Загрузка данных


Code Offset = 00001000, Code Size = 00307000
Data Offset = 0038A000, Data Size = 00020000

Number of Objects = 0005 (dec), Imagebase = 00400000h

   Object01: .text    RVA: 00001000 Offset: 00001000 Size: 00307000 Flags: 60000020
   Object02: .rdata   RVA: 00308000 Offset: 00308000 Size: 00082000 Flags: 40000040
   Object03: .data    RVA: 0038A000 Offset: 0038A000 Size: 00020000 Flags: C0000040
   Object04: .rsrc    RVA: 003AF000 Offset: 003AA000 Size: 00004000 Flags: 40000040
   Object05: .reloc   RVA: 003B3000 Offset: 003AE000 Size: 00047000 Flags: 42000040


+++++++++++++++++++ MENU INFORMATION ++++++++++++++++++

        There Are No Menu Resources in This Application

+++++++++++++++++ DIALOG INFORMATION ++++++++++++++++++

        There Are No Dialog Resources in This Application

+++++++++++++++++++ IMPORTED FUNCTIONS ++++++++++++++++++
Number of Imported Modules =    7 (decimal)

   Import Module 001: mss32.dll
   Import Module 002: binkw32.dll
   Import Module 003: DDRAW.dll
   Import Module 004: KERNEL32.dll
   Import Module 005: USER32.dll
   Import Module 006: GDI32.dll
   Import Module 007: ole32.dll

+++++++++++++++++++ IMPORT MODULE DETAILS +++++++++++++++

   Import Module 001: mss32.dll

 Addr:00388732 hint(012F) Name: _AIL_start_sample@4
 Addr:003884DA hint(0048) Name: _AIL_close_3D_listener@4
 Addr:003884C6 hint(007A) Name: _AIL_last_error@0
 Addr:003884A4 hint(0063) Name: _AIL_enumerate_3D_providers@12
 Addr:0038848A hint(008B) Name: _AIL_open_3D_provider@4
 Addr:0038846E hint(004A) Name: _AIL_close_3D_provider@4
 Addr:00388452 hint(00ED) Name: _AIL_set_3D_sample_file@8
 Addr:00388514 hint(00E7) Name: _AIL_set_3D_position@16
 Addr:0038852E hint(0089) Name: _AIL_open_3D_listener@4
 Addr:00388548 hint(0055) Name: _AIL_decompress_ADPCM@12
 Addr:00388590 hint(006C) Name: _AIL_file_type@8
 Addr:00388670 hint(0116) Name: _AIL_set_sample_user_data@12
 Addr:00388690 hint(0042) Name: _AIL_allocate_sample_handle@4
 Addr:003886B0 hint(00F8) Name: _AIL_set_3D_user_data@12
 Addr:003886CC hint(0040) Name: _AIL_allocate_3D_sample_handle@4
 Addr:003886F0 hint(00C5) Name: _AIL_release_3D_sample_handle@4
 Addr:00388712 hint(00C8) Name: _AIL_release_sample_handle@4
 Addr:003884F6 hint(00E6) Name: _AIL_set_3D_orientation@28
 Addr:00388748 hint(00BA) Name: _AIL_register_EOS_callback@8
 Addr:00388768 hint(00B7) Name: _AIL_register_3D_EOS_callback@8
 Addr:0038878A hint(012D) Name: _AIL_start_3D_sample@4
 Addr:003887A4 hint(005F) Name: _AIL_end_3D_sample@4
 Addr:003887BC hint(0060) Name: _AIL_end_sample@4
 Addr:003887D0 hint(0117) Name: _AIL_set_sample_volume@8
 Addr:003887EC hint(00F6) Name: _AIL_set_3D_sample_volume@8
 Addr:0038880A hint(0110) Name: _AIL_set_sample_pan@8
 Addr:00388822 hint(00D8) Name: _AIL_sample_status@4
 Addr:0038883A hint(0026) Name: _AIL_3D_sample_status@4
 Addr:00388854 hint(00D9) Name: _AIL_sample_user_data@8
 Addr:003883CA hint(00F0) Name: _AIL_set_3D_sample_loop_count@8
 Addr:0038886E hint(002A) Name: _AIL_3D_user_data@8
 Addr:0038888E hint(0082) Name: _AIL_mem_alloc_lock@4
 Addr:003888A6 hint(0083) Name: _AIL_mem_free_lock@4
 Addr:00388394 hint(0107) Name: _AIL_set_named_sample_file@20
 Addr:00388374 hint(010E) Name: _AIL_set_sample_loop_count@8
 Addr:00388350 hint(00FF) Name: _AIL_set_digital_master_volume@8
 Addr:00388576 hint(0056) Name: _AIL_decompress_ASI@24
 Addr:00388564 hint(003B) Name: _AIL_WAV_info@8
 Addr:0038821C hint(0096) Name: _AIL_quick_handles@12
 Addr:003883EC hint(0017) Name: _AIL_3D_auto_update_position@8
 Addr:00388338 hint(0140) Name: _AIL_stream_status@4
 Addr:0038831C hint(0126) Name: _AIL_set_stream_volume@8
 Addr:00388306 hint(0091) Name: _AIL_pause_stream@8
 Addr:003882E4 hint(00C1) Name: _AIL_register_stream_callback@8
 Addr:003882CE hint(0090) Name: _AIL_open_stream@12
 Addr:003882AE hint(011E) Name: _AIL_set_stream_loop_count@8
 Addr:00388298 hint(0131) Name: _AIL_start_stream@4
 Addr:00388282 hint(004F) Name: _AIL_close_stream@4
 Addr:0038826A hint(00A1) Name: _AIL_quick_shutdown@0
 Addr:0038824C hint(0109) Name: _AIL_set_redist_directory@4
 Addr:00388234 hint(00A2) Name: _AIL_quick_startup@20
 Addr:00388430 hint(00EB) Name: _AIL_set_3D_sample_distances@12
 Addr:0038840E hint(00FA) Name: _AIL_set_3D_velocity_vector@16
 Addr:003883B4 hint(0078) Name: _AIL_init_sample@4

   Import Module 002: binkw32.dll

 Addr:003885F2 hint(000F) Name: _BinkClose@4
 Addr:00388628 hint(0011) Name: _BinkCopyToBuffer@28
 Addr:00388640 hint(0013) Name: _BinkDoFrame@4
 Addr:003885B8 hint(0021) Name: _BinkOpen@8
 Addr:003885A4 hint(0018) Name: _BinkGetSummary@8
 Addr:00388602 hint(0020) Name: _BinkNextFrame@4
 Addr:00388616 hint(0017) Name: _BinkGetRects@8
 Addr:00388652 hint(0034) Name: _BinkWait@4
 Addr:00388660 hint(0026) Name: _BinkPause@8
 Addr:003885DE hint(0023) Name: _BinkOpenMiles@4
 Addr:003885C6 hint(0030) Name: _BinkSetSoundSystem@8

   Import Module 003: DDRAW.dll

 Addr:003888E2 hint(0008) Name: DirectDrawCreate
 Addr:003888CA hint(000B) Name: DirectDrawEnumerateA

   Import Module 004: KERNEL32.dll

 Addr:00388B14 hint(0034) Name: CreateFileA
 Addr:00388BA8 hint(009D) Name: FindNextFileA
 Addr:00388B7C hint(0089) Name: FileTimeToLocalFileTime
 Addr:003891F2 hint(01F5) Name: OutputDebugStringA
 Addr:00388B96 hint(0094) Name: FindFirstFileA
 Addr:00388BEE hint(02DF) Name: WriteFile
 Addr:00388EA0 hint(0241) Name: SetConsoleCtrlHandler
 Addr:00388E86 hint(0262) Name: SetEnvironmentVariableA
 Addr:00388E74 hint(0022) Name: CompareStringW
 Addr:00388E62 hint(0021) Name: CompareStringA
 Addr:00388E52 hint(01C2) Name: LoadLibraryA
 Addr:00388E46 hint(0131) Name: GetOEMCP
 Addr:00388E3C hint(00B9) Name: GetACP
 Addr:00388E30 hint(00BF) Name: GetCPInfo
 Addr:00388E1E hint(0156) Name: GetStringTypeW
 Addr:00388E0C hint(0153) Name: GetStringTypeA
 Addr:00388DFC hint(01B2) Name: IsBadCodePtr
 Addr:00388DE4 hint(025D) Name: SetCurrentDirectoryA
 Addr:00388DD2 hint(026A) Name: SetFilePointer
 Addr:00388DC2 hint(0261) Name: SetEndOfFile
 Addr:00388DB2 hint(01B8) Name: IsBadWritePtr
 Addr:00388DA2 hint(02BB) Name: VirtualAlloc
 Addr:00388D94 hint(02BF) Name: VirtualFree
 Addr:00388D86 hint(019B) Name: HeapCreate
 Addr:00388D78 hint(019D) Name: HeapDestroy
 Addr:00388D68 hint(0175) Name: GetVersionExA
 Addr:00388D4E hint(0109) Name: GetEnvironmentVariableA
 Addr:00388D3E hint(0152) Name: GetStdHandle
 Addr:00388D2C hint(026D) Name: SetHandleCount
 Addr:00388D12 hint(0108) Name: GetEnvironmentStringsW
 Addr:00388CFA hint(0106) Name: GetEnvironmentStrings
 Addr:00388CE0 hint(00B3) Name: FreeEnvironmentStringsW
 Addr:00388CC6 hint(00B2) Name: FreeEnvironmentStringsA
 Addr:00388CB0 hint(0124) Name: GetModuleFileNameA
 Addr:00388C94 hint(02AD) Name: UnhandledExceptionFilter
 Addr:00388C84 hint(01C0) Name: LCMapStringW
 Addr:00388C74 hint(01BF) Name: LCMapStringA
 Addr:00388C5E hint(01E4) Name: MultiByteToWideChar
 Addr:00388C48 hint(02D2) Name: WideCharToMultiByte
 Addr:00388C2A hint(028B) Name: SetUnhandledExceptionFilter
 Addr:00388C1E hint(01A3) Name: HeapSize
 Addr:00388C0E hint(027C) Name: SetStdHandle
 Addr:00388BFA hint(00AA) Name: FlushFileBuffers
 Addr:00388ADC hint(019F) Name: HeapFree
 Addr:00388BE2 hint(0218) Name: ReadFile
 Addr:00388BCC hint(010D) Name: GetFileAttributesA
 Addr:00388BB8 hint(0116) Name: GetFullPathNameA
 Addr:00388B64 hint(008A) Name: FileTimeToSystemTime
 Addr:00388B58 hint(0090) Name: FindClose
 Addr:00388B44 hint(0227) Name: RemoveDirectoryA
 Addr:00388B30 hint(002D) Name: CreateDirectoryA
 Addr:00388B22 hint(0057) Name: DeleteFileA
 Addr:00388B06 hint(0115) Name: GetFileType
 Addr:00388AF6 hint(011A) Name: GetLastError
 Addr:00388AE8 hint(01A2) Name: HeapReAlloc
 Addr:00388900 hint(016D) Name: GetTickCount
 Addr:00388910 hint(0193) Name: GlobalUnlock
 Addr:00388920 hint(018C) Name: GlobalLock
 Addr:0038892E hint(0181) Name: GlobalAlloc
 Addr:0038893C hint(0104) Name: GetDriveTypeA
 Addr:0038894C hint(011E) Name: GetLogicalDriveStringsA
 Addr:00388966 hint(00F5) Name: GetCurrentDirectoryA
 Addr:0038897E hint(013E) Name: GetProcAddress
 Addr:00388990 hint(0126) Name: GetModuleHandleA
 Addr:003889A4 hint(001B) Name: CloseHandle
 Addr:003889B2 hint(01D6) Name: MapViewOfFile
 Addr:003889C2 hint(0035) Name: CreateFileMappingA
 Addr:003889D8 hint(0112) Name: GetFileSize
 Addr:003889E6 hint(02B0) Name: UnmapViewOfFile
 Addr:003889F8 hint(0296) Name: Sleep
 Addr:00388A00 hint(022F) Name: RtlUnwind
 Addr:00388A0C hint(020B) Name: RaiseException
 Addr:00388A1E hint(01B5) Name: IsBadReadPtr
 Addr:00388A2E hint(0170) Name: GetTimeZoneInformation
 Addr:00388A48 hint(015D) Name: GetSystemTime
 Addr:00388A58 hint(011B) Name: GetLocalTime
 Addr:00388A68 hint(0150) Name: GetStartupInfoA
 Addr:00388A7A hint(00CA) Name: GetCommandLineA
 Addr:00388A8C hint(0174) Name: GetVersion
 Addr:00388A9A hint(007D) Name: ExitProcess
 Addr:00388AA8 hint(0199) Name: HeapAlloc
 Addr:00388AB4 hint(029E) Name: TerminateProcess
 Addr:00388AC8 hint(00F7) Name: GetCurrentProcess

   Import Module 005: USER32.dll

 Addr:003890DC hint(0200) Name: RegisterWindowMessageA
 Addr:003890CA hint(020A) Name: ScreenToClient
 Addr:00388F78 hint(01F3) Name: RegisterClassExA
 Addr:003890F6 hint(0226) Name: SetCursor
 Addr:003890AC hint(01F1) Name: RedrawWindow
 Addr:0038909A hint(017A) Name: InvalidateRect
 Addr:00389090 hint(011C) Name: GetMenu
 Addr:00389078 hint(0271) Name: SystemParametersInfoA
 Addr:00389068 hint(00F0) Name: GetClientRect
 Addr:00389216 hint(01E0) Name: PostQuitMessage
 Addr:00389208 hint(01BE) Name: MessageBoxA
 Addr:00389056 hint(003A) Name: ClientToScreen
 Addr:00389044 hint(0156) Name: GetWindowLongA
 Addr:00389032 hint(0084) Name: DefWindowProcA
 Addr:00389022 hint(01DC) Name: PeekMessageA
 Addr:0038900E hint(0282) Name: TranslateMessage
 Addr:00388FFE hint(008E) Name: DestroyWindow
 Addr:00388FE8 hint(0002) Name: AdjustWindowRectEx
 Addr:00388FD4 hint(00FF) Name: GetDesktopWindow
 Addr:00388FC4 hint(025B) Name: SetWindowPos
 Addr:00388FB6 hint(026A) Name: ShowWindow
 Addr:00388FA6 hint(0291) Name: UpdateWindow
 Addr:00388F9A hint(019E) Name: LoadIconA
 Addr:00388F8C hint(019A) Name: LoadCursorA
 Addr:00388EC6 hint(003C) Name: CloseClipboard
 Addr:00388F66 hint(0059) Name: CreateWindowExA
 Addr:00388F54 hint(0258) Name: SetWindowLongA
 Addr:00388F4C hint(00FD) Name: GetDC
 Addr:00388F40 hint(0203) Name: ReleaseDC
 Addr:00388F22 hint(0186) Name: IsClipboardFormatAvailable
 Addr:00388ED8 hint(0223) Name: SetClipboardData
 Addr:00388EEC hint(00B4) Name: EmptyClipboard
 Addr:00388EFE hint(01D3) Name: OpenClipboard
 Addr:003890BC hint(00AB) Name: DrawMenuBar
 Addr:00388F0E hint(00F2) Name: GetClipboardData

   Import Module 006: GDI32.dll

 Addr:00389196 hint(015F) Name: GetStockObject
 Addr:0038917A hint(0156) Name: GetPixel
 Addr:0038916E hint(01E8) Name: SetPixel
 Addr:00389186 hint(0125) Name: GetDeviceCaps
 Addr:0038913A hint(01C7) Name: SelectObject
 Addr:00389124 hint(002A) Name: CreateCompatibleDC
 Addr:0038911A hint(0011) Name: BitBlt
 Addr:0038910E hint(0050) Name: DeleteDC
 Addr:0038915E hint(0053) Name: DeleteObject
 Addr:0038914A hint(002F) Name: CreateDIBSection

   Import Module 007: ole32.dll

 Addr:003891D6 hint(0053) Name: CoUninitialize
 Addr:003891C6 hint(002D) Name: CoInitialize
 Addr:003891B2 hint(000D) Name: CoCreateInstance

+++++++++++++++++++ EXPORTED FUNCTIONS ++++++++++++++++++
Number of Exported Functions = 0000 (decimal)




+++++++++++++++++++ ASSEMBLY CODE LISTING ++++++++++++++++++
//********************** Start of Code in Object .text **************
Program Entry Point = 006C02ED (D:\rabota_3\fot[foredit]\FTMDemo.exe File Offset:005C82ED)


:00401000 8B442404                mov eax, dword ptr [esp+04]
:00401004 50                      push eax
:00401005 E876021E00              call 005E1280
:0040100A 83C404                  add esp, 00000004
:0040100D C3                      ret


:0040100E 90                      nop
:0040100F 90                      nop

* Referenced by a CALL at Addresses:
|:006BE523   , :006BEAA5   , :006BEAF6   , :006BED25   , :006BF2BF   
|:006BF380   , :006CED5D   , :006CED88   , :006CEE9A   , :006CEED3   
|:006CF0E4   , :006CF11D   , :006CF156   , :006CF18F   , :006CF2C8   
|:006CF2D3   , :006CF2FE   , :006CF3C8   , :006CF564   , :006CF59D   
|:006CF5E4   , :006CF61D   , :006CF656   , :006CF6A6   , :006CF8E2   
|:006CF904   , :006CF926   , :006CF976   , :006CF9C8   , :006CFA1E   
|:006CFA29   , :006CFA92   , :006CFAB9   , :006CFB09   , :006CFB59   
|:006CFBAD   , :006CFC03   , :006CFC59   , :006CFD60   , :006CFD9D   
|:006CFDDF   , :006CFE49   , :006CFE6A   , :006CFEC8   , :006CFF33   
|:006CFFB1   , :006CFFE0   , :006D0037   , :006D00A2   , :006D010D   
|:006D0164   , :006D0216   , :006D025F   , :006D03C6   , :006D0443   
|:006D049F   , :006D04FF   , :006D0577   , :006D05A3   , :006D061B   
|:006D064A   , :006D06B2   , :006D071A   , :006D07E6   , :006D0846   
|:006D087F   , :006D093F   , :006D0952   , :006D098B   , :006D09D4   
|:006D0A0D   , :006D0A58   , :006D0A95   , :006D0AE2   , :006D0B41   
|:006D0B8B   , :006D0BBD   , :006D0C35   , :006D0C7F   , :006D0CFB   
|:006D0D45   , :006D0D77   , :006D0DEF   , :006D0E39   , :006D0EB5   
|:006D12F4   , :006D1335   , :006D1484   , :006D14DC   , :006D1506   
|:006D1530   , :006D1614   , :006D19E6   , :006D1C6D   , :006D1DE6   
|:006D1E1F   , :006D1E6F   , :006D1EA8   , :006D1EF5   , :006D1F00   
|:006D216C   , :006D2177   , :006D2182   , :006D218D   , :006D2198   
|:006D21A3   , :006D22F6   , :006D2301   , :006D230C   , :006D2317   
|:006D2322   , :006D232D   , :006D2338   , :006D2343   , :006D23BE   
|:006D23C9   , :006D23D4   , :006D23DF   , :006D23EA   , :006D2406   
|:006D2422   , :006D243E   , :006D2459   , :006D249A   , :006D24EB   
|:006D2564   , :006D256F   , :006D257A   , :006D2634   , :006D2677   
|:006D26D6   , :006D284D   , :006D28CF   , :006D2BC0   , :006D2CAB   
|:006D2CEC   , :006D2D2D   , :006D2D6E   , :006D2DB1   , :006D2DF6   
|:006D2E64   , :006D2ED2   , :006D2F40   , :006D2FCF   , :006D305E   
|:006D30ED   , :006D3176   , :006D31BF   , :006D3208   , :006D3213   
|:006D3281   , :006D32EF   , :006D32FA   , :006D3305   , :006D3318   
|:006D33A7   , :006D33FC   , :006D3451   , :006D3475   , :006D3504   
|:006D3538   , :006D359E   , :006D37B0   , :006D37E9   , :006D3880   
|:006D38D0   , :006D3920   , :006D3974   , :006D39CA   , :006D3A20   
|:006D3A76   , :006D3C80   , :006D3CA2   , :006D3CE3   , :006D3D36   
|:006D3D79   , :006D3DBE   , :006D3DC9   , :006D3E0E   , :006D3E53   
|:006D3E98   , :006D3EC7   , :006D3EEE   , :006D3F7D   , :006D4008   
|:006D4013   , :006D406C   , :006D40CD   , :006D4124   , :006D4177   
|:006D4199   , :006D41E2   , :006D4206   , :006D4253   , :006D42A0   
|:006D4309   , :006D4356   , :006D4396   , :006D43A1   , :006D450B   
|:006D4653   , :006D46AF   , :006D46F2   , :006D4AA6   , :006D4BB6   
|:006D4CCE   , :006D4DF2   , :006D4E8F   , :006D4EE3   , :006D4F20   
|:006D4F74   , :006D502A   , :006D507E   , :006D50BE   , :006D50F3   
|:006D5144   , :006D5184   , :006D51B9   , :006D5210   , :006D5248   
|:006D5297   , :006D52E9   , :006D5321   , :006D5374   , :006D53CD   
|:006D5426   , :006D57CE   , :006D5AC4   , :006D5D7E   , :006D5EAC   
|:006D5EB7   , :006D5F34   , :006D5F6D   , :006D5FBD   , :006D6014   
|:006D6196   , :006D61A1   , :006D61AC   , :006D61E3   , :006D6244   
|:006D629B   , :006D62B0   , :006D660E   , :006D67AA   , :006D67B5   
|:006D6864   , :006D68A5   , :006D68F5   , :006D6947   , :006D69BD   
|:006D69D8   , :006D6A4E   , :006D6A95   , :006D6B07   , :006D6BA0   
|:006D6BC2   , :006D6C03   , :006D6C53   , :006D6CA7   , :006D6CC2   
|:006D6CF6   , :006D6D11   , :006D6D87   , :006D6DCE   , :006D6E40   
|:006D6ED9   , :006D6EFB   , :006D6F3C   , :006D6F8C   , :006D6FE0   
|:006D6FFB   , :006D7071   , :006D70B8   , :006D712A   , :006D72D6   
|:006D7317   , :006D7358   , :006D7382   , :006D73C3   , :006D7400   
|:006D7445   , :006D748A   , :006D74CF   , :006D7514   , :006D756A   
|:006D75C0   , :006D7616   , :006D7674   , :006D7699   , :006D76F9   
|:006D771E   , :006D77BF   , :006D7822   , :006D7863   , :006D78A4   
|:006D78C6   , :006D7907   , :006D7944   , :006D799A   , :006D7A0A   
|:006D7A4B   , :006D7A8C   , :006D7AC5   , :006D7B19   , :006D7E86   
|:006D7F54   , :006D8068   , :006D8160   , :006D8278   , :006D8350   
|:006D83D8   , :006D858B   , :006D85D2   , :006D85F8   , :006D8637   
|:006D86B4   , :006D86EB   , :006D876E   , :006D87A5   , :006D8828   
|:006D885F   , :006D88EA   , :006D8921   , :006D89EA   , :006D8A3D   
|:006D8A71   , :006D8AB3   , :006D8B2B   , :006D8C3A   , :006D8CDA   
|:006D8EED   , :006D8EF8   , :006D8F03   , :006D8F0E   , :006D8F19   
|:006D8F62   , :006D8FAB   , :006D8FF4   , :006D9026   , :006D907C   
|:006D90D2   , :006D90F6   , :006D911A   , :006D94C8   , :006D94EA   
|:006D94FD   , :006D954D   , :006D959D   , :006D95A8   , :006D95F7   
|:006D9824   , :006D9874   , :006D98C4   , :006D9918   , :006D9923   
|:006D9956   , :006D997A   , :006D9A60   , :006D9B92   , :006D9BBC   
|:006D9BE6   , :006D9C08   , :006D9D98   , :006D9EB8   , :006D9EDA   
|:006D9F2A   , :006D9F7A   , :006D9FD0   , :006DA026   , :006DA07C   
|:006DA0EC   , :006DA119   , :006DA12E   , :006DA1FB   , :006DA24B   
|:006DA29B   , :006DA2EF   , :006DA345   , :006DA38A   , :006DA3C7   
|:006DA404   , :006DA428   , :006DA433   , :006DA43E   , :006DA555   
|:006DA57A   , :006DA597   , :006DA5B9   , :006DA5CE   , :006DA5F0   
|:006DA605   , :006DA748   , :006DA76A   , :006DA7C3   , :006DA833   
|:006DA84E   , :006DA8EA   , :006DA93A   , :006DA98A   , :006DA9DE   
|:006DAA36   , :006DAA86   , :006DAA9B   , :006DADC5   , :006DAE27   
|:006DAE83   , :006DAEA8   , :006DAEEB   , :006DAF31   , :006DB174   
|:006DB1C4   , :006DB214   , :006DB314   , :006DB31F   , :006DB341   
|:006DB34C   , :006DB39C   , :006DB3EC   , :006DB42C   , :006DB57D   
|:006DB59F   , :006DB5C1   , :006DB5E3   , :006DB605   , :006DB627   
|:006DB687   , :006DB692   , :006DB69D   , :006DB6BF   , :006DB746   
|:006DB759   , :006DB7A9   , :006DB7F9   , :006DB8A7   , :006DBA94   
|:006DBACD   , :006DBB1C   , :006DBB3E   , :006DBB59   , :006DBB92   
|:006DC146   , :006DC19C   , :006DC202   , :006DC370   , :006DC3CF   
|:006DC418   , :006DC4E6   , :006DC53C   , :006DC560   , :006DC78F   
|:006DC7C7   , :006DD614   , :006DD914   , :006DDB88   , :006DDEAD   
|:006DDF45   , :006DE984   , :006DEA3F   , :006DF02E   , :006DF4D4   
|:006DF581   , :006DF7A4   , :006DFE36   , :006DFF64   , :006E0504   
|:006E0578   , :006E0704   , :006E074D   , :006E18E4   , :006E19EC   
|:006E1C14   , :006E1D19   , :006E236A   , :006E2BA4   , :006E2C26   
|:006E2DC4   , :006E2E46   , :006E2FB4   , :006E3052   , :006E3344   
|:006E33CE   , :006E3744   , :006E37C6   , :006E39F4   , :006E3AA0   
|:006E3CC4   , :006E3D54   , :006E3F04   , :006E3F78   , :006E40E4   
|:006E4158   , :006E42E4   , :006E4358   , :006E44B4   , :006E4536   
|:006E45B8   , :006E462C   , :006E4844   , :006E48B8   , :006E4A74   
|:006E4AF6   , :006E4C84   , :006E4CEB   , :006E4F24   , :006E4F98   
|:006E5104   , :006E5194   , :006E5364   , :006E53E8   , :006E5654   
|:006E56AD   , :006E5AE4   , :006E5B4B   , :006E60E4   , :006E6176   
|:006E6544   , :006E65BB   , :006E6744   , :006E6791   , :006E6A94   
|:006E6B18   , :006E6C74   , :006E6CE8   , :006E6D84   , :006E6E15   
|:006E7194   , :006E7218   , :006E73F4   , :006E7486   , :006E7654   
|:006E76C8   , :006E77C4   , :006E7871   , :006E7AD4   , :006E7B58   
|:006E7D14   , :006E7D98   , :006E7F04   , :006E7F96   , :006E8164   
|:006E81B1   , :006E8324   , :006E83A8   , :006E8564   , :006E85E8   
|:006E87B4   , :006E8838   , :006E8A24   , :006E8A99   , :006E9074   
|:006E90F8   , :006E9284   , :006E936F   , :006E99BD   , :006E9A74   
|:006E9E94   , :006E9F18   , :006E9F9C   , :006EA010   , :006EA244   
|:006EA2B8   , :006EA434   , :006EA6FB   , :006EA73F   , :006EA8EB   
|:006EAD7E   , :006EAE01   , :006EAF24   , :006EAF91   , :006EB2DB   
|:006EB351   , :006EB40C   , :006EB455   , :006ED6BD   , :006ED706   
|:006ED863   , :006EDA13   , :006EDB75   , :006EE8C0   , :006EE8DD   
|:006EEBD1   , :006EEC04   , :006EED29   , :006EED60   , :006EED9F   
|:006EEE56   , :006EEE61   , :006EEE6C   , :006EEEA8   , :006EEF49   
|:006EEF5E   , :006EEF9B   , :006EEFA6   , :006EEFD2   , :006EF06D   
|:006EF082   , :006EF0C1   , :006EF0CC   , :006EF1D6   , :006EF217   
|:006EF258   , :006EF299   , :006EF2DC   , :006EF321   , :006EF35C   
|:006EF367   , :006EF372   , :006EF37D   , :006EF644   , :006EF766   
|:006EF7C1   , :006EF802   , :006EFADA   , :006EFB49   , :006EFB8A   
|:006EFBCD   , :006EFC12   , :006EFC5F   , :006EFCAC   , :006EFCF6   
|:006EFD38   , :006EFD43   , :006EFD4E   , :006F0C33   , :006F0C65   
|:006F0E62   , :006F0E9B   , :006F0ED4   , :006F0F0D   , :006F0F48   
|:006F0FAF   , :006F0FE4   , :006F1130   , :006F1174   , :006F117F   
|:006F1318   , :006F134B   , :006F1386   , :006F1403   , :006F1685   
|:006F1690   , :006F169B   , :006F1799   , :006F17BB   , :006F17EE   
|:006F189A   , :006F193F   , :006F1A0C   , :006F1BA7   , :006F1BE0   
|:006F1BEB   , :006F1C24   , :006F1C5D   , :006F1C98   , :006F1D34   
|:006F1E77   , :006F1EB7   , :006F1EFA   , :006F1F3A   , :006F2624   
|:006F265D   , :006F2696   , :006F26A1   , :006F26DA   , :006F2715   
|:006F2752   , :006F278F   , :006F27CC   , :006F27F0   , :006F289F   
|:006F28C1   , :006F2916   , :006F2943   , :006F297C   , :006F29B5   
|:006F29D7   , :006F29E2   , :006F2A1B   , :006F2A58   , :006F2A95   
|:006F2AB9   , :006F2ADD   , :006F2B01   , :006F2B25   , :006F2C30   
|:006F2C52   , :006F2CA7   , :006F2CD4   , :006F2D0D   , :006F2D46   
|:006F2D68   , :006F2D8A   , :006F2DAC   , :006F2E74   , :006F2E96   
|:006F2EEB   , :006F2F18   , :006F2F51   , :006F2F8A   , :006F2FAC   
|:006F2FB7   , :006F2FF0   , :006F302D   , :006F306A   , :006F308E   
|:006F30B2   , :006F30D6   , :006F30FA   , :006F3205   , :006F3227   
|:006F327C   , :006F32B7   , :006F32F0   , :006F3329   , :006F335A   
|:006F345D   , :006F3496   , :006F34D9   , :006F3541   , :006F3583   
|:006F35D8   , :006F3613   , :006F364E   , :006F3689   , :006F36C6   
|:006F3703   , :006F3740   , :006F3767   , :006F37B5   , :006F37D8   
|:006F3A00   , :006F3A22   , :006F3A77   , :006F3AC5   , :006F3B07   
|:006F3B49   , :006F3B85   , :006F3C8E   , :006F3CB0   , :006F3CF3   
|:006F40A2   , :006F40E3   , :006F411C   , :006F4155   , :006F4209   
|:006F4266   , :006F4369   , :006F438B   , :006F43FE   , :006F4475   
|:006F44EE   , :006F456D   , :006F45EC   , :006F4737   , :006F4770   
|:006F47A9   , :006F47B4   , :006F47D6   , :006F47F8   , :006F481A   
|:006F4853   , :006F49B5   , :006F4A24   , :006F4ACF   , :006F4AE4   
|:006F4AFC   , :006F4B0A   , :006F4B2E   , :006F4B59   , :006F4BA1   
|:006F4BCC   , :006F4BF4   , :006F4C1F   , :006F4C4A   , :006F4CA3   
|:006F4CCD   , :006F4CFA   , :006F4D27   , :006F4D54   , :006F4D81   
|:006F4DAE   , :006F4DDB   , :006F4E08   , :006F4E35   , :006F4E62   
|:006F4E8F   , :006F4EB9   , :006F4EE3   , :006F58F0   , :006F5995   
|:006F59B0   , :006F5B0F   , :006F5BF4   , :006F5C99   , :006F5CAE   
|:006F5D3B   , :006F5D50   , :006F5DB0   , :006F5E3D   , :006F5E52   
|:006F5EDF   , :006F5EF4   , :006F5F5F   , :006F5F74   , :006F6019   
|:006F602E   , :006F60BB   , :006F60D0   , :006F615D   , :006F6172   
|:006F61D2   , :006F6232   , :006F6292   , :006F62F2   , :006F635A   
|:006F63DC   , :006F6452   , :006F6467   , :006F64D2   , :006F64E7   
|:006F654A   , :006F655F   , :006F659D   , :006F6625   , :006F6663   
|:006F670B   , :006F67C5   , :006F6877   , :006F695F   , :006F69FF   
|:006F6A14   , :006F6AB4   , :006F6B33   , :006F6BC0   , :006F6BD5   
|:006F6C4D   , :006F6CF2   , :006F6D29   , :006F6D67   , :006F6DF4   
|:006F6E09   , :006F6E69   , :006F6F0B   , :006F6F83   , :006F700D   
|:006F704B   , :006F70B3   , :006F7143   , :006F7181   , :006F720E   
|:006F7223   , :006F7238   , :006F72A0   , :006F7303   , :006F7318   
|:006F738D   , :006F73A2   , :006F741A   , :006F747D   , :006F7492   
|:006F7AB4   , :006F7AC9   , :006F7ADE   , :006F7B3E   , :006F7BF8   
|:006F7C88   , :006F7C9D   , :006F7D08   , :006F7D1D   , :006F7DBE   
|:006F7E25   , :006F7EC6   , :006F7F2D   , :006F7FFB   , :006F807A   
|:006F8165   , :006F81CC   , :006F824C   , :006F834A   , :006F83C9   
|:006F845E   , :006F8473   , :006F859B   , :006F860A   , :006F866D   
|:006F86BC   , :006F87F4   , :006F88BB   , :006F890B   , :006F8973   
|:006F8C44   , :006F8C7D   , :006F8CB6   , :006F8CEF   , :006F8D2A   
|:006F8D67   , :006F8DA4   , :006F8DE1   , :006F8E1E   , :006F8E5B   
|:006F8E70   , :006F8E7B   , :006F8E90   , :006F8ECD   , :006F8F0E   
|:006F8F53   , :006F8F7D   , :006F8FE0   , :006F905A   , :006F9093   
|:006F90D0   , :006F9133   , :006F916C   , :006F91A5   , :006F91B0   
|:006F91D2   , :006F9223   , :006F9264   , :006F92C7   , :006F9322   
|:006F935B   , :006F9394   , :006F93CD   , :006F9408   , :006F9445   
|:006F9482   , :006F94BF   , :006F94FC   , :006F9507   , :006F9544   
|:006F9581   , :006F95BE   , :006F95D3   , :006F95E8   , :006F962D   
|:006F966E   , :006F96E8   , :006F9739   , :006F9772   , :006F979C   
|:006F9A2A   , :006F9CF7   , :006F9D4E   , :006FA101   , :006FA126   
|:006FB116   , :006FB131   , :006FB14C   , :006FB17F   , :006FB18A   
|:006FB1C3   , :006FB634   , :006FB647   , :006FB6C0   , :006FB7A0   
|:006FB7AB   , :006FB7B6   , :006FB7C1   , :006FB878   , :006FB88D   
|:006FB8DD   , :006FB8FF   , :006FB94F   , :006FB99F   , :006FB9F5   
|:006FBA4B   , :006FBAAB   , :006FBAC0   , :006FBAD5   , :006FBAF2   
|:006FBB17   , :006FBC85   , :006FBCA7   , :006FBCF7   , :006FBD47   
|:006FBD9D   , :006FBDF3   , :006FBE83   , :006FBEA8   , :006FBF41   
|:006FBF63   , :006FBFB3   , :006FC003   , :006FC061   , :006FC0C9   
|:006FC0FE   , :006FC133   , :006FC160   , :006FC201   , :006FC216   
|:006FC251   , :006FC2E0   , :006FC30B   , :006FC3EB   , :006FC4CB   
|:006FC4D6   , :006FC4E1   , :006FC4EC   , :006FC5B5   , :006FC5CA   
|:006FC5DD   , :006FC77E   , :006FC789   , :006FC7DC   , :006FCA1C   
|:006FCA27   , :006FCA42   , :006FCABB   , :006FCB02   , :006FCB15   
|:006FCBF0   , :006FCBFB   , :006FCC06   , :006FCC31   , :006FCCAA   
|:006FCF86   , :006FD164   , :006FD181   , :006FD1AE   , :006FD1DB   
|:006FD210   , :006FD378   , :006FD39B   , :006FD51E   , :006FD54B   
|:006FD578   , :006FD5AD   , :006FD5E2   , :006FD6B4   , :006FD6D7   
|:006FD966   , :006FDC94   , :006FDCAF   , :006FDD1C   , :006FDD41   
|:006FDDB6   , :006FDE04   , :006FDF50   , :006FDFBF   , :006FE068   
|:006FE284   , :006FE2A4   , :006FF138   , :006FF2EE   , :006FF47C   
|:006FF487   , :006FF4A9   , :006FF4F4   , :006FF4FF   , :006FF521   
|:006FF5A0   , :006FF5CB   , :006FF607   , :006FF633   , :006FF6CF   
|:006FF79C   , :006FF7F3   , :006FF808   , :006FF83E   , :006FF860   
|:006FF86B   , :006FF8E2   , :006FF904   , :006FF926   , :006FF948   
|:006FF96A   , :006FF98C   , :006FF9AE   , :006FF9E9   , :006FFA54   
|:006FFA67   , :006FFCA8   , :006FFCB3   , :006FFDAA   , :00700304   
|:00700375   , :007003CC   , :007004D6   , :00701444   , :0070147C   
|:00701519   , :007015B3   , :00701A9A   , :00701ABC   , :00701B61   
|:00701B83   , :00701B9E   , :00701BDF   , :00701BEA   , :00701D86   
|:00701F44   , :00701FF4   , :007020D4   , :007021F4   , :00702574   
|:007025C4   , :00702614   , :00702974   , :00702A58   , :00702A6D   
|:00702FA2   , :00702FCB   , :00703131   , :00703184   , :00703244   
|:00703270   , :007032AB   , :007036D8   , :0070375F   , :00703781   
|:007037A3   , :007039CB   , :00703ADC   , :00703B07   , :00703B4F   
|:00703B7A   , :00703BA5   , :00703BD0   , :00703BFB   , :00703C1F   
|:00703C68   , :00703CAE   , :00703D67   , :00703D92   , :00703DA0   
|:00703DCB   , :00703DF6   , :00703E1E   , :00703E66   , :00703EB0   
|:00703EFC   , :00703F48   , :00703F94   , :00703FE0   , :0070402C   
|:007040E1   , :00704207   , :00704481   , :0070449E   , :007045F5   
|:00704600   , :00704734   , :00704757   , :00704806   , :007048AF   
|:00704934   , :0070498D   , :00704A2A   , :00704AF0   , :00704B1F   
|:00704B4E   , :00704B8F   , :00704BB2   , :00704BF7   , :00704C1A   
|:00704D24   , :00704E58   , :00704E7A   , :00704E9C   , :00704ED5   
|:00704F0E   , :00704F19   , :00704F54   , :00704F91   , :00704FCE   
|:0070501A   , :0070503E   , :007052F4   , :0070534C   , :00705676   
|:007056A5   , :00705911   , :007059C5   , :00705A26   , :00705A8C   
|:00705B94   , :00705C44   , :00705D34   , :00705ECE   , :00705EE3   
|:00705EF8   , :00705F0D   , :00705F22   , :00705F2D   , :00705F44   
|:00705FA4   , :00705FC4   , :0070630E   , :00706598   , :00706614   
|:00706656   , :0070666B   , :007066B4   , :007066EA   , :0070676C   
|:007067B4   , :00706814   , :007068B7   , :00706A07   , :00706A8B   
|:00706CE4   , :00706CF7   , :00706D38   , :00706D5E   , :00706FD7   
|:00706FEC   , :0070707B   , :007070C4   , :007070CF   , :007071D2   
|:007072F6   , :00707374   , :007074A4   , :00707510   , :00707536   
|:007075A8   , :007075CE   , :00707658   , :00707663   , :00707794   
|:00707804   , :00707944   , :0070794F   , :00707964   , :0070796F   
|:0070797A   , :00707985   , :00707990   , :0070799B   , :007079B0   
|:007079BB   , :007079D0   , :007079DB   , :007079F0   , :007079FB   
|:00707A6D   , :00707AB5   , :00707AFD   , :00707BED   , :00707C35   
|:00707C7D   
|
:00401010 8B442404                mov eax, dword ptr [esp+04]
:00401014 50                      push eax
:00401015 E8E6021E00              call 005E1300
:0040101A 59                      pop ecx
:0040101B C3                      ret


