecx, [ebp - 0x2330]
call fcn.00493e85
mov dword [ebp - 0x2294], eax
lea eax, [esi + 0x2d4]
push eax
lea ecx, [ebp - 0x2314]
mov dword [ebp - 4], 0xe
call fcn.00493e85
push dword [ebp - 0x2294]
mov ecx, eax
mov byte [ebp - 4], 0xf
call fcn.00406378
lea ecx, [ebp - 0x2314]
mov byte [ebp - 0x229d], al
mov byte [ebp - 4], 0xe
call fcn.00402a58
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2330]
call fcn.00402a58
cmp byte [ebp - 0x229d], 0
je 0x4c5dee
mov dword [esi + 0x35c], 6
push str.SetMenuEq
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5e16
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x2294]
push eax
lea eax, [ebp - 0x114]
push eax
mov eax, dword [ebp + 0xc]
push str._s__d__s
push dword [eax + 4]
call fcn.00602e01
mov ecx, dword [esi + 0x1d0]
add esp, 0x14
lea eax, [ebp - 0x114]
push eax
call fcn.004b4c4a
test eax, eax
je 0x4c5e16
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2294]
jne 0x4c5e16
lea eax, [ebp - 0x178]
jmp 0x4c5df4
lea eax, [esi + 0x2d4]
push eax
lea eax, [esi + 0x1d4]
push eax
call fcn.006008a0
mov esi, dword [esi + 0x1d0]
mov eax, dword [esi]
pop ecx
pop ecx
push edi
mov ecx, esi
call dword [eax + 0x60]
jmp 0x4c6390
push str.UpdateSelectionBorder
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5f2a
mov edi, dword [ebp + 0xc]
push 0
push 0x6a59ac
push 0x6a593c
push 0
push dword [edi]
call fcn.0060161a
mov ecx, dword [edi]
mov dword [ebp - 0x2294], eax
mov eax, dword [ecx]
add esp, 0x14
call dword [eax + 0x10]
mov edi, eax
push str._targetName
mov ecx, edi
call fcn.004cca95
push eax
lea ecx, [ebp - 0x2c]
call fcn.00493bdb
push str._targetValue
mov ecx, edi
mov dword [ebp - 4], 0x10
call fcn.004cca95
push eax
lea ecx, [ebp - 0x48]
call fcn.00493bdb
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x11
call fcn.00493639
mov ecx, dword [esi + 0x1d0]
push eax
call fcn.004b4c4a
push dword [eax]
lea ecx, [ebp - 0x2c]
call fcn.004935c3
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00493ef3
add esp, 0xc
mov eax, dword [esi + 0x1d0]
mov edi, dword [eax]
push 0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x12
call fcn.00493639
mov ecx, dword [esi + 0x1d0]
push eax
call dword [edi + 0x2c]
test eax, eax
je 0x4c5f03
mov edx, dword [eax]
lea ecx, [ebp - 0x74]
push ecx
mov ecx, eax
call dword [edx + 0x24]
fld dword [ebp - 0x70]
mov ecx, dword [ebp - 0x2294]
mov eax, dword [ecx]
push ecx
push ecx
fstp dword [esp + 4]
fld dword [ebp - 0x74]
fstp dword [esp]
call dword [eax + 0x7c]
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x11
call fcn.00402a58
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x10
call fcn.00402a58
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00402a58
xor edi, edi
inc edi
push str.CheckHighscoreName
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c5fef
push str.CheckHighscoreName._n
call fcn.00401000
lea eax, [ebx + 0x1098]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00493ef3
add esp, 0xc
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x13
call fcn.00493f41
push 0x641cfa
lea ecx, [ebp - 0x2c]
call fcn.00493e85
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x14
call fcn.004937c0
neg al
sbb al, al
inc al
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x229d], al
mov byte [ebp - 4], 0x13
call fcn.00402a58
cmp byte [ebp - 0x229d], 0
je 0x4c5fe3
mov eax, dword [ebx + 0x390]
cmp eax, edi
jne 0x4c5fbf
push str.debriefing
jmp 0x4c5fc9
cmp eax, 2
jne 0x4c5fe3
push str.debriefing_mp
lea eax, [esi + 0x1d4]
push eax
call fcn.006008a0
pop ecx
pop ecx
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push edi
call dword [eax + 0x60]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00402a58
push str.AddLetter
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c6204
mov eax, dword [ebp + 0xc]
push 0
push 0x6a5a80
push 0x6a593c
push 0
push dword [eax]
call fcn.0060161a
add esp, 0x14
lea ecx, [ebp - 0x48]
push ecx
mov ecx, eax
call fcn.004baa6f
lea eax, [ebp - 0x2290]
push eax
mov eax, dword [ebp + 0xc]
push 0x6452f0
push dword [eax + 4]
mov dword [ebp - 4], 0x15
call fcn.00602e01
add esp, 0xc
push str.BACKSPACE
lea ecx, [ebp - 0x2314]
call fcn.00493e85
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x16
call fcn.00406378
lea ecx, [ebp - 0x2314]
mov byte [ebp - 0x229d], al
mov byte [ebp - 4], 0x15
call fcn.00402a58
cmp byte [ebp - 0x229d], 0
je 0x4c60d9
mov eax, dword [ebp - 0x2290]
shl eax, 4
lea eax, [eax + ebx + 0x1098]
push eax
call fcn.00600410
test eax, eax
pop ecx
jbe 0x4c61f8
mov eax, dword [ebp - 0x2290]
shl eax, 4
lea eax, [eax + ebx + 0x1098]
push eax
call fcn.00600410
pop ecx
mov ecx, dword [ebp - 0x2290]
shl ecx, 4
add eax, ebx
mov byte [ecx + eax + 0x1097], 0
jmp 0x4c61f8
push str.SPACE
lea ecx, [ebp - 0x2314]
call fcn.00493e85
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x17
call fcn.00406378
lea ecx, [ebp - 0x2314]
mov byte [ebp - 0x229d], al
mov byte [ebp - 4], 0x15
call fcn.00402a58
cmp byte [ebp - 0x229d], 0
je 0x4c61bb
mov eax, dword [ebp - 0x2290]
shl eax, 4
lea eax, [eax + ebx + 0x1098]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00493ef3
pop ecx
pop ecx
push 0x641cfa
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
call fcn.00493e85
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x19
call fcn.004937c0
neg al
sbb al, al
inc al
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x229d], al
mov byte [ebp - 4], 0x18
call fcn.00402a58
cmp byte [ebp - 0x229d], 0
lea ecx, [ebp - 0x2c]
je 0x4c6189
push 0x643bac
call fcn.00493e85
mov byte [ebp - 4], 0x1a
jmp 0x4c6197
push 0x641cfa
call fcn.00493e85
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x48]
push eax
call fcn.00494014
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
call fcn.00402a58
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x15
call fcn.00402a58
mov eax, dword [ebp - 0x2290]
shl eax, 4
lea eax, [eax + ebx + 0x1098]
push eax
call fcn.00600410
cmp eax, 0xc
pop ecx
jae 0x4c61f8
lea ecx, [ebp - 0x48]
call fcn.004935c3
push eax
mov eax, dword [ebp - 0x2290]
shl eax, 4
lea eax, [eax + ebx + 0x1098]
push eax
call fcn.006008b0
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00402a58
push str.Platform
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c62e4
lea ecx, [ebp - 0x48]
call fcn.00493e74
mov eax, dword [ebp + 0xc]
push 0x654590
push dword [eax + 4]
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], 0x1c
call fcn.00494570
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x1d
mov byte [ebp - 0x22a9], 0
call fcn.004941f0
test eax, eax
jle 0x4c62a9
lea ecx, [ebp - 0xb0]
call fcn.00494295
push eax
lea ecx, [ebp - 0x48]
call fcn.00494014
push 0x656cf0
lea ecx, [ebp - 0x48]
call fcn.00493639
push eax
call fcn.006021f0
test eax, eax
pop ecx
pop ecx
jne 0x4c6291
mov byte [ebp - 0x22a9], 1
lea ecx, [ebp - 0xb0]
call fcn.004941f0
test eax, eax
jg 0x4c625d
cmp byte [ebp - 0x22a9], 0
jne 0x4c62c9
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x1c
call fcn.004942dc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00402a58
jmp 0x4c6390
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x1c
call fcn.004942dc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00402a58
push str.GetLapNumber
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c6398
mov byte [ebp - 0x22aa], 0
call fcn.00401ca8
mov eax, dword [eax + 0x39c]
mov dword [ebp - 0x2298], eax
mov eax, dword [ebp + 0xc]
push str.1Lap
push dword [eax + 4]
call fcn.006021f0
test eax, eax
pop ecx
pop ecx
jne 0x4c633b
cmp dword [ebp - 0x2298], edi
jne 0x4c633b
mov byte [ebp - 0x22aa], 1
mov eax, dword [ebp + 0xc]
push str.2Laps
push dword [eax + 4]
call fcn.006021f0
test eax, eax
pop ecx
pop ecx
jne 0x4c6361
cmp dword [ebp - 0x2298], 2
jne 0x4c6361
mov byte [ebp - 0x22aa], 1
mov eax, dword [ebp + 0xc]
push str.3Laps
push dword [eax + 4]
call fcn.006021f0
test eax, eax
pop ecx
pop ecx
jne 0x4c6387
cmp dword [ebp - 0x2298], 3
jne 0x4c6387
mov byte [ebp - 0x22aa], 1
cmp byte [ebp - 0x22aa], 0
jne 0x4c6398
or eax, 0xffffffff
jmp 0x4cb6c8
push str.SetVariable
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c63fb
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 0x50]
test al, al
je 0x4c63fb
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x2294]
push eax
mov eax, dword [ebp + 0xc]
push str._d__s
push dword [eax + 4]
call fcn.00602e01
mov ecx, dword [esi + 0x1d0]
add esp, 0x10
lea eax, [ebp - 0x178]
push eax
call fcn.004b4c4a
test eax, eax
je 0x4c63fb
mov ecx, dword [ebp - 0x2294]
mov dword [eax], ecx
push str.UpdateTrackTick
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c6453
lea eax, [ebp - 0x2294]
push eax
mov eax, dword [ebp + 0xc]
push 0x6452f0
push dword [eax + 4]
call fcn.00602e01
add esp, 0xc
push dword [ebp - 0x2294]
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004ce783
test al, al
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ecx]
je 0x4c6450
call dword [eax + 0x38]
jmp 0x4c6453
call dword [eax + 0x3c]
push str.UpdateTrackItemEnabled
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c64b8
lea eax, [ebp - 0x2294]
push eax
mov eax, dword [ebp + 0xc]
push 0x6452f0
push dword [eax + 4]
call fcn.00602e01
add esp, 0xc
push dword [ebp - 0x2294]
call fcn.00402368
mov ecx, eax
call fcn.004018a0
push eax
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, eax
call fcn.004035f6
test al, al
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ecx]
je 0x4c64b5
call dword [eax + 0x2c]
jmp 0x4c64b8
call dword [eax + 0x30]
push str.UpdateBikeItemEnabled
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c6510
lea eax, [ebp - 0x2294]
push eax
mov eax, dword [ebp + 0xc]
push 0x6452f0
push dword [eax + 4]
call fcn.00602e01
add esp, 0xc
push dword [ebp - 0x2294]
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, eax
call fcn.0040181f
test al, al
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ecx]
je 0x4c650d
call dword [eax + 0x2c]
jmp 0x4c6510
call dword [eax + 0x30]
push str.StartGame
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c6544
push dword [ebx + 0x328]
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004bb6b8
fld1
fstp dword [esi + 0xc]
mov byte [esi + 9], 1
push str.Return
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c6574
lea eax, [esi + 0x35c]
push eax
mov eax, dword [ebp + 0xc]
push 0x6452f0
push dword [eax + 4]
call fcn.00602e01
add esp, 0xc
push str.FinalFadeReturn
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c65aa
lea eax, [esi + 0x10]
push eax
mov eax, dword [ebp + 0xc]
push 0x6452f0
push dword [eax + 4]
call fcn.00602e01
fld1
fstp dword [esi + 0xc]
add esp, 0xc
mov byte [esi + 9], 1
push str.UpdateTrackSelection
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c678e
lea ecx, [esi - 4]
push str.mission1
call fcn.004bb87e
push str.mission2
lea ecx, [esi - 4]
call fcn.004bb87e
push str.mission3
lea ecx, [esi - 4]
call fcn.004bb87e
push str.mission1_silver
lea ecx, [esi - 4]
call fcn.004bb816
push str.mission2_silver
lea ecx, [esi - 4]
call fcn.004bb816
push str.mission3_silver
lea ecx, [esi - 4]
call fcn.004bb816
push str.mission1_gold
lea ecx, [esi - 4]
call fcn.004bb816
push str.mission2_gold
lea ecx, [esi - 4]
call fcn.004bb816
push str.mission3_gold
lea ecx, [esi - 4]
call fcn.004bb816
push dword [ebx + 0x324]
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004035f6
test al, al
je 0x4c66a5
push str.mission1
lea ecx, [esi - 4]
call fcn.004bb84a
push dword [ebx + 0x324]
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, eax
call fcn.0041ab6c
test al, al
je 0x4c667f
push str.mission1_gold
jmp 0x4c669d
push dword [ebx + 0x324]
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004ce783
test al, al
je 0x4c66a5
push str.mission1_silver
lea ecx, [esi - 4]
call fcn.004bb7e2
mov eax, dword [ebx + 0x324]
inc eax
push eax
push edi
mov ecx, ebx
mov dword [ebp - 0x22a4], eax
call fcn.0040368a
mov ecx, eax
call fcn.004035f6
test al, al
je 0x4c6719
push str.mission2
lea ecx, [esi - 4]
call fcn.004bb84a
push dword [ebp - 0x22a4]
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, eax
call fcn.0041ab6c
test al, al
je 0x4c66f3
push str.mission2_gold
jmp 0x4c6711
push dword [ebp - 0x22a4]
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004ce783
test al, al
je 0x4c6719
push str.mission2_silver
lea ecx, [esi - 4]
call fcn.004bb7e2
mov eax, dword [ebx + 0x324]
inc eax
inc eax
push eax
push edi
mov ecx, ebx
mov dword [ebp - 0x22a4], eax
call fcn.0040368a
mov ecx, eax
call fcn.004035f6
test al, al
je 0x4c678e
push str.mission3
lea ecx, [esi - 4]
call fcn.004bb84a
push dword [ebp - 0x22a4]
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, eax
call fcn.0041ab6c
test al, al
je 0x4c6768
push str.mission3_gold
jmp 0x4c6786
push dword [ebp - 0x22a4]
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004ce783
test al, al
je 0x4c678e
push str.mission3_silver
lea ecx, [esi - 4]
call fcn.004bb7e2
push str.UpdateMissionSelection
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c686c
push 0
lea ecx, [esi - 4]
