Function at 0x45ec56
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d86eb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe0
mov dword [ebp - 0xe4], ecx
push 1
mov ecx, dword [ebp + 0xc]
call fcn.004d25db
lea ecx, [ebp - 0x98]
call fcn.00404130
mov dword [ebp - 4], 0
mov dword [ebp - 0x28], 0
mov eax, dword [ebp - 0xe4]
add eax, 0x14144
push eax
lea ecx, [ebp - 0x98]
call fcn.00404280
test eax, eax
je 0x45eccd
lea ecx, [ebp - 0x98]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
call dword [eax + 0x28]
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x8c]
push ecx
lea ecx, [ebp - 0x98]
call fcn.004042a0
push 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
call dword [eax + 0x30]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x701d8]
sub eax, dword [edx + 0x701d0]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70be0]
lea eax, [eax + edx + 1]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x70318]
sub eax, dword [edx + 0x70310]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70be4]
lea eax, [eax + edx + 1]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x705d8]
sub eax, dword [edx + 0x705d0]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70be8]
lea eax, [eax + edx + 1]
mov dword [ebp - 0xac], eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x707d8]
sub eax, dword [edx + 0x707d0]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70bec]
lea eax, [eax + edx + 1]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x70818]
sub eax, dword [edx + 0x70810]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70bf4]
lea eax, [eax + edx + 1]
mov dword [ebp - 0x90], eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x7031c]
sub eax, dword [edx + 0x70314]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70be4]
lea eax, [eax + edx + 1]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa8], 0
jmp 0x45ee26
mov ecx, dword [ebp - 0xa8]
add ecx, 1
mov dword [ebp - 0xa8], ecx
cmp dword [ebp - 0xa8], 6
jge 0x460049
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + edx*4 + 0x70d3c]
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0
jge 0x45ee82
mov edx, dword [ebp - 0xa4]
add edx, 1
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 2
jb 0x45ee80
mov eax, dword [ebp - 0x9c]
add eax, 1
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xa4], 0
jmp 0x45ee17
mov ecx, dword [ebp - 0x30]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0xe4]
cmp dword [edx + ecx + 0x6fd8c], 0
je 0x460013
mov eax, dword [ebp - 0x30]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + eax + 0x6fd7c], 2
je 0x45eec5
mov edx, dword [ebp - 0xe4]
cmp dword [edx + 0x7001c], 0
je 0x460013
mov eax, dword [ebp - 0xe4]
cmp dword [eax + 0x14098], 4
jae 0x45efad
mov ecx, dword [ebp - 0x30]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0xe4]
cmp dword [edx + ecx + 0x6fd84], 0
jne 0x45efad
mov eax, dword [ebp - 0xe4]
cmp dword [eax + 0x1b64], 0
je 0x45ef77
mov ecx, dword [ebp - 0xe4]
mov dword [ecx + 0x123c], 0
mov edx, dword [ebp - 0xe4]
mov dword [edx + 0x1244], 0
mov eax, dword [ebp - 0xe4]
mov dword [eax + 0x1240], 0
mov ecx, dword [ebp - 0xe4]
mov dword [ecx + 0x1248], 0
mov edx, dword [ebp - 0xe4]
add edx, 0x123c
push edx
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0xa4]
lea edx, [ecx + eax*2 + 1]
push edx
mov eax, dword [ebp - 0xe4]
push eax
mov ecx, dword [ebp - 0xe4]
mov ecx, dword [ecx + 0x1b64]
call fcn.004ca9c2
mov edx, dword [ebp - 0xa4]
add edx, 1
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 2
jb 0x45efa8
mov eax, dword [ebp - 0x9c]
add eax, 1
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xa4], 0
jmp 0x45ee17
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + 0x14098], 6
jae 0x45f094
mov edx, dword [ebp - 0x30]
imul edx, edx, 0x28
mov eax, dword [ebp - 0xe4]
cmp dword [eax + edx + 0x6fd84], 6
jne 0x45f094
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + 0x1b64], 0
je 0x45f05e
mov edx, dword [ebp - 0xe4]
mov dword [edx + 0x123c], 0
mov eax, dword [ebp - 0xe4]
mov dword [eax + 0x1244], 0
mov ecx, dword [ebp - 0xe4]
mov dword [ecx + 0x1240], 0
mov edx, dword [ebp - 0xe4]
mov dword [edx + 0x1248], 0
mov eax, dword [ebp - 0xe4]
add eax, 0x123c
push eax
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 0xa4]
lea eax, [edx + ecx*2 + 1]
push eax
mov ecx, dword [ebp - 0xe4]
push ecx
mov edx, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x1b64]
call fcn.004ca9c2