:0040101C 90                      nop
:0040101D 90                      nop
:0040101E 90                      nop
:0040101F 90                      nop
:00401020 8A0DA8D47A00            mov cl, byte ptr [007AD4A8]
:00401026 B001                    mov al, 01
:00401028 84C8                    test al, cl
:0040102A 7508                    jne 00401034
:0040102C 0AC8                    or cl, al
:0040102E 880DA8D47A00            mov byte ptr [007AD4A8], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040102A(C)
|
:00401034 E907000000              jmp 00401040
:00401039 90                      nop
:0040103A 90                      nop
:0040103B 90                      nop
:0040103C 90                      nop
:0040103D 90                      nop
:0040103E 90                      nop
:0040103F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401034(U)
|
:00401040 6880104000              push 00401080
:00401045 E813D42B00              call 006BE45D
:0040104A 59                      pop ecx
:0040104B C3                      ret


:0040104C 90                      nop
:0040104D 90                      nop
:0040104E 90                      nop
:0040104F 90                      nop
:00401050 E90B000000              jmp 00401060
:00401055 90                      nop
:00401056 90                      nop
:00401057 90                      nop
:00401058 90                      nop
:00401059 90                      nop
:0040105A 90                      nop
:0040105B 90                      nop
:0040105C 90                      nop
:0040105D 90                      nop
:0040105E 90                      nop
:0040105F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401050(U)
|
:00401060 D90560837000            fld dword ptr [00708360]
:00401066 D8355C837000            fdiv dword ptr [0070835C]
:0040106C D91DB0977A00            fstp dword ptr [007A97B0]
:00401072 C3                      ret


:00401073 90                      nop
:00401074 90                      nop
:00401075 90                      nop
:00401076 90                      nop
:00401077 90                      nop
:00401078 90                      nop
:00401079 90                      nop
:0040107A 90                      nop
:0040107B 90                      nop
:0040107C 90                      nop
:0040107D 90                      nop
:0040107E 90                      nop
:0040107F 90                      nop
:00401080 C3                      ret


:00401081 90                      nop
:00401082 90                      nop
:00401083 90                      nop
:00401084 90                      nop
:00401085 90                      nop
:00401086 90                      nop
:00401087 90                      nop
:00401088 90                      nop
:00401089 90                      nop
:0040108A 90                      nop
:0040108B 90                      nop
:0040108C 90                      nop
:0040108D 90                      nop
:0040108E 90                      nop
:0040108F 90                      nop
:00401090 E80B000000              call 004010A0
:00401095 E916000000              jmp 004010B0
:0040109A 90                      nop
:0040109B 90                      nop
:0040109C 90                      nop
:0040109D 90                      nop
:0040109E 90                      nop
:0040109F 90                      nop

* Referenced by a CALL at Address:
|:00401090   
|

* Possible StringData Ref from Data Obj ->"MinimapDraw"
                                  |
:004010A0 68D0AF7800              push 0078AFD0
:004010A5 B9B8977A00              mov ecx, 007A97B8
:004010AA E861041E00              call 005E1510
:004010AF C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401095(U)
|
:004010B0 68C0104000              push 004010C0
:004010B5 E8A3D32B00              call 006BE45D
:004010BA 59                      pop ecx
:004010BB C3                      ret


:004010BC 90                      nop
:004010BD 90                      nop
:004010BE 90                      nop
:004010BF 90                      nop
:004010C0 B9B8977A00              mov ecx, 007A97B8
:004010C5 E9A61C0000              jmp 00402D70
:004010CA 90                      nop
:004010CB 90                      nop
:004010CC 90                      nop
:004010CD 90                      nop
:004010CE 90                      nop
:004010CF 90                      nop
:004010D0 83EC54                  sub esp, 00000054
:004010D3 53                      push ebx
:004010D4 55                      push ebp
:004010D5 56                      push esi
:004010D6 8BF1                    mov esi, ecx
:004010D8 57                      push edi
:004010D9 8B7C2468                mov edi, dword ptr [esp+68]
:004010DD 8A4605                  mov al, byte ptr [esi+05]
:004010E0 84C0                    test al, al
:004010E2 750D                    jne 004010F1
:004010E4 F6470201                test [edi+02], 01
:004010E8 7407                    je 004010F1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040110D(C), :00401176(C), :0040117F(C), :00401188(C), :00401191(C)
|:004011A0(C), :004011AD(C), :00401244(C), :00401252(C), :00401260(C)
|:0040126D(C), :0040127B(C)
|
:004010EA 32C0                    xor al, al
:004010EC E918020000              jmp 00401309

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004010E2(C), :004010E8(C)
|
:004010F1 8A4604                  mov al, byte ptr [esi+04]
:004010F4 84C0                    test al, al
:004010F6 750D                    jne 00401105
:004010F8 F6470308                test [edi+03], 08
:004010FC 7407                    je 00401105
:004010FE 32C0                    xor al, al
:00401100 E904020000              jmp 00401309

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004010F6(C), :004010FC(C)
|
:00401105 8B4637                  mov eax, dword ptr [esi+37]
:00401108 8B4F3D                  mov ecx, dword ptr [edi+3D]
:0040110B 3BC8                    cmp ecx, eax
:0040110D 74DB                    je 004010EA
:0040110F 8A4F02                  mov cl, byte ptr [edi+02]
:00401112 89473D                  mov dword ptr [edi+3D], eax
:00401115 F6C104                  test cl, 04
:00401118 8D4704                  lea eax, dword ptr [edi+04]
:0040111B 0F8414010000            je 00401235
:00401121 8A4E05                  mov cl, byte ptr [esi+05]
:00401124 84C9                    test cl, cl
:00401126 0F8509010000            jne 00401235
:0040112C 8B5008                  mov edx, dword ptr [eax+08]
:0040112F 8B28                    mov ebp, dword ptr [eax]
:00401131 8B580C                  mov ebx, dword ptr [eax+0C]
:00401134 8B4804                  mov ecx, dword ptr [eax+04]
:00401137 89542424                mov dword ptr [esp+24], edx
:0040113B 8B5014                  mov edx, dword ptr [eax+14]
:0040113E 8B4010                  mov eax, dword ptr [eax+10]
:00401141 89542430                mov dword ptr [esp+30], edx
:00401145 2BC1                    sub eax, ecx
:00401147 896C241C                mov dword ptr [esp+1C], ebp
:0040114B 895C2428                mov dword ptr [esp+28], ebx
:0040114F 894C2420                mov dword ptr [esp+20], ecx
:00401153 8D1480                  lea edx, dword ptr [eax+4*eax]
:00401156 B8ABAAAA2A              mov eax, 2AAAAAAB
:0040115B F7EA                    imul edx
:0040115D D1FA                    sar edx, 1
:0040115F 8BC2                    mov eax, edx
:00401161 C1E81F                  shr eax, 1F
:00401164 03D0                    add edx, eax
:00401166 8A463B                  mov al, byte ptr [esi+3B]
:00401169 03D1                    add edx, ecx
:0040116B 84C0                    test al, al
:0040116D 8954242C                mov dword ptr [esp+2C], edx
:00401171 7447                    je 004011BA
:00401173 3B560B                  cmp edx, dword ptr [esi+0B]
:00401176 0F8E6EFFFFFF            jle 004010EA
:0040117C 3B4E17                  cmp ecx, dword ptr [esi+17]
:0040117F 0F8D65FFFFFF            jnl 004010EA
:00401185 3B5E07                  cmp ebx, dword ptr [esi+07]
:00401188 0F8E5CFFFFFF            jle 004010EA
:0040118E 3B6E13                  cmp ebp, dword ptr [esi+13]
:00401191 0F8D53FFFFFF            jnl 004010EA
:00401197 8B4C2430                mov ecx, dword ptr [esp+30]
:0040119B 8B460F                  mov eax, dword ptr [esi+0F]
:0040119E 3BC8                    cmp ecx, eax
:004011A0 0F8E44FFFFFF            jle 004010EA
:004011A6 8B542424                mov edx, dword ptr [esp+24]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401284(U)
|
:004011AA 3B561B                  cmp edx, dword ptr [esi+1B]
:004011AD 0F8D37FFFFFF            jnl 004010EA
:004011B3 B001                    mov al, 01
:004011B5 E94F010000              jmp 00401309

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401171(C)
|
:004011BA 8D461F                  lea eax, dword ptr [esi+1F]
:004011BD 8BC8                    mov ecx, eax
:004011BF 83C00C                  add eax, 0000000C
:004011C2 8B11                    mov edx, dword ptr [ecx]
:004011C4 89542434                mov dword ptr [esp+34], edx
:004011C8 8B5104                  mov edx, dword ptr [ecx+04]
:004011CB 89542438                mov dword ptr [esp+38], edx
:004011CF 8B10                    mov edx, dword ptr [eax]
:004011D1 8B4908                  mov ecx, dword ptr [ecx+08]
:004011D4 89542440                mov dword ptr [esp+40], edx
:004011D8 894C243C                mov dword ptr [esp+3C], ecx
:004011DC 8B4804                  mov ecx, dword ptr [eax+04]
:004011DF 894C2444                mov dword ptr [esp+44], ecx
:004011E3 8D4C2434                lea ecx, dword ptr [esp+34]
:004011E7 8B5008                  mov edx, dword ptr [eax+08]
:004011EA 8D44241C                lea eax, dword ptr [esp+1C]
:004011EE 50                      push eax
:004011EF 8954244C                mov dword ptr [esp+4C], edx
:004011F3 E858781E00              call 005E8A50
:004011F8 8BD8                    mov ebx, eax
:004011FA 83C00C                  add eax, 0000000C
:004011FD 8BE8                    mov ebp, eax
:004011FF 8B0B                    mov ecx, dword ptr [ebx]
:00401201 8B4500                  mov eax, dword ptr [ebp+00]
:00401204 8B5304                  mov edx, dword ptr [ebx+04]
:00401207 89442458                mov dword ptr [esp+58], eax
:0040120B 8B4504                  mov eax, dword ptr [ebp+04]
:0040120E 8B5B08                  mov ebx, dword ptr [ebx+08]
:00401211 8B6D08                  mov ebp, dword ptr [ebp+08]
:00401214 85C9                    test ecx, ecx
:00401216 0F85E6000000            jne 00401302
:0040121C 85D2                    test edx, edx
:0040121E 0F85DE000000            jne 00401302
:00401224 85DB                    test ebx, ebx
:00401226 0F85D6000000            jne 00401302
:0040122C 8B4C2458                mov ecx, dword ptr [esp+58]
:00401230 E9BA000000              jmp 004012EF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040111B(C), :00401126(C)
|
:00401235 8A4E3B                  mov cl, byte ptr [esi+3B]
:00401238 84C9                    test cl, cl
:0040123A 744D                    je 00401289
:0040123C 8B4810                  mov ecx, dword ptr [eax+10]
:0040123F 8B560B                  mov edx, dword ptr [esi+0B]
:00401242 3BCA                    cmp ecx, edx
:00401244 0F8EA0FEFFFF            jle 004010EA
:0040124A 8B5004                  mov edx, dword ptr [eax+04]
:0040124D 8B4E17                  mov ecx, dword ptr [esi+17]
:00401250 3BD1                    cmp edx, ecx
:00401252 0F8D92FEFFFF            jnl 004010EA
:00401258 8B480C                  mov ecx, dword ptr [eax+0C]
:0040125B 8B5607                  mov edx, dword ptr [esi+07]
:0040125E 3BCA                    cmp ecx, edx
:00401260 0F8E84FEFFFF            jle 004010EA
:00401266 8B10                    mov edx, dword ptr [eax]
:00401268 8B4E13                  mov ecx, dword ptr [esi+13]
:0040126B 3BD1                    cmp edx, ecx
:0040126D 0F8D77FEFFFF            jnl 004010EA
:00401273 8B4814                  mov ecx, dword ptr [eax+14]
:00401276 8B560F                  mov edx, dword ptr [esi+0F]
:00401279 3BCA                    cmp ecx, edx
:0040127B 0F8E69FEFFFF            jle 004010EA
:00401281 8B5008                  mov edx, dword ptr [eax+08]
:00401284 E921FFFFFF              jmp 004011AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040123A(C)
|
:00401289 8D4E1F                  lea ecx, dword ptr [esi+1F]
:0040128C 50                      push eax
:0040128D 8BD1                    mov edx, ecx
:0040128F 83C10C                  add ecx, 0000000C
:00401292 8B1A                    mov ebx, dword ptr [edx]
:00401294 895C2438                mov dword ptr [esp+38], ebx
:00401298 8B5A04                  mov ebx, dword ptr [edx+04]
:0040129B 895C243C                mov dword ptr [esp+3C], ebx
:0040129F 8B5208                  mov edx, dword ptr [edx+08]
:004012A2 89542440                mov dword ptr [esp+40], edx
:004012A6 8B11                    mov edx, dword ptr [ecx]
:004012A8 89542444                mov dword ptr [esp+44], edx
:004012AC 8B5104                  mov edx, dword ptr [ecx+04]
:004012AF 89542448                mov dword ptr [esp+48], edx
:004012B3 8B4908                  mov ecx, dword ptr [ecx+08]
:004012B6 894C244C                mov dword ptr [esp+4C], ecx
:004012BA 8D4C2438                lea ecx, dword ptr [esp+38]
:004012BE E88D771E00              call 005E8A50
:004012C3 8BD8                    mov ebx, eax
:004012C5 83C00C                  add eax, 0000000C
:004012C8 8BE8                    mov ebp, eax
:004012CA 8B0B                    mov ecx, dword ptr [ebx]
:004012CC 8B4500                  mov eax, dword ptr [ebp+00]
:004012CF 8B5304                  mov edx, dword ptr [ebx+04]
:004012D2 89442458                mov dword ptr [esp+58], eax
:004012D6 8B4504                  mov eax, dword ptr [ebp+04]
:004012D9 8B5B08                  mov ebx, dword ptr [ebx+08]
:004012DC 8B6D08                  mov ebp, dword ptr [ebp+08]
:004012DF 85C9                    test ecx, ecx
:004012E1 751F                    jne 00401302
:004012E3 85D2                    test edx, edx
:004012E5 751B                    jne 00401302
:004012E7 85DB                    test ebx, ebx
:004012E9 7517                    jne 00401302
:004012EB 8B4C2458                mov ecx, dword ptr [esp+58]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401230(U)
|
:004012EF 85C9                    test ecx, ecx
:004012F1 750F                    jne 00401302
:004012F3 85C0                    test eax, eax
:004012F5 750B                    jne 00401302
:004012F7 85ED                    test ebp, ebp
:004012F9 7507                    jne 00401302
:004012FB B801000000              mov eax, 00000001
:00401300 EB02                    jmp 00401304

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401216(C), :0040121E(C), :00401226(C), :004012E1(C), :004012E5(C)
|:004012E9(C), :004012F1(C), :004012F5(C), :004012F9(C)
|
:00401302 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401300(U)
|
:00401304 84C0                    test al, al
:00401306 0F94C0                  sete al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004010EC(U), :00401100(U), :004011B5(U)
|
:00401309 F6473801                test [edi+38], 01
:0040130D 0F842F030000            je 00401642
:00401313 84C0                    test al, al
:00401315 0F8427030000            je 00401642
:0040131B 668B07                  mov ax, word ptr [edi]
:0040131E 8B6E48                  mov ebp, dword ptr [esi+48]
:00401321 6685C0                  test ax, ax
:00401324 763B                    jbe 00401361
:00401326 8B8DF5010000            mov ecx, dword ptr [ebp+000001F5]
:0040132C 8B95F1010000            mov edx, dword ptr [ebp+000001F1]
:00401332 8BD8                    mov ebx, eax
:00401334 2BCA                    sub ecx, edx
:00401336 81E3FFFF0000            and ebx, 0000FFFF
:0040133C C1F902                  sar ecx, 02
:0040133F 3BD9                    cmp ebx, ecx
:00401341 731E                    jnb 00401361
:00401343 8B0C9A                  mov ecx, dword ptr [edx+4*ebx]
:00401346 85C9                    test ecx, ecx
:00401348 7404                    je 0040134E
:0040134A 8BD9                    mov ebx, ecx
:0040134C EB15                    jmp 00401363

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401348(C)
|
:0040134E 50                      push eax
:0040134F 8BCD                    mov ecx, ebp
:00401351 E89A451E00              call 005E58F0
:00401356 8B85F1010000            mov eax, dword ptr [ebp+000001F1]
:0040135C 8B1C98                  mov ebx, dword ptr [eax+4*ebx]
:0040135F EB02                    jmp 00401363

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401324(C), :00401341(C)
|
:00401361 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040134C(U), :0040135F(U)
|
:00401363 807B2501                cmp byte ptr [ebx+25], 01
:00401367 0F84D5020000            je 00401642
:0040136D 8A4738                  mov al, byte ptr [edi+38]
:00401370 8B6E48                  mov ebp, dword ptr [esi+48]
:00401373 A801                    test al, 01
:00401375 7454                    je 004013CB
:00401377 668B07                  mov ax, word ptr [edi]
:0040137A 6685C0                  test ax, ax
:0040137D 763B                    jbe 004013BA
:0040137F 8B8DF5010000            mov ecx, dword ptr [ebp+000001F5]
:00401385 8B95F1010000            mov edx, dword ptr [ebp+000001F1]
:0040138B 8BD8                    mov ebx, eax
:0040138D 2BCA                    sub ecx, edx
:0040138F 81E3FFFF0000            and ebx, 0000FFFF
:00401395 C1F902                  sar ecx, 02
:00401398 3BD9                    cmp ebx, ecx
:0040139A 731E                    jnb 004013BA
:0040139C 8B0C9A                  mov ecx, dword ptr [edx+4*ebx]
:0040139F 85C9                    test ecx, ecx
:004013A1 7404                    je 004013A7
:004013A3 8BD9                    mov ebx, ecx
:004013A5 EB15                    jmp 004013BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004013A1(C)
|
:004013A7 50                      push eax
:004013A8 8BCD                    mov ecx, ebp
:004013AA E841451E00              call 005E58F0
:004013AF 8B85F1010000            mov eax, dword ptr [ebp+000001F1]
:004013B5 8B1C98                  mov ebx, dword ptr [eax+4*ebx]
:004013B8 EB02                    jmp 004013BC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040137D(C), :0040139A(C)
|
:004013BA 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004013A5(U), :004013B8(U)
|
:004013BC 8A4325                  mov al, byte ptr [ebx+25]
:004013BF 84C0                    test al, al
:004013C1 7508                    jne 004013CB
:004013C3 8B0DFCB47A00            mov ecx, dword ptr [007AB4FC]
:004013C9 EB78                    jmp 00401443

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401375(C), :004013C1(C)
|
:004013CB 8A4738                  mov al, byte ptr [edi+38]
:004013CE 8B6E48                  mov ebp, dword ptr [esi+48]
:004013D1 A801                    test al, 01
:004013D3 7456                    je 0040142B
:004013D5 668B07                  mov ax, word ptr [edi]
:004013D8 6685C0                  test ax, ax
:004013DB 763B                    jbe 00401418
:004013DD 8B95F5010000            mov edx, dword ptr [ebp+000001F5]
:004013E3 8B8DF1010000            mov ecx, dword ptr [ebp+000001F1]
:004013E9 8BD8                    mov ebx, eax
:004013EB 2BD1                    sub edx, ecx
:004013ED 81E3FFFF0000            and ebx, 0000FFFF
:004013F3 C1FA02                  sar edx, 02
:004013F6 3BDA                    cmp ebx, edx
:004013F8 731E                    jnb 00401418
:004013FA 8B0C99                  mov ecx, dword ptr [ecx+4*ebx]
:004013FD 85C9                    test ecx, ecx
:004013FF 7404                    je 00401405
:00401401 8BD9                    mov ebx, ecx
:00401403 EB15                    jmp 0040141A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004013FF(C)
|
:00401405 50                      push eax
:00401406 8BCD                    mov ecx, ebp
:00401408 E8E3441E00              call 005E58F0
:0040140D 8B95F1010000            mov edx, dword ptr [ebp+000001F1]
:00401413 8B1C9A                  mov ebx, dword ptr [edx+4*ebx]
:00401416 EB02                    jmp 0040141A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004013DB(C), :004013F8(C)
|
:00401418 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401403(U), :00401416(U)
|
:0040141A 807B2503                cmp byte ptr [ebx+25], 03
:0040141E 750B                    jne 0040142B
:00401420 A104B57A00              mov eax, dword ptr [007AB504]
:00401425 89442468                mov dword ptr [esp+68], eax
:00401429 EB1C                    jmp 00401447

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004013D3(C), :0040141E(C)
|
:0040142B C644246800              mov [esp+68], 00
:00401430 C644246964              mov [esp+69], 64
:00401435 C644246A00              mov [esp+6A], 00
:0040143A C644246BFF              mov [esp+6B], FF
:0040143F 8B4C2468                mov ecx, dword ptr [esp+68]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004013C9(U)
|
:00401443 894C2468                mov dword ptr [esp+68], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401429(U)
|
:00401447 A0F8977A00              mov al, byte ptr [007A97F8]
:0040144C A801                    test al, 01
:0040144E 7524                    jne 00401474
:00401450 8AD8                    mov bl, al
:00401452 6A04                    push 00000004
:00401454 80CB01                  or bl, 01
:00401457 B9E8977A00              mov ecx, 007A97E8
:0040145C 881DF8977A00            mov byte ptr [007A97F8], bl
:00401462 E8791F0000              call 004033E0
:00401467 6850164000              push 00401650
:0040146C E8ECCF2B00              call 006BE45D
:00401471 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040144E(C)
|
:00401474 8B5704                  mov edx, dword ptr [edi+04]
:00401477 8B470C                  mov eax, dword ptr [edi+0C]
:0040147A 8B4E4C                  mov ecx, dword ptr [esi+4C]
:0040147D 8954241C                mov dword ptr [esp+1C], edx
:00401481 89442424                mov dword ptr [esp+24], eax
:00401485 8D54241C                lea edx, dword ptr [esp+1C]
:00401489 8D442414                lea eax, dword ptr [esp+14]
:0040148D 894C2410                mov dword ptr [esp+10], ecx
:00401491 8B4E50                  mov ecx, dword ptr [esi+50]
:00401494 52                      push edx
:00401495 50                      push eax
:00401496 C744242800000000        mov [esp+28], 00000000
:0040149E E84D2C1E00              call 005E40F0
:004014A3 DB442414                fild dword ptr [esp+14]
:004014A7 D84C2410                fmul dword ptr [esp+10]
:004014AB D80578837000            fadd dword ptr [00708378]
:004014B1 E8DAD42B00              call 006BE990
:004014B6 DB442418                fild dword ptr [esp+18]
:004014BA 8BE8                    mov ebp, eax
:004014BC D84C2410                fmul dword ptr [esp+10]
:004014C0 D80578837000            fadd dword ptr [00708378]
:004014C6 E8C5D42B00              call 006BE990
:004014CB 8B5644                  mov edx, dword ptr [esi+44]
:004014CE 8B4E40                  mov ecx, dword ptr [esi+40]
:004014D1 03D0                    add edx, eax
:004014D3 A1E8977A00              mov eax, dword ptr [007A97E8]
:004014D8 03CD                    add ecx, ebp
:004014DA 33DB                    xor ebx, ebx
:004014DC 8908                    mov dword ptr [eax], ecx
:004014DE 895004                  mov dword ptr [eax+04], edx
:004014E1 8B4F04                  mov ecx, dword ptr [edi+04]
:004014E4 8B5718                  mov edx, dword ptr [edi+18]
:004014E7 8B464C                  mov eax, dword ptr [esi+4C]
:004014EA 894C241C                mov dword ptr [esp+1C], ecx
:004014EE 89542424                mov dword ptr [esp+24], edx
:004014F2 8D4C241C                lea ecx, dword ptr [esp+1C]
:004014F6 8D542414                lea edx, dword ptr [esp+14]
:004014FA 51                      push ecx
:004014FB 8B4E50                  mov ecx, dword ptr [esi+50]
:004014FE 52                      push edx
:004014FF 895C2428                mov dword ptr [esp+28], ebx
:00401503 89442418                mov dword ptr [esp+18], eax
:00401507 E8E42B1E00              call 005E40F0
:0040150C DB442414                fild dword ptr [esp+14]
:00401510 D84C2410                fmul dword ptr [esp+10]
:00401514 D80578837000            fadd dword ptr [00708378]
:0040151A E871D42B00              call 006BE990
:0040151F DB442418                fild dword ptr [esp+18]
:00401523 8BE8                    mov ebp, eax
:00401525 D84C2410                fmul dword ptr [esp+10]
:00401529 D80578837000            fadd dword ptr [00708378]
:0040152F E85CD42B00              call 006BE990
:00401534 8B5644                  mov edx, dword ptr [esi+44]
:00401537 8B4E40                  mov ecx, dword ptr [esi+40]
:0040153A 03D0                    add edx, eax
:0040153C A1E8977A00              mov eax, dword ptr [007A97E8]
:00401541 03CD                    add ecx, ebp
:00401543 894808                  mov dword ptr [eax+08], ecx
:00401546 8B0DE8977A00            mov ecx, dword ptr [007A97E8]
:0040154C 89510C                  mov dword ptr [ecx+0C], edx
:0040154F 8B5710                  mov edx, dword ptr [edi+10]
:00401552 8B4718                  mov eax, dword ptr [edi+18]
:00401555 8B4E4C                  mov ecx, dword ptr [esi+4C]
:00401558 8954241C                mov dword ptr [esp+1C], edx
:0040155C 89442424                mov dword ptr [esp+24], eax
:00401560 8D54241C                lea edx, dword ptr [esp+1C]
:00401564 8D442414                lea eax, dword ptr [esp+14]
:00401568 894C2410                mov dword ptr [esp+10], ecx
:0040156C 8B4E50                  mov ecx, dword ptr [esi+50]
:0040156F 52                      push edx
:00401570 50                      push eax
:00401571 895C2428                mov dword ptr [esp+28], ebx
:00401575 E8762B1E00              call 005E40F0
:0040157A DB442414                fild dword ptr [esp+14]
:0040157E D84C2410                fmul dword ptr [esp+10]
:00401582 D80578837000            fadd dword ptr [00708378]
:00401588 E803D42B00              call 006BE990
:0040158D DB442418                fild dword ptr [esp+18]
:00401591 8BE8                    mov ebp, eax
:00401593 D84C2410                fmul dword ptr [esp+10]
:00401597 D80578837000            fadd dword ptr [00708378]
:0040159D E8EED32B00              call 006BE990
:004015A2 8B5644                  mov edx, dword ptr [esi+44]
:004015A5 8B4E40                  mov ecx, dword ptr [esi+40]
:004015A8 03D0                    add edx, eax
:004015AA A1E8977A00              mov eax, dword ptr [007A97E8]
:004015AF 03CD                    add ecx, ebp
:004015B1 894810                  mov dword ptr [eax+10], ecx
:004015B4 8B0DE8977A00            mov ecx, dword ptr [007A97E8]
:004015BA 895114                  mov dword ptr [ecx+14], edx
:004015BD 8B5710                  mov edx, dword ptr [edi+10]
:004015C0 8B470C                  mov eax, dword ptr [edi+0C]
:004015C3 8B4E4C                  mov ecx, dword ptr [esi+4C]
:004015C6 8954241C                mov dword ptr [esp+1C], edx
:004015CA 89442424                mov dword ptr [esp+24], eax
:004015CE 8D54241C                lea edx, dword ptr [esp+1C]
:004015D2 8D442414                lea eax, dword ptr [esp+14]
:004015D6 894C2410                mov dword ptr [esp+10], ecx
:004015DA 8B4E50                  mov ecx, dword ptr [esi+50]
:004015DD 52                      push edx
:004015DE 50                      push eax
:004015DF 895C2428                mov dword ptr [esp+28], ebx
:004015E3 E8082B1E00              call 005E40F0
:004015E8 DB442414                fild dword ptr [esp+14]
:004015EC D84C2410                fmul dword ptr [esp+10]
:004015F0 D80578837000            fadd dword ptr [00708378]
:004015F6 E895D32B00              call 006BE990
:004015FB DB442418                fild dword ptr [esp+18]
:004015FF 8BF8                    mov edi, eax
:00401601 D84C2410                fmul dword ptr [esp+10]
:00401605 D80578837000            fadd dword ptr [00708378]
:0040160B E880D32B00              call 006BE990
:00401610 8B5644                  mov edx, dword ptr [esi+44]
:00401613 8B4E40                  mov ecx, dword ptr [esi+40]
:00401616 03D0                    add edx, eax
:00401618 A1E8977A00              mov eax, dword ptr [007A97E8]
:0040161D 03CF                    add ecx, edi
:0040161F 53                      push ebx
:00401620 894818                  mov dword ptr [eax+18], ecx
:00401623 8B0DE8977A00            mov ecx, dword ptr [007A97E8]
:00401629 89511C                  mov dword ptr [ecx+1C], edx
:0040162C 8B463C                  mov eax, dword ptr [esi+3C]
:0040162F 8D54246C                lea edx, dword ptr [esp+6C]
:00401633 52                      push edx
:00401634 68E8977A00              push 007A97E8
:00401639 50                      push eax
:0040163A E811231E00              call 005E3950
:0040163F 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040130D(C), :00401315(C), :00401367(C)
|
:00401642 5F                      pop edi
:00401643 5E                      pop esi
:00401644 5D                      pop ebp
:00401645 5B                      pop ebx
:00401646 83C454                  add esp, 00000054
:00401649 C20400                  ret 0004


:0040164C 90                      nop
:0040164D 90                      nop
:0040164E 90                      nop
:0040164F 90                      nop
:00401650 B9E8977A00              mov ecx, 007A97E8
:00401655 E9561E0000              jmp 004034B0
:0040165A 90                      nop
:0040165B 90                      nop
:0040165C 90                      nop
:0040165D 90                      nop
:0040165E 90                      nop
:0040165F 90                      nop

* Referenced by a CALL at Address:
|:004026B6   
|
:00401660 6AFF                    push FFFFFFFF
:00401662 681CED6C00              push 006CED1C
:00401667 64A100000000            mov eax, dword ptr fs:[00000000]
:0040166D 50                      push eax
:0040166E 64892500000000          mov dword ptr fs:[00000000], esp
:00401675 83EC08                  sub esp, 00000008
:00401678 53                      push ebx
:00401679 55                      push ebp
:0040167A 56                      push esi
:0040167B 57                      push edi
:0040167C 8BF1                    mov esi, ecx
:0040167E 33FF                    xor edi, edi
:00401680 89742414                mov dword ptr [esp+14], esi
:00401684 893E                    mov dword ptr [esi], edi
:00401686 897C2420                mov dword ptr [esp+20], edi
:0040168A 897E04                  mov dword ptr [esi+04], edi
:0040168D 897E08                  mov dword ptr [esi+08], edi
:00401690 897E0C                  mov dword ptr [esi+0C], edi
:00401693 897E10                  mov dword ptr [esi+10], edi
:00401696 B304                    mov bl, 04
:00401698 8D4E41                  lea ecx, dword ptr [esi+41]
:0040169B 885C2420                mov byte ptr [esp+20], bl
:0040169F 66897E3D                mov word ptr [esi+3D], di
:004016A3 66897E3F                mov word ptr [esi+3F], di
:004016A7 E8F4281E00              call 005E3FA0
:004016AC 8D6E19                  lea ebp, dword ptr [esi+19]
:004016AF 33C0                    xor eax, eax
:004016B1 33C9                    xor ecx, ecx
:004016B3 33D2                    xor edx, edx
:004016B5 894500                  mov dword ptr [ebp+00], eax
:004016B8 C74614B81E053E          mov [esi+14], 3E051EB8
:004016BF 894D04                  mov dword ptr [ebp+04], ecx
:004016C2 8D4C2410                lea ecx, dword ptr [esp+10]
:004016C6 895508                  mov dword ptr [ebp+08], edx
:004016C9 A128FE7200              mov eax, dword ptr [0072FE28]
:004016CE 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/misc/mmap/circle1"
                                  |
:004016CF 6858B07800              push 0078B058
:004016D4 E8D7991E00              call 005EB0B0
:004016D9 8D4C2410                lea ecx, dword ptr [esp+10]
:004016DD 57                      push edi
:004016DE 51                      push ecx
:004016DF B928B57A00              mov ecx, 007AB528
:004016E4 C644242805              mov [esp+28], 05
:004016E9 E8B2821E00              call 005E99A0
:004016EE 8B4E08                  mov ecx, dword ptr [esi+08]
:004016F1 894608                  mov dword ptr [esi+08], eax
:004016F4 3BCF                    cmp ecx, edi
:004016F6 7405                    je 004016FD
:004016F8 8B11                    mov edx, dword ptr [ecx]
:004016FA FF5204                  call [edx+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004016F6(C)
|
:004016FD 8B442410                mov eax, dword ptr [esp+10]
:00401701 885C2420                mov byte ptr [esp+20], bl
:00401705 83C0F4                  add eax, FFFFFFF4
:00401708 8B08                    mov ecx, dword ptr [eax]
:0040170A 49                      dec ecx
:0040170B 8908                    mov dword ptr [eax], ecx
:0040170D 7509                    jne 00401718
:0040170F 50                      push eax
:00401710 E8EBFB1D00              call 005E1300
:00401715 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040170D(C)
|
:00401718 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040171E 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/misc/mmap/circle2"
                                  |
:0040171F 6840B07800              push 0078B040
:00401724 8D4C2418                lea ecx, dword ptr [esp+18]
:00401728 E883991E00              call 005EB0B0
:0040172D 8D542410                lea edx, dword ptr [esp+10]
:00401731 57                      push edi
:00401732 52                      push edx
:00401733 B928B57A00              mov ecx, 007AB528
:00401738 C644242806              mov [esp+28], 06
:0040173D E85E821E00              call 005E99A0
:00401742 8B4E0C                  mov ecx, dword ptr [esi+0C]
:00401745 89460C                  mov dword ptr [esi+0C], eax
:00401748 3BCF                    cmp ecx, edi
:0040174A 7405                    je 00401751
:0040174C 8B01                    mov eax, dword ptr [ecx]
:0040174E FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040174A(C)
|
:00401751 8B4C2410                mov ecx, dword ptr [esp+10]
:00401755 885C2420                mov byte ptr [esp+20], bl
:00401759 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040175C 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040175F 49                      dec ecx
:00401760 8908                    mov dword ptr [eax], ecx
:00401762 7509                    jne 0040176D
:00401764 50                      push eax
:00401765 E896FB1D00              call 005E1300
:0040176A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401762(C)
|
:0040176D 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00401773 8D4C2410                lea ecx, dword ptr [esp+10]
:00401777 52                      push edx