push str.mission1
call fcn.004bb8e6
push 0
push str.mission2
lea ecx, [esi - 4]
call fcn.004bb8e6
push 0
push str.mission3
lea ecx, [esi - 4]
call fcn.004bb8e6
cmp dword [esi + 0x3a0], 0
je 0x4c6852
push dword [esi + 0x3a4]
lea eax, [ebp - 0x2c]
push str.mission_d
push eax
call fcn.00493ef3
add esp, 0xc
push edi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0x1e
call fcn.00493639
push eax
lea ecx, [esi - 4]
call fcn.004bb8e6
cmp dword [esi + 0x3a8], edi
lea ecx, [esi - 4]
push str.silver
jne 0x4c6832
call fcn.004bb816
push str.gold
lea ecx, [esi - 4]
call fcn.004bb816
jmp 0x4c6844
call fcn.004bb7e2
push str.gold
lea ecx, [esi - 4]
call fcn.004bb7e2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00402a58
jmp 0x4c686c
push str.silver
lea ecx, [esi - 4]
call fcn.004bb816
push str.gold
lea ecx, [esi - 4]
call fcn.004bb816
push str.SelectGameMode
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c696f
push dword [esi + 0x3a4]
lea eax, [ebp - 0x2c]
push str.mission_d
push eax
call fcn.00493ef3
add esp, 0xc
mov eax, dword [esi + 0x1d0]
mov edi, dword [eax]
push 0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0x1f
call fcn.00493639
mov ecx, dword [esi + 0x1d0]
push eax
call dword [edi + 0x2c]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x34]
xor edi, edi
inc edi
test al, al
je 0x4c6963
mov eax, dword [ebx + 0x324]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2294]
imul ecx, ecx, 0x30c
mov dword [ecx + eax + 0x3c], edx
mov eax, dword [esi + 0x3a4]
mov ecx, dword [ebx + 0x324]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x2294], eax
call fcn.00402368
mov ecx, dword [ebp - 0x2294]
mov eax, dword [eax + ecx*4 + 0x244]
mov dword [ebp - 0x2294], eax
call fcn.00402368
mov ecx, dword [ebp - 0x2294]
mov eax, dword [eax + ecx*4 + 0x2a8]
mov dword [ebx + 0x388], eax
lea eax, [esi + 0x1d4]
push str.bike_selection
push eax
mov dword [ebx + 0x328], ecx
call fcn.006008a0
pop ecx
pop ecx
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push edi
call dword [eax + 0x60]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00402a58
push str.CheckTrackSelection
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c6ac9
and dword [esi + 0x3a0], 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 0x30]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 0x4c]
lea ecx, [esi - 4]
push str.selectcity
call fcn.004bb816
push str.selectmission
lea ecx, [esi - 4]
call fcn.004bb7e2
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push 0
push str.mission1
call dword [eax + 0x2c]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x34]
test al, al
je 0x4c69e3
mov dword [esi + 0x3a4], edi
jmp 0x4c6a33
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push 0
push str.mission2
call dword [eax + 0x2c]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x34]
test al, al
je 0x4c6a0c
mov dword [esi + 0x3a4], 2
jmp 0x4c6a33
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push 0
push str.mission3
call dword [eax + 0x2c]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x34]
neg al
sbb eax, eax
and eax, 2
inc eax
mov dword [esi + 0x3a4], eax
push str.mission_toggle
lea ecx, [esi - 4]
mov dword [esi + 0x3a0], edi
call fcn.004bb8b2
push str.mappanel
lea ecx, [esi - 4]
call fcn.004bb87e
cmp dword [esi + 0x3a0], 0
je 0x4c6ac9
mov eax, dword [ebx + 0x324]
dec eax
push 3
cdq
pop ecx
idiv ecx
inc eax
push eax
lea eax, [ebp - 0x2c]
push str.track__d_voiceover
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, dword [esi + 0xdc]
test ecx, ecx
mov dword [ebp - 4], 0x20
je 0x4c6a99
call fcn.00486a54
and dword [esi + 0xdc], 0
push 0
lea ecx, [ebp - 0x2c]
call fcn.00493639
push eax
call fcn.00405e98
mov ecx, eax
call fcn.0043c748
mov ecx, eax
mov dword [esi + 0xdc], eax
call fcn.00486606
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00402a58
push str.NavigateMap
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c6ca8
lea eax, [ebp - 0x178]
push eax
mov eax, dword [ebp + 0xc]
push 0x64bc80
push dword [eax + 4]
call fcn.00602e01
add esp, 0xc
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x48]
call fcn.00493e85
mov eax, dword [ebx + 0x324]
dec eax
push 3
pop ecx
cdq
idiv ecx
push 0x656b04
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x2298], eax
call fcn.00493e85
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x22
call fcn.004937c0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x229d], al
mov byte [ebp - 4], 0x21
call fcn.00402a58
cmp byte [ebp - 0x229d], 0
je 0x4c6b70
mov eax, dword [ebp - 0x2298]
mov eax, dword [eax*4 + 0x9601ec]
jmp 0x4c6c46
push str.down
lea ecx, [ebp - 0x2c]
call fcn.00493e85
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x23
call fcn.004937c0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x229d], al
mov byte [ebp - 4], 0x21
call fcn.00402a58
cmp byte [ebp - 0x229d], 0
je 0x4c6bba
mov eax, dword [ebp - 0x2298]
mov eax, dword [eax*4 + 0x96020c]
jmp 0x4c6c46
push str.left
lea ecx, [ebp - 0x2c]
call fcn.00493e85
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x24
call fcn.004937c0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x229d], al
mov byte [ebp - 4], 0x21
call fcn.00402a58
cmp byte [ebp - 0x229d], 0
je 0x4c6c01
mov eax, dword [ebp - 0x2298]
mov eax, dword [eax*4 + 0x96022c]
jmp 0x4c6c46
push str.right
lea ecx, [ebp - 0x2c]
call fcn.00493e85
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x25
call fcn.004937c0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x229d], al
mov byte [ebp - 4], 0x21
call fcn.00402a58
cmp byte [ebp - 0x229d], 0
je 0x4c6c9c
mov eax, dword [ebp - 0x2298]
mov eax, dword [eax*4 + 0x96024c]
test eax, eax
mov dword [ebp - 0x2290], eax
jle 0x4c6c9c
cmp eax, 8
jg 0x4c6c9c
mov dword [esi + 0x1ac], 0x3f000000
mov byte [esi + 0x1b0], 1
mov eax, dword [ebx + 0x324]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2294]
imul ecx, ecx, 0x30c
mov dword [ecx + eax + 0x3c], edx
mov eax, dword [ebp - 0x2290]
lea eax, [eax + eax*2 - 2]
mov dword [ebx + 0x324], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00402a58
push str.TrackSelectionLoad
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c6d9d
cmp dword [ebx + 0x390], edi
jne 0x4c6cec
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov eax, dword [ecx + eax + 0x3c]
mov dword [ebx + 0x324], eax
jmp 0x4c6cec
dec dword [ebx + 0x324]
mov eax, dword [ebx + 0x324]
dec eax
push 3
cdq
pop ecx
idiv ecx
test edx, edx
jne 0x4c6ce6
fldz
lea ecx, [esi - 4]
fstp dword [esi + 0x1ac]
push edx
fldz
push ecx
fstp dword [esp]
mov byte [esi + 0x1b0], dl
call fcn.004be91b
cmp dword [esi + 0x3a0], 0
je 0x4c6d83
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
call dword [eax + 0x30]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x30]
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
call dword [eax + 0x30]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x4c]
push str.mappanel
lea ecx, [esi - 4]
call fcn.004bb87e
push str.mission_toggle
lea ecx, [esi - 4]
call fcn.004bb8b2
push str.selectcity
lea ecx, [esi - 4]
mov dword [esi + 0x3a0], edi
call fcn.004bb816
push str.selectmission
lea ecx, [esi - 4]
call fcn.004bb7e2
jmp 0x4c6d9d
push str.selectcity
lea ecx, [esi - 4]
call fcn.004bb7e2
push str.selectmission
lea ecx, [esi - 4]
call fcn.004bb816
push str.TrackSelectionBack
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c6e8a
lea eax, [esi + 0x3a0]
cmp dword [eax], 0
je 0x4c6e21
and dword [eax], 0
and dword [esi + 0x3a8], 0
lea ecx, [esi - 4]
push str.mappanel
call fcn.004bb84a
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
call dword [eax + 0x30]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x4c]
push str.tracksel
lea ecx, [esi - 4]
call fcn.004bb84a
push str.tracksel
lea ecx, [esi - 4]
call fcn.004bb8b2
push str.selectcity
lea ecx, [esi - 4]
call fcn.004bb7e2
push str.selectmission
lea ecx, [esi - 4]
call fcn.004bb816
jmp 0x4c6e8a
cmp dword [ebx + 0x390], edi
jne 0x4c6e4f
mov eax, dword [ebx + 0x324]
push edi
mov ecx, ebx
mov dword [ebp - 0x2294], eax
call fcn.0040368a
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2294]
imul ecx, ecx, 0x30c
mov dword [ecx + eax + 0x3c], edx
mov ecx, dword [esi + 0xdc]
test ecx, ecx
je 0x4c6e65
call fcn.00486a54
and dword [esi + 0xdc], 0
lea eax, [esi + 0x1d4]
push str.main
push eax
mov dword [ebx + 0x390], edi
call fcn.006008a0
pop ecx
pop ecx
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push edi
call dword [eax + 0x60]
push str.BikeSelectionLoad
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c7132
xor eax, eax
mov dword [ebp - 0x22b4], eax
mov dword [ebp - 0x22b8], 3
mov dword [ebp - 0x22a4], eax
mov dword [ebp - 0x22b0], eax
mov dword [ebp - 0x2298], eax
mov dword [ebp - 0x2290], eax
and dword [ebp - 0x229c], 0
mov ecx, dword [ebp - 0x229c]
mov eax, dword [ebp - 0x2290]
add eax, ecx
push eax
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, eax
call fcn.0040181f
test al, al
je 0x4c6f0f
mov eax, dword [ebp - 0x2298]
mov dword [ebp - 0x22a4], eax
mov eax, dword [ebp - 0x229c]
mov dword [ebp - 0x22b4], eax
inc dword [ebp - 0x229c]
cmp dword [ebp - 0x229c], 3
jl 0x4c6ed5
cmp dword [ebp - 0x2290], 0xf
jge 0x4c6f7a
mov dword [ebp - 0x229c], 3
mov ecx, dword [ebp - 0x229c]
mov eax, dword [ebp - 0x2290]
add eax, ecx
push eax
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, eax
call fcn.0040181f
test al, al
je 0x4c6f6b
mov eax, dword [ebp - 0x2298]
mov dword [ebp - 0x22b0], eax
mov eax, dword [ebp - 0x229c]
mov dword [ebp - 0x22b8], eax
inc dword [ebp - 0x229c]
cmp dword [ebp - 0x229c], 5
jl 0x4c6f31
inc dword [ebp - 0x2298]
add dword [ebp - 0x2290], 5
cmp dword [ebp - 0x2290], 0x14
jl 0x4c6ece
mov eax, dword [ebx + 0x388]
test eax, eax
je 0x4c6fae
cmp eax, 4
je 0x4c6fae
cmp eax, 8
mov ecx, dword [ebp - 0x22a4]
jne 0x4c6fb4
mov ecx, dword [ebp - 0x22b0]
mov eax, dword [ebx + 0x394]
mov dword [ebx + eax*4 + 0x364], ecx
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push 0
push str.categorysel
call dword [eax + 0x28]
test al, al
je 0x4c7132
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push 0
push str.categorysel
call dword [eax + 0x2c]
mov dword [ebp - 0x22a4], eax
mov dword [ebp - 0x2298], edi
push dword [ebp - 0x2298]
lea eax, [ebp - 0x2c]
push str.subcatbike_d
push eax
call fcn.00493ef3
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0x26
call fcn.00493639
push eax
lea ecx, [esi - 4]
call fcn.004bb87e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00402a58
inc dword [ebp - 0x2298]
cmp dword [ebp - 0x2298], 5
jle 0x4c6ff9
mov eax, dword [ebx + 0x394]
mov eax, dword [ebx + eax*4 + 0x364]
push 3
pop ecx
cmp eax, ecx
mov dword [ebp - 0x2298], 5
jne 0x4c7067
mov dword [ebp - 0x2298], ecx
cmp dword [ebp - 0x2298], edi
mov dword [ebp - 0x2290], edi
jl 0x4c70f0
lea eax, [eax + eax*4 - 1]
mov dword [ebp - 0x2294], eax
mov ecx, dword [ebp - 0x2290]
mov eax, dword [ebp - 0x2294]
add eax, ecx
push eax
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, eax
call fcn.0040181f
test al, al
je 0x4c70dc
push dword [ebp - 0x2290]
lea eax, [ebp - 0x2c]
push str.subcatbike_d
push eax
call fcn.00493ef3
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0x27
call fcn.00493639
push eax
lea ecx, [esi - 4]
call fcn.004bb84a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00402a58
inc dword [ebp - 0x2290]
mov eax, dword [ebp - 0x2290]
cmp eax, dword [ebp - 0x2298]
jle 0x4c707f
mov eax, dword [ebp - 0x2298]
mov ecx, dword [ebp - 0x22a4]
dec eax
push eax
push 0
call fcn.004b96e2
mov eax, dword [ebx + 0x388]
test eax, eax
je 0x4c711f
cmp eax, 4
je 0x4c711f
cmp eax, 8
mov ecx, dword [ebp - 0x22b4]
jne 0x4c7125
mov ecx, dword [ebp - 0x22b8]
mov eax, dword [ebx + 0x394]
mov dword [ebx + eax*4 + 0x36c], ecx
push str.BikeSelectionBack
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c7177
cmp dword [ebx + 0x390], 2
lea eax, [esi + 0x1d4]
jne 0x4c715e
push str.mp_character_selection
jmp 0x4c7163
push str.track_selection
push eax
call fcn.006008a0
pop ecx
pop ecx
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push edi
call dword [eax + 0x60]
push str.ChangeBikeSelection
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c72f5
mov dword [ebp - 0x2298], edi
push dword [ebp - 0x2298]
lea eax, [ebp - 0x2c]
push str.subcatbike_d
push eax
call fcn.00493ef3
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0x28
call fcn.00493639
push eax
lea ecx, [esi - 4]
call fcn.004bb87e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00402a58
inc dword [ebp - 0x2298]
cmp dword [ebp - 0x2298], 5
jle 0x4c7197
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push 0
push str.categorysel
call dword [eax + 0x28]
test al, al
je 0x4c72f5
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push 0
push str.categorysel
call dword [eax + 0x2c]
mov dword [ebp - 0x2298], eax
mov eax, dword [ebx + 0x394]
mov eax, dword [ebx + eax*4 + 0x364]
cmp eax, 3
mov dword [ebp - 0x229c], 5
jne 0x4c7235
mov dword [ebp - 0x229c], eax
cmp dword [ebp - 0x229c], edi