mov eax, dword [ebp - 0xa4]
add eax, 1
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jb 0x45f08f
mov ecx, dword [ebp - 0x9c]
add ecx, 1
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0
jmp 0x45ee17
mov edx, dword [ebp - 0xe4]
cmp dword [edx + 0x14098], 8
jae 0x45f17c
mov eax, dword [ebp - 0x30]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + eax + 0x6fd84], 7
jne 0x45f17c
mov edx, dword [ebp - 0xe4]
cmp dword [edx + 0x1b64], 0
je 0x45f146
mov eax, dword [ebp - 0xe4]
mov dword [eax + 0x123c], 0
mov ecx, dword [ebp - 0xe4]
mov dword [ecx + 0x1244], 0
mov edx, dword [ebp - 0xe4]
mov dword [edx + 0x1240], 0
mov eax, dword [ebp - 0xe4]
mov dword [eax + 0x1248], 0
mov ecx, dword [ebp - 0xe4]
add ecx, 0x123c
push ecx
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0xa4]
lea ecx, [eax + edx*2 + 1]
push ecx
mov edx, dword [ebp - 0xe4]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x1b64]
call fcn.004ca9c2
mov ecx, dword [ebp - 0xa4]
add ecx, 1
mov dword [ebp - 0xa4], ecx
cmp dword [ebp - 0xa4], 2
jb 0x45f177
mov edx, dword [ebp - 0x9c]
add edx, 1
mov dword [ebp - 0x9c], edx
mov dword [ebp - 0xa4], 0
jmp 0x45ee17
mov dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x30]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + eax + 0x6fd88]
mov dword [ebp - 0xe8], edx
mov eax, dword [ebp - 0xe8]
sub eax, 1
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xd
ja case.0x45f1c1.9
mov ecx, dword [ebp - 0xe8]
jmp dword [ecx*4 + 0x460e23]
mov edx, dword [ebp - 0xe4]
add edx, 0x70250
mov dword [ebp - 0xc0], edx
jmp 0x45f2aa
mov eax, dword [ebp - 0xe4]
add eax, 0x701f0
mov dword [ebp - 0xc0], eax
jmp 0x45f2aa
mov ecx, dword [ebp - 0xe4]
add ecx, 0x701d0
mov dword [ebp - 0xc0], ecx
jmp 0x45f2aa
mov edx, dword [ebp - 0xe4]
add edx, 0x70210
mov dword [ebp - 0xc0], edx
jmp 0x45f2aa
mov eax, dword [ebp - 0xe4]
add eax, 0x70230
mov dword [ebp - 0xc0], eax
jmp 0x45f2aa
mov ecx, dword [ebp - 0xe4]
add ecx, 0x702f0
mov dword [ebp - 0xc0], ecx
jmp 0x45f2aa
mov edx, dword [ebp - 0xe4]
add edx, 0x702d0
mov dword [ebp - 0xc0], edx
jmp 0x45f2aa
mov eax, dword [ebp - 0xe4]
add eax, 0x70270
mov dword [ebp - 0xc0], eax
jmp 0x45f2aa
mov ecx, dword [ebp - 0xe4]
add ecx, 0x70290
mov dword [ebp - 0xc0], ecx
jmp 0x45f2aa
mov edx, dword [ebp - 0xe4]
add edx, 0x702b0
mov dword [ebp - 0xc0], edx
jmp 0x45f2aa
mov eax, dword [ebp - 0xe4]
add eax, 0x70250
mov dword [ebp - 0xc0], eax
push 0xcc0020
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xc0]
mov edx, dword [eax + 0xc]
sub edx, dword [ecx + 4]
add edx, 1
push edx
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xc0]
mov edx, dword [eax + 8]
sub edx, dword [ecx]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x704b4]
sub edx, dword [ecx + 0x19ac]
mov eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x24]
add edx, eax
push edx
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x704b0]
sub eax, dword [edx + 0x19a8]
mov ecx, dword [ebp - 0x9c]
imul ecx, dword [ebp - 0x24]
add eax, ecx
push eax
mov ecx, dword [ebp + 0xc]
call fcn.00404520
mov edx, dword [ebp - 0x30]
imul edx, edx, 0x28
mov eax, dword [ebp - 0xe4]
cmp dword [eax + edx + 0x6fd90], 0
je 0x45f4b7
mov ecx, dword [ebp - 0xe4]
add ecx, 0x70990
mov dword [ebp - 0xc0], ecx
push 0x8800c6
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ecx + 0xc]
sub eax, dword [edx + 4]
add eax, 1
push eax
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ecx + 8]
sub eax, dword [edx]
add eax, 1
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x704b4]
sub eax, dword [edx + 0x19ac]
mov ecx, dword [ebp - 0xa4]
imul ecx, dword [ebp - 0x24]
add eax, ecx
push eax
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x704b0]
sub ecx, dword [eax + 0x19a8]
mov edx, dword [ebp - 0x9c]
imul edx, dword [ebp - 0x24]
lea eax, [ecx + edx + 7]
push eax
mov ecx, dword [ebp + 0xc]
call fcn.00404520
mov ecx, dword [ebp - 0xe4]
add ecx, 0x70970
mov dword [ebp - 0xc0], ecx
push 0xee0086
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ecx + 0xc]
sub eax, dword [edx + 4]
add eax, 1
push eax
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ecx + 8]
sub eax, dword [edx]
add eax, 1
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x704b4]
sub eax, dword [edx + 0x19ac]
mov ecx, dword [ebp - 0xa4]
imul ecx, dword [ebp - 0x24]
add eax, ecx
push eax
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x704b0]
sub ecx, dword [eax + 0x19a8]
mov edx, dword [ebp - 0x9c]