* Possible StringData Ref from Data Obj ->"gui/misc/mmap/circle5"
                                  |
:00401778 6828B07800              push 0078B028
:0040177D E82E991E00              call 005EB0B0
:00401782 8D442410                lea eax, dword ptr [esp+10]
:00401786 57                      push edi
:00401787 50                      push eax
:00401788 B928B57A00              mov ecx, 007AB528
:0040178D C644242807              mov [esp+28], 07
:00401792 E809821E00              call 005E99A0
:00401797 8B4E10                  mov ecx, dword ptr [esi+10]
:0040179A 894610                  mov dword ptr [esi+10], eax
:0040179D 3BCF                    cmp ecx, edi
:0040179F 7405                    je 004017A6
:004017A1 8B11                    mov edx, dword ptr [ecx]
:004017A3 FF5204                  call [edx+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040179F(C)
|
:004017A6 8B442410                mov eax, dword ptr [esp+10]
:004017AA 885C2420                mov byte ptr [esp+20], bl
:004017AE 83C0F4                  add eax, FFFFFFF4
:004017B1 8B08                    mov ecx, dword ptr [eax]
:004017B3 49                      dec ecx
:004017B4 8908                    mov dword ptr [eax], ecx
:004017B6 7509                    jne 004017C1
:004017B8 50                      push eax
:004017B9 E842FB1D00              call 005E1300
:004017BE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004017B6(C)
|
:004017C1 8B4C2418                mov ecx, dword ptr [esp+18]
:004017C5 C6461801                mov [esi+18], 01
:004017C9 8BC6                    mov eax, esi
:004017CB 5F                      pop edi
:004017CC 5E                      pop esi
:004017CD 5D                      pop ebp
:004017CE 5B                      pop ebx
:004017CF 64890D00000000          mov dword ptr fs:[00000000], ecx
:004017D6 83C414                  add esp, 00000014
:004017D9 C3                      ret


:004017DA 90                      nop
:004017DB 90                      nop
:004017DC 90                      nop
:004017DD 90                      nop
:004017DE 90                      nop
:004017DF 90                      nop

* Referenced by a CALL at Address:
|:0040333B   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:006CEE91(U)
|
:004017E0 6AFF                    push FFFFFFFF
:004017E2 684FED6C00              push 006CED4F
:004017E7 64A100000000            mov eax, dword ptr fs:[00000000]
:004017ED 50                      push eax
:004017EE 64892500000000          mov dword ptr fs:[00000000], esp
:004017F5 51                      push ecx
:004017F6 56                      push esi
:004017F7 8BF1                    mov esi, ecx
:004017F9 89742404                mov dword ptr [esp+04], esi
:004017FD 8B4E10                  mov ecx, dword ptr [esi+10]
:00401800 C744241003000000        mov [esp+10], 00000003
:00401808 85C9                    test ecx, ecx
:0040180A 7405                    je 00401811
:0040180C 8B01                    mov eax, dword ptr [ecx]
:0040180E FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040180A(C)
|
:00401811 8B4E0C                  mov ecx, dword ptr [esi+0C]
:00401814 C644241002              mov [esp+10], 02
:00401819 85C9                    test ecx, ecx
:0040181B 7405                    je 00401822
:0040181D 8B11                    mov edx, dword ptr [ecx]
:0040181F FF5204                  call [edx+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040181B(C)
|
:00401822 8B4E08                  mov ecx, dword ptr [esi+08]
:00401825 C644241001              mov [esp+10], 01
:0040182A 85C9                    test ecx, ecx
:0040182C 7405                    je 00401833
:0040182E 8B01                    mov eax, dword ptr [ecx]
:00401830 FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040182C(C)
|
:00401833 8B4E04                  mov ecx, dword ptr [esi+04]
:00401836 C644241000              mov [esp+10], 00
:0040183B 85C9                    test ecx, ecx
:0040183D 7405                    je 00401844
:0040183F 8B11                    mov edx, dword ptr [ecx]
:00401841 FF5204                  call [edx+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040183D(C)
|
:00401844 8B0E                    mov ecx, dword ptr [esi]
:00401846 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:0040184E 85C9                    test ecx, ecx
:00401850 5E                      pop esi
:00401851 7405                    je 00401858
:00401853 8B01                    mov eax, dword ptr [ecx]
:00401855 FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401851(C)
|
:00401858 8B4C2404                mov ecx, dword ptr [esp+04]
:0040185C 64890D00000000          mov dword ptr fs:[00000000], ecx
:00401863 83C410                  add esp, 00000010
:00401866 C3                      ret


:00401867 90                      nop
:00401868 90                      nop
:00401869 90                      nop
:0040186A 90                      nop
:0040186B 90                      nop
:0040186C 90                      nop
:0040186D 90                      nop
:0040186E 90                      nop
:0040186F 90                      nop

* Referenced by a CALL at Address:
|:00402B2C   
|
:00401870 8B01                    mov eax, dword ptr [ecx]
:00401872 C3                      ret


:00401873 90                      nop
:00401874 90                      nop
:00401875 90                      nop
:00401876 90                      nop
:00401877 90                      nop
:00401878 90                      nop
:00401879 90                      nop
:0040187A 90                      nop
:0040187B 90                      nop
:0040187C 90                      nop
:0040187D 90                      nop
:0040187E 90                      nop
:0040187F 90                      nop
:00401880 8B01                    mov eax, dword ptr [ecx]
:00401882 8B400C                  mov eax, dword ptr [eax+0C]
:00401885 C3                      ret


:00401886 90                      nop
:00401887 90                      nop
:00401888 90                      nop
:00401889 90                      nop
:0040188A 90                      nop
:0040188B 90                      nop
:0040188C 90                      nop
:0040188D 90                      nop
:0040188E 90                      nop
:0040188F 90                      nop

* Referenced by a CALL at Address:
|:0040290E   
|
:00401890 6AFF                    push FFFFFFFF
:00401892 68AFED6C00              push 006CEDAF
:00401897 64A100000000            mov eax, dword ptr fs:[00000000]
:0040189D 50                      push eax
:0040189E 64892500000000          mov dword ptr fs:[00000000], esp
:004018A5 83EC34                  sub esp, 00000034
:004018A8 55                      push ebp
:004018A9 56                      push esi
:004018AA 57                      push edi
:004018AB 8BF9                    mov edi, ecx
:004018AD 6A3B                    push 0000003B
:004018AF E8CCF91D00              call 005E1280
:004018B4 8BF0                    mov esi, eax
:004018B6 83C404                  add esp, 00000004
:004018B9 8974240C                mov dword ptr [esp+0C], esi
:004018BD 8B6C2450                mov ebp, dword ptr [esp+50]
:004018C1 C744244800000000        mov [esp+48], 00000000
:004018C9 85F6                    test esi, esi
:004018CB 0F8495000000            je 00401966
:004018D1 A188DA7900              mov eax, dword ptr [0079DA88]
:004018D6 C744242494DA7900        mov [esp+24], 0079DA94
:004018DE 40                      inc eax
:004018DF A388DA7900              mov dword ptr [0079DA88], eax
:004018E4 68FF000000              push 000000FF
:004018E9 6800FF0000              push 0000FF00
:004018EE 680000FF00              push 00FF0000
:004018F3 8D4C242C                lea ecx, dword ptr [esp+2C]
:004018F7 C644245401              mov [esp+54], 01
:004018FC C744242C80847000        mov [esp+2C], 00708480
:00401904 C644243420              mov [esp+34], 20
:00401909 E8E2A91E00              call 005EC2F0
:0040190E 8D442420                lea eax, dword ptr [esp+20]
:00401912 55                      push ebp
:00401913 50                      push eax
:00401914 8BCE                    mov ecx, esi
:00401916 C644245002              mov [esp+50], 02
:0040191B E8E0C41E00              call 005EDE00
:00401920 C70604847000            mov dword ptr [esi], 00708404
:00401926 8B460C                  mov eax, dword ptr [esi+0C]
:00401929 0FAF4608                imul eax, dword ptr [esi+08]
:0040192D C1E002                  shl eax, 02
:00401930 50                      push eax
:00401931 C644244C03              mov [esp+4C], 03
:00401936 E845F91D00              call 005E1280
:0040193B 83C404                  add esp, 00000004
:0040193E 894633                  mov dword ptr [esi+33], eax
:00401941 8B4C2424                mov ecx, dword ptr [esp+24]
:00401945 C644244805              mov [esp+48], 05
:0040194A 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040194D 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00401950 49                      dec ecx
:00401951 8908                    mov dword ptr [eax], ecx
:00401953 7509                    jne 0040195E
:00401955 50                      push eax
:00401956 E8A5F91D00              call 005E1300
:0040195B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401953(C)
|
:0040195E C70680837000            mov dword ptr [esi], 00708380
:00401964 EB02                    jmp 00401968

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004018CB(C)
|
:00401966 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401964(U)
|
:00401968 8B0F                    mov ecx, dword ptr [edi]
:0040196A C7442448FFFFFFFF        mov [esp+48], FFFFFFFF
:00401972 85C9                    test ecx, ecx
:00401974 8937                    mov dword ptr [edi], esi
:00401976 7405                    je 0040197D
:00401978 8B11                    mov edx, dword ptr [ecx]
:0040197A FF5204                  call [edx+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401976(C)
|
:0040197D 8B0F                    mov ecx, dword ptr [edi]
:0040197F 33C0                    xor eax, eax
:00401981 89442410                mov dword ptr [esp+10], eax
:00401985 50                      push eax
:00401986 8B5108                  mov edx, dword ptr [ecx+08]
:00401989 89442418                mov dword ptr [esp+18], eax
:0040198D 8954241C                mov dword ptr [esp+1C], edx
:00401991 8B510C                  mov edx, dword ptr [ecx+0C]
:00401994 89542420                mov dword ptr [esp+20], edx
:00401998 8B11                    mov edx, dword ptr [ecx]
:0040199A 6A01                    push 00000001
:0040199C 8D442418                lea eax, dword ptr [esp+18]
:004019A0 6800B57A00              push 007AB500
:004019A5 50                      push eax
:004019A6 FF5230                  call [edx+30]
:004019A9 6A3B                    push 0000003B
:004019AB E8D0F81D00              call 005E1280
:004019B0 8BF0                    mov esi, eax
:004019B2 83C404                  add esp, 00000004
:004019B5 89742450                mov dword ptr [esp+50], esi
:004019B9 85F6                    test esi, esi
:004019BB C744244806000000        mov [esp+48], 00000006
:004019C3 0F8497000000            je 00401A60
:004019C9 8B0D88DA7900            mov ecx, dword ptr [0079DA88]
:004019CF C744242494DA7900        mov [esp+24], 0079DA94
:004019D7 41                      inc ecx
:004019D8 890D88DA7900            mov dword ptr [0079DA88], ecx
:004019DE 68FF000000              push 000000FF
:004019E3 6800FF0000              push 0000FF00
:004019E8 680000FF00              push 00FF0000
:004019ED 8D4C242C                lea ecx, dword ptr [esp+2C]
:004019F1 C644245407              mov [esp+54], 07
:004019F6 C744242C80847000        mov [esp+2C], 00708480
:004019FE C644243420              mov [esp+34], 20
:00401A03 E8E8A81E00              call 005EC2F0
:00401A08 8D4C2420                lea ecx, dword ptr [esp+20]
:00401A0C 55                      push ebp
:00401A0D 51                      push ecx
:00401A0E 8BCE                    mov ecx, esi
:00401A10 C644245008              mov [esp+50], 08
:00401A15 E8E6C31E00              call 005EDE00
:00401A1A C70604847000            mov dword ptr [esi], 00708404
:00401A20 8B460C                  mov eax, dword ptr [esi+0C]
:00401A23 0FAF4608                imul eax, dword ptr [esi+08]
:00401A27 C1E002                  shl eax, 02
:00401A2A 50                      push eax
:00401A2B C644244C09              mov [esp+4C], 09
:00401A30 E84BF81D00              call 005E1280
:00401A35 83C404                  add esp, 00000004
:00401A38 894633                  mov dword ptr [esi+33], eax
:00401A3B 8B542424                mov edx, dword ptr [esp+24]
:00401A3F C64424480B              mov [esp+48], 0B
:00401A44 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00401A47 8D42F4                  lea eax, dword ptr [edx-0C]
:00401A4A 49                      dec ecx
:00401A4B 8908                    mov dword ptr [eax], ecx
:00401A4D 7509                    jne 00401A58
:00401A4F 50                      push eax
:00401A50 E8ABF81D00              call 005E1300
:00401A55 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401A4D(C)
|
:00401A58 C70680837000            mov dword ptr [esi], 00708380
:00401A5E EB02                    jmp 00401A62

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004019C3(C)
|
:00401A60 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401A5E(U)
|
:00401A62 8B4F04                  mov ecx, dword ptr [edi+04]
:00401A65 C7442448FFFFFFFF        mov [esp+48], FFFFFFFF
:00401A6D 85C9                    test ecx, ecx
:00401A6F 897704                  mov dword ptr [edi+04], esi
:00401A72 7405                    je 00401A79
:00401A74 8B01                    mov eax, dword ptr [ecx]
:00401A76 FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401A72(C)
|
:00401A79 8B4F04                  mov ecx, dword ptr [edi+04]
:00401A7C 33C0                    xor eax, eax
:00401A7E 89442420                mov dword ptr [esp+20], eax
:00401A82 50                      push eax
:00401A83 8B5108                  mov edx, dword ptr [ecx+08]
:00401A86 89442428                mov dword ptr [esp+28], eax
:00401A8A 8954242C                mov dword ptr [esp+2C], edx
:00401A8E 8B510C                  mov edx, dword ptr [ecx+0C]
:00401A91 89542430                mov dword ptr [esp+30], edx
:00401A95 8B11                    mov edx, dword ptr [ecx]
:00401A97 6A01                    push 00000001
:00401A99 8D442428                lea eax, dword ptr [esp+28]
:00401A9D 6800B57A00              push 007AB500
:00401AA2 50                      push eax
:00401AA3 FF5230                  call [edx+30]
:00401AA6 8B4C2440                mov ecx, dword ptr [esp+40]
:00401AAA C6471801                mov [edi+18], 01
:00401AAE 5F                      pop edi
:00401AAF 5E                      pop esi
:00401AB0 5D                      pop ebp
:00401AB1 64890D00000000          mov dword ptr fs:[00000000], ecx
:00401AB8 83C440                  add esp, 00000040
:00401ABB C20400                  ret 0004


:00401ABE 90                      nop
:00401ABF 90                      nop
:00401AC0 8B442404                mov eax, dword ptr [esp+04]
:00401AC4 8B5119                  mov edx, dword ptr [ecx+19]
:00401AC7 8910                    mov dword ptr [eax], edx
:00401AC9 8B511D                  mov edx, dword ptr [ecx+1D]
:00401ACC 895004                  mov dword ptr [eax+04], edx
:00401ACF 8B4921                  mov ecx, dword ptr [ecx+21]
:00401AD2 894808                  mov dword ptr [eax+08], ecx
:00401AD5 C20400                  ret 0004


:00401AD8 90                      nop
:00401AD9 90                      nop
:00401ADA 90                      nop
:00401ADB 90                      nop
:00401ADC 90                      nop
:00401ADD 90                      nop
:00401ADE 90                      nop
:00401ADF 90                      nop

* Referenced by a CALL at Address:
|:00402B71   
|
:00401AE0 83EC14                  sub esp, 00000014
:00401AE3 56                      push esi
:00401AE4 8BF1                    mov esi, ecx
:00401AE6 57                      push edi
:00401AE7 8B0E                    mov ecx, dword ptr [esi]
:00401AE9 83C108                  add ecx, 00000008
:00401AEC D94614                  fld dword ptr [esi+14]
:00401AEF 8B01                    mov eax, dword ptr [ecx]
:00401AF1 8B4904                  mov ecx, dword ptr [ecx+04]
:00401AF4 99                      cdq
:00401AF5 2BC2                    sub eax, edx
:00401AF7 8BF8                    mov edi, eax
:00401AF9 8BC1                    mov eax, ecx
:00401AFB 8B4C2424                mov ecx, dword ptr [esp+24]
:00401AFF 99                      cdq
:00401B00 2BC2                    sub eax, edx
:00401B02 8B11                    mov edx, dword ptr [ecx]
:00401B04 D1FF                    sar edi, 1
:00401B06 2BD7                    sub edx, edi
:00401B08 8B4904                  mov ecx, dword ptr [ecx+04]
:00401B0B 89542408                mov dword ptr [esp+08], edx
:00401B0F DB442408                fild dword ptr [esp+08]
:00401B13 D1F8                    sar eax, 1
:00401B15 2BC8                    sub ecx, eax
:00401B17 D8F1                    fdiv st(0), st(1)
:00401B19 894C240C                mov dword ptr [esp+0C], ecx
:00401B1D E86ECE2B00              call 006BE990
:00401B22 DB44240C                fild dword ptr [esp+0C]
:00401B26 89442414                mov dword ptr [esp+14], eax
:00401B2A D8F1                    fdiv st(0), st(1)
:00401B2C E85FCE2B00              call 006BE990
:00401B31 89442418                mov dword ptr [esp+18], eax
:00401B35 8D542414                lea edx, dword ptr [esp+14]
:00401B39 6A00                    push 00000000
:00401B3B 8D44240C                lea eax, dword ptr [esp+0C]
:00401B3F 52                      push edx
:00401B40 50                      push eax
:00401B41 8D4E41                  lea ecx, dword ptr [esi+41]
:00401B44 DDD8                    fstp st(0)
:00401B46 E8B5271E00              call 005E4300
:00401B4B 8B442420                mov eax, dword ptr [esp+20]
:00401B4F 8B761D                  mov esi, dword ptr [esi+1D]
:00401B52 8B4C2408                mov ecx, dword ptr [esp+08]
:00401B56 8B542410                mov edx, dword ptr [esp+10]
:00401B5A 897004                  mov dword ptr [eax+04], esi
:00401B5D 5F                      pop edi
:00401B5E 8908                    mov dword ptr [eax], ecx
:00401B60 895008                  mov dword ptr [eax+08], edx
:00401B63 5E                      pop esi
:00401B64 83C414                  add esp, 00000014
:00401B67 C20800                  ret 0008


:00401B6A 90                      nop
:00401B6B 90                      nop
:00401B6C 90                      nop
:00401B6D 90                      nop
:00401B6E 90                      nop
:00401B6F 90                      nop
:00401B70 83EC14                  sub esp, 00000014
:00401B73 8B11                    mov edx, dword ptr [ecx]
:00401B75 53                      push ebx
:00401B76 83C208                  add edx, 00000008
:00401B79 56                      push esi
:00401B7A 57                      push edi
:00401B7B 83C141                  add ecx, 00000041
:00401B7E 8B02                    mov eax, dword ptr [edx]
:00401B80 8B7A04                  mov edi, dword ptr [edx+04]
:00401B83 99                      cdq
:00401B84 2BC2                    sub eax, edx
:00401B86 C744241800000000        mov [esp+18], 00000000
:00401B8E 8BF0                    mov esi, eax
:00401B90 8BC7                    mov eax, edi
:00401B92 99                      cdq
:00401B93 2BC2                    sub eax, edx
:00401B95 8BF8                    mov edi, eax
:00401B97 8B442428                mov eax, dword ptr [esp+28]
:00401B9B D1FE                    sar esi, 1
:00401B9D 8B10                    mov edx, dword ptr [eax]
:00401B9F 8B4008                  mov eax, dword ptr [eax+08]
:00401BA2 89542414                mov dword ptr [esp+14], edx
:00401BA6 8B51D3                  mov edx, dword ptr [ecx-2D]
:00401BA9 8944241C                mov dword ptr [esp+1C], eax
:00401BAD 89542428                mov dword ptr [esp+28], edx
:00401BB1 8D442414                lea eax, dword ptr [esp+14]
:00401BB5 8D54240C                lea edx, dword ptr [esp+0C]
:00401BB9 50                      push eax
:00401BBA 52                      push edx
:00401BBB D1FF                    sar edi, 1
:00401BBD E82E251E00              call 005E40F0
:00401BC2 DB44240C                fild dword ptr [esp+0C]
:00401BC6 D84C2428                fmul dword ptr [esp+28]
:00401BCA D80578837000            fadd dword ptr [00708378]
:00401BD0 E8BBCD2B00              call 006BE990
:00401BD5 DB442410                fild dword ptr [esp+10]
:00401BD9 8BD8                    mov ebx, eax
:00401BDB D84C2428                fmul dword ptr [esp+28]
:00401BDF D80578837000            fadd dword ptr [00708378]
:00401BE5 E8A6CD2B00              call 006BE990
:00401BEA 8BC8                    mov ecx, eax
:00401BEC 8B442424                mov eax, dword ptr [esp+24]
:00401BF0 03DE                    add ebx, esi
:00401BF2 03CF                    add ecx, edi
:00401BF4 5F                      pop edi
:00401BF5 8918                    mov dword ptr [eax], ebx
:00401BF7 5E                      pop esi
:00401BF8 894804                  mov dword ptr [eax+04], ecx
:00401BFB 5B                      pop ebx
:00401BFC 83C414                  add esp, 00000014
:00401BFF C20800                  ret 0008


:00401C02 90                      nop
:00401C03 90                      nop
:00401C04 90                      nop
:00401C05 90                      nop
:00401C06 90                      nop
:00401C07 90                      nop
:00401C08 90                      nop
:00401C09 90                      nop
:00401C0A 90                      nop
:00401C0B 90                      nop
:00401C0C 90                      nop
:00401C0D 90                      nop
:00401C0E 90                      nop
:00401C0F 90                      nop

* Referenced by a CALL at Addresses:
|:00402A25   , :00402BB7   
|
:00401C10 8B442404                mov eax, dword ptr [esp+04]
:00401C14 8B5119                  mov edx, dword ptr [ecx+19]
:00401C17 56                      push esi
:00401C18 3B10                    cmp edx, dword ptr [eax]
:00401C1A 7514                    jne 00401C30
:00401C1C 8B511D                  mov edx, dword ptr [ecx+1D]
:00401C1F 8B7004                  mov esi, dword ptr [eax+04]
:00401C22 3BD6                    cmp edx, esi
:00401C24 750A                    jne 00401C30
:00401C26 8B5121                  mov edx, dword ptr [ecx+21]
:00401C29 8B7008                  mov esi, dword ptr [eax+08]
:00401C2C 3BD6                    cmp edx, esi
:00401C2E 7416                    je 00401C46

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401C1A(C), :00401C24(C)
|
:00401C30 8B10                    mov edx, dword ptr [eax]
:00401C32 895119                  mov dword ptr [ecx+19], edx
:00401C35 8B5004                  mov edx, dword ptr [eax+04]
:00401C38 89511D                  mov dword ptr [ecx+1D], edx
:00401C3B 8B4008                  mov eax, dword ptr [eax+08]
:00401C3E 894121                  mov dword ptr [ecx+21], eax
:00401C41 E83A000000              call 00401C80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401C2E(C)
|
:00401C46 5E                      pop esi
:00401C47 C20400                  ret 0004


:00401C4A 90                      nop
:00401C4B 90                      nop
:00401C4C 90                      nop
:00401C4D 90                      nop
:00401C4E 90                      nop
:00401C4F 90                      nop

* Referenced by a CALL at Addresses:
|:00402C05   , :00402CA5   
|
:00401C50 D94114                  fld dword ptr [ecx+14]
:00401C53 D85C2404                fcomp dword ptr [esp+04]
:00401C57 DFE0                    fstsw ax
:00401C59 F6C440                  test ah, 40
:00401C5C 750C                    jne 00401C6A
:00401C5E 8B442404                mov eax, dword ptr [esp+04]
:00401C62 894114                  mov dword ptr [ecx+14], eax
:00401C65 E816000000              call 00401C80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401C5C(C)
|
:00401C6A C20400                  ret 0004
:00401C6D 90                      nop
:00401C6E 90                      nop
:00401C6F 90                      nop

* Referenced by a CALL at Addresses:
|:00402BDF   , :00402BF4   , :00402C7F   , :00402C94   
|
:00401C70 D94114                  fld dword ptr [ecx+14]
:00401C73 C3                      ret


:00401C74 90                      nop
:00401C75 90                      nop
:00401C76 90                      nop
:00401C77 90                      nop
:00401C78 90                      nop
:00401C79 90                      nop
:00401C7A 90                      nop
:00401C7B 90                      nop
:00401C7C 90                      nop
:00401C7D 90                      nop
:00401C7E 90                      nop
:00401C7F 90                      nop

* Referenced by a CALL at Addresses:
|:00401C41   , :00401C65   
|
:00401C80 83EC5C                  sub esp, 0000005C
:00401C83 53                      push ebx
:00401C84 8BD9                    mov ebx, ecx
:00401C86 55                      push ebp
:00401C87 56                      push esi
:00401C88 8B4319                  mov eax, dword ptr [ebx+19]
:00401C8B 8B4B21                  mov ecx, dword ptr [ebx+21]
:00401C8E 89442420                mov dword ptr [esp+20], eax
:00401C92 894C2428                mov dword ptr [esp+28], ecx
:00401C96 DB442420                fild dword ptr [esp+20]
:00401C9A 57                      push edi
:00401C9B 8D7B41                  lea edi, dword ptr [ebx+41]
:00401C9E 8D542418                lea edx, dword ptr [esp+18]
:00401CA2 8BCF                    mov ecx, edi
:00401CA4 D80DF4977A00            fmul dword ptr [007A97F4]
:00401CAA 52                      push edx
:00401CAB C744242000000000        mov [esp+20], 00000000
:00401CB3 D95C241C                fstp dword ptr [esp+1C]
:00401CB7 DB442430                fild dword ptr [esp+30]
:00401CBB D80DF4977A00            fmul dword ptr [007A97F4]
:00401CC1 D95C2424                fstp dword ptr [esp+24]
:00401CC5 E8B6231E00              call 005E4080
:00401CCA 8B0B                    mov ecx, dword ptr [ebx]
:00401CCC 83C108                  add ecx, 00000008
:00401CCF D94314                  fld dword ptr [ebx+14]
:00401CD2 8B01                    mov eax, dword ptr [ecx]
:00401CD4 8B4904                  mov ecx, dword ptr [ecx+04]
:00401CD7 99                      cdq
:00401CD8 2BC2                    sub eax, edx
:00401CDA 8BE8                    mov ebp, eax
:00401CDC 8BC1                    mov eax, ecx
:00401CDE D1FD                    sar ebp, 1
:00401CE0 896C2410                mov dword ptr [esp+10], ebp
:00401CE4 F7DD                    neg ebp
:00401CE6 896C2418                mov dword ptr [esp+18], ebp
:00401CEA DB442418                fild dword ptr [esp+18]
:00401CEE 99                      cdq
:00401CEF D8F1                    fdiv st(0), st(1)
:00401CF1 2BC2                    sub eax, edx
:00401CF3 8BF0                    mov esi, eax
:00401CF5 D1FE                    sar esi, 1
:00401CF7 8BC6                    mov eax, esi
:00401CF9 89742414                mov dword ptr [esp+14], esi
:00401CFD F7D8                    neg eax
:00401CFF 8944241C                mov dword ptr [esp+1C], eax
:00401D03 E888CC2B00              call 006BE990
:00401D08 DB44241C                fild dword ptr [esp+1C]
:00401D0C 89442424                mov dword ptr [esp+24], eax
:00401D10 D8F1                    fdiv st(0), st(1)
:00401D12 E879CC2B00              call 006BE990
:00401D17 8D4C2424                lea ecx, dword ptr [esp+24]
:00401D1B 6A00                    push 00000000
:00401D1D 8D542464                lea edx, dword ptr [esp+64]
:00401D21 51                      push ecx
:00401D22 52                      push edx
:00401D23 8BCF                    mov ecx, edi
:00401D25 DDD8                    fstp st(0)
:00401D27 89442434                mov dword ptr [esp+34], eax
:00401D2B E8D0251E00              call 005E4300
:00401D30 D94314                  fld dword ptr [ebx+14]
:00401D33 DB442410                fild dword ptr [esp+10]
:00401D37 D9542418                fst dword ptr [esp+18]
:00401D3B D8F1                    fdiv st(0), st(1)
:00401D3D E84ECC2B00              call 006BE990
:00401D42 DB442414                fild dword ptr [esp+14]
:00401D46 89442424                mov dword ptr [esp+24], eax
:00401D4A D9542410                fst dword ptr [esp+10]
:00401D4E D8F1                    fdiv st(0), st(1)
:00401D50 E83BCC2B00              call 006BE990
:00401D55 89442428                mov dword ptr [esp+28], eax
:00401D59 8D442424                lea eax, dword ptr [esp+24]
:00401D5D 6A00                    push 00000000
:00401D5F 8D4C2458                lea ecx, dword ptr [esp+58]
:00401D63 50                      push eax
:00401D64 51                      push ecx
:00401D65 8BCF                    mov ecx, edi
:00401D67 DDD8                    fstp st(0)
:00401D69 E892251E00              call 005E4300
:00401D6E D94314                  fld dword ptr [ebx+14]
:00401D71 896C2424                mov dword ptr [esp+24], ebp
:00401D75 DB442424                fild dword ptr [esp+24]
:00401D79 D8F1                    fdiv st(0), st(1)
:00401D7B E810CC2B00              call 006BE990
:00401D80 D9442410                fld dword ptr [esp+10]
:00401D84 D8F1                    fdiv st(0), st(1)
:00401D86 89442424                mov dword ptr [esp+24], eax
:00401D8A E801CC2B00              call 006BE990
:00401D8F 89442428                mov dword ptr [esp+28], eax
:00401D93 8D542424                lea edx, dword ptr [esp+24]
:00401D97 6A00                    push 00000000
:00401D99 8D442434                lea eax, dword ptr [esp+34]
:00401D9D 52                      push edx
:00401D9E 50                      push eax
:00401D9F 8BCF                    mov ecx, edi
:00401DA1 DDD8                    fstp st(0)
:00401DA3 E858251E00              call 005E4300
:00401DA8 D94314                  fld dword ptr [ebx+14]
:00401DAB D9442418                fld dword ptr [esp+18]
:00401DAF D8F1                    fdiv st(0), st(1)
:00401DB1 F7DE                    neg esi
:00401DB3 89742414                mov dword ptr [esp+14], esi
:00401DB7 E8D4CB2B00              call 006BE990
:00401DBC DB442414                fild dword ptr [esp+14]
:00401DC0 89442424                mov dword ptr [esp+24], eax
:00401DC4 D8F1                    fdiv st(0), st(1)
:00401DC6 E8C5CB2B00              call 006BE990
:00401DCB 8D4C2424                lea ecx, dword ptr [esp+24]
:00401DCF 6A00                    push 00000000
:00401DD1 8D54244C                lea edx, dword ptr [esp+4C]
:00401DD5 51                      push ecx
:00401DD6 52                      push edx
:00401DD7 8BCF                    mov ecx, edi
:00401DD9 DDD8                    fstp st(0)
:00401DDB 89442434                mov dword ptr [esp+34], eax
:00401DDF E81C251E00              call 005E4300
:00401DE4 8B442430                mov eax, dword ptr [esp+30]
:00401DE8 8B4C2448                mov ecx, dword ptr [esp+48]
:00401DEC 89442430                mov dword ptr [esp+30], eax
:00401DF0 8B431D                  mov eax, dword ptr [ebx+1D]
:00401DF3 894C243C                mov dword ptr [esp+3C], ecx
:00401DF7 8B4C2468                mov ecx, dword ptr [esp+68]
:00401DFB 8D50FF                  lea edx, dword ptr [eax-01]
:00401DFE 83C005                  add eax, 00000005
:00401E01 89442440                mov dword ptr [esp+40], eax
:00401E05 8B44245C                mov eax, dword ptr [esp+5C]
:00401E09 894C2444                mov dword ptr [esp+44], ecx
:00401E0D 8D7B25                  lea edi, dword ptr [ebx+25]
:00401E10 B906000000              mov ecx, 00000006
:00401E15 8D742430                lea esi, dword ptr [esp+30]
:00401E19 89542434                mov dword ptr [esp+34], edx
:00401E1D 89442438                mov dword ptr [esp+38], eax
:00401E21 F3                      repz
:00401E22 A5                      movsd
:00401E23 5F                      pop edi
:00401E24 5E                      pop esi
:00401E25 C6431801                mov [ebx+18], 01
:00401E29 5D                      pop ebp
:00401E2A 5B                      pop ebx
:00401E2B 83C45C                  add esp, 0000005C
:00401E2E C3                      ret