mov dword [ebp - 0x2290], edi
jl 0x4c72be
lea eax, [eax + eax*4 - 1]
mov dword [ebp - 0x2294], eax
mov ecx, dword [ebp - 0x2294]
mov eax, dword [ebp - 0x2290]
add eax, ecx
push eax
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, eax
call fcn.0040181f
test al, al
je 0x4c72aa
push dword [ebp - 0x2290]
lea eax, [ebp - 0x2c]
push str.subcatbike_d
push eax
call fcn.00493ef3
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0x29
call fcn.00493639
push eax
lea ecx, [esi - 4]
call fcn.004bb84a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00402a58
inc dword [ebp - 0x2290]
mov eax, dword [ebp - 0x2290]
cmp eax, dword [ebp - 0x229c]
jle 0x4c724d
mov eax, dword [ebp - 0x229c]
mov ecx, dword [ebp - 0x2298]
dec eax
push eax
push 0
call fcn.004b96e2
mov ecx, dword [ebp - 0x2298]
push 0
call fcn.004b9d7a
cmp eax, dword [ebp - 0x229c]
jl 0x4c72f5
mov ecx, dword [ebp - 0x2298]
push 0
call fcn.004b9d34
push str.ParseBikeSelection
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c74d9
lea ecx, [esi - 4]
push str.racebike
call fcn.004bb816
push str.battlebike
lea ecx, [esi - 4]
call fcn.004bb816
mov dword [ebp - 0x2298], edi
push dword [ebp - 0x2298]
lea eax, [ebp - 0x64]
push str.subcatbike_d
push eax
call fcn.00493ef3
add esp, 0xc
mov eax, dword [esi + 0x1d0]
mov edi, dword [eax]
push 0
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x2a
call fcn.00493639
mov ecx, dword [esi + 0x1d0]
push eax
call dword [edi + 0x28]
test al, al
je 0x4c7392
mov eax, dword [esi + 0x1d0]
mov edi, dword [eax]
push 0
lea ecx, [ebp - 0x64]
call fcn.00493639
mov ecx, dword [esi + 0x1d0]
push eax
call dword [edi + 0x2c]
mov edx, dword [eax]
push 0
mov ecx, eax
call dword [edx + 0x44]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00402a58
inc dword [ebp - 0x2298]
cmp dword [ebp - 0x2298], 5
jle 0x4c732f
mov eax, dword [ebx + 0x394]
mov dword [ebp - 0x2294], eax
call fcn.00401ca8
mov ecx, dword [ebx + 0x394]
mov eax, dword [eax + ecx*4 + 0x364]
lea edi, [eax + eax*4]
call fcn.00401ca8
mov ecx, dword [ebp - 0x2294]
add edi, dword [eax + ecx*4 + 0x36c]
mov dword [ebx + ecx*4 + 0x35c], edi
mov eax, dword [ebx + 0x394]
mov eax, dword [ebx + eax*4 + 0x36c]
inc eax
push eax
lea eax, [ebp - 0x48]
push str.subcatbike_d
push eax
call fcn.00493ef3
add esp, 0xc
mov eax, dword [esi + 0x1d0]
mov edi, dword [eax]
push 0
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x2b
call fcn.00493639
mov ecx, dword [esi + 0x1d0]
push eax
call dword [edi + 0x28]
test al, al
je 0x4c7457
mov eax, dword [esi + 0x1d0]
mov edi, dword [eax]
push 0
lea ecx, [ebp - 0x48]
call fcn.00493639
mov ecx, dword [esi + 0x1d0]
push eax
call dword [edi + 0x2c]
mov edx, dword [eax]
xor edi, edi
inc edi
push edi
mov ecx, eax
call dword [edx + 0x44]
jmp 0x4c745a
xor edi, edi
inc edi
mov eax, dword [ebx + 0x394]
push dword [ebx + eax*4 + 0x35c]
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, eax
call fcn.0040181f
test al, al
je 0x4c74c2
mov eax, dword [ebx + 0x388]
test eax, eax
je 0x4c74a5
cmp eax, 4
je 0x4c74a5
cmp eax, 8
je 0x4c74a5
mov eax, dword [ebx + 0x394]
cmp dword [ebx + eax*4 + 0x36c], 3
jl 0x4c74c2
push str.battlebike
jmp 0x4c74ba
mov eax, dword [ebx + 0x394]
cmp dword [ebx + eax*4 + 0x36c], 3
jge 0x4c74c2
push str.racebike
lea ecx, [esi - 4]
call fcn.004bb7e2
mov ecx, dword [esi + 0x39c]
call fcn.0042922a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00402a58
push str.CheckBikeSelection
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c75ab
mov eax, dword [ebx + 0x394]
push dword [ebx + eax*4 + 0x35c]
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, eax
call fcn.0040181f
test al, al
je 0x4c7537
mov eax, dword [ebx + 0x388]
test eax, eax
je 0x4c753f
cmp eax, 4
je 0x4c753f
cmp eax, 8
je 0x4c753f
mov eax, dword [ebx + 0x394]
cmp dword [ebx + eax*4 + 0x36c], 3
jl 0x4c754f
push 0xfffffffffffffffe
pop eax
jmp 0x4cb6c8
mov eax, dword [ebx + 0x394]
cmp dword [ebx + eax*4 + 0x36c], 3
jl 0x4c7537
mov ecx, dword [ebx + 0x390]
cmp ecx, edi
je 0x4c758d
cmp eax, 2
je 0x4c7589
lea eax, [esi + 0x1d4]
push str.mp_character_selection
push eax
call fcn.006008a0
pop ecx
pop ecx
mov dword [ebx + 0x394], 2
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push edi
call dword [eax + 0x60]
jmp 0x4c75ab
cmp ecx, edi
jne 0x4c75a2
push dword [ebx + 0x328]
mov ecx, ebx
push edi
call fcn.0040368a
mov ecx, eax
call fcn.004bb6b8
fld1
mov byte [esi + 9], 1
fstp dword [esi + 0xc]
push str.CharacterSelectionBack
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c7612
mov eax, dword [ebx + 0x394]
cmp eax, edi
jne 0x4c75e8
lea eax, [esi + 0x1d4]
push 0x644b00
push eax
call fcn.006008a0
pop ecx
pop ecx
lea ecx, [esi - 4]
call fcn.004bfdca
jmp 0x4c7606
cmp eax, 2
jne 0x4c7606
lea eax, [esi + 0x1d4]
push str.bike_selection
push eax
mov dword [ebx + 0x394], edi
call fcn.006008a0
pop ecx
pop ecx
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push edi
call dword [eax + 0x60]
push str.TrackSelectionProceed
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c76db
mov ecx, dword [esi + 0x1d0]
mov eax, dword [ecx]
push 0
push str.mission1
call dword [eax + 0x2c]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x34]
test al, al
je 0x4c76db
lea eax, [esi + 0x1d4]
push str.mp_character_selection
push eax
mov dword [ebx + 0x394], edi
call fcn.006008a0
mov eax, dword [ebx + 0x324]
pop ecx
inc eax
pop ecx
inc eax
cdq
push 3
pop ecx
idiv ecx
mov dword [ebp - 0x22b8], eax
call fcn.00402368
mov ecx, dword [ebp - 0x22b8]
mov eax, dword [eax + ecx*4 + 0x30c]
add eax, 8
mov dword [ebx + 0x388], eax
call fcn.00402368
mov ecx, dword [ebp - 0x22b8]
mov ecx, dword [eax + ecx*4 + 0x330]
mov eax, dword [ebx + 0x324]
add eax, ecx
mov dword [ebp - 0x2294], eax
call fcn.00402368
mov ecx, dword [ebp - 0x2294]
mov eax, dword [eax + ecx*4 + 0x244]
mov dword [ebx + 0x328], eax
mov esi, dword [esi + 0x1d0]
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x60]
push str.LoadHiPosImages
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c77fe
mov esi, dword [ebx + 0x324]
push 1
mov ecx, ebx
call fcn.0040368a
imul esi, esi, 0xcc
and dword [ebp - 0x2290], 0
push 0x33
lea esi, [esi + eax + 0x928]
pop ecx
lea edi, [ebp - 0x26a8]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x22a8]
push dword [ebp - 0x2290]
lea eax, [ebp - 0x64]
push str.pos_dimg
push eax
call fcn.00493ef3
add esp, 0xc
mov eax, dword [esi + 0x1d0]
mov edi, dword [eax]
push 0
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x2c
call fcn.00493639
mov ecx, dword [esi + 0x1d0]
push eax
call dword [edi + 0x28]
test al, al
je 0x4c77df
mov ecx, dword [esi + 0x1d0]
mov edi, dword [ecx]
xor eax, eax
push eax
push 0x6a59ac
push 0x6a593c
push eax
push eax
lea ecx, [ebp - 0x64]
call fcn.00493639
mov ecx, dword [esi + 0x1d0]
push eax
call dword [edi + 0x2c]
push eax
call fcn.0060161a
mov edi, eax
add esp, 0x14
test edi, edi
je 0x4c77df
mov eax, dword [ebp - 0x2290]
mov eax, dword [ebp + eax*4 - 0x262c]
sub esp, 0x1c
cmp eax, 0xffffffff
mov dword [ebp - 0x22bc], esp
je 0x4c77c6
mov ecx, esp
inc eax
push eax
push str.male__d.tga
push ecx
jmp 0x4c77d0
mov eax, esp
push 0
push str.blank_thumbnail.tga
push eax
call fcn.00493ef3
mov ecx, edi
add esp, 0xc
call fcn.004b5f6a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00402a58
inc dword [ebp - 0x2290]
cmp dword [ebp - 0x2290], 5
jl 0x4c7729
mov edi, dword [ebp - 0x22a8]
push str.LoadSummary
xor esi, esi
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c8d88
mov eax, dword [ebx + 0x390]
cmp eax, 1
jne 0x4c8e6b
mov dword [ebp - 0x2290], esi
add edi, 0xfffffffc
push dword [ebp - 0x2290]
lea eax, [ebp - 0x2314]
push str.lap_d_time
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0x2d
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb816
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2314]
call fcn.00402a58
push dword [ebp - 0x2290]
lea eax, [ebp - 0x2330]
push str.lap_d_head
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0x2e
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb816
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2330]
call fcn.00402a58
inc dword [ebp - 0x2290]
cmp dword [ebp - 0x2290], 5
jle 0x4c7838
push str.gangwon
mov ecx, edi
call fcn.004bb816
push str.ganglost
mov ecx, edi
call fcn.004bb816
mov eax, dword [ebx + 0x13e0]
cmp eax, esi
jne 0x4c8244
push str.silver_img
mov ecx, edi
call fcn.004bb816
push str.gold_img
mov ecx, edi
call fcn.004bb816
push str.silver_txt
mov ecx, edi
call fcn.004bb816
push str.gold_txt
mov ecx, edi
call fcn.004bb816
mov edi, 0x641cfa
push edi
lea ecx, [ebp - 0x80]
call fcn.00493e85
push edi
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x2f
call fcn.00493e85
mov eax, dword [ebx + 0x388]
cmp eax, esi
mov byte [ebp - 4], 0x30
jne 0x4c79b3
push esi
lea eax, [ebp - 0x2330]
push 0x4e34
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
mov byte [ebp - 4], 0x31
call fcn.00401cdd
push dword [eax + 0x100]
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x2314]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x32
call fcn.00494014
lea ecx, [ebp - 0x2314]
mov byte [ebp - 4], 0x31
call fcn.00402a58
lea ecx, [ebp - 0x2330]
jmp 0x4c81eb
xor edi, edi
inc edi
cmp eax, edi
jne 0x4c7bf2
push esi
call fcn.004012af
mov ecx, eax
call fcn.004a1c1a
mov edi, dword [eax + 0x4c]
push esi
lea eax, [edi + 0x7d9]
push eax
lea eax, [ebp - 0x23bc]
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov dword [ebp - 0x2294], eax
push esi
add edi, 0x7cf
lea eax, [ebp - 0x2330]
push edi
push eax
mov byte [ebp - 4], 0x33
call fcn.00403795
mov ecx, eax
call fcn.0048d781
push dword [ebp - 0x2294]
mov byte [ebp - 4], 0x34
push eax
lea eax, [ebp - 0x2314]
push eax
call fcn.00494034
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x35
call fcn.00493639
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00493ef3
pop ecx
pop ecx
lea ecx, [ebp - 0x2314]
mov byte [ebp - 4], 0x39
call fcn.00402a58
lea ecx, [ebp - 0x2330]
mov byte [ebp - 4], 0x38
call fcn.00402a58
lea ecx, [ebp - 0x23bc]
mov byte [ebp - 4], 0x37
call fcn.00402a58
push esi
call fcn.00401cdd
mov eax, dword [eax + 0xf0]
add eax, 0x7d9
push eax
lea eax, [ebp - 0x2384]
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
push esi
mov byte [ebp - 4], 0x3a
call fcn.00401cdd
mov eax, dword [eax + 0xf0]
add eax, 0x7cf
push eax
lea eax, [ebp - 0x234c]
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov byte [ebp - 4], 0x3b
push edi
push eax
lea eax, [ebp - 0x2368]
push eax
call fcn.00494034
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x3c
call fcn.00493639
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00493ef3
pop ecx
pop ecx
lea ecx, [ebp - 0x2368]
mov byte [ebp - 4], 0x40
call fcn.00402a58
lea ecx, [ebp - 0x234c]
mov byte [ebp - 4], 0x3f
call fcn.00402a58
lea ecx, [ebp - 0x2384]
mov byte [ebp - 4], 0x3e
call fcn.00402a58
push esi
lea eax, [ebp - 0x22d8]
push 0x4e35
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x41
call fcn.004935c3
push eax
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x22f4]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x42
call fcn.00494014
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0x41
call fcn.00402a58
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x3e
call fcn.00402a58
push esi
lea eax, [ebp - 0x22f4]
push 0x4e36
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x43
call fcn.004935c3
push eax
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
mov byte [ebp - 4], 0x44
push eax
lea ecx, [ebp - 0x48]
call fcn.00494014
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x43
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0x3e
call fcn.00402a58
mov byte [ebp - 4], 0x37
jmp 0x4c7d23
cmp eax, 2
jne 0x4c7d33
push esi
call fcn.004012af
mov ecx, eax
call fcn.004a1c1a
fld dword [eax + 0x1ac]
push edi
push ecx
lea eax, [ebp - 0x64]
fstp dword [esp]
push eax
call fcn.00401d7c
mov ecx, eax
call fcn.0041af56
push edi
mov byte [ebp - 4], 0x45
call fcn.00401cdd
fld dword [eax + 0x108]
push ecx
lea eax, [ebp - 0x2c]
fstp dword [esp]
push eax
call fcn.00401d7c
mov ecx, eax
call fcn.0041af56
push esi
lea eax, [ebp - 0x22f4]
push 0x4e37
push eax
mov byte [ebp - 4], 0x46
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x47
call fcn.004935c3
push eax
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x48
call fcn.00494014
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x47
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0x46
call fcn.00402a58
push esi
lea eax, [ebp - 0x22f4]
push 0x4e38
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x49
call fcn.004935c3
push eax
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
mov byte [ebp - 4], 0x4a
push eax
lea ecx, [ebp - 0x48]
call fcn.00494014
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x49
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0x46
call fcn.00402a58
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x2c]
call fcn.00402a58
lea ecx, [ebp - 0x64]
jmp 0x4c81eb
cmp eax, 3
jne 0x4c7e30