imul edx, dword [ebp - 0x24]
lea eax, [ecx + edx + 7]
push eax
mov ecx, dword [ebp + 0xc]
call fcn.00404520
lea ecx, [ebp - 0xbc]
call fcn.00404180
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x70490]
sub eax, dword [edx + 0x19a8]
mov ecx, dword [ebp - 0x9c]
imul ecx, dword [ebp - 0x24]
add eax, ecx
mov dword [ebp - 0xbc], eax
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70494]
sub ecx, dword [eax + 0x19ac]
mov edx, dword [ebp - 0xa4]
imul edx, dword [ebp - 0x24]
add ecx, edx
mov dword [ebp - 0xb8], ecx
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0xb4], eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x704d4]
sub eax, dword [edx + 0x19ac]
mov ecx, dword [ebp - 0xa4]
imul ecx, dword [ebp - 0x24]
lea edx, [eax + ecx - 1]
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x30]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + eax + 0x6fd80]
mov dword [ebp - 0xec], edx
cmp dword [ebp - 0xec], 7
ja case.default.0x45f587
mov eax, dword [ebp - 0xec]
jmp dword [eax*4 + 0x460e5b]
mov ecx, dword [ebp - 0x30]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0xe4]
cmp dword [edx + ecx + 0x6fd94], 0
jne 0x45f5eb
mov eax, dword [ebp - 0xe4]
add eax, 0x70310
mov dword [ebp - 0xc0], eax
mov ecx, dword [ebp - 0xe4]
add ecx, 0x2820
push ecx
push 0x104
mov edx, dword [ebp - 0xe4]
add edx, 0x948
push edx
push 0x50b854
push 0x50b874
push 0x50b898
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x45f630
mov eax, dword [ebp - 0xe4]
add eax, 0x70390
mov dword [ebp - 0xc0], eax
mov ecx, dword [ebp - 0xe4]
add ecx, 0x2820
push ecx
push 0x104
mov edx, dword [ebp - 0xe4]
add edx, 0x948
push edx
push 0x50b8ac
push 0x50b8d0
push 0x50b90c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x45f937
mov eax, dword [ebp - 0xe4]
add eax, 0x2820
push eax
push 0x104
mov ecx, dword [ebp - 0xe4]
add ecx, 0x948
push ecx
push 0x50b920
push 0x50b930
push 0x50b958
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov edx, dword [ebp - 0xe4]
add edx, 0x703d0
mov dword [ebp - 0xc0], edx
jmp 0x45f937
mov eax, dword [ebp - 0x30]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + eax + 0x6fd94], 0
jne 0x45f6dc
mov edx, dword [ebp - 0xe4]
add edx, 0x703f0
mov dword [ebp - 0xc0], edx
mov eax, dword [ebp - 0xe4]
add eax, 0x2820
push eax
push 0x104
mov ecx, dword [ebp - 0xe4]
add ecx, 0x948
push ecx
push 0x50b96c
push 0x50b984
push 0x50b9b4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x45f721
mov edx, dword [ebp - 0xe4]
add edx, 0x703b0
mov dword [ebp - 0xc0], edx
mov eax, dword [ebp - 0xe4]
add eax, 0x2820
push eax
push 0x104
mov ecx, dword [ebp - 0xe4]
add ecx, 0x948
push ecx
push 0x50b9c8
push 0x50b9f0
push 0x50ba30
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x45f937
mov edx, dword [ebp - 0xe4]
add edx, 0x2820
push edx
push 0x104
mov eax, dword [ebp - 0xe4]
add eax, 0x948
push eax
push 0x50ba44
push 0x50ba60
push 0x50ba84
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ecx, dword [ebp - 0xe4]
add ecx, 0x70370
mov dword [ebp - 0xc0], ecx
jmp 0x45f937
mov edx, dword [ebp - 0xe4]
add edx, 0x2820
push edx
push 0x104
mov eax, dword [ebp - 0xe4]
add eax, 0x948
push eax
push 0x50ba98
push 0x50bac0
push 0x50bae8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ecx, dword [ebp - 0xe4]
add ecx, 0x70330
mov dword [ebp - 0xc0], ecx
jmp 0x45f937
mov edx, dword [ebp - 0xe4]
add edx, 0x2820
push edx
push 0x104
mov eax, dword [ebp - 0xe4]
add eax, 0x948
push eax
push 0x50bafc
push 0x50bb2c
push 0x50bb58
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ecx, dword [ebp - 0xe4]
add ecx, 0x70350
mov dword [ebp - 0xc0], ecx
jmp 0x45f937
mov edx, dword [ebp - 0xe4]
add edx, 0x2820
push edx
push 0x104
mov eax, dword [ebp - 0xe4]
add eax, 0x948
push eax
push 0x50bb6c
push 0x50bb80
push 0x50bbac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ecx, dword [ebp - 0xe4]
add ecx, 0x70470
mov dword [ebp - 0xc0], ecx
jmp 0x45f937
mov edx, dword [ebp - 0x30]
imul edx, edx, 0x28
mov eax, dword [ebp - 0xe4]
cmp dword [eax + edx + 0x6fd94], 0
jne 0x45f8ab
mov ecx, dword [ebp - 0xe4]
add ecx, 0x70410
mov dword [ebp - 0xc0], ecx
mov edx, dword [ebp - 0xe4]
add edx, 0x2820
push edx
push 0x104
mov eax, dword [ebp - 0xe4]
add eax, 0x948
push eax
push 0x50bbc0
push 0x50bbe4
push 0x50bc10
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x45f8f0
mov ecx, dword [ebp - 0xe4]
add ecx, 0x703b0
mov dword [ebp - 0xc0], ecx
mov edx, dword [ebp - 0xe4]
add edx, 0x2820
push edx