:00401E2F 90                      nop

* Referenced by a CALL at Addresses:
|:00402A4B   , :00402C2B   , :00402CCB   
|
:00401E30 64A100000000            mov eax, dword ptr fs:[00000000]
:00401E36 6AFF                    push FFFFFFFF
:00401E38 68E4ED6C00              push 006CEDE4
:00401E3D 50                      push eax
:00401E3E 64892500000000          mov dword ptr fs:[00000000], esp
:00401E45 81ECD0000000            sub esp, 000000D0
:00401E4B 53                      push ebx
:00401E4C 55                      push ebp
:00401E4D 56                      push esi
:00401E4E 57                      push edi
:00401E4F 8BF9                    mov edi, ecx
:00401E51 8A4718                  mov al, byte ptr [edi+18]
:00401E54 84C0                    test al, al
:00401E56 0F847E010000            je 00401FDA
:00401E5C 8B4F04                  mov ecx, dword ptr [edi+04]
:00401E5F 33C0                    xor eax, eax
:00401E61 C6471800                mov [edi+18], 00
:00401E65 8944245C                mov dword ptr [esp+5C], eax
:00401E69 8B5108                  mov edx, dword ptr [ecx+08]
:00401E6C 89442460                mov dword ptr [esp+60], eax
:00401E70 89542464                mov dword ptr [esp+64], edx
:00401E74 8B510C                  mov edx, dword ptr [ecx+0C]
:00401E77 50                      push eax
:00401E78 8954246C                mov dword ptr [esp+6C], edx
:00401E7C 8B11                    mov edx, dword ptr [ecx]
:00401E7E 6A01                    push 00000001
:00401E80 8D442464                lea eax, dword ptr [esp+64]
:00401E84 6800B57A00              push 007AB500
:00401E89 50                      push eax
:00401E8A FF5230                  call [edx+30]
:00401E8D A05CB47A00              mov al, byte ptr [007AB45C]
:00401E92 84C0                    test al, al
:00401E94 7413                    je 00401EA9
:00401E96 A0C8977A00              mov al, byte ptr [007A97C8]
:00401E9B 84C0                    test al, al
:00401E9D 740A                    je 00401EA9
:00401E9F B9B8977A00              mov ecx, 007A97B8
:00401EA4 E827F81D00              call 005E16D0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401E94(C), :00401E9D(C)
|
:00401EA9 8B5F2D                  mov ebx, dword ptr [edi+2D]
:00401EAC 8B4F25                  mov ecx, dword ptr [edi+25]
:00401EAF 8B5731                  mov edx, dword ptr [edi+31]
:00401EB2 8B7729                  mov esi, dword ptr [edi+29]
:00401EB5 8B6F35                  mov ebp, dword ptr [edi+35]
:00401EB8 8B4704                  mov eax, dword ptr [edi+04]
:00401EBB D94714                  fld dword ptr [edi+14]
:00401EBE 899C249B000000          mov dword ptr [esp+0000009B], ebx
:00401EC5 8B5F39                  mov ebx, dword ptr [edi+39]
:00401EC8 3BCA                    cmp ecx, edx
:00401ECA C684249000000001        mov byte ptr [esp+00000090], 01
:00401ED2 C684249100000000        mov byte ptr [esp+00000091], 00
:00401EDA 898C2493000000          mov dword ptr [esp+00000093], ecx
:00401EE1 8994249F000000          mov dword ptr [esp+0000009F], edx
:00401EE8 89B42497000000          mov dword ptr [esp+00000097], esi
:00401EEF 89AC24A3000000          mov dword ptr [esp+000000A3], ebp
:00401EF6 899C24A7000000          mov dword ptr [esp+000000A7], ebx
:00401EFD 7E0E                    jle 00401F0D
:00401EFF 89942493000000          mov dword ptr [esp+00000093], edx
:00401F06 898C249F000000          mov dword ptr [esp+0000009F], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401EFD(C)
|
:00401F0D 3BF5                    cmp esi, ebp
:00401F0F 7E0E                    jle 00401F1F
:00401F11 89AC2497000000          mov dword ptr [esp+00000097], ebp
:00401F18 89B424A3000000          mov dword ptr [esp+000000A3], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401F0F(C)
|
:00401F1F 8B8C249B000000          mov ecx, dword ptr [esp+0000009B]
:00401F26 3BCB                    cmp ecx, ebx
:00401F28 7E0E                    jle 00401F38
:00401F2A 899C249B000000          mov dword ptr [esp+0000009B], ebx
:00401F31 898C24A7000000          mov dword ptr [esp+000000A7], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401F28(C)
|
:00401F38 8B0DD8DE7900            mov ecx, dword ptr [0079DED8]
:00401F3E 8D5741                  lea edx, dword ptr [edi+41]
:00401F41 D99C24D8000000          fstp dword ptr [esp+000000D8]
:00401F48 41                      inc ecx
:00401F49 C684249200000000        mov byte ptr [esp+00000092], 00
:00401F51 890DD8DE7900            mov dword ptr [0079DED8], ecx
:00401F57 898C24C3000000          mov dword ptr [esp+000000C3], ecx
:00401F5E 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00401F64 C68424C700000001        mov byte ptr [esp+000000C7], 01
:00401F6C 83C104                  add ecx, 00000004
:00401F6F 898424C8000000          mov dword ptr [esp+000000C8], eax
:00401F76 898C24D4000000          mov dword ptr [esp+000000D4], ecx
:00401F7D 899424DC000000          mov dword ptr [esp+000000DC], edx
:00401F84 C784248C00000088847000  mov dword ptr [esp+0000008C], 00708488
:00401F8F 8B6808                  mov ebp, dword ptr [eax+08]
:00401F92 8B400C                  mov eax, dword ptr [eax+0C]
:00401F95 99                      cdq
:00401F96 2BC2                    sub eax, edx
:00401F98 8BF0                    mov esi, eax
:00401F9A 8BC5                    mov eax, ebp
:00401F9C 99                      cdq
:00401F9D 2BC2                    sub eax, edx
:00401F9F D1F8                    sar eax, 1
:00401FA1 898424CC000000          mov dword ptr [esp+000000CC], eax
:00401FA8 8D84248C000000          lea eax, dword ptr [esp+0000008C]
:00401FAF D1FE                    sar esi, 1
:00401FB1 50                      push eax
:00401FB2 89B424D4000000          mov dword ptr [esp+000000D4], esi
:00401FB9 E892381F00              call 005F5850
:00401FBE A05CB47A00              mov al, byte ptr [007AB45C]
:00401FC3 84C0                    test al, al
:00401FC5 7413                    je 00401FDA
:00401FC7 A0C8977A00              mov al, byte ptr [007A97C8]
:00401FCC 84C0                    test al, al
:00401FCE 740A                    je 00401FDA
:00401FD0 B9B8977A00              mov ecx, 007A97B8
:00401FD5 E8D6F71D00              call 005E17B0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401E56(C), :00401FC5(C), :00401FCE(C)
|
:00401FDA 33DB                    xor ebx, ebx
:00401FDC 8D4C242F                lea ecx, dword ptr [esp+2F]
:00401FE0 899C24E8000000          mov dword ptr [esp+000000E8], ebx
:00401FE7 51                      push ecx
:00401FE8 8D8C2484000000          lea ecx, dword ptr [esp+00000084]
:00401FEF E86C1C0000              call 00403C60
:00401FF4 8BB424F8000000          mov esi, dword ptr [esp+000000F8]
:00401FFB 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00402001 8D942480000000          lea edx, dword ptr [esp+00000080]
:00402008 C68424E800000002        mov byte ptr [esp+000000E8], 02
:00402010 52                      push edx
:00402011 56                      push esi
:00402012 E889E60800              call 004906A0
:00402017 A05CB47A00              mov al, byte ptr [007AB45C]
:0040201C 84C0                    test al, al
:0040201E 7413                    je 00402033
:00402020 A0C8977A00              mov al, byte ptr [007A97C8]
:00402025 84C0                    test al, al
:00402027 740A                    je 00402033
:00402029 B9B8977A00              mov ecx, 007A97B8
:0040202E E89DF61D00              call 005E16D0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040201E(C), :00402027(C)
|
:00402033 3BF3                    cmp esi, ebx
:00402035 895C244C                mov dword ptr [esp+4C], ebx
:00402039 7426                    je 00402061
:0040203B A1089C7A00              mov eax, dword ptr [007A9C08]
:00402040 8BCE                    mov ecx, esi
:00402042 8B8061040000            mov eax, dword ptr [eax+00000461]
:00402048 2BC8                    sub ecx, eax
:0040204A B8FB4321B9              mov eax, B92143FB
:0040204F F7E9                    imul ecx
:00402051 03D1                    add edx, ecx
:00402053 C1FA08                  sar edx, 08
:00402056 8BCA                    mov ecx, edx
:00402058 C1E91F                  shr ecx, 1F
:0040205B 03D1                    add edx, ecx
:0040205D 8954244C                mov dword ptr [esp+4C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402039(C)
|
:00402061 8B4F04                  mov ecx, dword ptr [edi+04]
:00402064 8B07                    mov eax, dword ptr [edi]
:00402066 53                      push ebx
:00402067 8D742420                lea esi, dword ptr [esp+20]
:0040206B 895C2420                mov dword ptr [esp+20], ebx
:0040206F 895C2424                mov dword ptr [esp+24], ebx
:00402073 8B11                    mov edx, dword ptr [ecx]
:00402075 53                      push ebx
:00402076 56                      push esi
:00402077 50                      push eax
:00402078 FF5268                  call [edx+68]
:0040207B DB4739                  fild dword ptr [edi+39]
:0040207E D80DF4977A00            fmul dword ptr [007A97F4]
:00402084 D95C2430                fstp dword ptr [esp+30]
:00402088 DB4735                  fild dword ptr [edi+35]
:0040208B D80DF4977A00            fmul dword ptr [007A97F4]
:00402091 D95C2438                fstp dword ptr [esp+38]
:00402095 DB4731                  fild dword ptr [edi+31]
:00402098 D80DF4977A00            fmul dword ptr [007A97F4]
:0040209E D95C2428                fstp dword ptr [esp+28]
:004020A2 DB472D                  fild dword ptr [edi+2D]
:004020A5 D80DF4977A00            fmul dword ptr [007A97F4]
:004020AB D95C2434                fstp dword ptr [esp+34]
:004020AF DB4729                  fild dword ptr [edi+29]
:004020B2 D80DF4977A00            fmul dword ptr [007A97F4]
:004020B8 D95C2444                fstp dword ptr [esp+44]
:004020BC DB4725                  fild dword ptr [edi+25]
:004020BF D80DF4977A00            fmul dword ptr [007A97F4]
:004020C5 D95C2440                fstp dword ptr [esp+40]
:004020C9 D9442430                fld dword ptr [esp+30]
:004020CD D8642434                fsub dword ptr [esp+34]
:004020D1 D9442438                fld dword ptr [esp+38]
:004020D5 D8642444                fsub dword ptr [esp+44]
:004020D9 D95C2410                fstp dword ptr [esp+10]
:004020DD D9442428                fld dword ptr [esp+28]
:004020E1 D8642440                fsub dword ptr [esp+40]
:004020E5 D95C2414                fstp dword ptr [esp+14]
:004020E9 D80D78837000            fmul dword ptr [00708378]
:004020EF D9442410                fld dword ptr [esp+10]
:004020F3 D80D78837000            fmul dword ptr [00708378]
:004020F9 D9442414                fld dword ptr [esp+14]
:004020FD D80D78837000            fmul dword ptr [00708378]
:00402103 D9542410                fst dword ptr [esp+10]
:00402107 D95C2450                fstp dword ptr [esp+50]
:0040210B D95C2454                fstp dword ptr [esp+54]
:0040210F D9542458                fst dword ptr [esp+58]
:00402113 D9442410                fld dword ptr [esp+10]
:00402117 D8D9                    fcomp st(0), st(1)
:00402119 DFE0                    fstsw ax
:0040211B F6C401                  test ah, 01
:0040211E DDD8                    fstp st(0)
:00402120 8D442458                lea eax, dword ptr [esp+58]
:00402124 7504                    jne 0040212A
:00402126 8D442450                lea eax, dword ptr [esp+50]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402124(C)
|
:0040212A D9442434                fld dword ptr [esp+34]
:0040212E D8442430                fadd dword ptr [esp+30]
:00402132 D9442438                fld dword ptr [esp+38]
:00402136 D8442444                fadd dword ptr [esp+44]
:0040213A 8B00                    mov eax, dword ptr [eax]
:0040213C 6A04                    push 00000004
:0040213E 8BC8                    mov ecx, eax
:00402140 6A01                    push 00000001
:00402142 8D542474                lea edx, dword ptr [esp+74]
:00402146 51                      push ecx
:00402147 D95C241C                fstp dword ptr [esp+1C]
:0040214B D944244C                fld dword ptr [esp+4C]
:0040214F D8442434                fadd dword ptr [esp+34]
:00402153 52                      push edx
:00402154 51                      push ecx
:00402155 8BCC                    mov ecx, esp
:00402157 89442438                mov dword ptr [esp+38], eax
:0040215B 8964242C                mov dword ptr [esp+2C], esp
:0040215F D95C2428                fstp dword ptr [esp+28]
:00402163 D80D78837000            fmul dword ptr [00708378]
:00402169 D9442424                fld dword ptr [esp+24]
:0040216D D80D78837000            fmul dword ptr [00708378]
:00402173 D9442428                fld dword ptr [esp+28]
:00402177 D80D78837000            fmul dword ptr [00708378]
:0040217D D99C2480000000          fstp dword ptr [esp+00000080]
:00402184 D99C2484000000          fstp dword ptr [esp+00000084]
:0040218B D99C2488000000          fstp dword ptr [esp+00000088]
:00402192 E829230000              call 004044C0
:00402197 8D8C24A0000000          lea ecx, dword ptr [esp+000000A0]
:0040219E E8ADD00600              call 0046F250
:004021A3 8B07                    mov eax, dword ptr [edi]
:004021A5 8B8C248C000000          mov ecx, dword ptr [esp+0000008C]
:004021AC 8BB42490000000          mov esi, dword ptr [esp+00000090]
:004021B3 C68424E800000003        mov byte ptr [esp+000000E8], 03
:004021BB 8B6808                  mov ebp, dword ptr [eax+08]
:004021BE 8B400C                  mov eax, dword ptr [eax+0C]
:004021C1 99                      cdq
:004021C2 2BC2                    sub eax, edx
:004021C4 894C2414                mov dword ptr [esp+14], ecx
:004021C8 D1F8                    sar eax, 1
:004021CA 8944247C                mov dword ptr [esp+7C], eax
:004021CE 8BC5                    mov eax, ebp
:004021D0 99                      cdq
:004021D1 2BC2                    sub eax, edx
:004021D3 89742418                mov dword ptr [esp+18], esi
:004021D7 D1F8                    sar eax, 1
:004021D9 3BCE                    cmp ecx, esi
:004021DB 8944243C                mov dword ptr [esp+3C], eax
:004021DF 0F8424020000            je 00402409
:004021E5 EB06                    jmp 004021ED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004023FC(C)
|
:004021E7 8B4C2414                mov ecx, dword ptr [esp+14]
:004021EB 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004021E5(U)
|
:004021ED A1089C7A00              mov eax, dword ptr [007A9C08]
:004021F2 33D2                    xor edx, edx
:004021F4 668B5102                mov dx, word ptr [ecx+02]
:004021F8 8B80CD050000            mov eax, dword ptr [eax+000005CD]
:004021FE 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00402201 668B5006                mov dx, word ptr [eax+06]
:00402205 663B11                  cmp dx, word ptr [ecx]
:00402208 7412                    je 0040221C
:0040220A 668919                  mov word ptr [ecx], bx
:0040220D 66895902                mov word ptr [ecx+02], bx
:00402211 A1089C7A00              mov eax, dword ptr [007A9C08]
:00402216 8B80CD050000            mov eax, dword ptr [eax+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402208(C)
|
:0040221C 8B30                    mov esi, dword ptr [eax]
:0040221E D9869E000000            fld dword ptr [esi+0000009E]
:00402224 D85C2440                fcomp dword ptr [esp+40]
:00402228 DFE0                    fstsw ax
:0040222A F6C401                  test ah, 01
:0040222D 755A                    jne 00402289
:0040222F D9869E000000            fld dword ptr [esi+0000009E]
:00402235 D85C2428                fcomp dword ptr [esp+28]
:00402239 DFE0                    fstsw ax
:0040223B F6C401                  test ah, 01
:0040223E 7449                    je 00402289
:00402240 D986A2000000            fld dword ptr [esi+000000A2]
:00402246 D85C2444                fcomp dword ptr [esp+44]
:0040224A DFE0                    fstsw ax
:0040224C F6C401                  test ah, 01
:0040224F 7538                    jne 00402289
:00402251 D986A2000000            fld dword ptr [esi+000000A2]
:00402257 D85C2438                fcomp dword ptr [esp+38]
:0040225B DFE0                    fstsw ax
:0040225D F6C401                  test ah, 01
:00402260 7427                    je 00402289
:00402262 D986A6000000            fld dword ptr [esi+000000A6]
:00402268 D85C2434                fcomp dword ptr [esp+34]
:0040226C DFE0                    fstsw ax
:0040226E F6C401                  test ah, 01
:00402271 7516                    jne 00402289
:00402273 D986A6000000            fld dword ptr [esi+000000A6]
:00402279 D85C2430                fcomp dword ptr [esp+30]
:0040227D DFE0                    fstsw ax
:0040227F F6C401                  test ah, 01
:00402282 7405                    je 00402289
:00402284 8B6F08                  mov ebp, dword ptr [edi+08]
:00402287 EB03                    jmp 0040228C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040222D(C), :0040223E(C), :0040224F(C), :00402260(C), :00402271(C)
|:00402282(C)
|
:00402289 8B6F10                  mov ebp, dword ptr [edi+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402287(U)
|
:0040228C 8B461C                  mov eax, dword ptr [esi+1C]
:0040228F 8B5610                  mov edx, dword ptr [esi+10]
:00402292 03C2                    add eax, edx
:00402294 895C2460                mov dword ptr [esp+60], ebx
:00402298 99                      cdq
:00402299 2BC2                    sub eax, edx
:0040229B 8B5608                  mov edx, dword ptr [esi+08]
:0040229E 8BC8                    mov ecx, eax
:004022A0 8B4614                  mov eax, dword ptr [esi+14]
:004022A3 03C2                    add eax, edx
:004022A5 99                      cdq
:004022A6 2BC2                    sub eax, edx
:004022A8 8D54245C                lea edx, dword ptr [esp+5C]
:004022AC D1F9                    sar ecx, 1
:004022AE D1F8                    sar eax, 1
:004022B0 894C2464                mov dword ptr [esp+64], ecx
:004022B4 8B4F14                  mov ecx, dword ptr [edi+14]
:004022B7 8944245C                mov dword ptr [esp+5C], eax
:004022BB 8D442450                lea eax, dword ptr [esp+50]
:004022BF 894C2410                mov dword ptr [esp+10], ecx
:004022C3 52                      push edx
:004022C4 50                      push eax
:004022C5 8D4F41                  lea ecx, dword ptr [edi+41]
:004022C8 E8231E1E00              call 005E40F0
:004022CD DB442454                fild dword ptr [esp+54]
:004022D1 D84C2410                fmul dword ptr [esp+10]
:004022D5 D80578837000            fadd dword ptr [00708378]
:004022DB E8B0C62B00              call 006BE990
:004022E0 DB442450                fild dword ptr [esp+50]
:004022E4 8BD8                    mov ebx, eax
:004022E6 D84C2410                fmul dword ptr [esp+10]
:004022EA D80578837000            fadd dword ptr [00708378]
:004022F0 E89BC62B00              call 006BE990
:004022F5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004022F8 89442448                mov dword ptr [esp+48], eax
:004022FC 8B450C                  mov eax, dword ptr [ebp+0C]
:004022FF F7D8                    neg eax
:00402301 99                      cdq
:00402302 F7D9                    neg ecx
:00402304 2BC2                    sub eax, edx
:00402306 894C2424                mov dword ptr [esp+24], ecx
:0040230A 8BC8                    mov ecx, eax
:0040230C 8B442424                mov eax, dword ptr [esp+24]
:00402310 99                      cdq
:00402311 2BC2                    sub eax, edx
:00402313 8B542448                mov edx, dword ptr [esp+48]
:00402317 D1F8                    sar eax, 1
:00402319 D1F9                    sar ecx, 1
:0040231B 03C2                    add eax, edx
:0040231D 8B54247C                mov edx, dword ptr [esp+7C]
:00402321 03CB                    add ecx, ebx
:00402323 03CA                    add ecx, edx
:00402325 8B54243C                mov edx, dword ptr [esp+3C]
:00402329 03C2                    add eax, edx
:0040232B 894C2420                mov dword ptr [esp+20], ecx
:0040232F 8944241C                mov dword ptr [esp+1C], eax
:00402333 8B06                    mov eax, dword ptr [esi]
:00402335 8BCE                    mov ecx, esi
:00402337 FF90BC000000            call dword ptr [eax+000000BC]
:0040233D 84C0                    test al, al
:0040233F 747B                    je 004023BC
:00402341 8B5C244C                mov ebx, dword ptr [esp+4C]
:00402345 8B865F010000            mov eax, dword ptr [esi+0000015F]
:0040234B 3BC3                    cmp eax, ebx
:0040234D 750A                    jne 00402359
:0040234F 8B4D2B                  mov ecx, dword ptr [ebp+2B]
:00402352 6838B67A00              push 007AB638
:00402357 EB79                    jmp 004023D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040234D(C)
|
:00402359 6A00                    push 00000000
:0040235B 51                      push ecx
:0040235C 8BCC                    mov ecx, esp
:0040235E 89642450                mov dword ptr [esp+50], esp
:00402362 56                      push esi
:00402363 E868210000              call 004044D0
:00402368 8B842400010000          mov eax, dword ptr [esp+00000100]
:0040236F 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00402375 8D942488000000          lea edx, dword ptr [esp+00000088]
:0040237C 52                      push edx
:0040237D 50                      push eax
:0040237E E87DE10800              call 00490500
:00402383 83F801                  cmp eax, 00000001
:00402386 752D                    jne 004023B5
:00402388 8B8E5F010000            mov ecx, dword ptr [esi+0000015F]
:0040238E 51                      push ecx
:0040238F 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00402395 53                      push ebx
:00402396 E855AF0800              call 0048D2F0
:0040239B 8B4D2B                  mov ecx, dword ptr [ebp+2B]
:0040239E 0FBEC0                  movsx eax, al
:004023A1 85C0                    test eax, eax
:004023A3 7D07                    jge 004023AC
:004023A5 6818B67A00              push 007AB618
:004023AA EB26                    jmp 004023D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004023A3(C)
|
:004023AC 7E1F                    jle 004023CD
:004023AE 68C8B57A00              push 007AB5C8
:004023B3 EB1D                    jmp 004023D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402386(C)
|
:004023B5 83F802                  cmp eax, 00000002
:004023B8 7531                    jne 004023EB
:004023BA EB0E                    jmp 004023CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040233F(C)
|
:004023BC 8B16                    mov edx, dword ptr [esi]
:004023BE 8BCE                    mov ecx, esi
:004023C0 FF92C8000000            call dword ptr [edx+000000C8]
:004023C6 84C0                    test al, al
:004023C8 7421                    je 004023EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004023BA(U)
|
:004023CA 8B4D2B                  mov ecx, dword ptr [ebp+2B]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004023AC(C)
|
:004023CD 68D8B57A00              push 007AB5D8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402357(U), :004023AA(U), :004023B3(U)
|
:004023D2 E8B9061F00              call 005F2A90
:004023D7 8B07                    mov eax, dword ptr [edi]
:004023D9 8B5500                  mov edx, dword ptr [ebp+00]
:004023DC 6A00                    push 00000000
:004023DE 8D4C2420                lea ecx, dword ptr [esp+20]
:004023E2 6A00                    push 00000000
:004023E4 51                      push ecx
:004023E5 50                      push eax
:004023E6 8BCD                    mov ecx, ebp
:004023E8 FF5268                  call [edx+68]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004023B8(C), :004023C8(C)
|
:004023EB 8B442414                mov eax, dword ptr [esp+14]
:004023EF 8B4C2418                mov ecx, dword ptr [esp+18]
:004023F3 83C004                  add eax, 00000004
:004023F6 3BC1                    cmp eax, ecx
:004023F8 89442414                mov dword ptr [esp+14], eax
:004023FC 0F85E5FDFFFF            jne 004021E7
:00402402 8B8C248C000000          mov ecx, dword ptr [esp+0000008C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004021DF(C)
|
:00402409 8B942494000000          mov edx, dword ptr [esp+00000094]
:00402410 C68424E800000004        mov byte ptr [esp+000000E8], 04
:00402418 2BD1                    sub edx, ecx
:0040241A C1FA02                  sar edx, 02
:0040241D 52                      push edx
:0040241E 51                      push ecx
:0040241F 8D8C249C000000          lea ecx, dword ptr [esp+0000009C]
:00402426 E895180000              call 00403CC0
:0040242B A05CB47A00              mov al, byte ptr [007AB45C]
:00402430 C68424E800000002        mov byte ptr [esp+000000E8], 02
:00402438 84C0                    test al, al
:0040243A 7413                    je 0040244F
:0040243C A0C8977A00              mov al, byte ptr [007A97C8]
:00402441 84C0                    test al, al
:00402443 740A                    je 0040244F
:00402445 B9B8977A00              mov ecx, 007A97B8
:0040244A E861F31D00              call 005E17B0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040243A(C), :00402443(C)
|
:0040244F 8B8424F0000000          mov eax, dword ptr [esp+000000F0]
:00402456 8B500C                  mov edx, dword ptr [eax+0C]
:00402459 8B4814                  mov ecx, dword ptr [eax+14]
:0040245C 8B7010                  mov esi, dword ptr [eax+10]
:0040245F 8B4018                  mov eax, dword ptr [eax+18]
:00402462 2BC6                    sub eax, esi
:00402464 2BCA                    sub ecx, edx
:00402466 89442418                mov dword ptr [esp+18], eax
:0040246A 894C243C                mov dword ptr [esp+3C], ecx
:0040246E DB442418                fild dword ptr [esp+18]
:00402472 D84F14                  fmul dword ptr [edi+14]
:00402475 E816C52B00              call 006BE990
:0040247A DB44243C                fild dword ptr [esp+3C]
:0040247E 8BE8                    mov ebp, eax
:00402480 D84F14                  fmul dword ptr [edi+14]
:00402483 E808C52B00              call 006BE990
:00402488 8B0F                    mov ecx, dword ptr [edi]
:0040248A 8BD8                    mov ebx, eax
:0040248C 6A00                    push 00000000
:0040248E 6A00                    push 00000000
:00402490 8B5108                  mov edx, dword ptr [ecx+08]
:00402493 8B410C                  mov eax, dword ptr [ecx+0C]
:00402496 2BD3                    sub edx, ebx
:00402498 2BC5                    sub eax, ebp
:0040249A 8BFA                    mov edi, edx
:0040249C 6810B57A00              push 007AB510
:004024A1 99                      cdq
:004024A2 2BC2                    sub eax, edx
:004024A4 8BF0                    mov esi, eax
:004024A6 8BC7                    mov eax, edi
:004024A8 99                      cdq
:004024A9 2BC2                    sub eax, edx
:004024AB 8D542478                lea edx, dword ptr [esp+78]
:004024AF D1FE                    sar esi, 1
:004024B1 D1F8                    sar eax, 1
:004024B3 03EE                    add ebp, esi
:004024B5 03D8                    add ebx, eax
:004024B7 89442478                mov dword ptr [esp+78], eax
:004024BB 899C2480000000          mov dword ptr [esp+00000080], ebx
:004024C2 8974247C                mov dword ptr [esp+7C], esi
:004024C6 89AC2484000000          mov dword ptr [esp+00000084], ebp
:004024CD 8B01                    mov eax, dword ptr [ecx]
:004024CF 52                      push edx
:004024D0 FF5030                  call [eax+30]
:004024D3 8B842480000000          mov eax, dword ptr [esp+00000080]
:004024DA C78424E800000005000000  mov dword ptr [esp+000000E8], 00000005
:004024E5 85C0                    test eax, eax
:004024E7 7438                    je 00402521
:004024E9 8B8C2488000000          mov ecx, dword ptr [esp+00000088]
:004024F0 2BC8                    sub ecx, eax
:004024F2 C1F902                  sar ecx, 02
:004024F5 C1E102                  shl ecx, 02
:004024F8 81F980000000            cmp ecx, 00000080
:004024FE 760B                    jbe 0040250B
:00402500 50                      push eax
:00402501 E8FAED1D00              call 005E1300
:00402506 83C404                  add esp, 00000004
:00402509 EB16                    jmp 00402521

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004024FE(C)
|
:0040250B 49                      dec ecx
:0040250C C1E903                  shr ecx, 03
:0040250F 8B148DFC977A00          mov edx, dword ptr [4*ecx+007A97FC]
:00402516 8D0C8DFC977A00          lea ecx, dword ptr [4*ecx+007A97FC]
:0040251D 8910                    mov dword ptr [eax], edx
:0040251F 8901                    mov dword ptr [ecx], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004024E7(C), :00402509(U)
|
:00402521 8B8C24E0000000          mov ecx, dword ptr [esp+000000E0]
:00402528 5F                      pop edi
:00402529 5E                      pop esi
:0040252A 5D                      pop ebp
:0040252B 64890D00000000          mov dword ptr fs:[00000000], ecx
:00402532 5B                      pop ebx
:00402533 81C4DC000000            add esp, 000000DC
:00402539 C20C00                  ret 000C


:0040253C 90                      nop
:0040253D 90                      nop
:0040253E 90                      nop
:0040253F 90                      nop
:00402540 668B442404              mov ax, word ptr [esp+04]
:00402545 668B542406              mov dx, word ptr [esp+06]
:0040254A 6689413D                mov word ptr [ecx+3D], ax
:0040254E 6689513F                mov word ptr [ecx+3F], dx
:00402552 C20400                  ret 0004


:00402555 90                      nop
:00402556 90                      nop
:00402557 90                      nop
:00402558 90                      nop
:00402559 90                      nop
:0040255A 90                      nop
:0040255B 90                      nop
:0040255C 90                      nop
:0040255D 90                      nop
:0040255E 90                      nop
:0040255F 90                      nop

* Referenced by a CALL at Address:
|:004290C0   
|
:00402560 6AFF                    push FFFFFFFF
:00402562 6808EF6C00              push 006CEF08
:00402567 64A100000000            mov eax, dword ptr fs:[00000000]
:0040256D 50                      push eax
:0040256E 64892500000000          mov dword ptr fs:[00000000], esp
:00402575 83EC2C                  sub esp, 0000002C
:00402578 53                      push ebx
:00402579 55                      push ebp
:0040257A 56                      push esi
:0040257B 8BF1                    mov esi, ecx
:0040257D 33ED                    xor ebp, ebp
:0040257F 57                      push edi
:00402580 89742414                mov dword ptr [esp+14], esi
:00402584 896C2410                mov dword ptr [esp+10], ebp
:00402588 E803100000              call 00403590
:0040258D 896C2444                mov dword ptr [esp+44], ebp
:00402591 896E0C                  mov dword ptr [esi+0C], ebp
:00402594 896E10                  mov dword ptr [esi+10], ebp
:00402597 896E14                  mov dword ptr [esi+14], ebp
:0040259A 896E18                  mov dword ptr [esi+18], ebp
:0040259D 896E1C                  mov dword ptr [esi+1C], ebp
:004025A0 C7460878877000          mov [esi+08], 00708778
:004025A7 8B3D88DA7900            mov edi, dword ptr [0079DA88]
:004025AD B894DA7900              mov eax, 0079DA94
:004025B2 47                      inc edi
:004025B3 893D88DA7900            mov dword ptr [0079DA88], edi
:004025B9 894624                  mov dword ptr [esi+24], eax
:004025BC 8B1588DA7900            mov edx, dword ptr [0079DA88]
:004025C2 42                      inc edx
:004025C3 891588DA7900            mov dword ptr [0079DA88], edx
:004025C9 894628                  mov dword ptr [esi+28], eax
:004025CC 8B0D88DA7900            mov ecx, dword ptr [0079DA88]
:004025D2 41                      inc ecx
:004025D3 890D88DA7900            mov dword ptr [0079DA88], ecx
:004025D9 89462C                  mov dword ptr [esi+2C], eax
:004025DC 8D5E3B                  lea ebx, dword ptr [esi+3B]
:004025DF 33C0                    xor eax, eax
:004025E1 33C9                    xor ecx, ecx
:004025E3 33D2                    xor edx, edx
:004025E5 8903                    mov dword ptr [ebx], eax
:004025E7 83CFFF                  or edi, FFFFFFFF
:004025EA 896E37                  mov dword ptr [esi+37], ebp
:004025ED 894B04                  mov dword ptr [ebx+04], ecx
:004025F0 895308                  mov dword ptr [ebx+08], edx
:004025F3 897B0C                  mov dword ptr [ebx+0C], edi
:004025F6 8D4E4B                  lea ecx, dword ptr [esi+4B]
:004025F9 C644244405              mov [esp+44], 05
:004025FE E8BD100000              call 004036C0
:00402603 8D4E5F                  lea ecx, dword ptr [esi+5F]
:00402606 C644244406              mov [esp+44], 06
:0040260B E8B0100000              call 004036C0
:00402610 8D4E73                  lea ecx, dword ptr [esi+73]
:00402613 C644244407              mov [esp+44], 07
:00402618 E8A3100000              call 004036C0
:0040261D 8D8E87000000            lea ecx, dword ptr [esi+00000087]
:00402623 C644244408              mov [esp+44], 08
:00402628 E893100000              call 004036C0
:0040262D 8D8E9B000000            lea ecx, dword ptr [esi+0000009B]
:00402633 C644244409              mov [esp+44], 09
:00402638 E883100000              call 004036C0
:0040263D 89AEE8000000            mov dword ptr [esi+000000E8], ebp
:00402643 89AEEC000000            mov dword ptr [esi+000000EC], ebp
:00402649 8BCE                    mov ecx, esi
:0040264B C64424440A              mov [esp+44], 0A
:00402650 C7060C867000            mov dword ptr [esi], 0070860C
:00402656 C7460804867000          mov [esi+08], 00708604
:0040265D E8CEA21F00              call 005FC930
:00402662 8B442450                mov eax, dword ptr [esp+50]
:00402666 8D9EC0000000            lea ebx, dword ptr [esi+000000C0]
:0040266C 8BCB                    mov ecx, ebx
:0040266E 8B10                    mov edx, dword ptr [eax]
:00402670 8911                    mov dword ptr [ecx], edx
:00402672 8B5004                  mov edx, dword ptr [eax+04]
:00402675 895104                  mov dword ptr [ecx+04], edx
:00402678 8B5008                  mov edx, dword ptr [eax+08]
:0040267B 895108                  mov dword ptr [ecx+08], edx
:0040267E 8B400C                  mov eax, dword ptr [eax+0C]
:00402681 89410C                  mov dword ptr [ecx+0C], eax
:00402684 8B4C244C                mov ecx, dword ptr [esp+4C]
:00402688 3BCD                    cmp ecx, ebp
:0040268A 7407                    je 00402693
:0040268C 8B11                    mov edx, dword ptr [ecx]
:0040268E 55                      push ebp
:0040268F 56                      push esi
:00402690 FF523C                  call [edx+3C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040268A(C)
|
:00402693 8D442450                lea eax, dword ptr [esp+50]
:00402697 8D8EF2000000            lea ecx, dword ptr [esi+000000F2]
:0040269D 50                      push eax
:0040269E C74424480C000000        mov [esp+48], 0000000C
:004026A6 E8F5130000              call 00403AA0
:004026AB 8D8EF6000000            lea ecx, dword ptr [esi+000000F6]
:004026B1 C64424440E              mov [esp+44], 0E
:004026B6 E8A5EFFFFF              call 00401660
:004026BB 8B4C2454                mov ecx, dword ptr [esp+54]
:004026BF 682A010000              push 0000012A
:004026C4 C64424480F              mov [esp+48], 0F
:004026C9 898E63010000            mov dword ptr [esi+00000163], ecx
:004026CF C70698847000            mov dword ptr [esi], 00708498
:004026D5 C7460890847000          mov [esi+08], 00708490
:004026DC C6866701000000          mov byte ptr [esi+00000167], 00
:004026E3 E898EB1D00              call 005E1280
:004026E8 83C404                  add esp, 00000004
:004026EB 8944244C                mov dword ptr [esp+4C], eax
:004026EF 3BC5                    cmp eax, ebp
:004026F1 C644244410              mov [esp+44], 10
:004026F6 0F8485000000            je 00402781
:004026FC 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00402702 8D4C2450                lea ecx, dword ptr [esp+50]
:00402706 52                      push edx

* Possible StringData Ref from Data Obj ->"+"
                                  |
:00402707 68CCB17800              push 0078B1CC
:0040270C E89F891E00              call 005EB0B0
:00402711 8B7B08                  mov edi, dword ptr [ebx+08]
:00402714 8B0B                    mov ecx, dword ptr [ebx]
:00402716 B8D02B4000              mov eax, 00402BD0
:0040271B 55                      push ebp
:0040271C 50                      push eax
:0040271D 8D442430                lea eax, dword ptr [esp+30]
:00402721 2BF9                    sub edi, ecx
:00402723 50                      push eax
:00402724 8BCE                    mov ecx, esi
:00402726 C644245011              mov [esp+50], 11
:0040272B 83EF0A                  sub edi, 0000000A
:0040272E C744241C03000000        mov [esp+1C], 00000003
:00402736 E8750B0000              call 004032B0
:0040273B 8D4F0A                  lea ecx, dword ptr [edi+0A]
:0040273E 55                      push ebp
:0040273F 894C2424                mov dword ptr [esp+24], ecx
:00402743 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00402749 6A02                    push 00000002
:0040274B 897C2420                mov dword ptr [esp+20], edi
:0040274F 8D514C                  lea edx, dword ptr [ecx+4C]
:00402752 896C2424                mov dword ptr [esp+24], ebp
:00402756 52                      push edx
:00402757 C74424300A000000        mov [esp+30], 0000000A
:0040275F 8B4918                  mov ecx, dword ptr [ecx+18]
:00402762 8D54245C                lea edx, dword ptr [esp+5C]
:00402766 55                      push ebp
:00402767 52                      push edx
:00402768 51                      push ecx
:00402769 8B4C2464                mov ecx, dword ptr [esp+64]
:0040276D 8D542430                lea edx, dword ptr [esp+30]
:00402771 50                      push eax
:00402772 52                      push edx
:00402773 56                      push esi
:00402774 C744246812000000        mov [esp+68], 00000012
:0040277C E82FC31F00              call 005FEAB0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004026F6(C)
|
:00402781 8A442410                mov al, byte ptr [esp+10]
:00402785 C744244413000000        mov [esp+44], 00000013
:0040278D A802                    test al, 02
:0040278F 741D                    je 004027AE
:00402791 8B4C2410                mov ecx, dword ptr [esp+10]
:00402795 83E1FD                  and ecx, FFFFFFFD
:00402798 894C2410                mov dword ptr [esp+10], ecx
:0040279C 8B4C2428                mov ecx, dword ptr [esp+28]
:004027A0 3BCD                    cmp ecx, ebp
:004027A2 740A                    je 004027AE
:004027A4 8D442428                lea eax, dword ptr [esp+28]
:004027A8 50                      push eax
:004027A9 E872BB1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040278F(C), :004027A2(C)
|
:004027AE 8A442410                mov al, byte ptr [esp+10]
:004027B2 C74424440F000000        mov [esp+44], 0000000F
:004027BA A801                    test al, 01
:004027BC 7422                    je 004027E0
:004027BE 8B4C2450                mov ecx, dword ptr [esp+50]
:004027C2 8B542410                mov edx, dword ptr [esp+10]
:004027C6 83E2FE                  and edx, FFFFFFFE
:004027C9 8D41F4                  lea eax, dword ptr [ecx-0C]
:004027CC 89542410                mov dword ptr [esp+10], edx
:004027D0 8B08                    mov ecx, dword ptr [eax]
:004027D2 49                      dec ecx
:004027D3 8908                    mov dword ptr [eax], ecx
:004027D5 7509                    jne 004027E0
:004027D7 50                      push eax
:004027D8 E823EB1D00              call 005E1300
:004027DD 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004027BC(C), :004027D5(C)
|
:004027E0 682A010000              push 0000012A
:004027E5 E896EA1D00              call 005E1280
:004027EA 83C404                  add esp, 00000004
:004027ED 8944244C                mov dword ptr [esp+4C], eax
:004027F1 3BC5                    cmp eax, ebp
:004027F3 C644244415              mov [esp+44], 15
:004027F8 0F8499000000            je 00402897
:004027FE 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00402804 8D4C2450                lea ecx, dword ptr [esp+50]
:00402808 52                      push edx