call fcn.00401ca8
cmp byte [eax + 0xf6c], 0
push esi
lea eax, [ebp - 0x22f4]
je 0x4c7d90
push 0x4e41
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0x4b
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x4c
call fcn.00494014
mov byte [ebp - 4], 0x4b
jmp 0x4c7dcd
push 0x4e39
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0x4d
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x4e
call fcn.00494014
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x22d8]
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0x30
call fcn.00402a58
push esi
lea eax, [ebp - 0x22f4]
push 0x4e3a
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0x4f
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x50
call fcn.00494014
mov byte [ebp - 4], 0x4f
jmp 0x4c81ad
cmp eax, 4
jne 0x4c7f32
push esi
lea eax, [ebp - 0x22f4]
push 0x4e3b
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov dword [ebp - 0x2294], eax
mov byte [ebp - 4], 0x51
call fcn.00401cdd
push dword [eax + 0x11c]
mov ecx, dword [ebp - 0x2294]
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x52
call fcn.00494014
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x51
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0x30
call fcn.00402a58
call fcn.00401ca8
cmp dword [eax + 0xf68], edi
push esi
je 0x4c7f11
lea eax, [ebp - 0x22f4]
push 0x4e3c
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
mov byte [ebp - 4], 0x53
call fcn.00401ca8
push dword [eax + 0xf68]
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x54
call fcn.00494014
mov byte [ebp - 4], 0x53
jmp 0x4c81ad
lea eax, [ebp - 0x22d8]
push 0x4e48
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov byte [ebp - 4], 0x55
jmp 0x4c81dc
cmp eax, 5
jne 0x4c80d1
push esi
call fcn.004012af
mov ecx, eax
call fcn.004a1c1a
push esi
mov edi, eax
lea eax, [ebp - 0x22f4]
push 0x4e3d
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov dword [ebp - 0x2294], eax
mov byte [ebp - 4], 0x56
call fcn.00401cdd
push dword [eax + 0x12c]
mov ecx, dword [ebp - 0x2294]
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x57
call fcn.00494014
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x56
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0x30
call fcn.00402a58
mov edi, dword [edi + 0x4c]
push esi
lea eax, [edi + 0x7d9]
push eax
lea eax, [ebp - 0x2384]
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov dword [ebp - 0x2294], eax
push esi
add edi, 0x7cf
lea eax, [ebp - 0x22f4]
push edi
push eax
mov byte [ebp - 4], 0x58
call fcn.00403795
mov ecx, eax
call fcn.0048d781
push dword [ebp - 0x2294]
mov byte [ebp - 4], 0x59
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00494034
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x5a
call fcn.00493639
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00493ef3
pop ecx
pop ecx
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x5e
call fcn.00402a58
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x22f4]
call fcn.00402a58
lea ecx, [ebp - 0x2384]
mov byte [ebp - 4], 0x5c
call fcn.00402a58
push esi
lea eax, [ebp - 0x2368]
push 0x4e3e
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x5f
call fcn.004935c3
push eax
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x234c]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x60
call fcn.00494014
lea ecx, [ebp - 0x234c]
mov byte [ebp - 4], 0x5f
call fcn.00402a58
lea ecx, [ebp - 0x2368]
mov byte [ebp - 4], 0x5c
call fcn.00402a58
lea ecx, [ebp - 0x2c]
jmp 0x4c81eb
cmp eax, 6
jne 0x4c81f4
push esi
lea eax, [ebp - 0x22f4]
push 0x4e3f
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov dword [ebp - 0x2294], eax
mov byte [ebp - 4], 0x61
call fcn.00401cdd
push dword [eax + 0x144]
mov ecx, dword [ebp - 0x2294]
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x62
call fcn.00494014
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x61
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0x30
call fcn.00402a58
call fcn.00401ca8
cmp dword [eax + 0xfe8], edi
push esi
je 0x4c81c0
lea eax, [ebp - 0x22f4]
push 0x4e40
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
mov byte [ebp - 4], 0x63
call fcn.00401ca8
push dword [eax + 0xfe8]
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x64
call fcn.00494014
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x22d8]
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
jmp 0x4c81eb
lea eax, [ebp - 0x22d8]
push 0x4e49
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x48]
push eax
call fcn.00494014
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x30
call fcn.00402a58
lea ecx, [ebp - 0x80]
call fcn.00493639
mov edi, dword [ebp - 0x22a8]
push eax
add edi, 0xfffffffc
push str._failure_text1_
mov ecx, edi
call fcn.004bfd5a
lea ecx, [ebp - 0x48]
call fcn.00493639
push eax
push str._failure_text2_
mov ecx, edi
call fcn.004bfd5a
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x2f
call fcn.00402a58
lea ecx, [ebp - 0x80]
or dword [ebp - 4], 0xffffffff
call fcn.00402a58
jmp 0x4c8d5f
cmp eax, 1
jne 0x4c8d42
push str.gold_txt
mov ecx, edi
call fcn.004bb816
push str.gold_img
mov ecx, edi
call fcn.004bb816
push str.failed_txt
mov ecx, edi
call fcn.004bb816
mov edi, 0x641cfa
push edi
lea ecx, [ebp - 0x48]
call fcn.00493e85
push edi
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0x66
call fcn.00493e85
mov eax, dword [ebx + 0x388]
cmp eax, esi
mov byte [ebp - 4], 0x67
jne 0x4c8458
call fcn.00401ca8
cmp dword [eax + 0xfec], 1
push esi
lea eax, [ebp - 0x22f4]
je 0x4c8303
push 0x4e52
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
mov byte [ebp - 4], 0x68
call fcn.00401ca8
push dword [eax + 0xfec]
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x69
call fcn.00494014
mov byte [ebp - 4], 0x68
jmp 0x4c8340
push 0x4e69
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0x6a
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x6b
call fcn.00494014
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x22d8]
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0x67
call fcn.00402a58
call fcn.00401cdd
cmp dword [eax + 0x104], 1
jle 0x4c83bf
push esi
lea eax, [ebp - 0x22f4]
push 0x4e60
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
mov byte [ebp - 4], 0x6c
call fcn.00401cdd
push dword [eax + 0x104]
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x6d
call fcn.00494014
mov byte [ebp - 4], 0x6c
jmp 0x4c8ce1
call fcn.00401cdd
cmp dword [eax + 0x104], 1
push esi
lea eax, [ebp - 0x22f4]
jne 0x4c8416
push 0x4e61
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0x6e
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x6f
call fcn.00494014
mov byte [ebp - 4], 0x6e
jmp 0x4c8ce1
push 0x4e6a
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0x70
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x71
call fcn.00494014
mov byte [ebp - 4], 0x70
jmp 0x4c8ce1
xor edi, edi
inc edi
cmp eax, edi
jne 0x4c86e4
push esi
call fcn.004012af
mov ecx, eax
call fcn.004a1c1a
mov edi, dword [eax + 0x4c]
push esi
lea eax, [edi + 0x7d9]
push eax
lea eax, [ebp - 0x2384]
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov dword [ebp - 0x2294], eax
push esi
add edi, 0x7cf
lea eax, [ebp - 0x22f4]
push edi
push eax
mov byte [ebp - 4], 0x72
call fcn.00403795
mov ecx, eax
call fcn.0048d781
push dword [ebp - 0x2294]
mov byte [ebp - 4], 0x73
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00494034
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x74
call fcn.00493639
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00493ef3
pop ecx
pop ecx
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x78
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0x77
call fcn.00402a58
lea ecx, [ebp - 0x2384]
mov byte [ebp - 4], 0x76
call fcn.00402a58
push esi
call fcn.00401cdd
mov eax, dword [eax + 0xf8]
add eax, 0x7d9
push eax
lea eax, [ebp - 0x23bc]
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
push esi
mov byte [ebp - 4], 0x79
call fcn.00401cdd
mov eax, dword [eax + 0xf8]
add eax, 0x7cf
push eax
lea eax, [ebp - 0x2368]
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov byte [ebp - 4], 0x7a
push edi
push eax
lea eax, [ebp - 0x234c]
push eax
call fcn.00494034
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x7b
call fcn.00493639
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00493ef3
pop ecx
pop ecx
lea ecx, [ebp - 0x234c]
mov byte [ebp - 4], 0x7f
call fcn.00402a58
lea ecx, [ebp - 0x2368]
mov byte [ebp - 4], 0x7e
call fcn.00402a58
lea ecx, [ebp - 0x23bc]
mov byte [ebp - 4], 0x7d
call fcn.00402a58
push esi
lea eax, [ebp - 0x2330]
push 0x4e53
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x80
call fcn.004935c3
push eax
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x2314]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x81
call fcn.00494014
lea ecx, [ebp - 0x2314]
mov byte [ebp - 4], 0x80
call fcn.00402a58
lea ecx, [ebp - 0x2330]
mov byte [ebp - 4], 0x7d
call fcn.00402a58
call fcn.00401cdd
cmp dword [eax + 0xf8], 1
push esi
lea eax, [ebp - 0x2330]
je 0x4c8684
push 0x4e54
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x82
call fcn.004935c3
push eax
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x2314]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x83
call fcn.00494014
mov byte [ebp - 4], 0x82
jmp 0x4c86c1
push 0x4e6b
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0x84
call fcn.00493639
push eax
lea eax, [ebp - 0x2314]
push eax
call fcn.00493ef3
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x85
call fcn.00494014
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x2314]
call fcn.00402a58
lea ecx, [ebp - 0x2330]
mov byte [ebp - 4], 0x7d
call fcn.00402a58
mov byte [ebp - 4], 0x76
jmp 0x4c8815
cmp eax, 2
jne 0x4c8825
push esi
call fcn.004012af
mov ecx, eax
call fcn.004a1c1a
fld dword [eax + 0x1ac]
push edi
push ecx
lea eax, [ebp - 0x64]
fstp dword [esp]
push eax
call fcn.00401d7c
mov ecx, eax
call fcn.0041af56
push edi
mov byte [ebp - 4], 0x86
call fcn.00401cdd
fld dword [eax + 0x110]
push ecx
lea eax, [ebp - 0x2c]
fstp dword [esp]
push eax
call fcn.00401d7c
mov ecx, eax
call fcn.0041af56
push esi
lea eax, [ebp - 0x22f4]
push 0x4e56
push eax
mov byte [ebp - 4], 0x87
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x88
call fcn.004935c3
push eax
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x89
call fcn.00494014
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x88
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0x87
call fcn.00402a58
push esi
lea eax, [ebp - 0x22f4]
push 0x4e55
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x8a
call fcn.004935c3
push eax
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
mov byte [ebp - 4], 0x8b
push eax
lea ecx, [ebp - 0x80]
call fcn.00494014
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x8a
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0x87
call fcn.00402a58
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x2c]
call fcn.00402a58
lea ecx, [ebp - 0x64]
jmp 0x4c8cf2
cmp eax, 3
jne 0x4c88f8
push esi
call fcn.004012af
mov ecx, eax
call fcn.004a1c1a
mov edi, dword [eax + 0x29e0]
push esi
lea eax, [ebp - 0x22f4]
push 0x4e57
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
push edi
mov ecx, eax
mov byte [ebp - 4], 0x8c
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x8d
call fcn.00494014
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x8c
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0x67
call fcn.00402a58
push esi
lea eax, [ebp - 0x22f4]
push 0x4e58
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
mov byte [ebp - 4], 0x8e
call fcn.00401cdd
push dword [eax + 0xe0]
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x8f
call fcn.00494014
mov byte [ebp - 4], 0x8e
jmp 0x4c8ce1
cmp eax, 4
jne 0x4c89fe
call fcn.00401ca8
cmp dword [eax + 0xf68], edi
push esi
je 0x4c8973
lea eax, [ebp - 0x22f4]
push 0x4e5a
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
mov byte [ebp - 4], 0x90
call fcn.00401ca8
push dword [eax + 0xf68]
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x91
call fcn.00494014
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x90
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
jmp 0x4c899e
lea eax, [ebp - 0x22d8]
push 0x4e66
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x92
call fcn.00494014
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x67
call fcn.00402a58
push esi
lea eax, [ebp - 0x22f4]
push 0x4e59
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
mov byte [ebp - 4], 0x93
call fcn.00401cdd
push dword [eax + 0x124]
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x94
call fcn.00494014
mov byte [ebp - 4], 0x93
jmp 0x4c8ce1
cmp eax, 5
jne 0x4c8be0
push esi
call fcn.004012af
mov ecx, eax
call fcn.004a1c1a
mov edi, dword [eax + 0x4c]
push esi
lea eax, [edi + 0x7d9]
push eax
lea eax, [ebp - 0x2384]
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov dword [ebp - 0x2294], eax
push esi
add edi, 0x7cf
lea eax, [ebp - 0x22f4]
push edi
push eax
mov byte [ebp - 4], 0x95
call fcn.00403795
mov ecx, eax
call fcn.0048d781