push 0x104
mov eax, dword [ebp - 0xe4]
add eax, 0x948
push eax
push 0x50bc24
push 0x50bc4c
push 0x50bc8c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x45f937
mov ecx, dword [ebp - 0xe4]
add ecx, 0x2820
push ecx
push 0x104
mov edx, dword [ebp - 0xe4]
add edx, 0x948
push edx
push 0x50bca0
push 0x50bcbc
push 0x50bce4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [ebp - 0xe4]
add eax, 0x705b0
mov dword [ebp - 0xc0], eax
push 0xcc0020
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xc0]
mov edx, dword [eax + 0xc]
sub edx, dword [ecx + 4]
add edx, 1
push edx
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xc0]
mov edx, dword [eax + 8]
sub edx, dword [ecx]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x704d4]
sub edx, dword [ecx + 0x19ac]
mov eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x24]
add edx, eax
push edx
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x704d0]
sub eax, dword [edx + 0x19a8]
mov ecx, dword [ebp - 0x9c]
imul ecx, dword [ebp - 0x24]
add eax, ecx
push eax
mov ecx, dword [ebp + 0xc]
call fcn.00404520
mov edx, dword [ebp - 0xe4]
cmp dword [edx + 0x1b64], 0
je 0x45fac2
mov eax, dword [ebp - 0xe4]
add eax, 0x704d0
push eax
lea ecx, [ebp - 0xbc]
call fcn.00404110
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xbc]
add edx, dword [ecx + 8]
mov eax, dword [ebp - 0xc0]
sub edx, dword [eax]
add edx, 1
mov dword [ebp - 0xb4], edx
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xb8]
add edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0xc0]
sub edx, dword [eax + 4]
add edx, 1
mov dword [ebp - 0xb0], edx
mov ecx, dword [ebp - 0xa4]
imul ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x9c]
imul edx, dword [ebp - 0x24]
push edx
lea ecx, [ebp - 0xbc]
call fcn.004040f0
lea eax, [ebp - 0xbc]
push eax
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 0xa4]
lea eax, [edx + ecx*2 + 1]
push eax
mov ecx, dword [ebp - 0xe4]
push ecx
mov edx, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x1b64]
call fcn.004ca9c2
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0xa4]
lea edx, [ecx + eax*2 + 1]
push edx
mov eax, dword [ebp - 0xe4]
push eax
mov ecx, dword [ebp - 0xe4]
add ecx, 0x948
push ecx
mov edx, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x1b64]
call fcn.004caa04
mov eax, dword [ebp - 0x30]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + eax + 0x6fd8c], 0
je 0x45fb4f
mov edx, dword [ebp - 0x30]
imul edx, edx, 0x28
mov eax, dword [ebp - 0xe4]
cmp dword [eax + edx + 0x6fd84], 7
jne 0x45fafd
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + 0x1409c], 6
jbe 0x45fb4f
mov edx, dword [ebp - 0x30]
imul edx, edx, 0x28
mov eax, dword [ebp - 0xe4]
cmp dword [eax + edx + 0x6fd84], 6
jne 0x45fb22
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + 0x1409c], 4
jbe 0x45fb4f
mov edx, dword [ebp - 0x30]
imul edx, edx, 0x28
mov eax, dword [ebp - 0xe4]
cmp dword [eax + edx + 0x6fd84], 0
jne 0x45fd1f
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + 0x1409c], 2
ja 0x45fd1f
mov edx, dword [ebp - 0xe4]
cmp dword [edx + 0x7004c], 0
je 0x45fb8a
mov eax, dword [ebp - 0x30]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + eax + 0x6fd84], 0
jne 0x45fb8a
mov edx, dword [ebp - 0x30]
imul edx, edx, 0x28
mov eax, dword [ebp - 0xe4]
cmp dword [eax + edx + 0x6fd80], 2
je 0x45fbc5
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + 0x70050], 0
je 0x45fbca
mov edx, dword [ebp - 0x30]
imul edx, edx, 0x28
mov eax, dword [ebp - 0xe4]
cmp dword [eax + edx + 0x6fd84], 6
jne 0x45fbca
mov ecx, dword [ebp - 0x30]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0xe4]
cmp dword [edx + ecx + 0x6fd80], 1
jne 0x45fbca
jmp 0x45fd1f
mov eax, dword [ebp - 0xe4]
add eax, 0x70ed0
mov dword [ebp - 0xc0], eax
push 0x8800c6
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xc0]
mov edx, dword [eax + 0xc]
sub edx, dword [ecx + 4]
add edx, 1
push edx
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xc0]
mov edx, dword [eax + 8]
sub edx, dword [ecx]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x704d4]
sub edx, dword [ecx + 0x19ac]
mov eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x24]
add edx, eax
push edx
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x704d0]
sub eax, dword [edx + 0x19a8]
mov ecx, dword [ebp - 0x9c]
imul ecx, dword [ebp - 0x24]
add eax, ecx
push eax
mov ecx, dword [ebp + 0xc]
call fcn.00404520
mov edx, dword [ebp - 0xe4]
add edx, 0x70eb0
mov dword [ebp - 0xc0], edx