* Possible StringData Ref from Data Obj ->"-"
                                  |
:00402809 68C8B17800              push 0078B1C8
:0040280E E89D881E00              call 005EB0B0
:00402813 8B542410                mov edx, dword ptr [esp+10]
:00402817 83CA04                  or edx, 00000004
:0040281A 8B7B0C                  mov edi, dword ptr [ebx+0C]
:0040281D 8B6B04                  mov ebp, dword ptr [ebx+04]
:00402820 33C9                    xor ecx, ecx
:00402822 B8702C4000              mov eax, 00402C70
:00402827 2BFD                    sub edi, ebp
:00402829 8B6B08                  mov ebp, dword ptr [ebx+08]
:0040282C 2B2B                    sub ebp, dword ptr [ebx]
:0040282E 51                      push ecx
:0040282F 50                      push eax
:00402830 8D442430                lea eax, dword ptr [esp+30]
:00402834 83CA08                  or edx, 00000008
:00402837 50                      push eax
:00402838 8BCE                    mov ecx, esi
:0040283A C644245016              mov [esp+50], 16
:0040283F 83EF0A                  sub edi, 0000000A
:00402842 83ED0A                  sub ebp, 0000000A
:00402845 8954241C                mov dword ptr [esp+1C], edx
:00402849 E8620A0000              call 004032B0
:0040284E 8D4F0A                  lea ecx, dword ptr [edi+0A]
:00402851 8D550A                  lea edx, dword ptr [ebp+0A]
:00402854 894C2424                mov dword ptr [esp+24], ecx
:00402858 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:0040285E 89542420                mov dword ptr [esp+20], edx
:00402862 6A00                    push 00000000
:00402864 8D514C                  lea edx, dword ptr [ecx+4C]
:00402867 6A02                    push 00000002
:00402869 52                      push edx
:0040286A 896C2424                mov dword ptr [esp+24], ebp
:0040286E 897C2428                mov dword ptr [esp+28], edi
:00402872 8B4918                  mov ecx, dword ptr [ecx+18]
:00402875 8D54245C                lea edx, dword ptr [esp+5C]
:00402879 6A00                    push 00000000
:0040287B 52                      push edx
:0040287C 51                      push ecx
:0040287D 8B4C2464                mov ecx, dword ptr [esp+64]
:00402881 8D542430                lea edx, dword ptr [esp+30]
:00402885 50                      push eax
:00402886 52                      push edx
:00402887 56                      push esi
:00402888 C744246817000000        mov [esp+68], 00000017
:00402890 E81BC21F00              call 005FEAB0
:00402895 33ED                    xor ebp, ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004027F8(C)
|
:00402897 8A442410                mov al, byte ptr [esp+10]
:0040289B C744244418000000        mov [esp+44], 00000018
:004028A3 A808                    test al, 08
:004028A5 741D                    je 004028C4
:004028A7 8B4C2410                mov ecx, dword ptr [esp+10]
:004028AB 83E1F7                  and ecx, FFFFFFF7
:004028AE 894C2410                mov dword ptr [esp+10], ecx
:004028B2 8B4C2428                mov ecx, dword ptr [esp+28]
:004028B6 3BCD                    cmp ecx, ebp
:004028B8 740A                    je 004028C4
:004028BA 8D442428                lea eax, dword ptr [esp+28]
:004028BE 50                      push eax
:004028BF E85CBA1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004028A5(C), :004028B8(C)
|
:004028C4 8A442410                mov al, byte ptr [esp+10]
:004028C8 C74424440F000000        mov [esp+44], 0000000F
:004028D0 A804                    test al, 04
:004028D2 7418                    je 004028EC
:004028D4 8B4C2450                mov ecx, dword ptr [esp+50]
:004028D8 8D41F4                  lea eax, dword ptr [ecx-0C]
:004028DB 8B49F4                  mov ecx, dword ptr [ecx-0C]
:004028DE 49                      dec ecx
:004028DF 8908                    mov dword ptr [eax], ecx
:004028E1 7509                    jne 004028EC
:004028E3 50                      push eax
:004028E4 E817EA1D00              call 005E1300
:004028E9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004028D2(C), :004028E1(C)
|
:004028EC 8B430C                  mov eax, dword ptr [ebx+0C]
:004028EF 8B4B04                  mov ecx, dword ptr [ebx+04]
:004028F2 8B5308                  mov edx, dword ptr [ebx+08]
:004028F5 8B3B                    mov edi, dword ptr [ebx]
:004028F7 2BC1                    sub eax, ecx
:004028F9 8D4C2418                lea ecx, dword ptr [esp+18]
:004028FD 2BD7                    sub edx, edi
:004028FF 51                      push ecx
:00402900 8D8EF6000000            lea ecx, dword ptr [esi+000000F6]
:00402906 8954241C                mov dword ptr [esp+1C], edx
:0040290A 89442420                mov dword ptr [esp+20], eax
:0040290E E87DEFFFFF              call 00401890
:00402913 8BCE                    mov ecx, esi
:00402915 E826000000              call 00402940
:0040291A 8B4C243C                mov ecx, dword ptr [esp+3C]
:0040291E 8BC6                    mov eax, esi
:00402920 5F                      pop edi
:00402921 5E                      pop esi
:00402922 5D                      pop ebp
:00402923 5B                      pop ebx
:00402924 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040292B 83C438                  add esp, 00000038
:0040292E C20C00                  ret 000C


:00402931 90                      nop
:00402932 90                      nop
:00402933 90                      nop
:00402934 90                      nop
:00402935 90                      nop
:00402936 90                      nop
:00402937 90                      nop
:00402938 90                      nop
:00402939 90                      nop
:0040293A 90                      nop
:0040293B 90                      nop
:0040293C 90                      nop
:0040293D 90                      nop
:0040293E 90                      nop
:0040293F 90                      nop

* Referenced by a CALL at Addresses:
|:00402915   , :00402BBE   , :0042A329   
|
:00402940 55                      push ebp
:00402941 8BEC                    mov ebp, esp
:00402943 83EC2C                  sub esp, 0000002C
:00402946 A1089C7A00              mov eax, dword ptr [007A9C08]
:0040294B 53                      push ebx
:0040294C 56                      push esi
:0040294D 8BF1                    mov esi, ecx
:0040294F D9404C                  fld dword ptr [eax+4C]
:00402952 D80D64837000            fmul dword ptr [00708364]
:00402958 8B4844                  mov ecx, dword ptr [eax+44]
:0040295B 8B5048                  mov edx, dword ptr [eax+48]
:0040295E 57                      push edi
:0040295F 894DD4                  mov dword ptr [ebp-2C], ecx
:00402962 8955D8                  mov dword ptr [ebp-28], edx
:00402965 D95DF8                  fstp dword ptr [ebp-08]
:00402968 D945F8                  fld dword ptr [ebp-08]
:0040296B 9B                      wait
:0040296C D97DFC                  fstcw word ptr [ebp-04]
:0040296F 9B                      wait
:00402970 668B45FC                mov ax, word ptr [ebp-04]
:00402974 80CC0C                  or ah, 0C
:00402977 668945FE                mov word ptr [ebp-02], ax
:0040297B D96DFE                  fldcw  [ebp-02]
:0040297E DB5DEC                  fistp dword ptr [ebp-14]
:00402981 D96DFC                  fldcw  [ebp-04]
:00402984 D945D8                  fld dword ptr [ebp-28]
:00402987 D80D64837000            fmul dword ptr [00708364]
:0040298D D95DF8                  fstp dword ptr [ebp-08]
:00402990 D945F8                  fld dword ptr [ebp-08]
:00402993 9B                      wait
:00402994 D97DFE                  fstcw word ptr [ebp-02]
:00402997 9B                      wait
:00402998 668B45FE                mov ax, word ptr [ebp-02]
:0040299C 80CC0C                  or ah, 0C
:0040299F 668945FC                mov word ptr [ebp-04], ax
:004029A3 D96DFC                  fldcw  [ebp-04]
:004029A6 DB5DF0                  fistp dword ptr [ebp-10]
:004029A9 D96DFE                  fldcw  [ebp-02]
:004029AC D90564837000            fld dword ptr [00708364]
:004029B2 D84DD4                  fmul dword ptr [ebp-2C]
:004029B5 D95DF8                  fstp dword ptr [ebp-08]
:004029B8 D945F8                  fld dword ptr [ebp-08]
:004029BB 9B                      wait
:004029BC D97DFE                  fstcw word ptr [ebp-02]
:004029BF 9B                      wait
:004029C0 668B45FE                mov ax, word ptr [ebp-02]
:004029C4 80CC0C                  or ah, 0C
:004029C7 668945FC                mov word ptr [ebp-04], ax
:004029CB D96DFC                  fldcw  [ebp-04]
:004029CE DB5DF4                  fistp dword ptr [ebp-0C]
:004029D1 D96DFE                  fldcw  [ebp-02]
:004029D4 8B45F4                  mov eax, dword ptr [ebp-0C]
:004029D7 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004029DA 8B55EC                  mov edx, dword ptr [ebp-14]
:004029DD 8945E0                  mov dword ptr [ebp-20], eax
:004029E0 A1089C7A00              mov eax, dword ptr [007A9C08]
:004029E5 894DE4                  mov dword ptr [ebp-1C], ecx
:004029E8 8955E8                  mov dword ptr [ebp-18], edx
:004029EB D94008                  fld dword ptr [eax+08]
:004029EE D80D64837000            fmul dword ptr [00708364]
:004029F4 D95DEC                  fstp dword ptr [ebp-14]
:004029F7 D945EC                  fld dword ptr [ebp-14]
:004029FA 9B                      wait
:004029FB D97DFE                  fstcw word ptr [ebp-02]
:004029FE 9B                      wait
:004029FF 668B45FE                mov ax, word ptr [ebp-02]
:00402A03 80CC0C                  or ah, 0C
:00402A06 668945FC                mov word ptr [ebp-04], ax
:00402A0A D96DFC                  fldcw  [ebp-04]
:00402A0D DB5DF0                  fistp dword ptr [ebp-10]
:00402A10 D96DFE                  fldcw  [ebp-02]
:00402A13 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00402A16 8DBEF6000000            lea edi, dword ptr [esi+000000F6]
:00402A1C 8D55E0                  lea edx, dword ptr [ebp-20]
:00402A1F 894DE4                  mov dword ptr [ebp-1C], ecx
:00402A22 52                      push edx
:00402A23 8BCF                    mov ecx, edi
:00402A25 E8E6F1FFFF              call 00401C10
:00402A2A A1089C7A00              mov eax, dword ptr [007A9C08]
:00402A2F 8B8E63010000            mov ecx, dword ptr [esi+00000163]
:00402A35 8B5828                  mov ebx, dword ptr [eax+28]
:00402A38 E8038F1800              call 0058B940
:00402A3D 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00402A43 50                      push eax
:00402A44 83C104                  add ecx, 00000004
:00402A47 51                      push ecx
:00402A48 53                      push ebx
:00402A49 8BCF                    mov ecx, edi
:00402A4B E8E0F3FFFF              call 00401E30
:00402A50 8B16                    mov edx, dword ptr [esi]
:00402A52 8BCE                    mov ecx, esi
:00402A54 FF520C                  call [edx+0C]
:00402A57 5F                      pop edi
:00402A58 5E                      pop esi
:00402A59 5B                      pop ebx
:00402A5A 8BE5                    mov esp, ebp
:00402A5C 5D                      pop ebp
:00402A5D C3                      ret


:00402A5E 90                      nop
:00402A5F 90                      nop

* Referenced by a CALL at Addresses:
|:0042A250   , :005B92D7   
|
:00402A60 83EC2C                  sub esp, 0000002C
:00402A63 56                      push esi
:00402A64 8BF1                    mov esi, ecx
:00402A66 8D4C2404                lea ecx, dword ptr [esp+04]
:00402A6A C744240412000000        mov [esp+04], 00000012
:00402A72 8B06                    mov eax, dword ptr [esi]
:00402A74 51                      push ecx
:00402A75 8BCE                    mov ecx, esi
:00402A77 C744240C0E000000        mov [esp+0C], 0000000E
:00402A7F C7442410E2000000        mov [esp+10], 000000E2
:00402A87 C744241474000000        mov [esp+14], 00000074
:00402A8F FF5008                  call [eax+08]
:00402A92 8B542434                mov edx, dword ptr [esp+34]
:00402A96 81C6F2000000            add esi, 000000F2
:00402A9C 8B02                    mov eax, dword ptr [edx]
:00402A9E 89442414                mov dword ptr [esp+14], eax
:00402AA2 8B442438                mov eax, dword ptr [esp+38]
:00402AA6 8B4A04                  mov ecx, dword ptr [edx+04]
:00402AA9 894C2418                mov dword ptr [esp+18], ecx
:00402AAD 8B08                    mov ecx, dword ptr [eax]
:00402AAF 8B5208                  mov edx, dword ptr [edx+08]
:00402AB2 894C2424                mov dword ptr [esp+24], ecx
:00402AB6 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00402ABC 8954241C                mov dword ptr [esp+1C], edx
:00402AC0 8B5004                  mov edx, dword ptr [eax+04]
:00402AC3 89542428                mov dword ptr [esp+28], edx
:00402AC7 8B4008                  mov eax, dword ptr [eax+08]
:00402ACA 8944242C                mov dword ptr [esp+2C], eax
:00402ACE 8B919B020000            mov edx, dword ptr [ecx+0000029B]
:00402AD4 8D442414                lea eax, dword ptr [esp+14]
:00402AD8 89542420                mov dword ptr [esp+20], edx
:00402ADC 50                      push eax
:00402ADD 51                      push ecx
:00402ADE 54                      push esp
:00402ADF 8BCE                    mov ecx, esi
:00402AE1 E87A0F0000              call 00403A60
:00402AE6 8D4C243C                lea ecx, dword ptr [esp+3C]
:00402AEA 51                      push ecx
:00402AEB 8BCE                    mov ecx, esi
:00402AED E87E0F0000              call 00403A70
:00402AF2 5E                      pop esi
:00402AF3 83C42C                  add esp, 0000002C
:00402AF6 C20800                  ret 0008


:00402AF9 90                      nop
:00402AFA 90                      nop
:00402AFB 90                      nop
:00402AFC 90                      nop
:00402AFD 90                      nop
:00402AFE 90                      nop
:00402AFF 90                      nop
:00402B00 8A9167010000            mov dl, byte ptr [ecx+00000167]
:00402B06 33C0                    xor eax, eax
:00402B08 83EC08                  sub esp, 00000008
:00402B0B 3AD0                    cmp dl, al
:00402B0D 752A                    jne 00402B39
:00402B0F 56                      push esi
:00402B10 8B742410                mov esi, dword ptr [esp+10]
:00402B14 57                      push edi
:00402B15 50                      push eax
:00402B16 8B3E                    mov edi, dword ptr [esi]
:00402B18 8944240C                mov dword ptr [esp+0C], eax
:00402B1C 89442410                mov dword ptr [esp+10], eax
:00402B20 50                      push eax
:00402B21 8D442410                lea eax, dword ptr [esp+10]
:00402B25 81C1F6000000            add ecx, 000000F6
:00402B2B 50                      push eax
:00402B2C E83FEDFFFF              call 00401870
:00402B31 50                      push eax
:00402B32 8BCE                    mov ecx, esi
:00402B34 FF5728                  call [edi+28]
:00402B37 5F                      pop edi
:00402B38 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402B0D(C)
|
:00402B39 83C408                  add esp, 00000008
:00402B3C C20400                  ret 0004


:00402B3F 90                      nop
:00402B40 A1089C7A00              mov eax, dword ptr [007A9C08]
:00402B45 83EC18                  sub esp, 00000018
:00402B48 56                      push esi
:00402B49 8BF1                    mov esi, ecx
:00402B4B 8A888E020000            mov cl, byte ptr [eax+0000028E]
:00402B51 84C9                    test cl, cl
:00402B53 7409                    je 00402B5E
:00402B55 B001                    mov al, 01
:00402B57 5E                      pop esi
:00402B58 83C418                  add esp, 00000018
:00402B5B C20C00                  ret 000C



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402B53(C)
|
:00402B5E 8B4C2420                mov ecx, dword ptr [esp+20]
:00402B62 57                      push edi
:00402B63 8DBEF6000000            lea edi, dword ptr [esi+000000F6]
:00402B69 8D542408                lea edx, dword ptr [esp+08]
:00402B6D 51                      push ecx
:00402B6E 52                      push edx
:00402B6F 8BCF                    mov ecx, edi
:00402B71 E86AEFFFFF              call 00401AE0
:00402B76 DB442408                fild dword ptr [esp+08]
:00402B7A 8B8E63010000            mov ecx, dword ptr [esi+00000163]
:00402B80 8D442414                lea eax, dword ptr [esp+14]
:00402B84 50                      push eax
:00402B85 D80DF4977A00            fmul dword ptr [007A97F4]
:00402B8B D95C2418                fstp dword ptr [esp+18]
:00402B8F DB442410                fild dword ptr [esp+10]
:00402B93 D80DF4977A00            fmul dword ptr [007A97F4]
:00402B99 D95C241C                fstp dword ptr [esp+1C]
:00402B9D DB442414                fild dword ptr [esp+14]
:00402BA1 D80DF4977A00            fmul dword ptr [007A97F4]
:00402BA7 D95C2420                fstp dword ptr [esp+20]
:00402BAB E860871800              call 0058B310
:00402BB0 8D4C2408                lea ecx, dword ptr [esp+08]
:00402BB4 51                      push ecx
:00402BB5 8BCF                    mov ecx, edi
:00402BB7 E854F0FFFF              call 00401C10
:00402BBC 8BCE                    mov ecx, esi
:00402BBE E87DFDFFFF              call 00402940
:00402BC3 5F                      pop edi
:00402BC4 B001                    mov al, 01
:00402BC6 5E                      pop esi
:00402BC7 83C418                  add esp, 00000018
:00402BCA C20C00                  ret 000C


:00402BCD 90                      nop
:00402BCE 90                      nop
:00402BCF 90                      nop

* Referenced by a CALL at Address:
|:0041FAE1   
|
:00402BD0 83EC10                  sub esp, 00000010
:00402BD3 56                      push esi
:00402BD4 8BF1                    mov esi, ecx
:00402BD6 57                      push edi
:00402BD7 8DBEF6000000            lea edi, dword ptr [esi+000000F6]
:00402BDD 8BCF                    mov ecx, edi
:00402BDF E88CF0FFFF              call 00401C70
:00402BE4 D81D80877000            fcomp dword ptr [00708780]
:00402BEA DFE0                    fstsw ax
:00402BEC F6C401                  test ah, 01
:00402BEF 746C                    je 00402C5D
:00402BF1 53                      push ebx
:00402BF2 8BCF                    mov ecx, edi
:00402BF4 E877F0FFFF              call 00401C70
:00402BF9 D80D7C877000            fmul dword ptr [0070877C]
:00402BFF 51                      push ecx
:00402C00 8BCF                    mov ecx, edi
:00402C02 D91C24                  fstp dword ptr [esp]
:00402C05 E846F0FFFF              call 00401C50
:00402C0A A1089C7A00              mov eax, dword ptr [007A9C08]
:00402C0F 8B8E63010000            mov ecx, dword ptr [esi+00000163]
:00402C15 8B5828                  mov ebx, dword ptr [eax+28]
:00402C18 E8238D1800              call 0058B940
:00402C1D 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00402C23 50                      push eax
:00402C24 83C104                  add ecx, 00000004
:00402C27 51                      push ecx
:00402C28 53                      push ebx
:00402C29 8BCF                    mov ecx, edi
:00402C2B E800F2FFFF              call 00401E30
:00402C30 8B16                    mov edx, dword ptr [esi]
:00402C32 8D44240C                lea eax, dword ptr [esp+0C]
:00402C36 50                      push eax
:00402C37 8BCE                    mov ecx, esi
:00402C39 C744241012000000        mov [esp+10], 00000012
:00402C41 C74424140E000000        mov [esp+14], 0000000E
:00402C49 C7442418E2000000        mov [esp+18], 000000E2
:00402C51 C744241C74000000        mov [esp+1C], 00000074
:00402C59 FF5208                  call [edx+08]
:00402C5C 5B                      pop ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402BEF(C)
|
:00402C5D 5F                      pop edi
:00402C5E 5E                      pop esi
:00402C5F 83C410                  add esp, 00000010
:00402C62 C20400                  ret 0004


:00402C65 90                      nop
:00402C66 90                      nop
:00402C67 90                      nop
:00402C68 90                      nop
:00402C69 90                      nop
:00402C6A 90                      nop
:00402C6B 90                      nop
:00402C6C 90                      nop
:00402C6D 90                      nop
:00402C6E 90                      nop
:00402C6F 90                      nop

* Referenced by a CALL at Address:
|:0041FAF6   
|
:00402C70 83EC10                  sub esp, 00000010
:00402C73 56                      push esi
:00402C74 8BF1                    mov esi, ecx
:00402C76 57                      push edi
:00402C77 8DBEF6000000            lea edi, dword ptr [esi+000000F6]
:00402C7D 8BCF                    mov ecx, edi
:00402C7F E8ECEFFFFF              call 00401C70
:00402C84 D81D88877000            fcomp dword ptr [00708788]
:00402C8A DFE0                    fstsw ax
:00402C8C F6C441                  test ah, 41
:00402C8F 756C                    jne 00402CFD
:00402C91 53                      push ebx
:00402C92 8BCF                    mov ecx, edi
:00402C94 E8D7EFFFFF              call 00401C70
:00402C99 D80D84877000            fmul dword ptr [00708784]
:00402C9F 51                      push ecx
:00402CA0 8BCF                    mov ecx, edi
:00402CA2 D91C24                  fstp dword ptr [esp]
:00402CA5 E8A6EFFFFF              call 00401C50
:00402CAA A1089C7A00              mov eax, dword ptr [007A9C08]
:00402CAF 8B8E63010000            mov ecx, dword ptr [esi+00000163]
:00402CB5 8B5828                  mov ebx, dword ptr [eax+28]
:00402CB8 E8838C1800              call 0058B940
:00402CBD 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00402CC3 50                      push eax
:00402CC4 83C104                  add ecx, 00000004
:00402CC7 51                      push ecx
:00402CC8 53                      push ebx
:00402CC9 8BCF                    mov ecx, edi
:00402CCB E860F1FFFF              call 00401E30
:00402CD0 8B16                    mov edx, dword ptr [esi]
:00402CD2 8D44240C                lea eax, dword ptr [esp+0C]
:00402CD6 50                      push eax
:00402CD7 8BCE                    mov ecx, esi
:00402CD9 C744241012000000        mov [esp+10], 00000012
:00402CE1 C74424140E000000        mov [esp+14], 0000000E
:00402CE9 C7442418E2000000        mov [esp+18], 000000E2
:00402CF1 C744241C74000000        mov [esp+1C], 00000074
:00402CF9 FF5208                  call [edx+08]
:00402CFC 5B                      pop ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402C8F(C)
|
:00402CFD 5F                      pop edi
:00402CFE 5E                      pop esi
:00402CFF 83C410                  add esp, 00000010
:00402D02 C20400                  ret 0004


:00402D05 90                      nop
:00402D06 90                      nop
:00402D07 90                      nop
:00402D08 90                      nop
:00402D09 90                      nop
:00402D0A 90                      nop
:00402D0B 90                      nop
:00402D0C 90                      nop
:00402D0D 90                      nop
:00402D0E 90                      nop
:00402D0F 90                      nop
:00402D10 E90B000000              jmp 00402D20
:00402D15 90                      nop
:00402D16 90                      nop
:00402D17 90                      nop
:00402D18 90                      nop
:00402D19 90                      nop
:00402D1A 90                      nop
:00402D1B 90                      nop
:00402D1C 90                      nop
:00402D1D 90                      nop
:00402D1E 90                      nop
:00402D1F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402D10(U)
|
:00402D20 D90560837000            fld dword ptr [00708360]
:00402D26 D83564837000            fdiv dword ptr [00708364]
:00402D2C D91DF4977A00            fstp dword ptr [007A97F4]
:00402D32 C3                      ret


:00402D33 90                      nop
:00402D34 90                      nop
:00402D35 90                      nop
:00402D36 90                      nop
:00402D37 90                      nop
:00402D38 90                      nop
:00402D39 90                      nop
:00402D3A 90                      nop
:00402D3B 90                      nop
:00402D3C 90                      nop
:00402D3D 90                      nop
:00402D3E 90                      nop
:00402D3F 90                      nop
:00402D40 8A0DA8D47A00            mov cl, byte ptr [007AD4A8]
:00402D46 B001                    mov al, 01
:00402D48 84C8                    test al, cl
:00402D4A 7508                    jne 00402D54
:00402D4C 0AC8                    or cl, al
:00402D4E 880DA8D47A00            mov byte ptr [007AD4A8], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402D4A(C)
|
:00402D54 E907000000              jmp 00402D60
:00402D59 90                      nop
:00402D5A 90                      nop
:00402D5B 90                      nop
:00402D5C 90                      nop
:00402D5D 90                      nop
:00402D5E 90                      nop
:00402D5F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402D54(U)
|
:00402D60 6880104000              push 00401080
:00402D65 E8F3B62B00              call 006BE45D
:00402D6A 59                      pop ecx
:00402D6B C3                      ret


:00402D6C 90                      nop
:00402D6D 90                      nop
:00402D6E 90                      nop
:00402D6F 90                      nop

* Referenced by a CALL at Address:
|:005E2443   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004010C5(U), :0043A915(U), :0047F905(U), :00485875(U), :004878F5(U)
|:00499F75(U), :004BA7A5(U), :004C2A95(U), :004DAD15(U), :004E9EA5(U)
|:0052CE35(U), :005302E5(U), :00555865(U), :00577CC5(U), :005ABA35(U)
|:005DA6C5(U), :005E3A75(U), :00602F55(U), :00603B65(U), :00603BA5(U)
|:006186C5(U), :0061BF15(U), :006225E5(U), :00622845(U), :00623525(U)
|:00623565(U), :006235A5(U), :006235E5(U), :006239D5(U), :00624095(U)
|:00625F75(U), :00626285(U), :0062D1C5(U), :0062D865(U), :0062D9A5(U)
|:006452A5(U), :00649025(U), :00649365(U), :0065BA65(U), :0065D475(U)
|:006612E5(U), :00662D35(U), :00666D85(U), :006687D5(U), :006924C5(U)
|:00694435(U), :00694445(U), :00694455(U), :006A02F5(U)
|
:00402D70 6AFF                    push FFFFFFFF
:00402D72 68C3EC6C00              push 006CECC3
:00402D77 64A100000000            mov eax, dword ptr fs:[00000000]
:00402D7D 50                      push eax
:00402D7E 64892500000000          mov dword ptr fs:[00000000], esp
:00402D85 83EC0C                  sub esp, 0000000C
:00402D88 53                      push ebx
:00402D89 55                      push ebp
:00402D8A 8BE9                    mov ebp, ecx
:00402D8C 56                      push esi
:00402D8D 57                      push edi
:00402D8E 896C2410                mov dword ptr [esp+10], ebp
:00402D92 8B4511                  mov eax, dword ptr [ebp+11]
:00402D95 33DB                    xor ebx, ebx
:00402D97 83E80C                  sub eax, 0000000C
:00402D9A 895C2424                mov dword ptr [esp+24], ebx
:00402D9E 8B08                    mov ecx, dword ptr [eax]
:00402DA0 49                      dec ecx
:00402DA1 8908                    mov dword ptr [eax], ecx
:00402DA3 7509                    jne 00402DAE
:00402DA5 50                      push eax
:00402DA6 E855E51D00              call 005E1300
:00402DAB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402DA3(C)
|
:00402DAE C7450074837000          mov [ebp+00], 00708374
:00402DB5 3BEB                    cmp ebp, ebx
:00402DB7 C744242401000000        mov [esp+24], 00000001
:00402DBF 741A                    je 00402DDB
:00402DC1 8B4504                  mov eax, dword ptr [ebp+04]
:00402DC4 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402DC7 3BC3                    cmp eax, ebx
:00402DC9 7403                    je 00402DCE
:00402DCB 894808                  mov dword ptr [eax+08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402DC9(C)
|
:00402DCE 3BCB                    cmp ecx, ebx
:00402DD0 7403                    je 00402DD5
:00402DD2 894104                  mov dword ptr [ecx+04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402DD0(C)
|
:00402DD5 895D08                  mov dword ptr [ebp+08], ebx
:00402DD8 895D04                  mov dword ptr [ebp+04], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402DBF(C)
|
:00402DDB 8B450C                  mov eax, dword ptr [ebp+0C]
:00402DDE 8B30                    mov esi, dword ptr [eax]
:00402DE0 8B4608                  mov eax, dword ptr [esi+08]
:00402DE3 8D4E0C                  lea ecx, dword ptr [esi+0C]
:00402DE6 3BC1                    cmp eax, ecx
:00402DE8 757F                    jne 00402E69
:00402DEA 3BF3                    cmp esi, ebx
:00402DEC 89742414                mov dword ptr [esp+14], esi
:00402DF0 7472                    je 00402E64
:00402DF2 8D7E0C                  lea edi, dword ptr [esi+0C]
:00402DF5 C644242403              mov [esp+24], 03
:00402DFA 3BC7                    cmp eax, edi
:00402DFC 7418                    je 00402E16

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402E14(C)
|
:00402DFE 51                      push ecx
:00402DFF 8D54241C                lea edx, dword ptr [esp+1C]
:00402E03 8BCC                    mov ecx, esp
:00402E05 52                      push edx
:00402E06 8901                    mov dword ptr [ecx], eax
:00402E08 8BCE                    mov ecx, esi
:00402E0A E811150000              call 00404320
:00402E0F 8B4608                  mov eax, dword ptr [esi+08]
:00402E12 3BC7                    cmp eax, edi
:00402E14 75E8                    jne 00402DFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402DFC(C)
|
:00402E16 8B4704                  mov eax, dword ptr [edi+04]
:00402E19 8B4F08                  mov ecx, dword ptr [edi+08]
:00402E1C 3BC3                    cmp eax, ebx
:00402E1E C7076C837000            mov dword ptr [edi], 0070836C
:00402E24 7403                    je 00402E29
:00402E26 894808                  mov dword ptr [eax+08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402E24(C)
|
:00402E29 3BCB                    cmp ecx, ebx
:00402E2B 7403                    je 00402E30
:00402E2D 894104                  mov dword ptr [ecx+04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402E2B(C)
|
:00402E30 895F08                  mov dword ptr [edi+08], ebx
:00402E33 895F04                  mov dword ptr [edi+04], ebx
:00402E36 8B4604                  mov eax, dword ptr [esi+04]
:00402E39 8B4E08                  mov ecx, dword ptr [esi+08]
:00402E3C 3BC3                    cmp eax, ebx
:00402E3E C644242401              mov [esp+24], 01
:00402E43 C7066C837000            mov dword ptr [esi], 0070836C
:00402E49 7403                    je 00402E4E
:00402E4B 894808                  mov dword ptr [eax+08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402E49(C)
|
:00402E4E 3BCB                    cmp ecx, ebx
:00402E50 7403                    je 00402E55
:00402E52 894104                  mov dword ptr [ecx+04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402E50(C)
|
:00402E55 56                      push esi
:00402E56 895E08                  mov dword ptr [esi+08], ebx
:00402E59 895E04                  mov dword ptr [esi+04], ebx
:00402E5C E89FE41D00              call 005E1300
:00402E61 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402DF0(C)
|
:00402E64 8B450C                  mov eax, dword ptr [ebp+0C]
:00402E67 8918                    mov dword ptr [eax], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402DE8(C)
|
:00402E69 8B4504                  mov eax, dword ptr [ebp+04]
:00402E6C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402E6F 3BC3                    cmp eax, ebx
:00402E71 C745006C837000          mov [ebp+00], 0070836C
:00402E78 7403                    je 00402E7D
:00402E7A 894808                  mov dword ptr [eax+08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402E78(C)
|
:00402E7D 3BCB                    cmp ecx, ebx
:00402E7F 7403                    je 00402E84
:00402E81 894104                  mov dword ptr [ecx+04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402E7F(C)
|
:00402E84 8B4C241C                mov ecx, dword ptr [esp+1C]
:00402E88 5F                      pop edi
:00402E89 895D08                  mov dword ptr [ebp+08], ebx
:00402E8C 895D04                  mov dword ptr [ebp+04], ebx
:00402E8F 5E                      pop esi
:00402E90 5D                      pop ebp
:00402E91 64890D00000000          mov dword ptr fs:[00000000], ecx
:00402E98 5B                      pop ebx
:00402E99 83C418                  add esp, 00000018
:00402E9C C3                      ret


:00402E9D 90                      nop
:00402E9E 90                      nop
:00402E9F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CEDCF(U), :006DF097(U), :006DF0C8(U), :006DF2B6(U), :006E07A7(U)
|:006E0B7A(U), :006E4953(U), :006E5F54(U), :006F7100(U)
|
:00402EA0 6AFF                    push FFFFFFFF
:00402EA2 682BEF6C00              push 006CEF2B
:00402EA7 64A100000000            mov eax, dword ptr fs:[00000000]
:00402EAD 50                      push eax
:00402EAE 64892500000000          mov dword ptr fs:[00000000], esp
:00402EB5 83EC08                  sub esp, 00000008
:00402EB8 8B11                    mov edx, dword ptr [ecx]
:00402EBA 894C2400                mov dword ptr [esp], ecx
:00402EBE 89542404                mov dword ptr [esp+04], edx
:00402EC2 85D2                    test edx, edx
:00402EC4 C744241000000000        mov [esp+10], 00000000
:00402ECC 7440                    je 00402F0E
:00402ECE 8B4108                  mov eax, dword ptr [ecx+08]
:00402ED1 2BC2                    sub eax, edx
:00402ED3 C1F802                  sar eax, 02
:00402ED6 C1E002                  shl eax, 02
:00402ED9 3D80000000              cmp eax, 00000080
:00402EDE 7618                    jbe 00402EF8
:00402EE0 52                      push edx
:00402EE1 E81AE41D00              call 005E1300
:00402EE6 83C404                  add esp, 00000004
:00402EE9 8B4C2408                mov ecx, dword ptr [esp+08]
:00402EED 64890D00000000          mov dword ptr fs:[00000000], ecx
:00402EF4 83C414                  add esp, 00000014
:00402EF7 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402EDE(C)
|
:00402EF8 48                      dec eax
:00402EF9 C1E803                  shr eax, 03
:00402EFC 8B0C85FC977A00          mov ecx, dword ptr [4*eax+007A97FC]
:00402F03 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:00402F0A 890A                    mov dword ptr [edx], ecx
:00402F0C 8910                    mov dword ptr [eax], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402ECC(C)
|
:00402F0E 8B4C2408                mov ecx, dword ptr [esp+08]
:00402F12 64890D00000000          mov dword ptr fs:[00000000], ecx
:00402F19 83C414                  add esp, 00000014
:00402F1C C3                      ret


:00402F1D 90                      nop
:00402F1E 90                      nop
:00402F1F 90                      nop
:00402F20 C20400                  ret 0004