push dword [ebp - 0x2294]
mov byte [ebp - 4], 0x96
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00494034
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x97
call fcn.00493639
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00493ef3
pop ecx
pop ecx
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x9b
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0x9a
call fcn.00402a58
lea ecx, [ebp - 0x2384]
mov byte [ebp - 4], 0x99
call fcn.00402a58
push esi
lea eax, [ebp - 0x2368]
push 0x4e5c
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x9c
call fcn.004935c3
push eax
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x234c]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x9d
call fcn.00494014
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0x234c]
call fcn.00402a58
lea ecx, [ebp - 0x2368]
mov byte [ebp - 4], 0x99
call fcn.00402a58
call fcn.00401cdd
cmp dword [eax + 0x130], 1
push esi
lea eax, [ebp - 0x2368]
je 0x4c8b81
push 0x4e5b
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
mov byte [ebp - 4], 0x9e
call fcn.00401cdd
push dword [eax + 0x130]
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x234c]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x9f
call fcn.00494014
mov byte [ebp - 4], 0x9e
jmp 0x4c8bbe
push 0x4e68
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0xa0
call fcn.00493639
push eax
lea eax, [ebp - 0x234c]
push eax
call fcn.00493ef3
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xa1
call fcn.00494014
mov byte [ebp - 4], 0xa0
lea ecx, [ebp - 0x234c]
call fcn.00402a58
lea ecx, [ebp - 0x2368]
mov byte [ebp - 4], 0x99
call fcn.00402a58
lea ecx, [ebp - 0x2c]
jmp 0x4c8cf2
cmp eax, 6
jne 0x4c8cfb
call fcn.00401ca8
cmp dword [eax + 0xfe8], edi
push esi
je 0x4c8c5b
lea eax, [ebp - 0x22f4]
push 0x4e5e
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
mov byte [ebp - 4], 0xa2
call fcn.00401ca8
push dword [eax + 0xfe8]
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xa3
call fcn.00494014
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0xa2
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
jmp 0x4c8c86
lea eax, [ebp - 0x22d8]
push 0x4e67
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xa4
call fcn.00494014
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x67
call fcn.00402a58
push esi
lea eax, [ebp - 0x22f4]
push 0x4e5d
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov edi, eax
mov byte [ebp - 4], 0xa5
call fcn.00401cdd
push dword [eax + 0x140]
mov ecx, edi
call fcn.00493639
push eax
lea eax, [ebp - 0x22d8]
push eax
call fcn.00493ef3
add esp, 0xc
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xa6
call fcn.00494014
mov byte [ebp - 4], 0xa5
lea ecx, [ebp - 0x22d8]
call fcn.00402a58
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0x67
call fcn.00402a58
lea ecx, [ebp - 0x48]
call fcn.00493639
mov edi, dword [ebp - 0x22a8]
push eax
add edi, 0xfffffffc
push str._failure_text1_
mov ecx, edi
call fcn.004bfd5a
lea ecx, [ebp - 0x80]
call fcn.00493639
push eax
push str._failure_text2_
mov ecx, edi
call fcn.004bfd5a
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x66
call fcn.00402a58
lea ecx, [ebp - 0x48]
jmp 0x4c8236
cmp eax, 2
jne 0x4c8d5f
push str.silver_txt
mov ecx, edi
call fcn.004bb816
push str.silver_img
mov ecx, edi
call fcn.004bb816
cmp dword [ebx + 0x388], esi
jne 0x4c8dbf
cmp dword [ebx + 0x13e0], esi
mov ecx, edi
jne 0x4c8d78
push str.ganglost
jmp 0x4c8d7d
push str.gangwon
call fcn.004bb7e2
mov edi, dword [ebp - 0x22a8]
push str.BackToSummary
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4c9052
cmp dword [ebx + 0x13e0], 2
lea eax, [edi + 0x1d4]
je 0x4c9038
push str.ingame_mission_failed_summary
jmp 0x4c903d
xor eax, eax
inc eax
cmp dword [ebx + 0xdac], eax
mov dword [ebp - 0x2290], eax
jl 0x4c8d82
push dword [ebp - 0x2290]
lea eax, [ebp - 0x22d8]
push str.lap_d_time
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xa7
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb7e2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22d8]
call fcn.00402a58
push dword [ebp - 0x2290]
lea eax, [ebp - 0x22f4]
push str.lap_d_head
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xa8
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb7e2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22f4]
call fcn.00402a58
inc dword [ebp - 0x2290]
mov eax, dword [ebp - 0x2290]
cmp eax, dword [ebx + 0xdac]
jle 0x4c8dd0
jmp 0x4c8d82
cmp eax, 2
jne 0x4c8d88
mov eax, dword [ebx + 0xdac]
inc eax
cmp eax, 5
mov dword [ebp - 0x229c], eax
jg 0x4c8f1d
push dword [ebp - 0x229c]
lea eax, [ebp - 0x22d8]
push str.lap_d_time
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xa9
call fcn.00493639
push eax
lea ecx, [edi - 4]
call fcn.004bb816
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22d8]
call fcn.00402a58
push dword [ebp - 0x229c]
lea eax, [ebp - 0x22f4]
push str.lap_d_head
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xaa
call fcn.00493639
push eax
lea ecx, [edi - 4]
call fcn.004bb816
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22f4]
call fcn.00402a58
inc dword [ebp - 0x229c]
cmp dword [ebp - 0x229c], 5
jle 0x4c8e8a
mov eax, dword [ebx + 0xdb0]
inc eax
cmp eax, 5
mov dword [ebp - 0x229c], eax
jg 0x4c8fc6
push dword [ebp - 0x229c]
lea eax, [ebp - 0x22d8]
push str.lap_d_p2_time
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xab
call fcn.00493639
push eax
lea ecx, [edi - 4]
call fcn.004bb816
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22d8]
call fcn.00402a58
push dword [ebp - 0x229c]
lea eax, [ebp - 0x22f4]
push str.lap_d_p2_head
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xac
call fcn.00493639
push eax
lea ecx, [edi - 4]
call fcn.004bb816
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22f4]
call fcn.00402a58
inc dword [ebp - 0x229c]
cmp dword [ebp - 0x229c], 5
jle 0x4c8f33
mov eax, dword [ebx + 0x388]
cmp eax, 9
jne 0x4c8ff7
mov ecx, dword [ebx + 0xdb8]
mov eax, dword [ebx + 0xdb4]
cmp eax, ecx
lea ecx, [edi - 4]
jl 0x4c900b
jg 0x4c901c
push str.p1_looser
call fcn.004bb816
push str.p2_looser
jmp 0x4c902b
cmp eax, 8
jne 0x4c8d88
cmp dword [ebx + 0x1090], esi
lea ecx, [edi - 4]
jne 0x4c901c
push str.p1_looser
call fcn.004bb816
push str.p2_winner
jmp 0x4c902b
push str.p2_looser
call fcn.004bb816
push str.p1_winner
lea ecx, [edi - 4]
call fcn.004bb816
jmp 0x4c8d88
push str.ingame_mission_summary
push eax
call fcn.006008a0
pop ecx
pop ecx
mov ecx, dword [edi + 0x1d0]
mov eax, dword [ecx]
push 1
call dword [eax + 0x60]
push str.LoadDebriefing
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4ca3da
cmp esi, dword [ebx + 0x3a8]
jl 0x4c90aa
push esi
lea eax, [ebp - 0x2c]
push str.dot_icon__d
push eax
call fcn.00493ef3
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xad
call fcn.00493639
push eax
lea ecx, [edi - 4]
call fcn.004bb816
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00402a58
inc esi
cmp esi, 5
jl 0x4c906c
mov edi, dword [ebp - 0x22a8]
add edi, 0xfffffffc
push str.mission_text
mov ecx, edi
call fcn.004bb816
push str.silver_text
mov ecx, edi
call fcn.004bb816
push str.gold_text
mov ecx, edi
call fcn.004bb816
push str.silver_img
mov ecx, edi
call fcn.004bb816
push str.gold_img
mov ecx, edi
call fcn.004bb816
mov esi, str.keyboard
push esi
mov ecx, edi
call fcn.004bb87e
push esi
mov ecx, edi
call fcn.004bb816
push str.keyboardclump
mov ecx, edi
call fcn.004bb816
push str.keyboardclump2
mov ecx, edi
call fcn.004bb816
push str.keyboardclump3
mov ecx, edi
call fcn.004bb816
push str.subhead
mov ecx, edi
call fcn.004bb816
push str.namefield
mov ecx, edi
call fcn.004bb816
mov esi, str.unlocked_item_image
push esi
mov ecx, edi
call fcn.004bb816
push str.trackname
mov ecx, edi
call fcn.004bb816
mov dword [ebp - 0x2290], 1
push dword [ebp - 0x2290]
lea eax, [ebp - 0x22d8]
push 0x6452f0
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xae
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb816
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22d8]
call fcn.00402a58
push dword [ebp - 0x2290]
lea eax, [ebp - 0x22f4]
push str.name_d
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xaf
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb816
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22f4]
call fcn.00402a58
push dword [ebp - 0x2290]
lea eax, [ebp - 0x2384]
push str.min_d
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xb0
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb816
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2384]
call fcn.00402a58
inc dword [ebp - 0x2290]
cmp dword [ebp - 0x2290], 5
jle 0x4c9169
push 0x641cfa
push str._deb_headline_
mov ecx, edi
call fcn.004bfd5a
push 0x641cfa
push str._deb_subheadline_
mov ecx, edi
call fcn.004bfd5a
push 0x641cfa
push str._deb_unlockname_
mov ecx, edi
call fcn.004bfd5a
mov eax, dword [ebx + 0x3a4]
sub eax, 0
je 0x4c9346
dec eax
je 0x4c93c8
dec eax
je 0x4c96b6
dec eax
je 0x4c98ca
dec eax
je 0x4c9ad8
dec eax
je 0x4c9fab
dec eax
je 0x4ca053
push 1
call fcn.00401ca8
mov ecx, eax
call fcn.0040368a
mov esi, eax
lea edi, [ebp - 0x228c]
mov ecx, 0x845
rep movsd dword es:[edi], dword [esi]
and dword [ebx + 0x3a4], 0
push 5
mov dword [ebp - 4], 0xda
lea esi, [ebx + 0x3ac]
pop edi
push 0x641cfa
push esi
call fcn.006008a0
pop ecx
add esi, 0x200
dec edi
pop ecx
jne 0x4c92d9
xor esi, esi
inc esi
mov byte [ebp - 0x229d], 1
mov byte [ebp - 0x22aa], 1
mov byte [ebp - 0x22a9], 0
mov edi, esi
push edi
push esi
mov ecx, ebx
call fcn.0040368a
mov ecx, eax
call fcn.004ce783
test al, al
je 0x4ca2c1
push edi
push esi
mov ecx, ebx
call fcn.0040368a
mov ecx, eax
call fcn.0041ab6c
test al, al
jne 0x4c933b
mov byte [ebp - 0x22aa], al
inc edi
cmp edi, 0x18
jle 0x4c9309
jmp 0x4ca2cf
and dword [ebx + 0x3a8], 0
and dword [ebp - 0x2298], 0
push dword [ebp - 0x2298]
lea eax, [ebp - 0x2c]
push str.dot_icon__d
push eax
call fcn.00493ef3
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xb1
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb816
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00402a58
inc dword [ebp - 0x2298]
cmp dword [ebp - 0x2298], 5
jl 0x4c9354
lea edi, [ebx + 0x3ac]
mov dword [ebp - 0x22b8], 5
push 0x641cfa
push edi
call fcn.006008a0
pop ecx
add edi, 0x200
dec dword [ebp - 0x22b8]
pop ecx
jne 0x4c93ad
cmp dword [ebx + 0xfd0], 0
jle 0x4c96ac
push dword [ebx + 0x3a8]
lea eax, [ebp - 0x48]
push str.dot_icon__d
push eax
call fcn.00493ef3
add esp, 0xc
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0xb2
call fcn.00493639
mov edi, dword [ebp - 0x22a8]
add edi, 0xfffffffc
push eax
mov ecx, edi
call fcn.004bb7e2
push 0
lea eax, [ebp - 0x22d8]
push 0x50fb
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0xb3
call fcn.004935c3
push eax
mov eax, dword [ebx + 0x3a8]
shl eax, 9
lea eax, [eax + ebx + 0x3ac]
push eax
call fcn.006008a0
pop ecx
pop ecx
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0xb2
call fcn.00402a58
inc dword [ebx + 0x3a8]
push 0
lea eax, [ebp - 0x22f4]
push 0x50e9
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0xb4
call fcn.00493639
push eax
push str._deb_headline_
mov ecx, edi
call fcn.004bfd5a
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0xb2
call fcn.00402a58
push 0
lea eax, [ebp - 0x2384]
push 0x50f3
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0xb5
call fcn.00493639
push eax
push str._deb_subheadline_
mov ecx, edi
call fcn.004bfd5a
lea ecx, [ebp - 0x2384]
mov byte [ebp - 4], 0xb2
call fcn.00402a58
mov eax, dword [ebx + 0xfd0]
mov edi, dword [ebx + eax*4 + 0xf98]
call fcn.00402368
mov edi, dword [eax + edi*4 + 0x244]
call fcn.00402368
mov eax, dword [eax + edi*4 + 0x2a8]
mov dword [ebp - 0x22b8], eax
mov eax, dword [ebp - 0x22a8]
mov ecx, dword [eax + 0x1d0]
mov eax, dword [ecx]
push 0
push esi
call dword [eax + 0x28]
test al, al
je 0x4c958c
mov eax, dword [ebp - 0x22a8]
mov ecx, dword [eax + 0x1d0]
mov edx, dword [ecx]
xor eax, eax
push eax
push 0x6a59ac
push 0x6a593c
push eax
push eax
push esi
call dword [edx + 0x2c]
push eax
call fcn.0060161a
add esp, 0x14
test eax, eax
mov dword [ebp - 0x2294], eax
je 0x4c957d
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x22bc], esp
push edi
push str.track__d.tga
push eax
call fcn.00493ef3
mov ecx, dword [ebp - 0x2294]
add esp, 0xc
call fcn.004b5f6a
mov ecx, dword [ebp - 0x22a8]
push esi
add ecx, 0xfffffffc
call fcn.004bb7e2
push 0x651330
lea ecx, [ebp - 0x64]
call fcn.00493e85
mov eax, dword [ebp - 0x22b8]
add eax, 0x2d78
push 0
push eax
lea eax, [ebp - 0x2314]
push eax
mov byte [ebp - 4], 0xb6
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov esi, eax
push 0
add edi, 0x2db3
lea eax, [ebp - 0x23bc]
push edi
push eax
mov byte [ebp - 4], 0xb7
call fcn.00403795
mov ecx, eax
call fcn.0048d781
lea ecx, [ebp - 0x64]
push ecx
push eax
lea eax, [ebp - 0x2368]
push eax
mov byte [ebp - 4], 0xb8
call fcn.00494034
push esi
push eax
lea eax, [ebp - 0x234c]
push eax
mov byte [ebp - 4], 0xb9
call fcn.00494034
add esp, 0x18
mov ecx, eax
mov byte [ebp - 4], 0xba
call fcn.00493639