push 0xee0086
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc0]
mov ecx, dword [edx + 0xc]
sub ecx, dword [eax + 4]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc0]
mov ecx, dword [edx + 8]
sub ecx, dword [eax]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x704d4]
sub ecx, dword [eax + 0x19ac]
mov edx, dword [ebp - 0xa4]
imul edx, dword [ebp - 0x24]
add ecx, edx
push ecx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x704d0]
sub edx, dword [ecx + 0x19a8]
mov eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0x24]
add edx, eax
push edx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70d30]
cmp edx, dword [ebp - 0x30]
jne 0x460013
mov eax, dword [ebp - 0xe4]
cmp dword [eax + 0x70038], 0
je 0x460013
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + 0x7003c], 0
jne 0x45feb9
push 0x8800c6
mov edx, dword [ebp - 0xe4]
mov eax, dword [edx + 0x70894]
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70890]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x7089c]
sub eax, dword [edx + 0x70894]
add eax, 1
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x70898]
sub eax, dword [edx + 0x70890]
add eax, 1
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x704b4]
sub eax, dword [edx + 0x19ac]
mov ecx, dword [ebp - 0xa4]
imul ecx, dword [ebp - 0x24]
add eax, ecx
push eax
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x704b0]
sub ecx, dword [eax + 0x19a8]
mov edx, dword [ebp - 0x9c]
imul edx, dword [ebp - 0x24]
add ecx, edx
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
push 0xee0086
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x70874]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [edx + 0x70870]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x7089c]
sub ecx, dword [eax + 0x70894]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70898]
sub ecx, dword [eax + 0x70890]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x704b4]
sub ecx, dword [eax + 0x19ac]
mov edx, dword [ebp - 0xa4]
imul edx, dword [ebp - 0x24]
add ecx, edx
push ecx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x704b0]
sub edx, dword [ecx + 0x19a8]
mov eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0x24]
add edx, eax
push edx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
jmp 0x460013
push 0x8800c6
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70834]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x70830]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x7083c]
sub edx, dword [ecx + 0x70834]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70838]
sub edx, dword [ecx + 0x70830]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x704b4]
sub edx, dword [ecx + 0x19ac]
mov eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x24]
add edx, eax
push edx
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x704b0]
sub eax, dword [edx + 0x19a8]
mov ecx, dword [ebp - 0x9c]
imul ecx, dword [ebp - 0x24]
add eax, ecx
push eax
mov ecx, dword [ebp + 0xc]
call fcn.00404520
push 0xee0086
mov edx, dword [ebp - 0xe4]
mov eax, dword [edx + 0x70814]
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70810]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x7083c]
sub eax, dword [edx + 0x70834]
add eax, 1
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x70838]
sub eax, dword [edx + 0x70830]
add eax, 1
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x704b4]
sub eax, dword [edx + 0x19ac]
mov ecx, dword [ebp - 0xa4]
imul ecx, dword [ebp - 0x24]
add eax, ecx
push eax
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x704b0]
sub ecx, dword [eax + 0x19a8]
mov edx, dword [ebp - 0x9c]
imul edx, dword [ebp - 0x24]
add ecx, edx
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
mov eax, dword [ebp - 0xa4]
add eax, 1
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jb 0x460044
mov ecx, dword [ebp - 0x9c]
add ecx, 1
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0
jmp 0x45ee17
mov edx, dword [ebp - 0xe4]
cmp dword [edx + 0x7103c], 0
jne 0x46019e
mov eax, dword [ebp - 0xe4]
cmp dword [eax + 0x710b0], 0
je 0x460109
push 0xcc0020
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70a94]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x70a90]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70aac]
sub edx, dword [ecx + 0x70aa4]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70aa8]
sub edx, dword [ecx + 0x70aa0]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70aa4]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70aa0]