:00402F23 90                      nop
:00402F24 90                      nop
:00402F25 90                      nop
:00402F26 90                      nop
:00402F27 90                      nop
:00402F28 90                      nop
:00402F29 90                      nop
:00402F2A 90                      nop
:00402F2B 90                      nop
:00402F2C 90                      nop
:00402F2D 90                      nop
:00402F2E 90                      nop
:00402F2F 90                      nop
:00402F30 C3                      ret


:00402F31 90                      nop
:00402F32 90                      nop
:00402F33 90                      nop
:00402F34 90                      nop
:00402F35 90                      nop
:00402F36 90                      nop
:00402F37 90                      nop
:00402F38 90                      nop
:00402F39 90                      nop
:00402F3A 90                      nop
:00402F3B 90                      nop
:00402F3C 90                      nop
:00402F3D 90                      nop
:00402F3E 90                      nop
:00402F3F 90                      nop
:00402F40 32C0                    xor al, al
:00402F42 C3                      ret


:00402F43 90                      nop
:00402F44 90                      nop
:00402F45 90                      nop
:00402F46 90                      nop
:00402F47 90                      nop
:00402F48 90                      nop
:00402F49 90                      nop
:00402F4A 90                      nop
:00402F4B 90                      nop
:00402F4C 90                      nop
:00402F4D 90                      nop
:00402F4E 90                      nop
:00402F4F 90                      nop
:00402F50 8A81AF000000            mov al, byte ptr [ecx+000000AF]
:00402F56 56                      push esi
:00402F57 84C0                    test al, al
:00402F59 743E                    je 00402F99
:00402F5B 8B81C8000000            mov eax, dword ptr [ecx+000000C8]
:00402F61 8B91C0000000            mov edx, dword ptr [ecx+000000C0]
:00402F67 8BB1C4000000            mov esi, dword ptr [ecx+000000C4]
:00402F6D 2BC2                    sub eax, edx
:00402F6F 8B91CC000000            mov edx, dword ptr [ecx+000000CC]
:00402F75 2BD6                    sub edx, esi
:00402F77 8B742408                mov esi, dword ptr [esp+08]
:00402F7B 8B0E                    mov ecx, dword ptr [esi]
:00402F7D 85C9                    test ecx, ecx
:00402F7F 7C18                    jl 00402F99
:00402F81 3BC8                    cmp ecx, eax
:00402F83 7D14                    jge 00402F99
:00402F85 8B4604                  mov eax, dword ptr [esi+04]
:00402F88 85C0                    test eax, eax
:00402F8A 7C0D                    jl 00402F99
:00402F8C 3BC2                    cmp eax, edx
:00402F8E 7D09                    jge 00402F99
:00402F90 B801000000              mov eax, 00000001
:00402F95 5E                      pop esi
:00402F96 C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402F59(C), :00402F7F(C), :00402F83(C), :00402F8A(C), :00402F8E(C)
|
:00402F99 33C0                    xor eax, eax
:00402F9B 5E                      pop esi
:00402F9C C20400                  ret 0004


:00402F9F 90                      nop
:00402FA0 B001                    mov al, 01
:00402FA2 C3                      ret


:00402FA3 90                      nop
:00402FA4 90                      nop
:00402FA5 90                      nop
:00402FA6 90                      nop
:00402FA7 90                      nop
:00402FA8 90                      nop
:00402FA9 90                      nop
:00402FAA 90                      nop
:00402FAB 90                      nop
:00402FAC 90                      nop
:00402FAD 90                      nop
:00402FAE 90                      nop
:00402FAF 90                      nop
:00402FB0 83EC08                  sub esp, 00000008
:00402FB3 8B91C4000000            mov edx, dword ptr [ecx+000000C4]
:00402FB9 8B44240C                mov eax, dword ptr [esp+0C]
:00402FBD 89542404                mov dword ptr [esp+04], edx
:00402FC1 89442400                mov dword ptr [esp], eax
:00402FC5 8B01                    mov eax, dword ptr [ecx]
:00402FC7 8D542400                lea edx, dword ptr [esp]
:00402FCB 52                      push edx
:00402FCC FF504C                  call [eax+4C]
:00402FCF 83C408                  add esp, 00000008
:00402FD2 C20400                  ret 0004


:00402FD5 90                      nop
:00402FD6 90                      nop
:00402FD7 90                      nop
:00402FD8 90                      nop
:00402FD9 90                      nop
:00402FDA 90                      nop
:00402FDB 90                      nop
:00402FDC 90                      nop
:00402FDD 90                      nop
:00402FDE 90                      nop
:00402FDF 90                      nop
:00402FE0 83EC08                  sub esp, 00000008
:00402FE3 8B54240C                mov edx, dword ptr [esp+0C]
:00402FE7 8B81C0000000            mov eax, dword ptr [ecx+000000C0]
:00402FED 89542404                mov dword ptr [esp+04], edx
:00402FF1 89442400                mov dword ptr [esp], eax
:00402FF5 8B01                    mov eax, dword ptr [ecx]
:00402FF7 8D542400                lea edx, dword ptr [esp]
:00402FFB 52                      push edx
:00402FFC FF504C                  call [eax+4C]
:00402FFF 83C408                  add esp, 00000008
:00403002 C20400                  ret 0004


:00403005 90                      nop
:00403006 90                      nop
:00403007 90                      nop
:00403008 90                      nop
:00403009 90                      nop
:0040300A 90                      nop
:0040300B 90                      nop
:0040300C 90                      nop
:0040300D 90                      nop
:0040300E 90                      nop
:0040300F 90                      nop
:00403010 83EC08                  sub esp, 00000008
:00403013 8B44240C                mov eax, dword ptr [esp+0C]
:00403017 8B91CC000000            mov edx, dword ptr [ecx+000000CC]
:0040301D 89442400                mov dword ptr [esp], eax
:00403021 8B81C4000000            mov eax, dword ptr [ecx+000000C4]
:00403027 2BD0                    sub edx, eax
:00403029 8B01                    mov eax, dword ptr [ecx]
:0040302B 89542404                mov dword ptr [esp+04], edx
:0040302F 8D542400                lea edx, dword ptr [esp]
:00403033 52                      push edx
:00403034 FF5050                  call [eax+50]
:00403037 83C408                  add esp, 00000008
:0040303A C20400                  ret 0004


:0040303D 90                      nop
:0040303E 90                      nop
:0040303F 90                      nop
:00403040 83EC08                  sub esp, 00000008
:00403043 8B81C8000000            mov eax, dword ptr [ecx+000000C8]
:00403049 8B91C0000000            mov edx, dword ptr [ecx+000000C0]
:0040304F 2BC2                    sub eax, edx
:00403051 8B54240C                mov edx, dword ptr [esp+0C]
:00403055 89542404                mov dword ptr [esp+04], edx
:00403059 89442400                mov dword ptr [esp], eax
:0040305D 8B01                    mov eax, dword ptr [ecx]
:0040305F 8D542400                lea edx, dword ptr [esp]
:00403063 52                      push edx
:00403064 FF5050                  call [eax+50]
:00403067 83C408                  add esp, 00000008
:0040306A C20400                  ret 0004


:0040306D 90                      nop
:0040306E 90                      nop
:0040306F 90                      nop
:00403070 83EC08                  sub esp, 00000008
:00403073 56                      push esi
:00403074 8BF1                    mov esi, ecx
:00403076 57                      push edi
:00403077 8B7C2414                mov edi, dword ptr [esp+14]
:0040307B 8B06                    mov eax, dword ptr [esi]
:0040307D 57                      push edi
:0040307E FF504C                  call [eax+4C]
:00403081 8B4F08                  mov ecx, dword ptr [edi+08]
:00403084 8B17                    mov edx, dword ptr [edi]
:00403086 8B4704                  mov eax, dword ptr [edi+04]
:00403089 2BCA                    sub ecx, edx
:0040308B 8B570C                  mov edx, dword ptr [edi+0C]
:0040308E 894C2408                mov dword ptr [esp+08], ecx
:00403092 8D4C2408                lea ecx, dword ptr [esp+08]
:00403096 2BD0                    sub edx, eax
:00403098 8B06                    mov eax, dword ptr [esi]
:0040309A 51                      push ecx
:0040309B 8BCE                    mov ecx, esi
:0040309D 89542410                mov dword ptr [esp+10], edx
:004030A1 FF5050                  call [eax+50]
:004030A4 5F                      pop edi
:004030A5 5E                      pop esi
:004030A6 83C408                  add esp, 00000008
:004030A9 C20400                  ret 0004


:004030AC 90                      nop
:004030AD 90                      nop
:004030AE 90                      nop
:004030AF 90                      nop
:004030B0 8B442404                mov eax, dword ptr [esp+04]
:004030B4 8981D8000000            mov dword ptr [ecx+000000D8], eax
:004030BA C20400                  ret 0004


:004030BD 90                      nop
:004030BE 90                      nop
:004030BF 90                      nop
:004030C0 C3                      ret


:004030C1 90                      nop
:004030C2 90                      nop
:004030C3 90                      nop
:004030C4 90                      nop
:004030C5 90                      nop
:004030C6 90                      nop
:004030C7 90                      nop
:004030C8 90                      nop
:004030C9 90                      nop
:004030CA 90                      nop
:004030CB 90                      nop
:004030CC 90                      nop
:004030CD 90                      nop
:004030CE 90                      nop
:004030CF 90                      nop
:004030D0 C3                      ret


:004030D1 90                      nop
:004030D2 90                      nop
:004030D3 90                      nop
:004030D4 90                      nop
:004030D5 90                      nop
:004030D6 90                      nop
:004030D7 90                      nop
:004030D8 90                      nop
:004030D9 90                      nop
:004030DA 90                      nop
:004030DB 90                      nop
:004030DC 90                      nop
:004030DD 90                      nop
:004030DE 90                      nop
:004030DF 90                      nop
:004030E0 8A4136                  mov al, byte ptr [ecx+36]
:004030E3 C0E802                  shr al, 02
:004030E6 2401                    and al, 01
:004030E8 C20800                  ret 0008


:004030EB 90                      nop
:004030EC 90                      nop
:004030ED 90                      nop
:004030EE 90                      nop
:004030EF 90                      nop
:004030F0 8A4136                  mov al, byte ptr [ecx+36]
:004030F3 C0E802                  shr al, 02
:004030F6 2401                    and al, 01
:004030F8 C20C00                  ret 000C


:004030FB 90                      nop
:004030FC 90                      nop
:004030FD 90                      nop
:004030FE 90                      nop
:004030FF 90                      nop
:00403100 8A4136                  mov al, byte ptr [ecx+36]
:00403103 C0E802                  shr al, 02
:00403106 2401                    and al, 01
:00403108 C20C00                  ret 000C


:0040310B 90                      nop
:0040310C 90                      nop
:0040310D 90                      nop
:0040310E 90                      nop
:0040310F 90                      nop
:00403110 8A4136                  mov al, byte ptr [ecx+36]
:00403113 C0E802                  shr al, 02
:00403116 2401                    and al, 01
:00403118 C20C00                  ret 000C


:0040311B 90                      nop
:0040311C 90                      nop
:0040311D 90                      nop
:0040311E 90                      nop
:0040311F 90                      nop
:00403120 8A4136                  mov al, byte ptr [ecx+36]
:00403123 C0E802                  shr al, 02
:00403126 2401                    and al, 01
:00403128 C20C00                  ret 000C


:0040312B 90                      nop
:0040312C 90                      nop
:0040312D 90                      nop
:0040312E 90                      nop
:0040312F 90                      nop
:00403130 32C0                    xor al, al
:00403132 C20C00                  ret 000C


:00403135 90                      nop
:00403136 90                      nop
:00403137 90                      nop
:00403138 90                      nop
:00403139 90                      nop
:0040313A 90                      nop
:0040313B 90                      nop
:0040313C 90                      nop
:0040313D 90                      nop
:0040313E 90                      nop
:0040313F 90                      nop
:00403140 32C0                    xor al, al
:00403142 C20C00                  ret 000C


:00403145 90                      nop
:00403146 90                      nop
:00403147 90                      nop
:00403148 90                      nop
:00403149 90                      nop
:0040314A 90                      nop
:0040314B 90                      nop
:0040314C 90                      nop
:0040314D 90                      nop
:0040314E 90                      nop
:0040314F 90                      nop
:00403150 C20400                  ret 0004


:00403153 90                      nop
:00403154 90                      nop
:00403155 90                      nop
:00403156 90                      nop
:00403157 90                      nop
:00403158 90                      nop
:00403159 90                      nop
:0040315A 90                      nop
:0040315B 90                      nop
:0040315C 90                      nop
:0040315D 90                      nop
:0040315E 90                      nop
:0040315F 90                      nop
:00403160 C3                      ret


:00403161 90                      nop
:00403162 90                      nop
:00403163 90                      nop
:00403164 90                      nop
:00403165 90                      nop
:00403166 90                      nop
:00403167 90                      nop
:00403168 90                      nop
:00403169 90                      nop
:0040316A 90                      nop
:0040316B 90                      nop
:0040316C 90                      nop
:0040316D 90                      nop
:0040316E 90                      nop
:0040316F 90                      nop
:00403170 C3                      ret


:00403171 90                      nop
:00403172 90                      nop
:00403173 90                      nop
:00403174 90                      nop
:00403175 90                      nop
:00403176 90                      nop
:00403177 90                      nop
:00403178 90                      nop
:00403179 90                      nop
:0040317A 90                      nop
:0040317B 90                      nop
:0040317C 90                      nop
:0040317D 90                      nop
:0040317E 90                      nop
:0040317F 90                      nop
:00403180 C3                      ret


:00403181 90                      nop
:00403182 90                      nop
:00403183 90                      nop
:00403184 90                      nop
:00403185 90                      nop
:00403186 90                      nop
:00403187 90                      nop
:00403188 90                      nop
:00403189 90                      nop
:0040318A 90                      nop
:0040318B 90                      nop
:0040318C 90                      nop
:0040318D 90                      nop
:0040318E 90                      nop
:0040318F 90                      nop
:00403190 C3                      ret


:00403191 90                      nop
:00403192 90                      nop
:00403193 90                      nop
:00403194 90                      nop
:00403195 90                      nop
:00403196 90                      nop
:00403197 90                      nop
:00403198 90                      nop
:00403199 90                      nop
:0040319A 90                      nop
:0040319B 90                      nop
:0040319C 90                      nop
:0040319D 90                      nop
:0040319E 90                      nop
:0040319F 90                      nop
:004031A0 C3                      ret


:004031A1 90                      nop
:004031A2 90                      nop
:004031A3 90                      nop
:004031A4 90                      nop
:004031A5 90                      nop
:004031A6 90                      nop
:004031A7 90                      nop
:004031A8 90                      nop
:004031A9 90                      nop
:004031AA 90                      nop
:004031AB 90                      nop
:004031AC 90                      nop
:004031AD 90                      nop
:004031AE 90                      nop
:004031AF 90                      nop
:004031B0 C3                      ret


:004031B1 90                      nop
:004031B2 90                      nop
:004031B3 90                      nop
:004031B4 90                      nop
:004031B5 90                      nop
:004031B6 90                      nop
:004031B7 90                      nop
:004031B8 90                      nop
:004031B9 90                      nop
:004031BA 90                      nop
:004031BB 90                      nop
:004031BC 90                      nop
:004031BD 90                      nop
:004031BE 90                      nop
:004031BF 90                      nop
:004031C0 C3                      ret


:004031C1 90                      nop
:004031C2 90                      nop
:004031C3 90                      nop
:004031C4 90                      nop
:004031C5 90                      nop
:004031C6 90                      nop
:004031C7 90                      nop
:004031C8 90                      nop
:004031C9 90                      nop
:004031CA 90                      nop
:004031CB 90                      nop
:004031CC 90                      nop
:004031CD 90                      nop
:004031CE 90                      nop
:004031CF 90                      nop
:004031D0 C3                      ret


:004031D1 90                      nop
:004031D2 90                      nop
:004031D3 90                      nop
:004031D4 90                      nop
:004031D5 90                      nop
:004031D6 90                      nop
:004031D7 90                      nop
:004031D8 90                      nop
:004031D9 90                      nop
:004031DA 90                      nop
:004031DB 90                      nop
:004031DC 90                      nop
:004031DD 90                      nop
:004031DE 90                      nop
:004031DF 90                      nop
:004031E0 C3                      ret


:004031E1 90                      nop
:004031E2 90                      nop
:004031E3 90                      nop
:004031E4 90                      nop
:004031E5 90                      nop
:004031E6 90                      nop
:004031E7 90                      nop
:004031E8 90                      nop
:004031E9 90                      nop
:004031EA 90                      nop
:004031EB 90                      nop
:004031EC 90                      nop
:004031ED 90                      nop
:004031EE 90                      nop
:004031EF 90                      nop
:004031F0 C3                      ret


:004031F1 90                      nop
:004031F2 90                      nop
:004031F3 90                      nop
:004031F4 90                      nop
:004031F5 90                      nop
:004031F6 90                      nop
:004031F7 90                      nop
:004031F8 90                      nop
:004031F9 90                      nop
:004031FA 90                      nop
:004031FB 90                      nop
:004031FC 90                      nop
:004031FD 90                      nop
:004031FE 90                      nop
:004031FF 90                      nop
:00403200 C20400                  ret 0004


:00403203 90                      nop
:00403204 90                      nop
:00403205 90                      nop
:00403206 90                      nop
:00403207 90                      nop
:00403208 90                      nop
:00403209 90                      nop
:0040320A 90                      nop
:0040320B 90                      nop
:0040320C 90                      nop
:0040320D 90                      nop
:0040320E 90                      nop
:0040320F 90                      nop
:00403210 C20400                  ret 0004


:00403213 90                      nop
:00403214 90                      nop
:00403215 90                      nop
:00403216 90                      nop
:00403217 90                      nop
:00403218 90                      nop
:00403219 90                      nop
:0040321A 90                      nop
:0040321B 90                      nop
:0040321C 90                      nop
:0040321D 90                      nop
:0040321E 90                      nop
:0040321F 90                      nop
:00403220 C3                      ret


:00403221 90                      nop
:00403222 90                      nop
:00403223 90                      nop
:00403224 90                      nop
:00403225 90                      nop
:00403226 90                      nop
:00403227 90                      nop
:00403228 90                      nop
:00403229 90                      nop
:0040322A 90                      nop
:0040322B 90                      nop
:0040322C 90                      nop
:0040322D 90                      nop
:0040322E 90                      nop
:0040322F 90                      nop
:00403230 C20400                  ret 0004


:00403233 90                      nop
:00403234 90                      nop
:00403235 90                      nop
:00403236 90                      nop
:00403237 90                      nop
:00403238 90                      nop
:00403239 90                      nop
:0040323A 90                      nop
:0040323B 90                      nop
:0040323C 90                      nop
:0040323D 90                      nop
:0040323E 90                      nop
:0040323F 90                      nop
:00403240 C20400                  ret 0004


:00403243 90                      nop
:00403244 90                      nop
:00403245 90                      nop
:00403246 90                      nop
:00403247 90                      nop
:00403248 90                      nop
:00403249 90                      nop
:0040324A 90                      nop
:0040324B 90                      nop
:0040324C 90                      nop
:0040324D 90                      nop
:0040324E 90                      nop
:0040324F 90                      nop
:00403250 C20400                  ret 0004


:00403253 90                      nop
:00403254 90                      nop
:00403255 90                      nop
:00403256 90                      nop
:00403257 90                      nop
:00403258 90                      nop
:00403259 90                      nop
:0040325A 90                      nop
:0040325B 90                      nop
:0040325C 90                      nop
:0040325D 90                      nop
:0040325E 90                      nop
:0040325F 90                      nop
:00403260 C20400                  ret 0004


:00403263 90                      nop
:00403264 90                      nop
:00403265 90                      nop
:00403266 90                      nop
:00403267 90                      nop
:00403268 90                      nop
:00403269 90                      nop
:0040326A 90                      nop
:0040326B 90                      nop
:0040326C 90                      nop
:0040326D 90                      nop
:0040326E 90                      nop
:0040326F 90                      nop
:00403270 C20400                  ret 0004


:00403273 90                      nop
:00403274 90                      nop
:00403275 90                      nop
:00403276 90                      nop
:00403277 90                      nop
:00403278 90                      nop
:00403279 90                      nop
:0040327A 90                      nop
:0040327B 90                      nop
:0040327C 90                      nop
:0040327D 90                      nop
:0040327E 90                      nop
:0040327F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004044B3(U)
|
:00403280 56                      push esi
:00403281 8BF1                    mov esi, ecx
:00403283 E858971F00              call 005FC9E0
:00403288 F644240801              test [esp+08], 01
:0040328D 7409                    je 00403298
:0040328F 56                      push esi
:00403290 E86BE01D00              call 005E1300
:00403295 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040328D(C)
|
:00403298 8BC6                    mov eax, esi
:0040329A 5E                      pop esi
:0040329B C20400                  ret 0004


:0040329E 90                      nop
:0040329F 90                      nop
:004032A0 8A8167010000            mov al, byte ptr [ecx+00000167]
:004032A6 C3                      ret


:004032A7 90                      nop
:004032A8 90                      nop
:004032A9 90                      nop
:004032AA 90                      nop
:004032AB 90                      nop
:004032AC 90                      nop
:004032AD 90                      nop
:004032AE 90                      nop
:004032AF 90                      nop

* Referenced by a CALL at Addresses:
|:00402736   , :00402849   
|
:004032B0 51                      push ecx
:004032B1 8B44240C                mov eax, dword ptr [esp+0C]
:004032B5 53                      push ebx
:004032B6 56                      push esi
:004032B7 57                      push edi
:004032B8 83EC10                  sub esp, 00000010
:004032BB 33D2                    xor edx, edx
:004032BD 8BDC                    mov ebx, esp
:004032BF 33F6                    xor esi, esi
:004032C1 33FF                    xor edi, edi
:004032C3 8903                    mov dword ptr [ebx], eax
:004032C5 897C241C                mov dword ptr [esp+1C], edi
:004032C9 895304                  mov dword ptr [ebx+04], edx
:004032CC 897308                  mov dword ptr [ebx+08], esi
:004032CF 8B742424                mov esi, dword ptr [esp+24]
:004032D3 56                      push esi
:004032D4 897B0C                  mov dword ptr [ebx+0C], edi
:004032D7 E884030000              call 00403660
:004032DC 8BC6                    mov eax, esi
:004032DE 5F                      pop edi
:004032DF 5E                      pop esi
:004032E0 5B                      pop ebx
:004032E1 59                      pop ecx
:004032E2 C20C00                  ret 000C


:004032E5 90                      nop
:004032E6 90                      nop
:004032E7 90                      nop
:004032E8 90                      nop
:004032E9 90                      nop
:004032EA 90                      nop
:004032EB 90                      nop
:004032EC 90                      nop
:004032ED 90                      nop
:004032EE 90                      nop
:004032EF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004044A3(U)
|
:004032F0 56                      push esi
:004032F1 8BF1                    mov esi, ecx
:004032F3 E818000000              call 00403310
:004032F8 F644240801              test [esp+08], 01
:004032FD 7409                    je 00403308
:004032FF 56                      push esi
:00403300 E8FBDF1D00              call 005E1300
:00403305 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004032FD(C)
|
:00403308 8BC6                    mov eax, esi
:0040330A 5E                      pop esi
:0040330B C20400                  ret 0004


:0040330E 90                      nop
:0040330F 90                      nop

* Referenced by a CALL at Address:
|:004032F3   
|
:00403310 6AFF                    push FFFFFFFF
:00403312 685EEF6C00              push 006CEF5E
:00403317 64A100000000            mov eax, dword ptr fs:[00000000]
:0040331D 50                      push eax
:0040331E 64892500000000          mov dword ptr fs:[00000000], esp
:00403325 51                      push ecx
:00403326 56                      push esi
:00403327 8BF1                    mov esi, ecx
:00403329 89742404                mov dword ptr [esp+04], esi
:0040332D 8D8EF6000000            lea ecx, dword ptr [esi+000000F6]
:00403333 C744241001000000        mov [esp+10], 00000001
:0040333B E8A0E4FFFF              call 004017E0
:00403340 8B8EF2000000            mov ecx, dword ptr [esi+000000F2]
:00403346 8B01                    mov eax, dword ptr [ecx]
:00403348 3BC1                    cmp eax, ecx
:0040334A 7420                    je 0040336C
:0040334C 8B150C987A00            mov edx, dword ptr [007A980C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040336A(C)
|
:00403352 8BC8                    mov ecx, eax
:00403354 8B00                    mov eax, dword ptr [eax]
:00403356 85C9                    test ecx, ecx
:00403358 740A                    je 00403364
:0040335A 8911                    mov dword ptr [ecx], edx
:0040335C 8BD1                    mov edx, ecx
:0040335E 89150C987A00            mov dword ptr [007A980C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403358(C)
|
:00403364 3B86F2000000            cmp eax, dword ptr [esi+000000F2]
:0040336A 75E6                    jne 00403352

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040334A(C)
|
:0040336C 8B86F2000000            mov eax, dword ptr [esi+000000F2]
:00403372 8900                    mov dword ptr [eax], eax
:00403374 8B86F2000000            mov eax, dword ptr [esi+000000F2]
:0040337A 894004                  mov dword ptr [eax+04], eax
:0040337D 8B86F2000000            mov eax, dword ptr [esi+000000F2]
:00403383 85C0                    test eax, eax
:00403385 740D                    je 00403394
:00403387 8B0D0C987A00            mov ecx, dword ptr [007A980C]
:0040338D 8908                    mov dword ptr [eax], ecx
:0040338F A30C987A00              mov dword ptr [007A980C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403385(C)
|
:00403394 8BCE                    mov ecx, esi
:00403396 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:0040339E E83D961F00              call 005FC9E0
:004033A3 8B4C2408                mov ecx, dword ptr [esp+08]
:004033A7 5E                      pop esi
:004033A8 64890D00000000          mov dword ptr fs:[00000000], ecx
:004033AF 83C410                  add esp, 00000010
:004033B2 C3                      ret


:004033B3 90                      nop
:004033B4 90                      nop
:004033B5 90                      nop
:004033B6 90                      nop
:004033B7 90                      nop
:004033B8 90                      nop
:004033B9 90                      nop
:004033BA 90                      nop
:004033BB 90                      nop
:004033BC 90                      nop
:004033BD 90                      nop
:004033BE 90                      nop
:004033BF 90                      nop