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00493ef3
pop ecx
pop ecx
lea ecx, [ebp - 0x234c]
mov byte [ebp - 4], 0xc0
call fcn.00402a58
lea ecx, [ebp - 0x2368]
mov byte [ebp - 4], 0xbf
call fcn.00402a58
lea ecx, [ebp - 0x23bc]
mov byte [ebp - 4], 0xbe
call fcn.00402a58
lea ecx, [ebp - 0x2314]
mov byte [ebp - 4], 0xbd
call fcn.00402a58
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xbc
call fcn.00402a58
lea ecx, [ebp - 0x2c]
call fcn.00493639
mov ecx, dword [ebp - 0x22a8]
push eax
push str._deb_unlockname_
add ecx, 0xfffffffc
call fcn.004bfd5a
dec dword [ebx + 0xfd0]
jne 0x4c9695
inc dword [ebx + 0x3a4]
jmp 0x4c969b
dec dword [ebx + 0x3a8]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xb2
call fcn.00402a58
jmp 0x4c9f9a
mov dword [ebx + 0x3a4], 2
cmp dword [ebx + 0xfcc], 0
jle 0x4c98c0
push dword [ebx + 0x3a8]
lea eax, [ebp - 0x2c]
push str.dot_icon__d
push eax
call fcn.00493ef3
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xc1
call fcn.00493639
mov edi, dword [ebp - 0x22a8]
lea ecx, [edi - 4]
push eax
mov dword [ebp - 0x2290], ecx
call fcn.004bb7e2
add edi, 0x1d0
mov ecx, dword [edi]
mov eax, dword [ecx]
push 0
push esi
call dword [eax + 0x28]
test al, al
je 0x4c977b
mov ecx, dword [edi]
mov eax, dword [ecx]
xor edi, edi
push edi
push 0x6a59ac
push 0x6a593c
push edi
push edi
push esi
call dword [eax + 0x2c]
push eax
call fcn.0060161a
add esp, 0x14
cmp eax, edi
mov dword [ebp - 0x2294], eax
je 0x4c976d
mov eax, dword [ebx + 0xfcc]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x22bc], esp
push dword [ebx + eax*4 + 0xf80]
push str.bike__d.tga
push ecx
call fcn.00493ef3
mov ecx, dword [ebp - 0x2294]
add esp, 0xc
call fcn.004b5f6a
mov ecx, dword [ebp - 0x2290]
push esi
call fcn.004bb7e2
jmp 0x4c977d
xor edi, edi
push edi
lea eax, [ebp - 0x2534]
push 0x50fc
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0xc2
call fcn.004935c3
push eax
mov eax, dword [ebx + 0x3a8]
shl eax, 9
lea eax, [eax + ebx + 0x3ac]
push eax
call fcn.006008a0
pop ecx
pop ecx
lea ecx, [ebp - 0x2534]
mov byte [ebp - 4], 0xc1
call fcn.00402a58
inc dword [ebx + 0x3a8]
push edi
lea eax, [ebp - 0x25a4]
push 0x50ea
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0xc3
call fcn.00493639
mov ecx, dword [ebp - 0x2290]
push eax
push str._deb_headline_
call fcn.004bfd5a
lea ecx, [ebp - 0x25a4]
mov byte [ebp - 4], 0xc1
call fcn.00402a58
push edi
lea eax, [ebp - 0x256c]
push 0x50f4
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0xc4
call fcn.00493639
mov ecx, dword [ebp - 0x2290]
push eax
push str._deb_subheadline_
call fcn.004bfd5a
lea ecx, [ebp - 0x256c]
mov byte [ebp - 4], 0xc1
call fcn.00402a58
mov eax, dword [ebx + 0xfcc]
mov eax, dword [ebx + eax*4 + 0xf80]
add eax, 0x510e
push edi
push eax
lea eax, [ebp - 0x24fc]
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0xc5
call fcn.00493639
mov ecx, dword [ebp - 0x2290]
push eax
push str._deb_unlockname_
call fcn.004bfd5a
lea ecx, [ebp - 0x24fc]
mov byte [ebp - 4], 0xc1
call fcn.00402a58
dec dword [ebx + 0xfcc]
jne 0x4c9ac0
inc dword [ebx + 0x3a4]
jmp 0x4c9ac6
mov dword [ebx + 0x3a4], 3
cmp dword [ebx + 0xfd4], 0
jle 0x4c9ace
push dword [ebx + 0x3a8]
lea eax, [ebp - 0x2c]
push str.dot_icon__d
push eax
call fcn.00493ef3
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xc6
call fcn.00493639
mov edi, dword [ebp - 0x22a8]
add edi, 0xfffffffc
push eax
mov ecx, edi
mov dword [ebp - 0x2290], edi
call fcn.004bb7e2
push 0
lea eax, [ebp - 0x2550]
push 0x50fe
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0xc7
call fcn.004935c3
push eax
mov eax, dword [ebx + 0x3a8]
shl eax, 9
lea eax, [eax + ebx + 0x3ac]
push eax
call fcn.006008a0
pop ecx
pop ecx
lea ecx, [ebp - 0x2550]
mov byte [ebp - 4], 0xc6
call fcn.00402a58
inc dword [ebx + 0x3a8]
push 0
lea eax, [ebp - 0x2588]
push 0x50eb
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0xc8
call fcn.00493639
push eax
push str._deb_headline_
mov ecx, edi
call fcn.004bfd5a
lea ecx, [ebp - 0x2588]
mov byte [ebp - 4], 0xc6
call fcn.00402a58
push 0
lea eax, [ebp - 0x25c0]
push 0x50f5
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0xc9
call fcn.00493639
push eax
push str._deb_subheadline_
mov ecx, edi
call fcn.004bfd5a
lea ecx, [ebp - 0x25c0]
mov byte [ebp - 4], 0xc6
call fcn.00402a58
mov eax, dword [ebx + 0xfd4]
mov eax, dword [ebx + eax*4 + 0xfb0]
add eax, 0x512b
push 0
push eax
lea eax, [ebp - 0x25dc]
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0xca
call fcn.00493639
push eax
push str._deb_unlockname_
mov ecx, edi
call fcn.004bfd5a
lea ecx, [ebp - 0x25dc]
mov byte [ebp - 4], 0xc6
call fcn.00402a58
mov edi, dword [ebp - 0x22a8]
add edi, 0x1d0
mov ecx, dword [edi]
mov eax, dword [ecx]
push 0
push esi
call dword [eax + 0x28]
test al, al
je 0x4c9ab5
mov ecx, dword [edi]
mov edx, dword [ecx]
xor eax, eax
push eax
push 0x6a59ac
push 0x6a593c
push eax
push eax
push esi
call dword [edx + 0x2c]
push eax
call fcn.0060161a
mov edi, eax
add esp, 0x14
test edi, edi
je 0x4c9aa9
mov eax, dword [ebx + 0xfd4]
mov eax, dword [ebx + eax*4 + 0xfb0]
sub esp, 0x1c
mov ecx, esp
add eax, 0xf
mov dword [ebp - 0x22bc], esp
push eax
push str.bike__d.tga
push ecx
call fcn.00493ef3
add esp, 0xc
mov ecx, edi
call fcn.004b5f6a
mov ecx, dword [ebp - 0x2290]
push esi
call fcn.004bb7e2
dec dword [ebx + 0xfd4]
jmp 0x4c98af
dec dword [ebx + 0x3a8]
lea ecx, [ebp - 0x2c]
jmp 0x4c9f9d
mov dword [ebx + 0x3a4], 4
mov esi, dword [ebx + 0x324]
lea eax, [esi - 1]
push 3
cdq
pop ecx
idiv ecx
test edx, edx
je 0x4c9b01
mov edi, esi
dec edi
mov eax, edi
dec eax
push 3
cdq
pop ecx
idiv ecx
test edx, edx
jne 0x4c9aed
mov dword [ebx + 0x324], edi
push 1
mov ecx, ebx
call fcn.0040368a
imul esi, esi, 0xcc
and dword [ebp - 0x22a4], 0
cmp dword [ebx + 0xdac], 0
lea esi, [esi + eax + 0x928]
mov dword [ebp - 0x22b4], esi
jle 0x4c9cf4
lea ecx, [ebx + 0xdcc]
mov dword [ebp - 0x22b0], ecx
and dword [ebp - 0x229c], 0
fld dword [0x645260]
fld dword [ecx]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4c9cc0
mov eax, dword [ebp - 0x229c]
fld dword [ecx]
lea eax, [esi + eax*4 + 4]
fcomp dword [eax]
mov dword [ebp - 0x22bc], eax
fnstsw ax
test ah, 5
jp 0x4c9cc0
cmp dword [ebp - 0x229c], 4
jge 0x4c9c31
lea eax, [ebx + 0x33c]
mov dword [ebp - 0x22b8], eax
mov eax, dword [ebp - 0x22b4]
lea ecx, [eax + 0xc0]
mov dword [ebp - 0x2298], ecx
lea ecx, [eax + 0x74]
mov dword [ebp - 0x2290], ecx
lea ecx, [eax + 0x58]
push 4
pop eax
sub eax, dword [ebp - 0x229c]
mov dword [ebp - 0x2294], eax
mov esi, dword [ebp - 0x2290]
mov eax, dword [esi - 0x64]
mov dword [esi - 0x60], eax
xor eax, eax
mov edi, ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ecx - 0x10]
push eax
push ecx
mov dword [ebp - 0x22f8], eax
call fcn.006008a0
mov eax, dword [esi]
mov edx, dword [ebp - 0x2298]
mov edi, dword [ebp - 0x2298]
sub dword [ebp - 0x2290], 4
mov dword [esi + 4], eax
mov eax, dword [esi + 0x14]
mov dword [esi + 0x18], eax
add edx, 0xfffffff4
dec dword [ebp - 0x2294]
mov esi, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x22b8]
lea eax, [ecx - 4]
movsd dword es:[edi], dword [esi]
mov esi, dword [eax]
mov dword [ecx], esi
mov ecx, dword [ebp - 0x22f8]
mov dword [ebp - 0x2298], edx
mov dword [ebp - 0x22b8], eax
jne 0x4c9bbe
mov eax, dword [ebp - 0x22b0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x22bc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x229c]
lea ecx, [eax - 1]
test ecx, ecx
mov dword [ebx + eax*4 + 0x32c], eax
jl 0x4c9c69
lea edx, [ebx + ecx*4 + 0x32c]
cmp dword [edx], 0xffffffff
jne 0x4c9c6f
dec ecx
sub edx, 4
test ecx, ecx
jge 0x4c9c5c
mov dword [ebx + 0x354], eax
mov ecx, dword [ebp - 0x22b4]
shl eax, 4
lea esi, [eax + ecx + 0x18]
xor eax, eax
mov edi, esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor edi, edi
inc edi
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
lea eax, [ecx + eax + 5]
push eax
push esi
call fcn.006008a0
mov esi, dword [ebp - 0x22b4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x22b0]
mov dword [ebx + 0x11bc], edi
mov dword [ebp - 0x229c], 5
inc dword [ebp - 0x229c]
cmp dword [ebp - 0x229c], 5
jl 0x4c9b44
inc dword [ebp - 0x22a4]
mov eax, dword [ebp - 0x22a4]
add ecx, 8
cmp eax, dword [ebx + 0xdac]
mov dword [ebp - 0x22b0], ecx
jl 0x4c9b3d
call fcn.00401ca8
and dword [eax + 0xdac], 0
call fcn.00401ca8
and dword [eax + 0xdb0], 0
cmp dword [ebx + 0x354], 0xffffffff
je 0x4c92a5
push dword [ebx + 0x3a8]
lea eax, [ebp - 0x48]
push str.dot_icon__d
push eax
call fcn.00493ef3
add esp, 0xc
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0xcb
call fcn.00493639
mov edi, dword [ebp - 0x22a8]
add edi, 0xfffffffc
push eax
mov ecx, edi
call fcn.004bb7e2
push 0
lea eax, [ebp - 0x24e0]
push 0x50fa
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0xcc
call fcn.004935c3
push eax
mov eax, dword [ebx + 0x3a8]
shl eax, 9
lea eax, [eax + ebx + 0x3ac]
push eax
call fcn.006008a0
pop ecx
pop ecx
lea ecx, [ebp - 0x24e0]
mov byte [ebp - 4], 0xcb
call fcn.00402a58
inc dword [ebx + 0x3a8]
push 0
lea eax, [ebp - 0x2470]
push 0x50e8
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0xcd
call fcn.00493639
push eax
push str._deb_headline_
mov ecx, edi
call fcn.004bfd5a
lea ecx, [ebp - 0x2470]
mov byte [ebp - 4], 0xcb
call fcn.00402a58
push 0
lea eax, [ebp - 0x2400]
push 0x50f2
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov byte [ebp - 4], 0xce
call fcn.00493639
push eax
push str._deb_subheadline_
mov ecx, edi
call fcn.004bfd5a
lea ecx, [ebp - 0x2400]
mov byte [ebp - 4], 0xcb
call fcn.00402a58
mov eax, dword [ebx + 0x354]
fld dword [esi + eax*4 + 4]
push ecx
lea eax, [ebp - 0x24a8]
fstp dword [esp]
push eax
mov ecx, edi
call fcn.004bd094
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xcf
call fcn.00494014
lea ecx, [ebp - 0x24a8]
mov byte [ebp - 4], 0xcb
call fcn.00402a58
push str.__color_
lea ecx, [ebp - 0x2330]
call fcn.00493e85
push str._color_255_96_0_
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xd0
call fcn.00493e85
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x248c]
push eax
mov byte [ebp - 4], 0xd1
call fcn.00494034
lea ecx, [ebp - 0x2330]
push ecx
push eax
lea eax, [ebp - 0x2454]
push eax
mov byte [ebp - 4], 0xd2
call fcn.00494034
add esp, 0x18
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xd3
call fcn.00494014
lea ecx, [ebp - 0x2454]
mov byte [ebp - 4], 0xd2
call fcn.00402a58
lea ecx, [ebp - 0x248c]
mov byte [ebp - 4], 0xd1
call fcn.00402a58
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xd0
call fcn.00402a58
lea ecx, [ebp - 0x2330]
mov byte [ebp - 4], 0xcb
call fcn.00402a58
lea ecx, [ebp - 0x48]
call fcn.00493639
push eax
push str._deb_unlockname_
mov ecx, edi
call fcn.004bfd5a
lea eax, [esi + 0x90]
mov dword [ebp - 0x22b4], eax
add esi, 0x68
lea eax, [ebx + 0x32c]
mov dword [ebp - 0x22b0], esi
mov dword [ebp - 0x22a4], eax
mov dword [ebp - 0x2294], 5
mov eax, dword [ebp - 0x22a4]
cmp dword [eax], 0xffffffff
je 0x4c9f77
mov ecx, dword [ebx + 0x378]
mov eax, dword [ebp - 0x22b0]
mov dword [eax + 0x14], ecx
mov ecx, dword [ebx + 0x360]
mov dword [eax], ecx
lea eax, [ebp - 0x23e4]
push eax
call fcn.004bd3bf
mov ecx, eax
call fcn.004945fe
mov edi, dword [ebp - 0x22b4]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add dword [ebp - 0x22a4], 4
add dword [ebp - 0x22b0], 4
add dword [ebp - 0x22b4], 0xc
dec dword [ebp - 0x2294]
jne 0x4c9f37
inc dword [ebx + 0x3a4]
lea ecx, [ebp - 0x48]
or dword [ebp - 4], 0xffffffff
call fcn.00402a58
jmp 0x4ca3c4
cmp dword [ebx + 0x354], 0xffffffff
je 0x4c92a5
mov esi, dword [ebp - 0x22a8]
add esi, 0xfffffffc
push str.leftbar
mov ecx, esi
call fcn.004bb816
push 1
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
lea eax, [ecx + eax + 5]
push eax
lea eax, [ebx + 0x1098]
push eax
call fcn.006008a0
pop ecx
pop ecx
push str.continue
mov ecx, esi
call fcn.004bb87e
mov edi, str.keyboard
push edi
mov ecx, esi
call fcn.004bb84a
push edi
mov ecx, esi
call fcn.004bb8b2
push str.keyboardclump
mov ecx, esi
call fcn.004bb7e2
push str.keyboardclump2
mov ecx, esi
call fcn.004bb7e2
push str.keyboardclump3
mov ecx, esi
call fcn.004bb7e2
push str.subhead
mov ecx, esi
call fcn.004bb7e2
push str.namefield
mov ecx, esi
call fcn.004bb7e2
jmp 0x4ca2b6
cmp dword [ebx + 0x354], 0xffffffff
je 0x4c92a5
mov esi, dword [ebx + 0x324]
lea ecx, [esi - 1]
jmp 0x4ca06d
dec esi
dec ecx
mov eax, ecx
push 3
cdq
pop edi
idiv edi
test edx, edx
jne 0x4ca06b
push 1
mov ecx, ebx
call fcn.0040368a
imul esi, esi, 0xcc
lea esi, [esi + eax + 0x928]
add esi, 0x18
mov dword [ebp - 0x2298], esi
lea esi, [ebx + 0x32c]
mov dword [ebp - 0x2294], 5
cmp dword [esi], 0xffffffff
je 0x4ca0cd
mov edi, dword [ebp - 0x2298]
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebx + 0x1098]
push eax
push dword [ebp - 0x2298]
call fcn.006008a0
pop ecx
pop ecx
add dword [ebp - 0x2298], 0x10
add esi, 4
dec dword [ebp - 0x2294]
jne 0x4ca0a8
xor edi, edi
inc edi
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
lea eax, [ecx + eax + 5]
push eax
lea eax, [ebx + 0x1098]
push eax