sub edx, dword [ecx + 0x19a8]
push edx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
jmp 0x46019e
push 0xcc0020
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x70a74]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [edx + 0x70a70]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70a8c]
sub ecx, dword [eax + 0x70a84]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70a88]
sub ecx, dword [eax + 0x70a80]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70a84]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70a80]
sub ecx, dword [eax + 0x19a8]
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
mov edx, dword [ebp - 0xe4]
cmp dword [edx + 0x71054], 0
jne 0x4602f3
mov eax, dword [ebp - 0xe4]
cmp dword [eax + 0x710ac], 0
je 0x46025e
push 0xcc0020
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70954]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x70950]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x7096c]
sub edx, dword [ecx + 0x70964]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70968]
sub edx, dword [ecx + 0x70960]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70964]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70960]
sub edx, dword [ecx + 0x19a8]
push edx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
jmp 0x4602f3
push 0xcc0020
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x70934]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [edx + 0x70930]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x7094c]
sub ecx, dword [eax + 0x70944]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70948]
sub ecx, dword [eax + 0x70940]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70944]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70940]
sub ecx, dword [eax + 0x19a8]
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
mov edx, dword [ebp - 0xe4]
cmp dword [edx + 0x71090], 0
je 0x460448
mov eax, dword [ebp - 0xe4]
cmp dword [eax + 0x710a8], 0
je 0x4603b3
push 0xcc0020
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70914]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x70910]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x7092c]
sub edx, dword [ecx + 0x70924]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70928]
sub edx, dword [ecx + 0x70920]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70924]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70920]
sub edx, dword [ecx + 0x19a8]
push edx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
jmp 0x460448
push 0xcc0020
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x708f4]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [edx + 0x708f0]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x7090c]
sub ecx, dword [eax + 0x70904]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70908]
sub ecx, dword [eax + 0x70900]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70904]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70900]
sub ecx, dword [eax + 0x19a8]
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
mov edx, dword [ebp - 0xe4]
cmp dword [edx + 0x71038], 0
jne 0x46067f
mov eax, dword [ebp - 0xe4]
cmp dword [eax + 0x71034], 0
je 0x460508
push 0xcc0020
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70ef4]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x70ef0]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70f0c]
sub edx, dword [ecx + 0x70f04]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70f08]
sub edx, dword [ecx + 0x70f00]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70f04]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70f00]
sub edx, dword [ecx + 0x19a8]
push edx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
jmp 0x46059d
push 0xcc0020
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x70f14]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [edx + 0x70f10]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70f2c]
sub ecx, dword [eax + 0x70f24]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70f28]
sub ecx, dword [eax + 0x70f20]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70f24]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70f20]
sub ecx, dword [eax + 0x19a8]
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
mov edx, dword [ebp - 0xe4]
cmp dword [edx + 0x120b4], 0
je 0x46067f
push 0xffff00
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