* Referenced by a CALL at Addresses:
|:004B3168   , :005109B8   , :00510FF6   , :005122C6   , :0053B02E   
|:00542C5D   , :0054F7BE   , :005A6EDA   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CED07(U), :006CED0F(U), :006CED17(U), :006CED67(U), :006CED92(U)
|:006CEE07(U), :006CEE12(U), :006CEE1D(U), :006CEEB2(U), :006CEEEB(U)
|:006CF0D3(U), :006CF0FC(U), :006CF135(U), :006CF16E(U), :006CF1A7(U)
|:006CF263(U), :006CF26B(U), :006CF27D(U), :006CF2DD(U), :006CF316(U)
|:006CF38C(U), :006CF394(U), :006CF39C(U), :006CF3A4(U), :006CF463(U)
|:006CF479(U), :006CF493(U), :006CF49B(U), :006CF4B1(U), :006CF553(U)
|:006CF5CB(U), :006CF66E(U), :006CF685(U), :006CF6C0(U), :006CF6D9(U)
|:006CF839(U), :006CF844(U), :006CF84F(U), :006CF8AD(U), :006CF8D1(U)
|:006CF8D9(U), :006CF8FA(U), :006CF91C(U), :006CF93E(U), :006CF955(U)
|:006CF98E(U), :006CF9A5(U), :006CF9E2(U), :006CF9FB(U), :006CFA4B(U)
|:006CFA67(U), :006CFA6F(U), :006CFA89(U), :006CFAA6(U), :006CFAD1(U)
|:006CFAE8(U), :006CFB21(U), :006CFB38(U), :006CFB71(U), :006CFB8A(U)
|:006CFBC7(U), :006CFBE0(U), :006CFC1D(U), :006CFC36(U), :006CFC73(U)
|:006CFC8C(U), :006CFCB8(U), :006CFCC0(U), :006CFCC8(U), :006CFCD0(U)
|:006CFCD8(U), :006CFCE0(U), :006CFCE8(U), :006CFCF0(U), :006CFCF8(U)
|:006CFD00(U), :006CFD08(U), :006CFD10(U), :006CFD18(U), :006CFD20(U)
|:006CFD32(U), :006CFD3A(U), :006CFD4A(U), :006CFD74(U), :006CFD7C(U)
|:006CFD91(U), :006CFDB8(U), :006CFDFD(U), :006CFE17(U), :006CFE53(U)
|:006CFE85(U), :006CFE9F(U), :006CFEE8(U), :006CFF07(U), :006CFF53(U)
|:006CFF6F(U), :006CFFA5(U), :006CFFBE(U), :006CFFD4(U), :006D0000(U)
|:006D002B(U), :006D0057(U), :006D0076(U), :006D00C2(U), :006D00E1(U)
|:006D012D(U), :006D0158(U), :006D0184(U), :006D01AF(U), :006D01C1(U)
|:006D01C9(U), :006D01D1(U), :006D01D9(U), :006D01E1(U), :006D01E9(U)
|:006D01F1(U), :006D0203(U), :006D022E(U), :006D024E(U), :006D0256(U)
|:006D0277(U), :006D028E(U), :006D02B8(U), :006D02C0(U), :006D02C8(U)
|:006D02D0(U), :006D02D8(U), :006D02E0(U), :006D02E8(U), :006D02F0(U)
|:006D02F8(U), :006D0300(U), :006D0318(U), :006D0320(U), :006D0328(U)
|:006D0330(U), :006D0338(U), :006D0340(U), :006D0348(U), :006D0350(U)
|:006D0358(U), :006D0360(U), :006D0368(U), :006D0370(U), :006D0378(U)
|:006D0380(U), :006D0388(U), :006D0390(U), :006D0398(U), :006D03A0(U)
|:006D03A8(U), :006D03E4(U), :006D0401(U), :006D0432(U), :006D043A(U)
|:006D0461(U), :006D047B(U), :006D04BD(U), :006D04D9(U), :006D051F(U)
|:006D053B(U), :006D056B(U), :006D0584(U), :006D059A(U), :006D05C3(U)
|:006D05DF(U), :006D060F(U), :006D0628(U), :006D063E(U), :006D066A(U)
|:006D0689(U), :006D06D2(U), :006D06F1(U), :006D0737(U), :006D0753(U)
|:006D0782(U), :006D078A(U), :006D079F(U), :006D07B1(U), :006D07B9(U)
|:006D07C1(U), :006D07D3(U), :006D07FE(U), :006D0815(U), :006D083D(U)
|:006D085E(U), :006D0897(U), :006D08AE(U), :006D08DA(U), :006D08E2(U)
|:006D08EA(U), :006D08F2(U), :006D08FA(U), :006D0902(U), :006D090A(U)
|:006D091C(U), :006D0924(U), :006D092C(U), :006D0949(U), :006D096A(U)
|:006D09A3(U), :006D09BA(U), :006D09CB(U), :006D09EC(U), :006D0A25(U)
|:006D0A3E(U), :006D0A4F(U), :006D0A72(U), :006D0AAF(U), :006D0AC8(U)
|:006D0AF6(U), :006D0B18(U), :006D0B20(U), :006D0B28(U), :006D0B30(U)
|:006D0B38(U), :006D0B72(U), :006D0B7A(U), :006D0B82(U), :006D0BD5(U)
|:006D0BEC(U), :006D0C1C(U), :006D0C24(U), :006D0C2C(U), :006D0C66(U)
|:006D0C6E(U), :006D0C76(U), :006D0CD2(U), :006D0CDA(U), :006D0CE2(U)
|:006D0CEA(U), :006D0CF2(U), :006D0D2C(U), :006D0D34(U), :006D0D3C(U)
|:006D0D8F(U), :006D0DA6(U), :006D0DD6(U), :006D0DDE(U), :006D0DE6(U)
|:006D0E20(U), :006D0E28(U), :006D0E30(U), :006D0E9C(U), :006D0EA4(U)
|:006D0EAC(U), :006D0F00(U), :006D0F08(U), :006D0F10(U), :006D0F18(U)
|:006D0F20(U), :006D0F28(U), :006D0F3A(U), :006D0F53(U), :006D0F69(U)
|:006D0F91(U), :006D0F9F(U), :006D0FE1(U), :006D0FEF(U), :006D1031(U)
|:006D1081(U), :006D1163(U), :006D1191(U), :006D11D1(U), :006D12C3(U)
|:006D12D3(U), :006D12DB(U), :006D12E3(U), :006D12EB(U), :006D130C(U)
|:006D1323(U), :006D134D(U), :006D1377(U), :006D13E9(U), :006D13F4(U)
|:006D13FF(U), :006D1473(U), :006D147B(U), :006D149C(U), :006D14B3(U)
|:006D14CA(U), :006D14F4(U), :006D151E(U), :006D1548(U), :006D155F(U)
|:006D1578(U), :006D1591(U), :006D15AA(U), :006D15C3(U), :006D15F3(U)
|:006D15FB(U), :006D1603(U), :006D160B(U), :006D162E(U), :006D1647(U)
|:006D1660(U), :006D1679(U), :006D1692(U), :006D16AB(U), :006D16DB(U)
|:006D16E3(U), :006D16EB(U), :006D16F3(U), :006D1705(U), :006D170D(U)
|:006D1715(U), :006D171D(U), :006D1725(U), :006D172D(U), :006D1735(U)
|:006D1753(U), :006D175B(U), :006D1763(U), :006D1801(U), :006D180F(U)
|:006D181D(U), :006D182B(U), :006D1839(U), :006D1847(U), :006D1855(U)
|:006D18B1(U), :006D18BC(U), :006D18C7(U), :006D193F(U), :006D194A(U)
|:006D1955(U), :006D19B3(U), :006D19C1(U), :006D19CF(U), :006D19DD(U)
|:006D19FA(U), :006D1A02(U), :006D1A0A(U), :006D1A12(U), :006D1A1A(U)
|:006D1A22(U), :006D1A2A(U), :006D1A32(U), :006D1A3A(U), :006D1A42(U)
|:006D1A4A(U), :006D1A52(U), :006D1A5A(U), :006D1A62(U), :006D1A6A(U)
|:006D1A72(U), :006D1A7A(U), :006D1A82(U), :006D1A8A(U), :006D1A92(U)
|:006D1A9A(U), :006D1AA2(U), :006D1AB7(U), :006D1AC2(U), :006D1ACD(U)
|:006D1AD8(U), :006D1AE3(U), :006D1AEE(U), :006D1AF9(U), :006D1B04(U)
|:006D1B0F(U), :006D1B1A(U), :006D1B25(U), :006D1B30(U), :006D1B3B(U)
|:006D1B46(U), :006D1B51(U), :006D1B59(U), :006D1B61(U), :006D1B6C(U)
|:006D1B77(U), :006D1B7F(U), :006D1B9F(U), :006D1BA8(U), :006D1BB0(U)
|:006D1BB8(U), :006D1BC0(U), :006D1BF0(U), :006D1BFB(U), :006D1C06(U)
|:006D1C64(U), :006D1C81(U), :006D1C89(U), :006D1C91(U), :006D1C99(U)
|:006D1CA1(U), :006D1CA9(U), :006D1CB1(U), :006D1CB9(U), :006D1CC1(U)
|:006D1CC9(U), :006D1CD1(U), :006D1CD9(U), :006D1CE1(U), :006D1CE9(U)
|:006D1CF1(U), :006D1CF9(U), :006D1D01(U), :006D1D09(U), :006D1D11(U)
|:006D1D19(U), :006D1D21(U), :006D1D29(U), :006D1D31(U), :006D1D39(U)
|:006D1D41(U), :006D1D49(U), :006D1D51(U), :006D1D59(U), :006D1D61(U)
|:006D1D69(U), :006D1D71(U), :006D1D79(U), :006D1D81(U), :006D1D89(U)
|:006D1D91(U), :006D1D99(U), :006D1DAB(U), :006D1DCF(U), :006D1DDD(U)
|:006D1E37(U), :006D1E4E(U), :006D1EC2(U), :006D1EDB(U), :006D1F30(U)
|:006D1F62(U), :006D1F91(U), :006D1F9F(U), :006D1FAD(U), :006D2019(U)
|:006D2024(U), :006D202F(U), :006D21BB(U), :006D234D(U), :006D2355(U)
|:006D235D(U), :006D2365(U), :006D236D(U), :006D2375(U), :006D237D(U)
|:006D2385(U), :006D238D(U), :006D2395(U), :006D239D(U), :006D23A5(U)
|:006D23AD(U), :006D23B5(U), :006D2448(U), :006D2471(U), :006D2488(U)
|:006D24B2(U), :006D24C9(U), :006D24DA(U), :006D24E2(U), :006D2531(U)
|:006D2539(U), :006D2541(U), :006D2549(U), :006D258E(U), :006D2596(U)
|:006D25A8(U), :006D25B0(U), :006D25B8(U), :006D25CD(U), :006D2621(U)
|:006D264C(U), :006D268F(U), :006D26AF(U), :006D26CD(U), :006D26EE(U)
|:006D270E(U), :006D272C(U), :006D275E(U), :006D2766(U), :006D276E(U)
|:006D2776(U), :006D277E(U), :006D2786(U), :006D278E(U), :006D2796(U)
|:006D279E(U), :006D27A6(U), :006D27AE(U), :006D27B6(U), :006D27BE(U)
|:006D27C6(U), :006D27CE(U), :006D27D6(U), :006D27E8(U), :006D27F0(U)
|:006D27F8(U), :006D2800(U), :006D2808(U), :006D2810(U), :006D2818(U)
|:006D2820(U), :006D2832(U), :006D283A(U), :006D285F(U), :006D289C(U)
|:006D28A4(U), :006D28AC(U), :006D28B4(U), :006D28BC(U), :006D2963(U)
|:006D2AB3(U), :006D2ABB(U), :006D2ACB(U), :006D2AD3(U), :006D2B03(U)
|:006D2B0E(U), :006D2B19(U), :006D2B8D(U), :006D2B95(U), :006D2BEA(U)
|:006D2BF5(U), :006D2C00(U), :006D2C9A(U), :006D2CA2(U), :006D2CC3(U)
|:006D2CE3(U), :006D2D04(U), :006D2D24(U), :006D2D45(U), :006D2D65(U)
|:006D2D86(U), :006D2DA8(U), :006D2DCB(U), :006D2DED(U), :006D2E10(U)
|:006D2E29(U), :006D2E4B(U), :006D2E53(U), :006D2E5B(U), :006D2E7E(U)
|:006D2E97(U), :006D2EB9(U), :006D2EC1(U), :006D2EC9(U), :006D2EEC(U)
|:006D2F05(U), :006D2F27(U), :006D2F2F(U), :006D2F37(U), :006D2F5A(U)
|:006D2F73(U), :006D2FB6(U), :006D2FBE(U), :006D2FC6(U), :006D2FE9(U)
|:006D3002(U), :006D3045(U), :006D304D(U), :006D3055(U), :006D3078(U)
|:006D3091(U), :006D30D4(U), :006D30DC(U), :006D30E4(U), :006D3107(U)
|:006D311E(U), :006D315D(U), :006D3165(U), :006D316D(U), :006D31AE(U)
|:006D31B6(U), :006D31F7(U), :006D31FF(U), :006D322D(U), :006D3246(U)
|:006D3268(U), :006D3270(U), :006D3278(U), :006D329B(U), :006D32B4(U)
|:006D32D6(U), :006D32DE(U), :006D32E6(U), :006D330F(U), :006D3340(U)
|:006D334B(U), :006D3356(U), :006D33C1(U), :006D33DA(U), :006D33F3(U)
|:006D3416(U), :006D342F(U), :006D3448(U), :006D346B(U), :006D349D(U)
|:006D34A8(U), :006D34B3(U), :006D351E(U), :006D35B2(U), :006D35BA(U)
|:006D35C2(U), :006D35D2(U), :006D35DA(U), :006D35E2(U), :006D35EA(U)
|:006D35F2(U), :006D35FA(U), :006D360C(U), :006D361E(U), :006D3741(U)
|:006D374C(U), :006D3757(U), :006D37C8(U), :006D3801(U), :006D382B(U)
|:006D383D(U), :006D3845(U), :006D384D(U), :006D3855(U), :006D385D(U)
|:006D386F(U), :006D3898(U), :006D38AF(U), :006D38E8(U), :006D38FF(U)
|:006D3938(U), :006D3951(U), :006D398E(U), :006D39A7(U), :006D39E4(U)
|:006D39FD(U), :006D3A3A(U), :006D3A53(U), :006D3A90(U), :006D3AA9(U)
|:006D3AE6(U), :006D3AEE(U), :006D3B22(U), :006D3B30(U), :006D3B3E(U)
|:006D3BB9(U), :006D3C3F(U), :006D3C4A(U), :006D3C55(U), :006D3C77(U)
|:006D3C98(U), :006D3CBA(U), :006D3CD1(U), :006D3CFB(U), :006D3D12(U)
|:006D3D4E(U), :006D3D67(U), :006D3D93(U), :006D3DAC(U), :006D3DE3(U)
|:006D3DFC(U), :006D3E28(U), :006D3E41(U), :006D3E6D(U), :006D3E86(U)
|:006D3F3C(U), :006D3F44(U), :006D3F4C(U), :006D3F54(U), :006D3F5C(U)
|:006D3F64(U), :006D3F6C(U), :006D3F74(U), :006D3F97(U), :006D3FB0(U)
|:006D3FE5(U), :006D3FFE(U), :006D402D(U), :006D4046(U), :006D4086(U)
|:006D409F(U), :006D40C4(U), :006D40E7(U), :006D4100(U), :006D413C(U)
|:006D4153(U), :006D418F(U), :006D41B1(U), :006D41C8(U), :006D41FC(U)
|:006D4220(U), :006D4239(U), :006D426D(U), :006D4286(U), :006D42BA(U)
|:006D42D3(U), :006D42F8(U), :006D4300(U), :006D4323(U), :006D433C(U)
|:006D4370(U), :006D43C9(U), :006D43D4(U), :006D43DF(U), :006D4475(U)
|:006D4480(U), :006D44CD(U), :006D44D8(U), :006D453E(U), :006D4560(U)
|:006D4570(U), :006D4578(U), :006D459A(U), :006D45A2(U), :006D45D4(U)
|:006D45DC(U), :006D45E4(U), :006D45EC(U), :006D45F4(U), :006D4630(U)
|:006D4638(U), :006D4640(U), :006D466B(U), :006D4674(U), :006D467C(U)
|:006D468E(U), :006D4696(U), :006D469E(U), :006D46DF(U), :006D4706(U)
|:006D470E(U), :006D4716(U), :006D471E(U), :006D4726(U), :006D472E(U)
|:006D4736(U), :006D473E(U), :006D4746(U), :006D474E(U), :006D4756(U)
|:006D475E(U), :006D4766(U), :006D476E(U), :006D4776(U), :006D477E(U)
|:006D4786(U), :006D478E(U), :006D4796(U), :006D479E(U), :006D47A6(U)
|:006D47AE(U), :006D47B6(U), :006D47BE(U), :006D47C6(U), :006D47CE(U)
|:006D47D6(U), :006D47DE(U), :006D47E6(U), :006D47EE(U), :006D47F6(U)
|:006D47FE(U), :006D4806(U), :006D480E(U), :006D4816(U), :006D481E(U)
|:006D4826(U), :006D482E(U), :006D4836(U), :006D483E(U), :006D4854(U)
|:006D486B(U), :006D4882(U), :006D4899(U), :006D48A2(U), :006D48AA(U)
|:006D48B2(U), :006D48BA(U), :006D48C2(U), :006D48CA(U), :006D48D2(U)
|:006D48DA(U), :006D48E2(U), :006D48EA(U), :006D48F2(U), :006D48FA(U)
|:006D4902(U), :006D490A(U), :006D4912(U), :006D491A(U), :006D4922(U)
|:006D492A(U), :006D4932(U), :006D493A(U), :006D4942(U), :006D494A(U)
|:006D4952(U), :006D495A(U), :006D4962(U), :006D496A(U), :006D4972(U)
|:006D497A(U), :006D4982(U), :006D498A(U), :006D4992(U), :006D499A(U)
|:006D49A2(U), :006D49AA(U), :006D49B2(U), :006D49BA(U), :006D49CC(U)
|:006D49DE(U), :006D49E6(U), :006D49EE(U), :006D49F6(U), :006D4A26(U)
|:006D4A38(U), :006D4A40(U), :006D4A48(U), :006D4A50(U), :006D4A58(U)
|:006D4A60(U), :006D4A68(U), :006D4A70(U), :006D4A78(U), :006D4A80(U)
|:006D4A92(U), :006D4AC4(U), :006D4AE1(U), :006D4B0B(U), :006D4B16(U)
|:006D4B21(U), :006D4B2C(U), :006D4B37(U), :006D4B42(U), :006D4B4D(U)
|:006D4B68(U), :006D4B73(U), :006D4B7E(U), :006D4B89(U), :006D4B94(U)
|:006D4B9F(U), :006D4BAA(U), :006D4BD1(U), :006D4BEE(U), :006D4C22(U)
|:006D4C3C(U), :006D4C48(U), :006D4C53(U), :006D4C5B(U), :006D4C66(U)
|:006D4C6E(U), :006D4C79(U), :006D4C81(U), :006D4C8C(U), :006D4C97(U)
|:006D4C9F(U), :006D4CAA(U), :006D4CB2(U), :006D4CBD(U), :006D4CC5(U)
|:006D4CEE(U), :006D4D0D(U), :006D4D48(U), :006D4D64(U), :006D4D70(U)
|:006D4D7B(U), :006D4D86(U), :006D4D91(U), :006D4D9C(U), :006D4DA7(U)
|:006D4DB2(U), :006D4DBD(U), :006D4DC8(U), :006D4DD3(U), :006D4DDE(U)
|:006D4DE9(U), :006D4E12(U), :006D4E31(U), :006D4E69(U), :006D4E85(U)
|:006D4EAF(U), :006D4ECE(U), :006D4F0C(U), :006D4F17(U), :006D4F40(U)
|:006D4F5F(U), :006D4FA8(U), :006D4FB3(U), :006D4FBE(U), :006D4FC9(U)
|:006D4FD4(U), :006D4FDF(U), :006D4FEA(U), :006D4FF5(U), :006D5000(U)
|:006D500B(U), :006D5016(U), :006D5021(U), :006D504A(U), :006D5069(U)
|:006D50A7(U), :006D50B2(U), :006D50DE(U), :006D5113(U), :006D5132(U)
|:006D516D(U), :006D5178(U), :006D51A4(U), :006D51D9(U), :006D51F3(U)
|:006D5234(U), :006D523F(U), :006D5263(U), :006D527D(U), :006D52B2(U)
|:006D52CC(U), :006D530D(U), :006D5318(U), :006D533E(U), :006D535A(U)
|:006D5391(U), :006D53AA(U), :006D53EA(U), :006D5403(U), :006D5443(U)
|:006D545C(U), :006D5536(U), :006D5583(U), :006D558E(U), :006D56C3(U)
|:006D5711(U), :006D571F(U), :006D572D(U), :006D573B(U), :006D5749(U)
|:006D5757(U), :006D5765(U), :006D5789(U), :006D5791(U), :006D57A3(U)
|:006D57AB(U), :006D57B3(U), :006D57BB(U), :006D5846(U), :006D5871(U)
|:006D587F(U), :006D588D(U), :006D589B(U), :006D58A9(U), :006D58B7(U)
|:006D58C5(U), :006D5911(U), :006D591F(U), :006D592D(U), :006D593B(U)
|:006D5949(U), :006D5957(U), :006D5965(U), :006D59A3(U), :006D59CB(U)
|:006D5A43(U), :006D5A4B(U), :006D5A53(U), :006D5A5B(U), :006D5A63(U)
|:006D5A6B(U), :006D5A73(U), :006D5A7B(U), :006D5A83(U), :006D5A8B(U)
|:006D5A93(U), :006D5A9B(U), :006D5AA3(U), :006D5AAB(U), :006D5AB3(U)
|:006D5ABB(U), :006D5AE5(U), :006D5AED(U), :006D5AF5(U), :006D5B07(U)
|:006D5B0F(U), :006D5B17(U), :006D5B1F(U), :006D5B27(U), :006D5B2F(U)
|:006D5B37(U), :006D5B3F(U), :006D5B47(U), :006D5B4F(U), :006D5B57(U)
|:006D5B5F(U), :006D5B67(U), :006D5B6F(U), :006D5B77(U), :006D5B7F(U)
|:006D5B87(U), :006D5B8F(U), :006D5BA9(U), :006D5BB1(U), :006D5BB9(U)
|:006D5BC1(U), :006D5BE3(U), :006D5BEB(U), :006D5BF3(U), :006D5BFB(U)
|:006D5C03(U), :006D5C0B(U), :006D5C51(U), :006D5CC9(U), :006D5CD7(U)
|:006D5CE5(U), :006D5CF3(U), :006D5D01(U), :006D5D0F(U), :006D5D1D(U)
|:006D5D88(U), :006D5D90(U), :006D5D98(U), :006D5E21(U), :006D5E2C(U)
|:006D5E37(U), :006D5ECF(U), :006D5F23(U), :006D5F85(U), :006D5F9C(U)
|:006D5FD1(U), :006D5FD9(U), :006D6033(U), :006D603B(U), :006D6043(U)
|:006D6055(U), :006D605D(U), :006D6065(U), :006D61F7(U), :006D6209(U)
|:006D6211(U), :006D6219(U), :006D6221(U), :006D6229(U), :006D623B(U)
|:006D624E(U), :006D6260(U), :006D6268(U), :006D6270(U), :006D6278(U)
|:006D6280(U), :006D6288(U), :006D62C4(U), :006D62CC(U), :006D62D4(U)
|:006D62DC(U), :006D62E4(U), :006D62EC(U), :006D62F4(U), :006D62FC(U)
|:006D6304(U), :006D630C(U), :006D6314(U), :006D631C(U), :006D6334(U)
|:006D633C(U), :006D634C(U), :006D6354(U), :006D635C(U), :006D6364(U)
|:006D636C(U), :006D6374(U), :006D6386(U), :006D638E(U), :006D63A0(U)
|:006D63A8(U), :006D6589(U), :006D6594(U), :006D659F(U), :006D6657(U)
|:006D6662(U), :006D666D(U), :006D670B(U), :006D673B(U), :006D6746(U)
|:006D6751(U), :006D6853(U), :006D687C(U), :006D6893(U), :006D68BD(U)
|:006D68D4(U), :006D690D(U), :006D6924(U), :006D6961(U), :006D697A(U)
|:006D699C(U), :006D69A4(U), :006D69AC(U), :006D69B4(U), :006D69C7(U)
|:006D69F2(U), :006D6A0B(U), :006D6A2D(U), :006D6A35(U), :006D6A3D(U)
|:006D6A45(U), :006D6AAD(U), :006D6AC4(U), :006D6AE4(U), :006D6AEC(U)
|:006D6AF4(U), :006D6B31(U), :006D6B3C(U), :006D6B47(U), :006D6BB8(U)
|:006D6BDA(U), :006D6BF1(U), :006D6C1B(U), :006D6C32(U), :006D6C6B(U)
|:006D6C84(U), :006D6CB1(U), :006D6CDC(U), :006D6D00(U), :006D6D2B(U)
|:006D6D44(U), :006D6D66(U), :006D6D6E(U), :006D6D76(U), :006D6D7E(U)
|:006D6DE6(U), :006D6DFD(U), :006D6E1D(U), :006D6E25(U), :006D6E2D(U)
|:006D6E6A(U), :006D6E75(U), :006D6E80(U), :006D6EF1(U), :006D6F13(U)
|:006D6F2A(U), :006D6F54(U), :006D6F6B(U), :006D6FA4(U), :006D6FBD(U)
|:006D6FEA(U), :006D7015(U), :006D702E(U), :006D7050(U), :006D7058(U)
|:006D7060(U), :006D7068(U), :006D70D0(U), :006D70E7(U), :006D7107(U)
|:006D710F(U), :006D7117(U), :006D7181(U), :006D718C(U), :006D7197(U)
|:006D7293(U), :006D72BF(U), :006D72CD(U), :006D72EE(U), :006D7305(U)
|:006D732F(U), :006D7346(U), :006D7379(U), :006D739A(U), :006D73B1(U)
|:006D73DD(U), :006D741A(U), :006D7433(U), :006D745F(U), :006D7478(U)
|:006D74A4(U), :006D74BD(U), :006D74E9(U), :006D7502(U), :006D752E(U)
|:006D7547(U), :006D7584(U), :006D759D(U), :006D75DA(U), :006D75F3(U)
|:006D7646(U), :006D766B(U), :006D767E(U), :006D76B1(U), :006D76C8(U)
|:006D76DF(U), :006D76E8(U), :006D76F0(U), :006D770B(U), :006D7732(U)
|:006D7744(U), :006D7766(U), :006D7776(U), :006D7786(U), :006D778E(U)
|:006D7796(U), :006D779E(U), :006D77A6(U), :006D77AE(U), :006D7811(U)
|:006D783A(U), :006D7851(U), :006D787B(U), :006D7892(U), :006D78DE(U)
|:006D78F5(U), :006D7921(U), :006D795E(U), :006D7977(U), :006D79B4(U)
|:006D79CD(U), :006D79F9(U), :006D7A22(U), :006D7A39(U), :006D7A63(U)
|:006D7A7A(U), :006D7AA4(U), :006D7ADD(U), :006D7AF6(U), :006D7B33(U)
|:006D7B4C(U), :006D7B9C(U), :006D7BA4(U), :006D7BB6(U), :006D7BBE(U)
|:006D7BC6(U), :006D7BCE(U), :006D7BD6(U), :006D7BDE(U), :006D7CB9(U)
|:006D7CC4(U), :006D7CCF(U), :006D7D67(U), :006D7D75(U), :006D7D9B(U)
|:006D7DA9(U), :006D7DB1(U), :006D7DB9(U), :006D7DC1(U), :006D7DC9(U)
|:006D7DD1(U), :006D7DF5(U), :006D7E15(U), :006D7E1D(U), :006D7E25(U)
|:006D7E2D(U), :006D7E35(U), :006D7E3D(U), :006D7E55(U), :006D7E5D(U)
|:006D7E65(U), :006D7E6D(U), :006D7E75(U), :006D7E7D(U), :006D7E9E(U)
|:006D7EB5(U), :006D7EE3(U), :006D7EFA(U), :006D7F03(U), :006D7F0B(U)
|:006D7F13(U), :006D7F1B(U), :006D7F23(U), :006D7F2B(U), :006D7F33(U)
|:006D7F3B(U), :006D7F43(U), :006D7F4B(U), :006D7F6C(U), :006D7F83(U)
|:006D7FB5(U), :006D7FCE(U), :006D7FD7(U), :006D7FDF(U), :006D7FE7(U)
|:006D7FEF(U), :006D7FF7(U), :006D7FFF(U), :006D8007(U), :006D800F(U)
|:006D8017(U), :006D801F(U), :006D8027(U), :006D802F(U), :006D8037(U)
|:006D803F(U), :006D8047(U), :006D804F(U), :006D8057(U), :006D805F(U)
|:006D8082(U), :006D809B(U), :006D80CD(U), :006D80E6(U), :006D80EF(U)
|:006D80F7(U), :006D80FF(U), :006D8107(U), :006D810F(U), :006D8117(U)
|:006D811F(U), :006D8127(U), :006D812F(U), :006D8137(U), :006D813F(U)
|:006D8147(U), :006D814F(U), :006D8157(U), :006D817A(U), :006D8193(U)
|:006D81C5(U), :006D81DE(U), :006D81E7(U), :006D81EF(U), :006D81F7(U)
|:006D81FF(U), :006D8207(U), :006D820F(U), :006D8217(U), :006D821F(U)
|:006D8227(U), :006D822F(U), :006D8237(U), :006D823F(U), :006D8247(U)
|:006D824F(U), :006D8257(U), :006D825F(U), :006D8267(U), :006D826F(U)
|:006D8292(U), :006D82AB(U), :006D82DD(U), :006D82F6(U), :006D82FF(U)
|:006D8307(U), :006D830F(U), :006D8317(U), :006D831F(U), :006D8327(U)
|:006D832F(U), :006D8337(U), :006D833F(U), :006D8347(U), :006D836A(U)
|:006D8383(U), :006D83B5(U), :006D83CE(U), :006D83F2(U), :006D840B(U)
|:006D842B(U), :006D8433(U), :006D847B(U), :006D8486(U), :006D8491(U)
|:006D8521(U), :006D8529(U), :006D8531(U), :006D8567(U), :006D8577(U)
|:006D8582(U), :006D85A6(U), :006D85C0(U), :006D8652(U), :006D866C(U)
|:006D8686(U), :006D86A2(U), :006D86DA(U), :006D86E2(U), :006D8708(U)
|:006D8724(U), :006D8740(U), :006D875C(U), :006D8794(U), :006D879C(U)
|:006D87C2(U), :006D87DE(U), :006D87FA(U), :006D8816(U), :006D884E(U)
|:006D8856(U), :006D887C(U), :006D8898(U), :006D88B4(U), :006D88D0(U)
|:006D8910(U), :006D8918(U), :006D893E(U), :006D895A(U), :006D897F(U)
|:006D8987(U), :006D89B1(U), :006D89C3(U), :006D89D6(U), :006D89DE(U)
|:006D8A08(U), :006D8A25(U), :006D8AD1(U), :006D8AEE(U), :006D8B14(U)
|:006D8B1F(U), :006D8B4B(U), :006D8B6A(U), :006D8B92(U), :006D8B9D(U)
|:006D8BBB(U), :006D8BC6(U), :006D8BD1(U), :006D8BDC(U), :006D8BF7(U)
|:006D8C02(U), :006D8C0D(U), :006D8C18(U), :006D8C23(U), :006D8C2E(U)
|:006D8C5A(U), :006D8C79(U), :006D8CB4(U), :006D8CD0(U), :006D8CFA(U)
|:006D8D19(U), :006D8D41(U), :006D8D4C(U), :006D8E44(U), :006D8E4F(U)
|:006D8E5A(U), :006D8EDC(U), :006D8EE4(U), :006D8F31(U), :006D8F51(U)
|:006D8F59(U), :006D8F7A(U), :006D8F9A(U), :006D8FA2(U), :006D8FC3(U)
|:006D8FE3(U), :006D8FEB(U), :006D900C(U), :006D9040(U), :006D9059(U)
|:006D9096(U), :006D90AF(U), :006D90EC(U), :006D9110(U), :006D9134(U)
|:006D9183(U), :006D918B(U), :006D9193(U), :006D919B(U), :006D91A3(U)
|:006D91AB(U), :006D91FB(U), :006D9209(U), :006D922F(U), :006D93B3(U)
|:006D93D3(U), :006D93F3(U), :006D93FB(U), :006D9413(U), :006D9459(U)
|:006D9464(U), :006D946F(U), :006D94E0(U), :006D9515(U), :006D952C(U)
|:006D9565(U), :006D957C(U), :006D95BC(U), :006D963D(U), :006D9654(U)
|:006D96A3(U), :006D96AB(U), :006D96C3(U), :006D96E3(U), :006D9703(U)
|:006D9723(U), :006D9743(U), :006D9763(U), :006D97EB(U), :006D97F3(U)
|:006D97FB(U), :006D9803(U), :006D980B(U), :006D9813(U), :006D981B(U)
|:006D983C(U), :006D9853(U), :006D988C(U), :006D98A3(U), :006D98DC(U)
|:006D98F5(U), :006D992D(U), :006D9935(U), :006D993D(U), :006D9945(U)
|:006D994D(U), :006D9A23(U), :006D9A2B(U), :006D9A3D(U), :006D9AAA(U)
|:006D9AB2(U), :006D9AC4(U), :006D9ACC(U), :006D9AF9(U), :006D9B04(U)
|:006D9B0F(U), :006D9B6D(U), :006D9B7B(U), :006D9BAA(U), :006D9BD4(U)
|:006D9BFE(U), :006D9C1C(U), :006D9C24(U), :006D9C2C(U), :006D9C34(U)
|:006D9C3C(U), :006D9C44(U), :006D9C4C(U), :006D9C5E(U), :006D9C66(U)
|:006D9C6E(U), :006D9C76(U), :006D9CA1(U), :006D9CAF(U), :006D9CE1(U)
|:006D9CEC(U), :006D9CF7(U), :006D9D81(U), :006D9D8F(U), :006D9DD6(U)
|:006D9DFE(U), :006D9E06(U), :006D9E0E(U), :006D9E16(U), :006D9E1E(U)
|:006D9E49(U), :006D9E54(U), :006D9E5F(U), :006D9ED0(U), :006D9EF2(U)
|:006D9F09(U), :006D9F42(U), :006D9F59(U), :006D9F94(U), :006D9FAD(U)
|:006D9FEA(U), :006DA003(U), :006DA040(U), :006DA059(U), :006DA096(U)
|:006DA0AF(U), :006DA0DB(U), :006DA0E3(U), :006DA100(U), :006DA108(U)
|:006DA110(U), :006DA158(U), :006DA163(U), :006DA16E(U), :006DA1F2(U)
|:006DA213(U), :006DA22A(U), :006DA263(U), :006DA27A(U), :006DA2B3(U)
|:006DA2CC(U), :006DA309(U), :006DA322(U), :006DA35F(U), :006DA378(U)
|:006DA3A4(U), :006DA3E1(U), :006DA41E(U), :006DA478(U), :006DA480(U)
|:006DA488(U), :006DA490(U), :006DA498(U), :006DA4A0(U), :006DA4A8(U)
|:006DA544(U), :006DA54C(U), :006DA567(U), :006DA58E(U), :006DA5AF(U)
|:006DA5E6(U), :006DA619(U), :006DA621(U), :006DA629(U), :006DA6D9(U)
|:006DA6E4(U), :006DA6EF(U), :006DA760(U), :006DA782(U), :006DA799(U)
|:006DA7AA(U), :006DA7B2(U), :006DA7BA(U), :006DA7DB(U), :006DA7F2(U)
|:006DA812(U), :006DA81A(U), :006DA822(U), :006DA82A(U), :006DA83D(U)
|:006DA866(U), :006DA87F(U), :006DA8AB(U), :006DA8C3(U), :006DA902(U)
|:006DA919(U), :006DA952(U), :006DA969(U), :006DA9A2(U), :006DA9BB(U)
|:006DAA25(U), :006DAA4E(U), :006DAA65(U), :006DAAF9(U), :006DAB04(U)
|:006DAB0F(U), :006DAB89(U), :006DAB97(U), :006DABE7(U), :006DABEF(U)
|:006DABF7(U), :006DABFF(U), :006DAC11(U), :006DAC23(U), :006DAC2B(U)
|:006DAC33(U), :006DAC3B(U), :006DAC43(U), :006DAC4B(U), :006DAC8D(U)
|:006DAC9B(U), :006DAD24(U), :006DAD2F(U), :006DAD3A(U), :006DADBC(U)
|:006DADE3(U), :006DAE00(U), :006DAE45(U), :006DAE5F(U), :006DAE9E(U)
|:006DAEC5(U), :006DAF0B(U), :006DAF45(U), :006DAF4D(U), :006DAF55(U)
|:006DAF5D(U), :006DAF65(U), :006DAF6D(U), :006DAF9D(U), :006DAFA8(U)
|:006DAFB3(U), :006DB036(U), :006DB163(U), :006DB18C(U), :006DB1A3(U)
|:006DB1DC(U), :006DB1F3(U), :006DB22C(U), :006DB245(U), :006DB287(U)
|:006DB292(U), :006DB29D(U), :006DB337(U), :006DB364(U), :006DB37B(U)
|:006DB3B4(U), :006DB3CB(U), :006DB406(U), :006DB419(U), :006DB440(U)
|:006DB452(U), :006DB468(U), :006DB496(U), :006DB49E(U), :006DB4A6(U)
|:006DB4AE(U), :006DB4B6(U), :006DB4BE(U), :006DB4F8(U), :006DB503(U)
|:006DB50E(U), :006DB652(U), :006DB6B5(U), :006DB6DF(U), :006DB6EA(U)
|:006DB6F5(U), :006DB771(U), :006DB788(U), :006DB7C1(U), :006DB7D8(U)
|:006DB813(U), :006DB82C(U), :006DB8F5(U), :006DB8FD(U), :006DB917(U)
|:006DB91F(U), :006DB931(U), :006DB943(U), :006DB94B(U), :006DB953(U)
|:006DB9E1(U), :006DBA83(U), :006DBB03(U), :006DBB13(U), :006DBB34(U)
|:006DBB48(U), :006DBB71(U), :006DBBAA(U), :006DBBC1(U), :006DBC05(U)
|:006DBC0D(U), :006DBC15(U), :006DBC1D(U), :006DBC41(U), :006DBC4F(U)
|:006DBC8B(U), :006DBC9D(U), :006DBCBF(U), :006DBCD1(U), :006DBCEB(U)
|:006DBD01(U), :006DBD1C(U), :006DBD2E(U), :006DBE35(U), :006DBE47(U)
|:006DBE83(U), :006DBE95(U), :006DBF4B(U), :006DBF53(U), :006DBF6B(U)
|:006DBF8D(U), :006DBFA7(U), :006DBFAF(U), :006DBFB7(U), :006DBFC9(U)
|:006DBFD1(U), :006DBFD9(U), :006DBFEB(U), :006DBFF3(U), :006DBFFB(U)
|:006DC00D(U), :006DC063(U), :006DC06B(U), :006DC07B(U), :006DC083(U)
|:006DC08B(U), :006DC0A3(U), :006DC0AB(U), :006DC0B3(U), :006DC0BB(U)
|:006DC0C3(U), :006DC0CB(U), :006DC0D3(U), :006DC10E(U), :006DC119(U)
|:006DC1BF(U), :006DC1E0(U), :006DC1EB(U), :006DC21A(U), :006DC225(U)
|:006DC23B(U), :006DC246(U), :006DC267(U), :006DC272(U), :006DC293(U)
|:006DC29E(U), :006DC2B4(U), :006DC2BF(U), :006DC2D5(U), :006DC2E0(U)
|:006DC2F6(U), :006DC301(U), :006DC317(U), :006DC322(U), :006DC338(U)
|:006DC343(U), :006DC359(U), :006DC37D(U), :006DC388(U), :006DC3BB(U)
|:006DC3ED(U), :006DC470(U), :006DC480(U), :006DC4A0(U), :006DC4B2(U)
|:006DC5B5(U), :006DC5EC(U), :006DC5F7(U), :006DC60D(U), :006DC618(U)
|:006DC62E(U), :006DC639(U), :006DC64F(U), :006DC65A(U), :006DC67B(U)
|:006DC686(U), :006DC6B2(U), :006DC6BD(U), :006DC6D3(U), :006DC6DE(U)
|:006DC6F4(U), :006DC6FF(U), :006DC715(U), :006DC720(U), :006DC736(U)
|:006DC741(U), :006DC757(U), :006DC762(U), :006DC778(U), :006DC7BE(U)
|:006DC813(U), :006DC81B(U), :006DC823(U), :006DC82B(U), :006DC841(U)
|:006DC903(U), :006DC90B(U), :006DD043(U), :006DD06D(U), :006DD075(U)
|:006DD087(U), :006DD09A(U), :006DD0BA(U), :006DD16C(U), :006DD177(U)
|:006DD182(U), :006DD18D(U), :006DD2A3(U), :006DD2F6(U), :006DD308(U)
|:006DD31A(U), :006DD32C(U), :006DD33E(U), :006DD346(U), :006DD368(U)
|:006DD3BA(U), :006DD3D2(U), :006DD3DA(U), :006DD3E2(U), :006DD3EA(U)
|:006DD424(U), :006DD42C(U), :006DD434(U), :006DD457(U), :006DD485(U)
|:006DD4BD(U), :006DD4D7(U), :006DD4F6(U), :006DD573(U), :006DD59B(U)
|:006DD5A3(U), :006DD5AB(U), :006DD5BD(U), :006DD5DF(U), :006DD5F1(U)
|:006DD630(U), :006DD64D(U), :006DD658(U), :006DD660(U), :006DD67A(U)
|:006DD68C(U), :006DD6D5(U), :006DD6DD(U), :006DD6F7(U), :006DD709(U)