call fcn.006008a0
mov esi, dword [ebp - 0x22a8]
pop ecx
pop ecx
add esi, 0xfffffffc
push str.trackname
mov ecx, esi
call fcn.004bb7e2
mov dword [ebp - 0x2290], edi
mov edi, str.min_d
push dword [ebp - 0x2290]
lea eax, [ebp - 0x24c4]
push 0x6452f0
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xd4
call fcn.00493639
push eax
mov ecx, esi
call fcn.004bb7e2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24c4]
call fcn.00402a58
push dword [ebp - 0x2290]
lea eax, [ebp - 0x241c]
push str.name_d
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xd5
call fcn.00493639
push eax
mov ecx, esi
call fcn.004bb7e2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x241c]
call fcn.00402a58
push dword [ebp - 0x2290]
lea eax, [ebp - 0x2438]
push edi
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xd6
call fcn.00493639
push eax
mov ecx, esi
call fcn.004bb7e2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2438]
call fcn.00402a58
inc dword [ebp - 0x2290]
cmp dword [ebp - 0x2290], 5
jle 0x4ca125
mov eax, dword [ebx + 0x354]
inc eax
push eax
lea eax, [ebp - 0x23d8]
push 0x6452f0
push eax
call fcn.00493ef3
add esp, 0xc
push 1
mov ecx, eax
mov dword [ebp - 4], 0xd7
call fcn.00493639
push eax
mov ecx, esi
call fcn.004bb8e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23d8]
call fcn.00402a58
mov eax, dword [ebx + 0x354]
inc eax
push eax
lea eax, [ebp - 0x23a0]
push str.name_d
push eax
call fcn.00493ef3
add esp, 0xc
push 1
mov ecx, eax
mov dword [ebp - 4], 0xd8
call fcn.00493639
push eax
mov ecx, esi
call fcn.004bb8e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23a0]
call fcn.00402a58
mov eax, dword [ebx + 0x354]
inc eax
push eax
lea eax, [ebp - 0x9c]
push edi
push eax
call fcn.00493ef3
add esp, 0xc
push 1
mov ecx, eax
mov dword [ebp - 4], 0xd9
call fcn.00493639
push eax
mov ecx, esi
call fcn.004bb8e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.00402a58
inc dword [ebx + 0x3a4]
jmp 0x4ca3c4
mov byte [ebp - 0x229d], 0
mov byte [ebp - 0x22aa], 0
cmp byte [ebp - 0x22aa], 0
je 0x4ca306
push esi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
cmp byte [ecx + eax + 0x37], 0
jne 0x4ca306
push esi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov byte [ecx + eax + 0x37], 1
jmp 0x4ca326
cmp byte [ebp - 0x229d], 0
je 0x4ca342
push esi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
cmp byte [ecx + eax + 0x36], 0
jne 0x4ca342
mov ecx, ebx
push esi
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov byte [ecx + eax + 0x36], 1
mov byte [ebp - 0x22a9], 1
push esi
call fcn.0041649f
mov ecx, eax
call fcn.004cfe56
cmp byte [ebp - 0x22a9], 0
mov esi, dword [ebp - 0x22a8]
lea eax, [esi + 0x1d4]
je 0x4ca372
mov byte [ebx + 0x13eb], 1
push str.credits
jmp 0x4ca377
push str.track_selection
push eax
call fcn.006008a0
and dword [esi + 0x3a0], 0
mov eax, dword [ebx + 0x324]
pop ecx
pop ecx
dec eax
push 3
cdq
pop ecx
idiv ecx
test edx, edx
je 0x4ca3b1
mov edi, dword [ebx + 0x324]
dec edi
mov eax, edi
dec eax
push 3
cdq
pop ecx
idiv ecx
test edx, edx
jne 0x4ca39d
mov dword [ebx + 0x324], edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x228c]
mov byte [esi + 8], 1
call fcn.004ce56e
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffffc
call fcn.004c0089
mov edi, dword [ebp - 0x22a8]
xor esi, esi
push str.ContinueDebriefing
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4ca41c
push str.ContinueDebriefing._n
call fcn.00401000
lea eax, [edi + 0x1d4]
mov dword [esp], str.debriefing
push eax
call fcn.006008a0
pop ecx
pop ecx
mov ecx, dword [edi + 0x1d0]
mov eax, dword [ecx]
push 1
call dword [eax + 0x60]
push str.CreditsBack
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4ca4ab
lea eax, [ebx + 0x13eb]
cmp byte [eax], 0
je 0x4ca481
mov byte [eax], 0
mov dword [ebp - 0x2298], 1
push dword [ebp - 0x2298]
mov ecx, ebx
push 1
call fcn.0040368a
mov ecx, eax
call fcn.0041ab6c
test al, al
je 0x4ca47a
inc dword [ebp - 0x2298]
cmp dword [ebp - 0x2298], 0x18
jle 0x4ca44a
push str.main
jmp 0x4ca490
push str.endscreen_silver
jmp 0x4ca490
mov dword [edi + 0x1b8], 4
push str.options
lea eax, [edi + 0x1d4]
push eax
call fcn.006008a0
pop ecx
pop ecx
mov ecx, dword [edi + 0x1d0]
mov eax, dword [ecx]
push 3
call dword [eax + 0x60]
push str.LoadMultiplayerDebriefing
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4cb3ca
mov edi, dword [ebp - 0x22a8]
add edi, 0xfffffffc
push str.dot_icon
mov ecx, edi
call fcn.004bb816
push str.dot_text
mov ecx, edi
call fcn.004bb816
push str.winner_img
mov ecx, edi
call fcn.004bb816
mov esi, str.looser_img
push esi
mov ecx, edi
call fcn.004bb816
push str.winner_points
mov ecx, edi
call fcn.004bb816
push str.looser_points
mov ecx, edi
call fcn.004bb816
push str.winner_name
mov ecx, edi
call fcn.004bb816
push str.looser_name
mov ecx, edi
call fcn.004bb816
push str.winner_bike
mov ecx, edi
call fcn.004bb816
push str.looser_bike
mov ecx, edi
call fcn.004bb816
push str.keyboard
mov ecx, edi
call fcn.004bb87e
push str.keyboard
mov ecx, edi
call fcn.004bb816
push str.keyboardclump
mov ecx, edi
call fcn.004bb816
push str.keyboardclump2
mov ecx, edi
call fcn.004bb816
push str.keyboardclump3
mov ecx, edi
call fcn.004bb816
push str.subhead
mov ecx, edi
call fcn.004bb816
push str.namefield
mov ecx, edi
call fcn.004bb816
push str.trackname
mov ecx, edi
call fcn.004bb816
mov dword [ebp - 0x2290], 1
push dword [ebp - 0x2290]
lea eax, [ebp - 0x9c]
push 0x6452f0
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xdb
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb816
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.00402a58
push dword [ebp - 0x2290]
lea eax, [ebp - 0x23a0]
push str.name_d
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xdc
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb816
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23a0]
call fcn.00402a58
push dword [ebp - 0x2290]
lea eax, [ebp - 0x23d8]
push str.min_d
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xdd
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb816
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23d8]
call fcn.00402a58
inc dword [ebp - 0x2290]
cmp dword [ebp - 0x2290], 5
jle 0x4ca5b1
mov eax, dword [ebx + 0x3a4]
sub eax, 0
je 0x4cb1e0
dec eax
je 0x4ca6b4
dec eax
je 0x4ca9e3
dec eax
je 0x4caa81
dec eax
je 0x4cae48
dec eax
je 0x4caee6
jmp 0x4caf01
mov esi, dword [ebx + 0x324]
lea ecx, [esi - 1]
jmp 0x4ca6c1
dec esi
dec ecx
mov eax, ecx
push 3
cdq
pop edi
idiv edi
test edx, edx
jne 0x4ca6bf
push 1
mov ecx, ebx
call fcn.0040368a
imul esi, esi, 0xcc
and dword [ebp - 0x2290], 0
cmp dword [ebx + 0xdac], 0
lea esi, [esi + eax + 0x928]
mov dword [ebp - 0x22b4], esi
jle 0x4ca8bc
lea ecx, [ebx + 0xdcc]
mov dword [ebp - 0x2298], ecx
and dword [ebp - 0x229c], 0
fld dword [0x645260]
fld dword [ecx]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4ca888
mov eax, dword [ebp - 0x229c]
fld dword [ecx]
lea eax, [esi + eax*4 + 4]
fcomp dword [eax]
mov dword [ebp - 0x22f8], eax
fnstsw ax
test ah, 5
jp 0x4ca888
cmp dword [ebp - 0x229c], 4
jge 0x4ca7de
mov eax, dword [ebp - 0x22b4]
lea ecx, [eax + 0xc0]
mov dword [ebp - 0x22a4], ecx
lea ecx, [eax + 0x74]
mov dword [ebp - 0x22b0], ecx
lea ecx, [eax + 0x58]
push 4
pop eax
sub eax, dword [ebp - 0x229c]
mov dword [ebp - 0x2294], eax
mov esi, dword [ebp - 0x22b0]
mov eax, dword [esi - 0x64]
mov dword [esi - 0x60], eax
xor eax, eax
mov edi, ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ecx - 0x10]
push eax
push ecx
mov dword [ebp - 0x22bc], eax
call fcn.006008a0
mov eax, dword [esi]
mov edi, dword [ebp - 0x22a4]
sub dword [ebp - 0x22b0], 4
mov dword [esi + 4], eax
mov eax, dword [esi + 0x14]
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 0x22a4]
add eax, 0xfffffff4
dec dword [ebp - 0x2294]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x22bc]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x22a4], eax
jne 0x4ca77e
mov eax, dword [ebp - 0x2298]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x22f8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x229c]
push 4
pop ecx
cmp eax, ecx
jge 0x4ca80f
lea edx, [ebx + 0x33c]
sub ecx, eax
dec ecx
lea esi, [edx - 4]
mov edi, dword [esi]
mov dword [edx], edi
mov edx, esi
jne 0x4ca803
lea ecx, [eax - 1]
test ecx, ecx
mov dword [ebx + eax*4 + 0x32c], eax
jl 0x4ca831
lea edx, [ebx + ecx*4 + 0x32c]
cmp dword [edx], 0xffffffff
jne 0x4ca837
dec ecx
sub edx, 4
test ecx, ecx
jge 0x4ca824
mov dword [ebx + 0x354], eax
mov ecx, dword [ebp - 0x22b4]
shl eax, 4
lea esi, [eax + ecx + 0x18]
xor eax, eax
mov edi, esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor edi, edi
inc edi
push edi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
lea eax, [ecx + eax + 5]
push eax
push esi
call fcn.006008a0
mov esi, dword [ebp - 0x22b4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2298]
mov dword [ebx + 0x11bc], edi
mov dword [ebp - 0x229c], 5
inc dword [ebp - 0x229c]
cmp dword [ebp - 0x229c], 5
jl 0x4ca710
inc dword [ebp - 0x2290]
mov eax, dword [ebp - 0x2290]
add ecx, 8
cmp eax, dword [ebx + 0xdac]
mov dword [ebp - 0x2298], ecx
jl 0x4ca709
call fcn.00401ca8
and dword [eax + 0xdac], 0
cmp dword [ebx + 0x354], 0xffffffff
je 0x4ca9d9
mov edi, dword [ebp - 0x22a8]
add edi, 0xfffffffc
push str.dot_icon
mov ecx, edi
call fcn.004bb7e2
push str.dot_text
mov ecx, edi
call fcn.004bb7e2
lea eax, [esi + 0x90]
mov dword [ebp - 0x22b4], eax
add esi, 0x68
lea eax, [ebx + 0x32c]
mov dword [ebp - 0x22b0], esi
mov dword [ebp - 0x22a4], eax
mov dword [ebp - 0x2294], 5
mov eax, dword [ebp - 0x22a4]
cmp dword [eax], 0xffffffff
je 0x4ca961
mov ecx, dword [ebx + 0x378]
mov eax, dword [ebp - 0x22b0]
mov dword [eax + 0x14], ecx
mov ecx, dword [ebx + 0x360]
mov dword [eax], ecx
lea eax, [ebp - 0x23e4]
push eax
call fcn.004bd3bf
mov ecx, eax
call fcn.004945fe
mov edi, dword [ebp - 0x22b4]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add dword [ebp - 0x22a4], 4
add dword [ebp - 0x22b0], 4
add dword [ebp - 0x22b4], 0xc
dec dword [ebp - 0x2294]
jne 0x4ca921
push 0
lea eax, [ebp - 0x9c]
push 0x5082
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov dword [ebp - 4], 0xde
call fcn.00493639
push eax
lea eax, [ebx + 0x1098]
push eax
call fcn.006008a0
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x9c]
call fcn.00402a58
mov edi, dword [ebp - 0x22a8]
add edi, 0xfffffffc
mov ecx, edi
call fcn.004c0089
jmp 0x4cadd7
mov dword [ebx + 0x3a4], 3
cmp dword [ebx + 0x354], 0xffffffff
je 0x4caa77
mov esi, dword [ebx + 0x324]
lea ecx, [esi - 1]
jmp 0x4ca9fd
dec esi
dec ecx
mov eax, ecx
push 3
cdq
pop edi
idiv edi
test edx, edx
jne 0x4ca9fb
push 1
mov ecx, ebx
call fcn.0040368a
imul esi, esi, 0xcc
lea eax, [esi + eax + 0x928]
add eax, 0x18
mov dword [ebp - 0x2298], eax
lea esi, [ebx + 0x32c]
mov dword [ebp - 0x2294], 5
cmp dword [esi], 0xffffffff
je 0x4caa5d
mov edi, dword [ebp - 0x2298]
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebx + 0x1098]
push eax
push dword [ebp - 0x2298]
call fcn.006008a0
pop ecx
pop ecx
add dword [ebp - 0x2298], 0x10
add esi, 4
dec dword [ebp - 0x2294]
jne 0x4caa38
inc dword [ebx + 0x3a4]
jmp 0x4caa81
mov dword [ebx + 0x3a4], 3
mov esi, dword [ebx + 0x324]
mov dword [ebx + 0x394], 2
lea ecx, [esi - 1]
jmp 0x4caa98
dec esi
dec ecx
mov eax, ecx
push 3
cdq
pop edi
idiv edi
test edx, edx
jne 0x4caa96
push 1
mov ecx, ebx
call fcn.0040368a
imul esi, esi, 0xcc
and dword [ebp - 0x2290], 0
cmp dword [ebx + 0xdb0], 0
lea esi, [esi + eax + 0x928]
mov dword [ebp - 0x22b4], esi
jle 0x4cacc9
lea ecx, [ebx + 0xdd0]
mov dword [ebp - 0x2298], ecx
and dword [ebp - 0x229c], 0
fld dword [0x645260]
fld dword [ecx]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4cac95
mov eax, dword [ebp - 0x229c]
fld dword [ecx]
lea eax, [esi + eax*4 + 4]
fcomp dword [eax]
mov dword [ebp - 0x22f8], eax
fnstsw ax
test ah, 5
jp 0x4cac95
cmp dword [ebp - 0x229c], 4
jge 0x4cabd4
lea eax, [ebx + 0x350]
mov dword [ebp - 0x2294], eax
mov eax, dword [ebp - 0x22b4]
lea ecx, [eax + 0xc0]
mov dword [ebp - 0x22a4], ecx
lea ecx, [eax + 0x74]
mov dword [ebp - 0x22b0], ecx
lea ecx, [eax + 0x58]
push 4
pop eax
sub eax, dword [ebp - 0x229c]
mov dword [ebp - 0x22b8], eax
mov esi, dword [ebp - 0x22b0]
mov eax, dword [esi - 0x64]
mov dword [esi - 0x60], eax
xor eax, eax
mov edi, ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ecx - 0x10]
push eax
push ecx
mov dword [ebp - 0x22bc], eax
call fcn.006008a0
mov eax, dword [esi]
mov edx, dword [ebp - 0x22a4]
mov edi, dword [ebp - 0x22a4]
sub dword [ebp - 0x22b0], 4
mov dword [esi + 4], eax
mov eax, dword [esi + 0x14]
mov dword [esi + 0x18], eax
add edx, 0xfffffff4
dec dword [ebp - 0x22b8]
mov esi, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2294]
lea eax, [ecx - 4]
movsd dword es:[edi], dword [esi]
mov esi, dword [eax]
mov dword [ecx], esi
mov ecx, dword [ebp - 0x22bc]
mov dword [ebp - 0x22a4], edx
mov dword [ebp - 0x2294], eax
jne 0x4cab61
mov eax, dword [ebp - 0x2298]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x22f8]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x229c]