call dword [edx + 0x30]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70f20]
sub edx, dword [ecx + 0x19a8]
add edx, 0xf
mov eax, dword [ebp - 0xe4]
mov dword [eax + 0x123c], edx
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x70f24]
sub eax, dword [edx + 0x19ac]
mov ecx, dword [ebp - 0xe4]
mov dword [ecx + 0x1240], eax
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70f28]
sub ecx, dword [eax + 0x19a8]
add ecx, 0xf
mov edx, dword [ebp - 0xe4]
mov dword [edx + 0x1244], ecx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70f2c]
sub edx, dword [ecx + 0x19ac]
mov eax, dword [ebp - 0xe4]
mov dword [eax + 0x1248], edx
push 0
mov ecx, dword [ebp - 0xe4]
add ecx, 0x123c
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0xe4]
add edx, 0x5bac
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
call dword [edx + 0x68]
lea ecx, [ebp - 0x20]
call fcn.00404180
mov eax, dword [ebp - 0xe4]
cmp dword [eax + 0x71050], 0
jne 0x4608dc
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + 0x71034], 0
je 0x4608dc
mov edx, dword [ebp - 0xe4]
add edx, 0x70fc0
push edx
lea ecx, [ebp - 0x20]
call fcn.00404110
lea eax, [ebp - 0x20]
push eax
push 0xa
mov ecx, dword [ebp - 0xe4]
push ecx
mov edx, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x1b64]
call fcn.004ca9c2
mov eax, dword [ebp - 0xe4]
cmp dword [eax + 0x71088], 0
je 0x46078d
push 0xcc0020
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70fb4]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x70fb0]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70fcc]
sub edx, dword [ecx + 0x70fc4]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70fc8]
sub edx, dword [ecx + 0x70fc0]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70fc4]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70fc0]
sub edx, dword [ecx + 0x19a8]
push edx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
jmp 0x460822
push 0xcc0020
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x70fd4]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [edx + 0x70fd0]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70fec]
sub ecx, dword [eax + 0x70fe4]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70fe8]
sub ecx, dword [eax + 0x70fe0]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70fe4]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70fe0]
sub ecx, dword [eax + 0x19a8]
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
mov edx, dword [ebp - 0xe4]
cmp dword [edx + 0x120b4], 0
je 0x4608da
push 0xffff00
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
call dword [edx + 0x30]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70fc0]
sub edx, dword [ecx + 0x19a8]
add edx, 0xf
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70fc4]
sub edx, dword [ecx + 0x19ac]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70fc8]
sub edx, dword [ecx + 0x19a8]
add edx, 0xf
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x70fcc]
sub edx, dword [ecx + 0x19ac]
add edx, 0x14
mov dword [ebp - 0x14], edx
push 0x10
lea eax, [ebp - 0x20]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xe4]
add ecx, 0x8654
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
call dword [eax + 0x68]
jmp 0x460933
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + 0x71050], 0
jne 0x460933
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xd0]
call fcn.00451940
mov edx, dword [eax]
mov dword [ebp - 0x20], edx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x1c], ecx
mov edx, dword [eax + 8]
mov dword [ebp - 0x18], edx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x20]
push ecx
push 0xa
mov edx, dword [ebp - 0xe4]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x1b64]
call fcn.004ca9c2
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + 0x71080], 0
je 0x460b87
mov edx, dword [ebp - 0xe4]
cmp dword [edx + 0x70064], 0
je 0x460b87
mov eax, dword [ebp - 0xe4]
add eax, 0x71000
push eax
lea ecx, [ebp - 0x20]
call fcn.00404110
lea ecx, [ebp - 0x20]
push ecx
push 0xd
mov edx, dword [ebp - 0xe4]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x1b64]
call fcn.004ca9c2
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + 0x71084], 0
je 0x460a38
push 0xcc0020
mov edx, dword [ebp - 0xe4]
mov eax, dword [edx + 0x70ff4]
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70ff0]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x7100c]
sub eax, dword [edx + 0x71004]
add eax, 1