lea eax, [ecx - 1]
test eax, eax
mov dword [ebx + ecx*4 + 0x340], ecx
jl 0x4cac0c
lea edx, [ebx + eax*4 + 0x340]
cmp dword [edx], 0xffffffff
jne 0x4cac12
dec eax
sub edx, 4
test eax, eax
jge 0x4cabff
mov dword [ebx + 0x358], ecx
push 5
pop esi
lea edi, [ebx + 0x340]
mov dword [ebp - 0x2294], esi
cmp dword [edi], 0xffffffff
je 0x4cac35
lea eax, [ebx + 0x354]
mov edx, dword [eax]
cmp ecx, edx
jge 0x4cac35
inc edx
mov dword [eax], edx
add edi, 4
dec dword [ebp - 0x2294]
jne 0x4cac21
lea eax, [ebx + 0x354]
cmp dword [eax], esi
jl 0x4cac4d
or dword [eax], 0xffffffff
mov eax, dword [ebp - 0x22b4]
shl ecx, 4
lea ecx, [ecx + eax + 0x18]
xor eax, eax
mov edi, ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea edi, [ebx + 0x1098]
push edi
push ecx
call fcn.006008a0
push edi
push dword [ebp - 0x229c]
push str.trackHighscores.names__d__is_player__s_n
call fcn.00401000
mov ecx, dword [ebp - 0x2298]
mov dword [ebp - 0x229c], esi
mov esi, dword [ebp - 0x22b4]
add esp, 0x14
inc dword [ebp - 0x229c]
cmp dword [ebp - 0x229c], 5
jl 0x4caae7
inc dword [ebp - 0x2290]
mov eax, dword [ebp - 0x2290]
add ecx, 8
cmp eax, dword [ebx + 0xdb0]
mov dword [ebp - 0x2298], ecx
jl 0x4caae0
call fcn.00401ca8
and dword [eax + 0xdb0], 0
cmp dword [ebx + 0x358], 0xffffffff
je 0x4cae3e
mov edi, dword [ebp - 0x22a8]
add edi, 0xfffffffc
push str.dot_icon
mov ecx, edi
call fcn.004bb7e2
push str.dot_text
mov ecx, edi
call fcn.004bb7e2
lea eax, [esi + 0x90]
mov dword [ebp - 0x22b4], eax
add esi, 0x68
lea eax, [ebx + 0x340]
mov dword [ebp - 0x22b0], esi
mov dword [ebp - 0x22a4], eax
mov dword [ebp - 0x2294], 5
mov eax, dword [ebp - 0x22a4]
cmp dword [eax], 0xffffffff
je 0x4cad6b
mov ecx, dword [ebx + 0x37c]
mov eax, dword [ebp - 0x22b0]
mov dword [eax + 0x14], ecx
mov ecx, dword [ebx + 0x364]
mov dword [eax], ecx
lea eax, [ebp - 0x70]
push eax
call fcn.004bd3bf
mov ecx, eax
call fcn.004945fe
mov edi, dword [ebp - 0x22b4]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add dword [ebp - 0x22a4], 4
add dword [ebp - 0x22b0], 4
add dword [ebp - 0x22b4], 0xc
dec dword [ebp - 0x2294]
jne 0x4cad2e
push 0
lea eax, [ebp - 0x23a0]
push 0x5083
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048d781
mov ecx, eax
mov dword [ebp - 4], 0xdf
call fcn.00493639
push eax
lea eax, [ebx + 0x1098]
push eax
call fcn.006008a0
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x23a0]
call fcn.00402a58
mov edi, dword [ebp - 0x22a8]
add edi, 0xfffffffc
push str.leftbar
mov ecx, edi
call fcn.004bb816
push str.continue
mov ecx, edi
call fcn.004bb87e
mov esi, str.keyboard
push esi
mov ecx, edi
call fcn.004bb84a
push esi
mov ecx, edi
call fcn.004bb8b2
push str.keyboardclump
mov ecx, edi
call fcn.004bb7e2
push str.keyboardclump2
mov ecx, edi
call fcn.004bb7e2
push str.keyboardclump3
mov ecx, edi
call fcn.004bb7e2
push str.subhead
mov ecx, edi
call fcn.004bb7e2
push str.namefield
jmp 0x4cb3a7
mov dword [ebx + 0x3a4], 5
cmp dword [ebx + 0x358], 0xffffffff
je 0x4caedc
mov esi, dword [ebx + 0x324]
lea ecx, [esi - 1]
jmp 0x4cae62
dec esi
dec ecx
mov eax, ecx
push 3
cdq
pop edi
idiv edi
test edx, edx
jne 0x4cae60
push 1
mov ecx, ebx
call fcn.0040368a
imul esi, esi, 0xcc
lea eax, [esi + eax + 0x928]
add eax, 0x18
mov dword [ebp - 0x2298], eax
lea esi, [ebx + 0x340]
mov dword [ebp - 0x2294], 5
cmp dword [esi], 0xffffffff
je 0x4caec2
mov edi, dword [ebp - 0x2298]
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebx + 0x1098]
push eax
push dword [ebp - 0x2298]
call fcn.006008a0
pop ecx
pop ecx
add dword [ebp - 0x2298], 0x10
add esi, 4
dec dword [ebp - 0x2294]
jne 0x4cae9d
inc dword [ebx + 0x3a4]
jmp 0x4caee6
mov dword [ebx + 0x3a4], 5
xor esi, esi
inc esi
cmp dword [ebx + 0x354], 0xffffffff
mov dword [ebx + 0x394], esi
jne 0x4caf2a
cmp dword [ebx + 0x358], 0xffffffff
jne 0x4caf2a
mov esi, dword [ebp - 0x22a8]
and dword [ebx + 0x3a4], 0
lea eax, [esi + 0x1d4]
push str.debriefing_mp_end
push eax
call fcn.006008a0
pop ecx
pop ecx
mov byte [esi + 8], 1
jmp 0x4cb3b4
mov edi, dword [ebp - 0x22a8]
add edi, 0xfffffffc
push str.dot_icon
mov ecx, edi
call fcn.004bb7e2
push str.dot_text
mov ecx, edi
call fcn.004bb7e2
push esi
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
lea eax, [ecx + eax + 5]
push eax
lea eax, [ebx + 0x1098]
push eax
call fcn.006008a0
pop ecx
pop ecx
push str.trackname
mov ecx, edi
call fcn.004bb7e2
mov dword [ebp - 0x2290], esi
mov esi, 0x6452f0
push dword [ebp - 0x2290]
lea eax, [ebp - 0x23d8]
push esi
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xe0
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb7e2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23d8]
call fcn.00402a58
push dword [ebp - 0x2290]
lea eax, [ebp - 0x2438]
push str.name_d
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xe1
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb7e2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2438]
call fcn.00402a58
push dword [ebp - 0x2290]
lea eax, [ebp - 0x241c]
push str.min_d
push eax
call fcn.00493ef3
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 0xe2
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb7e2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x241c]
call fcn.00402a58
inc dword [ebp - 0x2290]
cmp dword [ebp - 0x2290], 5
jle 0x4caf85
mov eax, dword [ebx + 0x354]
inc eax
push eax
lea eax, [ebp - 0x24c4]
push esi
push eax
call fcn.00493ef3
add esp, 0xc
push 1
mov ecx, eax
mov dword [ebp - 4], 0xe3
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb8e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24c4]
call fcn.00402a58
mov eax, dword [ebx + 0x354]
inc eax
push eax
lea eax, [ebp - 0x248c]
push str.name_d
push eax
call fcn.00493ef3
add esp, 0xc
push 1
mov ecx, eax
mov dword [ebp - 4], 0xe4
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb8e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x248c]
call fcn.00402a58
mov eax, dword [ebx + 0x354]
inc eax
push eax
lea eax, [ebp - 0x2454]
push str.min_d
push eax
call fcn.00493ef3
add esp, 0xc
push 1
mov ecx, eax
mov dword [ebp - 4], 0xe5
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb8e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2454]
call fcn.00402a58
mov eax, dword [ebx + 0x358]
inc eax
push eax
lea eax, [ebp - 0x24a8]
push esi
push eax
call fcn.00493ef3
add esp, 0xc
push 1
mov ecx, eax
mov dword [ebp - 4], 0xe6
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb8e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24a8]
call fcn.00402a58
mov eax, dword [ebx + 0x358]
inc eax
push eax
push str.name_d
lea eax, [ebp - 0x2400]
push eax
call fcn.00493ef3
add esp, 0xc
push 1
mov ecx, eax
mov dword [ebp - 4], 0xe7
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb8e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2400]
call fcn.00402a58
mov eax, dword [ebx + 0x358]
inc eax
push eax
lea eax, [ebp - 0x2470]
push str.min_d
push eax
call fcn.00493ef3
add esp, 0xc
push 1
mov ecx, eax
mov dword [ebp - 4], 0xe8
call fcn.00493639
push eax
mov ecx, edi
call fcn.004bb8e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2470]
call fcn.00402a58
jmp 0x4cb3ae
push dword [ebx + 0x328]
and dword [ebx + 0x3a8], 0
mov dword [ebx + 0x394], 1
call fcn.00402368
mov ecx, eax
call fcn.004018a0
and dword [ebp - 0x2290], 0
mov dword [ebx + 0x324], eax
mov eax, dword [ebx + 0x388]
cmp eax, 9
mov dword [ebp - 0x229c], 1
jne 0x4cb41e
mov eax, dword [ebx + 0xdb4]
cmp eax, dword [ebx + 0xdb8]
jle 0x4cb439
and dword [ebp - 0x229c], 0
mov dword [ebp - 0x2290], 1
mov eax, dword [ebp - 0x22a8]
mov ecx, dword [eax + 0x1d0]
mov eax, dword [ecx]
push 0
push str.winner_img
call dword [eax + 0x28]
test al, al
je 0x4cb2d3
mov eax, dword [ebp - 0x22a8]
mov ecx, dword [eax + 0x1d0]
mov edx, dword [ecx]
xor eax, eax
push eax
push 0x6a59ac
push 0x6a593c
push eax
push eax
push str.winner_img
call dword [edx + 0x2c]
push eax
call fcn.0060161a
add esp, 0x14
test eax, eax
mov dword [ebp - 0x22bc], eax
je 0x4cb2d3
mov eax, dword [ebp - 0x2290]
mov eax, dword [ebx + eax*4 + 0x378]
sub esp, 0x1c
mov ecx, esp
inc eax
mov dword [ebp - 0x22f8], esp
push eax
push str.male__d.tga
push ecx
call fcn.00493ef3
mov ecx, dword [ebp - 0x22bc]
add esp, 0xc
call fcn.004b5f6a
mov eax, dword [ebp - 0x22a8]
mov ecx, dword [eax + 0x1d0]
mov eax, dword [ecx]
push 0
push esi
call dword [eax + 0x28]
test al, al
je 0x4cb352
mov eax, dword [ebp - 0x22a8]
mov ecx, dword [eax + 0x1d0]
mov edx, dword [ecx]
xor eax, eax
push eax
push 0x6a59ac
push 0x6a593c
push eax
push eax
push esi
call dword [edx + 0x2c]
push eax
call fcn.0060161a
add esp, 0x14
test eax, eax
mov dword [ebp - 0x22bc], eax
je 0x4cb352
mov eax, dword [ebp - 0x229c]
mov eax, dword [ebx + eax*4 + 0x378]
sub esp, 0x1c
mov ecx, esp
inc eax
mov dword [ebp - 0x22f8], esp
push eax
push str.male__d.tga
push ecx
call fcn.00493ef3
mov ecx, dword [ebp - 0x22bc]
add esp, 0xc
call fcn.004b5f6a
push str.winner_img
mov ecx, edi
call fcn.004bb7e2
push esi
mov ecx, edi
call fcn.004bb7e2
push str.winner_points
mov ecx, edi
call fcn.004bb7e2
push str.looser_points
mov ecx, edi
call fcn.004bb7e2
push str.winner_name
mov ecx, edi
call fcn.004bb7e2
push str.looser_name
mov ecx, edi
call fcn.004bb7e2
push str.winner_bike
mov ecx, edi
call fcn.004bb7e2
push str.looser_bike
mov ecx, edi
call fcn.004bb7e2
inc dword [ebx + 0x3a4]
mov ecx, dword [ebp - 0x22a8]
add ecx, 0xfffffffc
call fcn.004c0089
mov edi, dword [ebp - 0x22a8]
xor esi, esi
push str.ContinueMultiplayerDebriefing
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4cb400
lea eax, [edi + 0x1d4]
push str.debriefing_mp
push eax
call fcn.006008a0
pop ecx
pop ecx
mov ecx, dword [edi + 0x1d0]
mov eax, dword [ecx]
push 1
call dword [eax + 0x60]
push str.PreselectMission
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4cb466
mov dword [edi + 0x3a0], esi
jmp 0x4cb455
cmp eax, 8
jne 0x4cb24c
mov eax, dword [ebx + 0xfe8]
cmp eax, dword [ebx + 0xfec]
jle 0x4cb23b
and dword [ebp - 0x2290], 0
mov dword [ebp - 0x229c], 1
jmp 0x4cb24c
dec dword [ebx + 0x324]
mov eax, dword [ebx + 0x324]
dec eax
push 3
cdq
pop ecx
idiv ecx
test edx, edx
jne 0x4cb44f
push str.SwapAutosaveStatus
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4cb4c7
push 1
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
cmp byte [ecx + eax + 0x188], 0
mov ecx, ebx
sete al
push eax
push 1
call fcn.0040368a
mov ecx, eax
call fcn.004bb5b4
push 1
mov ecx, ebx
call fcn.0040368a
mov ecx, dword [eax]
imul ecx, ecx, 0x30c
mov al, byte [ecx + eax + 0x188]
mov byte [ebx + 0x11cf], al
push str.SelectLanguage
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4cb53e
call fcn.00401ca8
add eax, 0x314
push eax
mov eax, dword [ebp + 0xc]
push 0x6452f0
push dword [eax + 4]
call fcn.00602e01
add esp, 0xc
push esi
lea eax, [ebp - 0x2518]
push str.locale
push eax
call fcn.004061b3
mov ecx, eax
call fcn.00491e4c
mov ecx, eax
mov dword [ebp - 4], 0xe9
call fcn.00493639
push eax
call fcn.00403795
mov ecx, eax
call fcn.0048e1cf
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2518]
call fcn.00402a58
push str.LoadStartupScreen
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
push str.QuitGame
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4cb56a
call fcn.0049a8f3
push str.InitCredits
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp dword [ebp + 8], eax
jne 0x4cb588
fldz
fstp dword [edi + 0x384]
push str.UpdateVolume
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
mov edi, dword [ebp + 8]
cmp edi, eax
jne 0x4cb63f
fild dword [ebx + 0x2c]
push ecx
fmul dword [0x6431fc]
fild dword [ebx + 0x10]
fmul dword [0x6431fc]
fmulp st(1)
fstp dword [esp]
push esi
call fcn.00405e98
mov ecx, eax
call fcn.0040ae53
fild dword [ebx + 0x30]
push ecx
fimul dword [ebx + 0x14]
fmul dword [0x6474e8]
fstp dword [esp]
push 1
call fcn.00405e98
mov ecx, eax
call fcn.0040ae53
fild dword [ebx + 0x30]
push ecx
fmul dword [0x6431fc]
fild dword [ebx + 0x14]
fmul dword [0x6431fc]
fmulp st(1)
fstp dword [esp]
push 3
call fcn.00405e98
mov ecx, eax
call fcn.0040ae53
fild dword [ebx + 0x34]
push ecx
fmul dword [0x6431fc]
fild dword [ebx + 0x1c]
fmul dword [0x6431fc]
fmulp st(1)
fstp dword [esp]
push 4
call fcn.00405e98
mov ecx, eax
call fcn.0040ae53
call fcn.00405e98
mov ecx, eax
call fcn.00485243
push str.SaveGameRead
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp edi, eax
jne 0x4cb660
call fcn.0041649f
mov ecx, eax
call fcn.004cfdc8
push str.SaveGameWrite
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp edi, eax
jne 0x4cb682
push esi
call fcn.0041649f
mov ecx, eax
call fcn.004cfe56
push str.SaveGameStartup
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp edi, eax
jne 0x4cb6a3
call fcn.0041649f
mov ecx, eax
call fcn.004cfdc8
push str.SaveGameAutoSave
call fcn.004067fb
mov ecx, eax
call fcn.0046b470
cmp edi, eax
jne 0x4cb6c6
push 1
call fcn.0041649f
mov ecx, eax
call fcn.004cfe56
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.006009d4
pop edi
pop esi
pop ebx
leave
ret 8