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x71008]
sub eax, dword [edx + 0x71000]
add eax, 1
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x71004]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x71000]
sub eax, dword [edx + 0x19a8]
push eax
mov ecx, dword [ebp + 0xc]
call fcn.00404520
jmp 0x460acd
push 0xcc0020
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x71014]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x71010]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x7102c]
sub edx, dword [ecx + 0x71024]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x71028]
sub edx, dword [ecx + 0x71020]
add edx, 1
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x71024]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x71020]
sub edx, dword [ecx + 0x19a8]
push edx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
mov eax, dword [ebp - 0xe4]
cmp dword [eax + 0x120b4], 0
je 0x460b85
push 0xffff00
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
call dword [edx + 0x30]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x71000]
sub edx, dword [ecx + 0x19a8]
add edx, 0xf
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x71004]
sub edx, dword [ecx + 0x19ac]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x71008]
sub edx, dword [ecx + 0x19a8]
add edx, 0xf
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [eax + 0x7100c]
sub edx, dword [ecx + 0x19ac]
add edx, 0x14
mov dword [ebp - 0x14], edx
push 0x10
lea eax, [ebp - 0x20]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xe4]
add ecx, 0xb714
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
call dword [eax + 0x68]
jmp 0x460bcf
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xe0]
call fcn.00451940
mov ecx, dword [eax]
mov dword [ebp - 0x20], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x1c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x18], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x14], edx
lea eax, [ebp - 0x20]
push eax
push 0xd
mov ecx, dword [ebp - 0xe4]
push ecx
mov edx, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x1b64]
call fcn.004ca9c2
mov eax, dword [ebp - 0xe4]
cmp dword [eax + 0x7105c], 0
je 0x460dec
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + 0x71060], 0
jne 0x460dec
mov edx, dword [ebp - 0xe4]
cmp dword [edx + 0x71058], 0
je 0x460ca2
push 0xcc0020
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax + 0x70af4]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [edx + 0x70af0]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70b0c]
sub ecx, dword [eax + 0x70b04]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70b08]
sub ecx, dword [eax + 0x70b00]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70b04]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx + 0x70b00]
sub ecx, dword [eax + 0x19a8]
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.00404520
jmp 0x460d37
push 0xcc0020
mov edx, dword [ebp - 0xe4]
mov eax, dword [edx + 0x70b14]
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ecx + 0x70b10]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x70b2c]
sub eax, dword [edx + 0x70b24]
add eax, 1
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x70b28]
sub eax, dword [edx + 0x70b20]
add eax, 1
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x70b24]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x70b20]
sub eax, dword [edx + 0x19a8]
push eax
mov ecx, dword [ebp + 0xc]
call fcn.00404520
mov ecx, dword [ebp - 0xe4]
cmp dword [ecx + 0x120b4], 0
je 0x460dec
push 0xffff00
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
call dword [eax + 0x30]
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x70b00]
sub eax, dword [edx + 0x19a8]
add eax, 0xf
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x70b04]
sub eax, dword [edx + 0x19ac]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x70b08]
sub eax, dword [edx + 0x19a8]
add eax, 0xf
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ecx + 0x70b0c]
sub eax, dword [edx + 0x19ac]
mov dword [ebp - 0x14], eax
push 0
lea ecx, [ebp - 0x20]
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0xe4]
add edx, 0xa4cc
push edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
call dword [edx + 0x68]
cmp dword [ebp - 0x28], 0
je 0x460e01
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
call dword [edx + 0x28]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98]
call fcn.00404260
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8