|:006DD723(U), :006DD74A(U), :006DD764(U), :006DD76C(U), :006DD774(U)
|:006DD786(U), :006DD7F0(U), :006DD808(U), :006DD818(U), :006DD82A(U)
|:006DD844(U), :006DD85E(U), :006DD870(U), :006DDA9C(U), :006DDB19(U)
|:006DDB24(U), :006DDB2F(U), :006DDBA0(U), :006DDBAE(U), :006DDBB6(U)
|:006DDD3F(U), :006DDD8C(U), :006DDD97(U), :006DDE25(U), :006DDE30(U)
|:006DDE46(U), :006DDE51(U), :006DDE5C(U), :006DDE88(U), :006DDE9A(U)
|:006DDEE2(U), :006DDEF4(U), :006DDF06(U), :006DDF18(U), :006DDF32(U)
|:006DDF94(U), :006DE001(U), :006DE013(U), :006DE3FE(U), :006DE5F3(U)
|:006DE641(U), :006DE64F(U), :006DE65D(U), :006DE66B(U), :006DE679(U)
|:006DE68F(U), :006DE69D(U), :006DE6A5(U), :006DE741(U), :006DE74F(U)
|:006DE757(U), :006DE9D0(U), :006DE9DE(U), :006DE9EC(U), :006DE9FA(U)
|:006DEA08(U), :006DEA2C(U), :006DEA8B(U), :006DEA99(U), :006DEAA7(U)
|:006DEAB5(U), :006DEAC3(U), :006DEAE7(U), :006DEB1B(U), :006DEB23(U)
|:006DEB2B(U), :006DEB33(U), :006DEB5B(U), :006DEB73(U), :006DEB7B(U)
|:006DEBAD(U), :006DEBCF(U), :006DEC2D(U), :006DEC3B(U), :006DEC49(U)
|:006DEC57(U), :006DEC65(U), :006DECB5(U), :006DECC3(U), :006DECD1(U)
|:006DECDF(U), :006DECED(U), :006DED03(U), :006DED11(U), :006DED19(U)
|:006DEDC1(U), :006DEDCF(U), :006DEDD7(U), :006DEDF3(U), :006DEE2D(U)
|:006DEE35(U), :006DEE3D(U), :006DEE4F(U), :006DEE61(U), :006DEE69(U)
|:006DEE71(U), :006DEE79(U), :006DEE81(U), :006DEE89(U), :006DEE91(U)
|:006DEE99(U), :006DEECD(U), :006DEED5(U), :006DEEE5(U), :006DEEF7(U)
|:006DEEFF(U), :006DEF11(U), :006DEF19(U), :006DEF2B(U), :006DEF3D(U)
|:006DEF4F(U), :006DEF57(U), :006DEF5F(U), :006DEF71(U), :006DEF83(U)
|:006DEF8B(U), :006DEFA3(U), :006DEFC3(U), :006DEFD5(U), :006DEFDD(U)
|:006DEFE5(U), :006DEFED(U), :006DEFF5(U), :006DEFFD(U), :006DF005(U)
|:006DF00D(U), :006DF015(U), :006DF01D(U), :006DF025(U), :006DF042(U)
|:006DF0AA(U), :006DF0C0(U), :006DF0D3(U), :006DF0DE(U), :006DF116(U)
|:006DF11E(U), :006DF126(U), :006DF12E(U), :006DF14E(U), :006DF159(U)
|:006DF16C(U), :006DF177(U), :006DF182(U), :006DF18D(U), :006DF198(U)
|:006DF1A3(U), :006DF1CE(U), :006DF208(U), :006DF210(U), :006DF218(U)
|:006DF220(U), :006DF228(U), :006DF230(U), :006DF238(U), :006DF240(U)
|:006DF248(U), :006DF25E(U), :006DF271(U), :006DF2D8(U), :006DF2E0(U)
|:006DF2E8(U), :006DF2F0(U), :006DF2F8(U), :006DF300(U), :006DF308(U)
|:006DF310(U), :006DF318(U), :006DF320(U), :006DF328(U), :006DF330(U)
|:006DF338(U), :006DF340(U), :006DF348(U), :006DF350(U), :006DF358(U)
|:006DF360(U), :006DF3A5(U), :006DF3B7(U), :006DF3D3(U), :006DF3DE(U)
|:006DF3F3(U), :006DF413(U), :006DF41B(U), :006DF50A(U), :006DF518(U)
|:006DF526(U), :006DF56E(U), :006DF5B7(U), :006DF5C5(U), :006DF5D3(U)
|:006DF61B(U), :006DF647(U), :006DF659(U), :006DF66B(U), :006DF673(U)
|:006DF685(U), :006DF68D(U), :006DF69F(U), :006DF6B1(U), :006DF6C3(U)
|:006DF6D5(U), :006DF707(U), :006DF769(U), :006DF779(U), :006DF79B(U)
|:006DF7B6(U), :006DF7F3(U), :006DF82F(U), :006DF83D(U), :006DF84B(U)
|:006DF8A3(U), :006DF8B1(U), :006DF8BF(U), :006DF8CD(U), :006DF8DB(U)
|:006DF8F1(U), :006DF8FF(U), :006DF907(U), :006DFA73(U), :006DFA7B(U)
|:006DFA83(U), :006DFA8B(U), :006DFA93(U), :006DFAA5(U), :006DFAAD(U)
|:006DFAB5(U), :006DFABD(U), :006DFAC5(U), :006DFACD(U), :006DFAD5(U)
|:006DFADD(U), :006DFAE5(U), :006DFAED(U), :006DFAF5(U), :006DFAFD(U)
|:006DFB05(U), :006DFB0D(U), :006DFB15(U), :006DFB1D(U), :006DFB33(U)
|:006DFB4B(U), :006DFBA3(U), :006DFBE3(U), :006DFBF3(U), :006DFBFB(U)
|:006DFC03(U), :006DFC0B(U), :006DFC13(U), :006DFC1B(U), :006DFC23(U)
|:006DFE06(U), :006E051C(U), :006E052A(U), :006E0532(U), :006E0565(U)
|:006E0590(U), :006E059E(U), :006E05A6(U), :006E05D9(U), :006E0651(U)
|:006E065F(U), :006E066D(U), :006E067B(U), :006E0689(U), :006E069F(U)
|:006E06AD(U), :006E06B5(U), :006E0724(U), :006E073A(U), :006E076D(U)
|:006E0783(U), :006E083B(U), :006E08A1(U), :006E08C2(U), :006E08D0(U)
|:006E08DE(U), :006E08EC(U), :006E08FA(U), :006E0910(U), :006E091E(U)
|:006E0926(U), :006E0973(U), :006E097B(U), :006E0983(U), :006E098B(U)
|:006E0993(U), :006E09AD(U), :006E09B5(U), :006E09CD(U), :006E09D5(U)
|:006E09DD(U), :006E09E5(U), :006E09ED(U), :006E09F5(U), :006E09FD(U)
|:006E0A05(U), :006E0A0D(U), :006E0A15(U), :006E0A1D(U), :006E0A25(U)
|:006E0A2D(U), :006E0A35(U), :006E0A47(U), :006E0A4F(U), :006E0A57(U)
|:006E0A5F(U), :006E0A67(U), :006E0A6F(U), :006E0A77(U), :006E0A7F(U)
|:006E0A94(U), :006E0A9F(U), :006E0AB4(U), :006E0ABF(U), :006E0AD1(U)
|:006E0AE3(U), :006E0AF9(U), :006E0B02(U), :006E0B0A(U), :006E0B12(U)
|:006E0B1A(U), :006E0B3A(U), :006E0B5C(U), :006E0B67(U), :006E0B72(U)
|:006E0B85(U), :006E0B90(U), :006E0BA3(U), :006E0BB6(U), :006E0C29(U)
|:006E0C39(U), :006E0C41(U), :006E0C49(U), :006E0C51(U), :006E0C59(U)
|:006E0C61(U), :006E0C69(U), :006E0C71(U), :006E0D06(U), :006E0D0E(U)
|:006E0D16(U), :006E0D3D(U), :006E0D45(U), :006E0D57(U), :006E0D5F(U)
|:006E0DAD(U), :006E0DD4(U), :006E0DDC(U), :006E0DE4(U), :006E0E03(U)
|:006E0E26(U), :006E0E31(U), :006E0E3C(U), :006E0E47(U), :006E0E52(U)
|:006E0E5D(U), :006E0E68(U), :006E0E73(U), :006E0E93(U), :006E0EA5(U)
|:006E0ED2(U), :006E0EF2(U), :006E0EFD(U), :006E0F08(U), :006E0F13(U)
|:006E0F1E(U), :006E0F26(U), :006E0F2E(U), :006E0F36(U), :006E0F54(U)
|:006E0F5F(U), :006E0F71(U), :006E0F79(U), :006E0F81(U), :006E0F89(U)
|:006E0F91(U), :006E0FB3(U), :006E0FBB(U), :006E0FCD(U), :006E0FD5(U)
|:006E0FE7(U), :006E0FEF(U), :006E103F(U), :006E104A(U), :006E1055(U)
|:006E1060(U), :006E106B(U), :006E109C(U), :006E10E5(U), :006E10FF(U)
|:006E1107(U), :006E110F(U), :006E1117(U), :006E111F(U), :006E1127(U)
|:006E112F(U), :006E1137(U), :006E113F(U), :006E1159(U), :006E1161(U)
|:006E11A9(U), :006E11B1(U), :006E123C(U), :006E1244(U), :006E124C(U)
|:006E1254(U), :006E13AB(U), :006E13D2(U), :006E13EC(U), :006E140B(U)
|:006E1413(U), :006E1475(U), :006E14AE(U), :006E1542(U), :006E154A(U)
|:006E1552(U), :006E16D2(U), :006E16DA(U), :006E16EC(U), :006E16F4(U)
|:006E1757(U), :006E1790(U), :006E17EB(U), :006E180A(U), :006E1812(U)
|:006E181A(U), :006E1822(U), :006E182A(U), :006E1832(U), :006E183A(U)
|:006E1842(U), :006E185C(U), :006E186C(U), :006E1874(U), :006E18B5(U)
|:006E198C(U), :006E1994(U), :006E199C(U), :006E19AE(U), :006E19B6(U)
|:006E19D1(U), :006E19D9(U), :006E19F6(U), :006E1A10(U), :006E1A2F(U)
|:006E1A6B(U), :006E1A73(U), :006E1A7B(U), :006E1A83(U), :006E1A8B(U)
|:006E1A93(U), :006E1A9B(U), :006E1AB3(U), :006E1ABB(U), :006E1AE4(U)
|:006E1AEC(U), :006E1AF4(U), :006E1B06(U), :006E1C76(U), :006E1C84(U)
|:006E1C92(U), :006E1CA0(U), :006E1CAE(U), :006E1CBC(U), :006E1D06(U)
|:006E1D7B(U), :006E1D89(U), :006E1D97(U), :006E1DA5(U), :006E1DB3(U)
|:006E1DC1(U), :006E1E0B(U), :006E1E1D(U), :006E1E25(U), :006E1E2D(U)
|:006E1E35(U), :006E1E4A(U), :006E1EE6(U), :006E1EF8(U), :006E1F0A(U)
|:006E1F1C(U), :006E1F65(U), :006E1F6E(U), :006E1F76(U), :006E1F96(U)
|:006E1F9F(U), :006E1FB1(U), :006E1FB9(U), :006E1FC1(U), :006E1FC9(U)
|:006E1FD1(U), :006E1FD9(U), :006E1FE1(U), :006E1FE9(U), :006E1FF1(U)
|:006E1FF9(U), :006E2001(U), :006E2009(U), :006E2011(U), :006E2019(U)
|:006E2021(U), :006E2029(U), :006E2031(U), :006E2039(U), :006E2041(U)
|:006E2049(U), :006E2051(U), :006E2059(U), :006E2061(U), :006E2069(U)
|:006E2071(U), :006E2079(U), :006E2081(U), :006E2089(U), :006E2091(U)
|:006E2099(U), :006E20A1(U), :006E20A9(U), :006E20B1(U), :006E20B9(U)
|:006E20C1(U), :006E20C9(U), :006E20D1(U), :006E20D9(U), :006E20E1(U)
|:006E20E9(U), :006E20F1(U), :006E20F9(U), :006E2101(U), :006E2109(U)
|:006E2111(U), :006E2119(U), :006E2121(U), :006E2129(U), :006E2131(U)
|:006E2139(U), :006E2163(U), :006E216B(U), :006E2173(U), :006E217B(U)
|:006E2183(U), :006E218B(U), :006E2193(U), :006E219B(U), :006E21A3(U)
|:006E21AB(U), :006E21B3(U), :006E221B(U), :006E2223(U), :006E222B(U)
|:006E225B(U), :006E2263(U), :006E226B(U), :006E2273(U), :006E227B(U)
|:006E2283(U), :006E22BB(U), :006E22C3(U), :006E22CB(U), :006E22D3(U)
|:006E2305(U), :006E2327(U), :006E2479(U), :006E249A(U), :006E24B0(U)
|:006E24D1(U), :006E24F2(U), :006E2529(U), :006E2534(U), :006E253F(U)
|:006E254A(U), :006E2555(U), :006E2567(U), :006E259B(U), :006E25A3(U)
|:006E25AB(U), :006E25B3(U), :006E25BB(U), :006E25C3(U), :006E25CB(U)
|:006E25D3(U), :006E25DB(U), :006E25E3(U), :006E25EB(U), :006E25F3(U)
|:006E25FB(U), :006E2603(U), :006E260B(U), :006E2613(U), :006E261B(U)
|:006E2623(U), :006E262B(U), :006E2633(U), :006E263B(U), :006E2643(U)
|:006E264B(U), :006E2653(U), :006E2663(U), :006E2673(U), :006E267B(U)
|:006E2683(U), :006E268B(U), :006E2693(U), :006E269B(U), :006E26A3(U)
|:006E26AB(U), :006E26B3(U), :006E26BB(U), :006E26C3(U), :006E26CB(U)
|:006E26D3(U), :006E2707(U), :006E270F(U), :006E2717(U), :006E271F(U)
|:006E272F(U), :006E273F(U), :006E2747(U), :006E274F(U), :006E275F(U)
|:006E2767(U), :006E276F(U), :006E2777(U), :006E277F(U), :006E2787(U)
|:006E278F(U), :006E2797(U), :006E27A7(U), :006E27B7(U), :006E27BF(U)
|:006E27C7(U), :006E27CF(U), :006E27D7(U), :006E27DF(U), :006E27E7(U)
|:006E27EF(U), :006E27F7(U), :006E27FF(U), :006E2807(U), :006E280F(U)
|:006E2831(U), :006E2839(U), :006E2841(U), :006E2849(U), :006E2851(U)
|:006E2863(U), :006E286B(U), :006E2885(U), :006E288D(U), :006E28A7(U)
|:006E28AF(U), :006E28C1(U), :006E28C9(U), :006E28DB(U), :006E28E3(U)
|:006E28EB(U), :006E28FD(U), :006E2960(U), :006E2968(U), :006E29DB(U)
|:006E29E9(U), :006E29F7(U), :006E2A05(U), :006E2A13(U), :006E2A21(U)
|:006E2A7C(U), :006E2A8A(U), :006E2A98(U), :006E2AA6(U), :006E2AB4(U)
|:006E2ACA(U), :006E2AD8(U), :006E2AE0(U), :006E2BBC(U), :006E2BCA(U)
|:006E2BD2(U), :006E2C0B(U), :006E2C13(U), :006E2C3E(U), :006E2C4C(U)
|:006E2C54(U), :006E2C8D(U), :006E2C95(U), :006E2CE9(U), :006E2CF7(U)
|:006E2D05(U), :006E2D13(U), :006E2D21(U), :006E2D37(U), :006E2D45(U)
|:006E2D4D(U), :006E2DDC(U), :006E2DEA(U), :006E2DF2(U), :006E2E2B(U)
|:006E2E33(U), :006E2E5E(U), :006E2E6C(U), :006E2E74(U), :006E2EAD(U)
|:006E2EB5(U), :006E2F09(U), :006E2F17(U), :006E2F25(U), :006E2F33(U)
|:006E2F41(U), :006E2F57(U), :006E2F65(U), :006E2F6D(U), :006E2FCC(U)
|:006E2FDA(U), :006E2FE2(U), :006E301B(U), :006E3029(U), :006E3037(U)
|:006E303F(U), :006E306A(U), :006E3078(U), :006E3080(U), :006E30B9(U)
|:006E30C7(U), :006E30D5(U), :006E30DD(U), :006E30EF(U), :006E30F7(U)
|:006E30FF(U), :006E3107(U), :006E3119(U), :006E3167(U), :006E316F(U)
|:006E3177(U), :006E317F(U), :006E3187(U), :006E31C9(U), :006E31D1(U)
|:006E3251(U), :006E325F(U), :006E3275(U), :006E3283(U), :006E3291(U)
|:006E329F(U), :006E32AD(U), :006E32C3(U), :006E32D1(U), :006E32D9(U)
|:006E3323(U), :006E335C(U), :006E336A(U), :006E3372(U), :006E33BB(U)
|:006E33E6(U), :006E33F4(U), :006E33FC(U), :006E3445(U), :006E347F(U)
|:006E348A(U), :006E3495(U), :006E34A8(U), :006E34B3(U), :006E34BB(U)
|:006E34C3(U), :006E34CB(U), :006E34D3(U), :006E34DB(U), :006E34E3(U)
|:006E34EB(U), :006E34F3(U), :006E3508(U), :006E3513(U), :006E351E(U)
|:006E3529(U), :006E353F(U), :006E354A(U), :006E3555(U), :006E3560(U)
|:006E356B(U), :006E3573(U), :006E357B(U), :006E3583(U), :006E358B(U)
|:006E3593(U), :006E35A5(U), :006E35AD(U), :006E35BF(U), :006E35C7(U)
|:006E35CF(U), :006E35E1(U), :006E35E9(U), :006E35F1(U), :006E3603(U)
|:006E360B(U), :006E3613(U), :006E361B(U), :006E362D(U), :006E3635(U)
|:006E363D(U), :006E3694(U), :006E36A2(U), :006E36B0(U), :006E36BE(U)
|:006E36CC(U), :006E36E2(U), :006E36F0(U), :006E36F8(U), :006E375C(U)
|:006E376A(U), :006E3772(U), :006E37AB(U), :006E37B3(U), :006E37DE(U)
|:006E37EC(U), :006E37F4(U), :006E382D(U), :006E3835(U), :006E3847(U)
|:006E384F(U), :006E3861(U), :006E3869(U), :006E387B(U), :006E38E6(U)
|:006E3949(U), :006E3957(U), :006E3965(U), :006E3973(U), :006E3981(U)
|:006E3997(U), :006E39A5(U), :006E39AD(U), :006E3A0C(U), :006E3A1A(U)
|:006E3A22(U), :006E3A5B(U), :006E3A69(U), :006E3A77(U), :006E3A85(U)
|:006E3A8D(U), :006E3AB8(U), :006E3AC6(U), :006E3ACE(U), :006E3B07(U)
|:006E3B15(U), :006E3B23(U), :006E3B31(U), :006E3B39(U), :006E3B81(U)
|:006E3B8F(U), :006E3B9D(U), :006E3BB3(U), :006E3BC1(U), :006E3BCF(U)
|:006E3BDD(U), :006E3BEB(U), :006E3C01(U), :006E3C0F(U), :006E3C17(U)
|:006E3CDC(U), :006E3CEA(U), :006E3CF2(U), :006E3D2B(U), :006E3D39(U)
|:006E3D41(U), :006E3D6C(U), :006E3D7A(U), :006E3D82(U), :006E3DBB(U)
|:006E3DC9(U), :006E3DD1(U), :006E3DE3(U), :006E3DEB(U), :006E3DF3(U)
|:006E3E41(U), :006E3E57(U), :006E3E65(U), :006E3E73(U), :006E3E81(U)
|:006E3E8F(U), :006E3EA5(U), :006E3EB3(U), :006E3EBB(U), :006E3F1C(U)
|:006E3F2A(U), :006E3F32(U), :006E3F65(U), :006E3F90(U), :006E3F9E(U)
|:006E3FA6(U), :006E3FD9(U), :006E3FEB(U), :006E4031(U), :006E403F(U)
|:006E404D(U), :006E405B(U), :006E4069(U), :006E407F(U), :006E408D(U)
|:006E4095(U), :006E40FC(U), :006E410A(U), :006E4112(U), :006E4145(U)
|:006E4170(U), :006E417E(U), :006E4186(U), :006E41B9(U), :006E4231(U)
|:006E423F(U), :006E424D(U), :006E425B(U), :006E4269(U), :006E427F(U)
|:006E428D(U), :006E4295(U), :006E42FC(U), :006E430A(U), :006E4312(U)
|:006E4345(U), :006E4370(U), :006E437E(U), :006E4386(U), :006E43B9(U)
|:006E4401(U), :006E440F(U), :006E441D(U), :006E442B(U), :006E4439(U)
|:006E444F(U), :006E445D(U), :006E4465(U), :006E44CC(U), :006E44DA(U)
|:006E44E2(U), :006E451B(U), :006E4523(U), :006E454E(U), :006E455C(U)
|:006E4564(U), :006E459D(U), :006E45A5(U), :006E45D0(U), :006E45DE(U)
|:006E45E6(U), :006E4619(U), :006E4644(U), :006E4652(U), :006E465A(U)
|:006E468D(U), :006E46D9(U), :006E46E7(U), :006E46F5(U), :006E4703(U)
|:006E4711(U), :006E4727(U), :006E4735(U), :006E473D(U), :006E4791(U)
|:006E479F(U), :006E47AD(U), :006E47BB(U), :006E47C9(U), :006E47DF(U)
|:006E47ED(U), :006E47F5(U), :006E485C(U), :006E486A(U), :006E4872(U)
|:006E48A5(U), :006E48D0(U), :006E48DE(U), :006E48E6(U), :006E4919(U)
|:006E492B(U), :006E4940(U), :006E494B(U), :006E49C1(U), :006E49CF(U)
|:006E49DD(U), :006E49EB(U), :006E49F9(U), :006E4A0F(U), :006E4A1D(U)
|:006E4A25(U), :006E4A8C(U), :006E4A9A(U), :006E4AA2(U), :006E4ADB(U)
|:006E4AE3(U), :006E4B0E(U), :006E4B1C(U), :006E4B24(U), :006E4B5D(U)
|:006E4B65(U), :006E4BD9(U), :006E4BE7(U), :006E4BF5(U), :006E4C03(U)
|:006E4C11(U), :006E4C27(U), :006E4C35(U), :006E4C3D(U), :006E4CA4(U)
|:006E4CB2(U), :006E4CC0(U), :006E4CC8(U), :006E4CD8(U), :006E4D0B(U)
|:006E4D19(U), :006E4D27(U), :006E4D2F(U), :006E4D3F(U), :006E4D51(U)
|:006E4D59(U), :006E4D6B(U), :006E4D83(U), :006E4D8B(U), :006E4DC4(U)
|:006E4DCC(U), :006E4DDE(U), :006E4DE6(U), :006E4DEE(U), :006E4E00(U)
|:006E4E08(U), :006E4E51(U), :006E4E5F(U), :006E4E75(U), :006E4E83(U)
|:006E4E91(U), :006E4E9F(U), :006E4EAD(U), :006E4EC3(U), :006E4ED1(U)
|:006E4ED9(U), :006E4F3C(U), :006E4F4A(U), :006E4F52(U), :006E4F85(U)
|:006E4FB0(U), :006E4FBE(U), :006E4FC6(U), :006E4FF9(U), :006E500B(U)
|:006E5051(U), :006E505F(U), :006E506D(U), :006E507B(U), :006E5089(U)
|:006E509F(U), :006E50AD(U), :006E50B5(U), :006E511C(U), :006E512A(U)
|:006E5132(U), :006E516B(U), :006E5179(U), :006E5181(U), :006E51AC(U)
|:006E51BA(U), :006E51C2(U), :006E51FB(U), :006E5209(U), :006E5211(U)
|:006E5233(U), :006E524B(U), :006E52A1(U), :006E52B7(U), :006E52C5(U)
|:006E52D3(U), :006E52E1(U), :006E52EF(U), :006E5305(U), :006E5313(U)
|:006E531B(U), :006E537C(U), :006E538A(U), :006E5392(U), :006E53C5(U)
|:006E53D5(U), :006E5400(U), :006E540E(U), :006E5416(U), :006E5449(U)
|:006E5459(U), :006E548A(U), :006E5492(U), :006E54E1(U), :006E54EF(U)
|:006E54FD(U), :006E550B(U), :006E5519(U), :006E552F(U), :006E553D(U)
|:006E5545(U), :006E55A1(U), :006E55AF(U), :006E55BD(U), :006E55CB(U)
|:006E55D9(U), :006E55EF(U), :006E55FD(U), :006E5605(U), :006E566E(U)
|:006E5684(U), :006E5692(U), :006E569A(U), :006E56C7(U), :006E56DD(U)
|:006E56EB(U), :006E56F3(U), :006E5715(U), :006E572D(U), :006E5735(U)
|:006E575F(U), :006E57EA(U), :006E57F2(U), :006E57FA(U), :006E5802(U)
|:006E5833(U), :006E583B(U), :006E5843(U), :006E584B(U), :006E5853(U)
|:006E585B(U), :006E5863(U), :006E586B(U), :006E5873(U), :006E587B(U)
|:006E5883(U), :006E588B(U), :006E58BC(U), :006E58C4(U), :006E58CC(U)
|:006E58D4(U), :006E58DC(U), :006E58EE(U), :006E58F6(U), :006E58FE(U)
|:006E5906(U), :006E590E(U), :006E5916(U), :006E5928(U), :006E5930(U)
|:006E5938(U), :006E5940(U), :006E5948(U), :006E5950(U), :006E5958(U)
|:006E5960(U), :006E5968(U), :006E5970(U), :006E5978(U), :006E5980(U)
|:006E5988(U), :006E5990(U), :006E5998(U), :006E59A0(U), :006E59A8(U)
|:006E59B0(U), :006E59B8(U), :006E59C0(U), :006E59F3(U), :006E59FB(U)
|:006E5A21(U), :006E5A37(U), :006E5A45(U), :006E5A53(U), :006E5A61(U)
|:006E5A6F(U), :006E5A85(U), :006E5A93(U), :006E5A9B(U), :006E5AFE(U)
|:006E5B14(U), :006E5B22(U), :006E5B30(U), :006E5B38(U), :006E5B65(U)
|:006E5B7B(U), :006E5B89(U), :006E5B97(U), :006E5B9F(U), :006E5BD0(U)
|:006E5BD8(U), :006E5BE0(U), :006E5BE8(U), :006E5BF0(U), :006E5BF8(U)
|:006E5C00(U), :006E5C08(U), :006E5C10(U), :006E5C18(U), :006E5C20(U)
|:006E5C28(U), :006E5C30(U), :006E5C38(U), :006E5C40(U), :006E5C48(U)
|:006E5C50(U), :006E5C58(U), :006E5C60(U), :006E5C68(U), :006E5C70(U)
|:006E5C82(U), :006E5C94(U), :006E5C9C(U), :006E5CA4(U), :006E5CAC(U)
|:006E5CBE(U), :006E5CC6(U), :006E5CCE(U), :006E5CD6(U), :006E5CDE(U)
|:006E5CE6(U), :006E5CEE(U), :006E5CF6(U), :006E5CFE(U), :006E5D06(U)
|:006E5D0E(U), :006E5D20(U), :006E5D28(U), :006E5D30(U), :006E5D38(U)
|:006E5D40(U), :006E5D48(U), :006E5D50(U), :006E5D58(U), :006E5D60(U)
|:006E5D68(U), :006E5D70(U), :006E5D78(U), :006E5D80(U), :006E5D88(U)
|:006E5D90(U), :006E5D98(U), :006E5DA0(U), :006E5DA8(U), :006E5DB0(U)
|:006E5DB8(U), :006E5DC0(U), :006E5DC8(U), :006E5DD0(U), :006E5DD8(U)
|:006E5DE0(U), :006E5DE8(U), :006E5DF0(U), :006E5DF8(U), :006E5E00(U)
|:006E5E08(U), :006E5E10(U), :006E5E18(U), :006E5E3A(U), :006E5E64(U)
|:006E5E6C(U), :006E5E74(U), :006E5E7C(U), :006E5E84(U), :006E5E8C(U)
|:006E5EC5(U), :006E5EF8(U), :006E5F00(U), :006E5F08(U), :006E5F10(U)
|:006E5F18(U), :006E5F20(U), :006E5F32(U), :006E5F3A(U), :006E5F42(U)
|:006E5F87(U), :006E5F92(U), :006E5F9D(U), :006E5FA8(U), :006E5FB3(U)
|:006E6011(U), :006E601F(U), :006E6035(U), :006E6043(U), :006E6051(U)
|:006E605F(U), :006E606D(U), :006E6083(U), :006E6091(U), :006E6099(U)
|:006E60FC(U), :006E610A(U), :006E6112(U), :006E6163(U), :006E618E(U)
|:006E619C(U), :006E61A4(U), :006E61F5(U), :006E6248(U), :006E6262(U)
|:006E62E4(U), :006E62EC(U), :006E633E(U), :006E6346(U), :006E63A1(U)
|:006E63AF(U), :006E63BD(U), :006E63CB(U), :006E63D9(U), :006E63EF(U)
|:006E63FD(U), :006E6405(U), :006E655E(U), :006E6574(U), :006E6582(U)
|:006E6590(U), :006E6598(U), :006E65A8(U), :006E65D5(U), :006E65EB(U)
|:006E65F9(U), :006E6607(U), :006E660F(U), :006E661F(U), :006E6661(U)
|:006E666F(U), :006E6685(U), :006E6693(U), :006E66A1(U), :006E66AF(U)
|:006E66BD(U), :006E66D3(U), :006E66E1(U), :006E66E9(U), :006E675E(U)
|:006E676E(U), :006E677E(U), :006E67AB(U), :006E67BB(U), :006E67CB(U)
|:006E67FC(U), :006E6804(U), :006E680C(U), :006E6814(U), :006E681C(U)
|:006E682C(U), :006E6834(U), :006E683C(U), :006E684E(U), :006E6856(U)
|:006E6870(U), :006E68A1(U), :006E68A9(U), :006E68B1(U), :006E68C3(U)
|:006E68CB(U), :006E6911(U), :006E691F(U), :006E692D(U), :006E693B(U)
|:006E6949(U), :006E695F(U), :006E696D(U), :006E6975(U), :006E69D1(U)
|:006E69DF(U), :006E69ED(U), :006E69FB(U), :006E6A09(U), :006E6A1F(U)
|:006E6A2D(U), :006E6A35(U), :006E6AAC(U), :006E6ABA(U), :006E6AC2(U)
|:006E6AF5(U), :006E6B05(U), :006E6B30(U), :006E6B3E(U), :006E6B46(U)
|:006E6B79(U), :006E6B89(U), :006E6BBA(U), :006E6BC2(U), :006E6BDA(U)
|:006E6BE2(U), :006E6BEA(U), :006E6C04(U), :006E6C0C(U), :006E6C1E(U)
|:006E6C26(U), :006E6C2E(U), :006E6C36(U), :006E6C8C(U), :006E6C9A(U)
|:006E6CA2(U), :006E6CD5(U), :006E6D00(U), :006E6D0E(U), :006E6D16(U)
|:006E6D49(U), :006E6D9E(U), :006E6DB4(U), :006E6DC2(U), :006E6DD0(U)
|:006E6DDE(U), :006E6DEC(U), :006E6DFA(U), :006E6E02(U), :006E6E2F(U)
|:006E6E45(U), :006E6E53(U), :006E6E61(U), :006E6E6F(U), :006E6E7D(U)
|:006E6E8B(U), :006E6E93(U), :006E6EF5(U), :006E6EFD(U), :006E6F05(U)
|:006E6F0D(U), :006E6F2D(U), :006E6F35(U), :006E6FD1(U), :006E6FDF(U)
|:006E6FED(U), :006E6FFB(U), :006E7009(U), :006E701F(U), :006E702D(U)
|:006E703B(U), :006E7049(U), :006E7057(U), :006E706D(U), :006E707B(U)
|:006E7083(U), :006E70E1(U), :006E70EF(U), :006E70FD(U), :006E710B(U)
|:006E7119(U), :006E712F(U), :006E713D(U), :006E7145(U), :006E71AC(U)
|:006E71BA(U), :006E71C2(U), :006E71F5(U), :006E7205(U), :006E7230(U)
|:006E723E(U), :006E7246(U), :006E7279(U), :006E7289(U), :006E729B(U)
|:006E72A3(U), :006E72AB(U), :006E72BD(U), :006E72C5(U), :006E72CD(U)
|:006E72E7(U), :006E7341(U), :006E734F(U), :006E735D(U), :006E736B(U)
|:006E7379(U), :006E738F(U), :006E739D(U), :006E73A5(U), :006E740C(U)
|:006E741A(U), :006E7422(U), :006E7455(U), :006E746B(U), :006E7473(U)
|:006E749E(U), :006E74AC(U), :006E74B4(U), :006E74E7(U), :006E74FD(U)
|:006E7505(U), :006E754E(U), :006E75A9(U), :006E75B7(U), :006E75C5(U)
|:006E75D3(U), :006E75E1(U), :006E75F7(U), :006E7605(U), :006E760D(U)
|:006E766C(U), :006E767A(U), :006E7682(U), :006E76B5(U), :006E76E0(U)
|:006E76EE(U), :006E76F6(U), :006E7729(U), :006E773B(U), :006E7743(U)
|:006E775D(U), :006E7765(U), :006E776D(U), :006E7775(U), :006E77DC(U)
|:006E77EA(U), :006E77F2(U), :006E7825(U), :006E783B(U), :006E785E(U)
|:006E7889(U), :006E7897(U), :006E789F(U), :006E78D2(U), :006E78E8(U)
|:006E790B(U), :006E793C(U), :006E7944(U), :006E794C(U), :006E797E(U)
|:006E7986(U), :006E798E(U), :006E7996(U), :006E799E(U), :006E79A6(U)
|:006E79AE(U), :006E7A11(U), :006E7A27(U), :006E7A35(U), :006E7A43(U)
|:006E7A51(U), :006E7A5F(U), :006E7A75(U), :006E7A83(U), :006E7A8B(U)
|:006E7AEC(U), :006E7AFA(U), :006E7B02(U), :006E7B35(U), :006E7B45(U)
|:006E7B70(U), :006E7B7E(U), :006E7B86(U), :006E7BB9(U), :006E7BC9(U)
|:006E7BFA(U), :006E7C02(U), :006E7C14(U), :006E7C61(U), :006E7C6F(U)
|:006E7C7D(U), :006E7C8B(U), :006E7C99(U), :006E7CAF(U), :006E7CBD(U)
|:006E7CC5(U), :006E7D2C(U), :006E7D3A(U), :006E7D42(U), :006E7D75(U)
|:006E7D85(U), :006E7DB0(U), :006E7DBE(U), :006E7DC6(U), :006E7DF9(U)
|:006E7E09(U), :006E7E51(U), :006E7E5F(U), :006E7E6D(U), :006E7E7B(U)
|:006E7E89(U), :006E7E9F(U), :006E7EAD(U), :006E7EB5(U), :006E7F1C(U)
|:006E7F2A(U), :006E7F32(U), :006E7F65(U), :006E7F7B(U), :006E7F83(U)
|:006E7FAE(U), :006E7FBC(U), :006E7FC4(U), :006E7FF7(U), :006E800D(U)
|:006E8015(U), :006E8046(U), :006E804E(U), :006E8056(U), :006E805E(U)
|:006E8066(U), :006E806E(U), :006E80B9(U), :006E80C7(U), :006E80D5(U)
|:006E80E3(U), :006E80F1(U), :006E8107(U), :006E8115(U), :006E811D(U)
|:006E817E(U), :006E818E(U), :006E819E(U), :006E81CB(U), :006E81DB(U)
|:006E81EB(U), :006E8261(U), :006E826F(U), :006E827D(U), :006E828B(U)
|:006E8299(U), :006E82AF(U), :006E82BD(U), :006E82C5(U), :006E833C(U)
|:006E834A(U), :006E8352(U), :006E8385(U), :006E8395(U), :006E83C0(U)
|:006E83CE(U), :006E83D6(U), :006E8409(U), :006E8419(U), :006E844A(U)
|:006E8491(U), :006E849F(U), :006E84AD(U), :006E84BB(U), :006E84C9(U)
|:006E84DF(U), :006E84ED(U), :006E84F5(U), :006E8543(U), :006E857C(U)
|:006E858A(U), :006E8592(U), :006E85C5(U), :006E85D5(U), :006E8600(U)
|:006E860E(U), :006E8616(U), :006E8649(U), :006E8659(U), :006E868A(U)
|:006E86A4(U), :006E8701(U), :006E870F(U), :006E871D(U), :006E872B(U)
|:006E8739(U), :006E874F(U), :006E875D(U), :006E8765(U), :006E87CC(U)
|:006E87DA(U), :006E87E2(U), :006E8815(U), :006E8825(U), :006E8850(U)
|:006E885E(U), :006E8866(U), :006E8899(U), :006E88A9(U), :006E88EC(U)
|:006E8916(U), :006E8971(U), :006E897F(U), :006E898D(U), :006E899B(U)
|:006E89A9(U), :006E89BF(U), :006E89CD(U), :006E89D5(U), :006E8A3E(U)
|:006E8A54(U), :006E8A62(U), :006E8A70(U), :006E8A7E(U), :006E8A86(U)
|:006E8AB3(U), :006E8AC9(U), :006E8AD7(U), :006E8AE5(U), :006E8AF3(U)
|:006E8AFB(U), :006E8B0D(U), :006E8B15(U), :006E8B1D(U), :006E8B25(U)
|:006E8B2D(U), :006E8B35(U), :006E8B47(U), :006E8B4F(U), :006E8B57(U)
|:006E8B5F(U), :006E8B9A(U), :006E8BA2(U), :006E8BAA(U), :006E8BB2(U)
|:006E8BC4(U), :006E8BEA(U), :006E8C12(U), :006E8C3C(U), :006E8C44(U)
|:006E8C4C(U), :006E8C54(U), :006E8C5C(U), :006E8C64(U), :006E8C7F(U)
|:006E8CD1(U), :006E8CD9(U), :006E8CF8(U), :006E8D00(U), :006E8D08(U)
|:006E8D10(U), :006E8D18(U), :006E8D20(U), :006E8D28(U), :006E8D30(U)
|:006E8D40(U), :006E8D5A(U), :006E8D79(U), :006E8D81(U), :006E8D89(U)
|:006E8D91(U), :006E8DD9(U), :006E8DE1(U), :006E8E06(U), :006E8E0E(U)
|:006E8E16(U), :006E8E1E(U), :006E8E26(U), :006E8E2E(U), :006E8E36(U)
|:006E8E3E(U), :006E8E46(U), :006E8E58(U), :006E8E60(U), :006E8E68(U)
|:006E8E7A(U), :006E8ECC(U), :006E8ED4(U), :006E8EDC(U), :006E8EE4(U)
|:006E8F91(U), :006E8F9F(U), :006E8FAD(U), :006E8FC3(U), :006E8FD1(U)
|:006E8FDF(U), :006E8FED(U), :006E8FFB(U), :006E9011(U), :006E901F(U)
|:006E9027(U), :006E908C(U), :006E909A(U), :006E90A2(U), :006E90D5(U)
|:006E90E5(U), :006E9110(U), :006E911E(U), :006E9126(U), :006E9159(U)
|:006E9169(U), :006E91A3(U), :006E91D1(U), :006E91DF(U), :006E91ED(U)
|:006E91FB(U), :006E9209(U), :006E921F(U), :006E922D(U), :006E9235(U)
|:006E929E(U), :006E92B4(U), :006E92C2(U), :006E92D0(U), :006E92DE(U)
|:006E92EC(U), :006E92FA(U), :006E9320(U), :006E9328(U), :006E933E(U)
|:006E935C(U), :006E9389(U), :006E939F(U), :006E93AD(U), :006E93BB(U)
|:006E93C9(U), :006E93D7(U), :006E93E5(U), :006E940B(U), :006E9413(U)
|:006E9429(U), :006E9447(U), :006E9459(U), :006E9461(U), :006E9473(U)
|:006E9495(U), :006E94B7(U), :006E94BF(U), :006E9501(U), :006E950F(U)
|:006E951D(U), :006E952B(U), :006E9539(U), :006E9547(U), :006E9575(U)
|:006E9583(U), :006E9591(U), :006E959F(U), :006E95AD(U), :006E95C3(U)
|:006E95D1(U), :006E95D9(U), :006E9631(U), :006E9652(U), :006E9660(U)
|:006E966E(U), :006E967C(U), :006E968A(U), :006E9698(U), :006E96C6(U)
|:006E96D4(U), :006E96E2(U), :006E96F0(U), :006E96FE(U), :006E9714(U)
|:006E9722(U), :006E972A(U), :006E9796(U), :006E97A1(U), :006E97AC(U)
|:006E97B7(U), :006E97C2(U), :006E97CD(U), :006E97D8(U), :006E97E3(U)
|:006E97EE(U), :006E97F6(U), :006E97FE(U), :006E9806(U), :006E980E(U)
|:006E9816(U), :006E981E(U), :006E9826(U), :006E982E(U), :006E9836(U)
|:006E98D8(U), :006E98E3(U), :006E98EE(U), :006E98F9(U), :006E9904(U)
|:006E9932(U), :006E993A(U), :006E99D7(U), :006E99ED(U), :006E99FB(U)
|:006E9A09(U), :006E9A17(U), :006E9A25(U), :006E9A33(U), :006E9A59(U)
|:006E9A61(U), :006E9A8E(U), :006E9AA4(U), :006E9AB2(U), :006E9AC0(U)
|:006E9ACE(U), :006E9ADC(U), :006E9AEA(U), :006E9B10(U), :006E9B18(U)
|:006E9B44(U), :006E9B4C(U), :006E9B54(U), :006E9B5C(U), :006E9B64(U)
|:006E9B6C(U), :006E9B7E(U), :006E9B86(U), :006E9B8E(U), :006E9B96(U)
|:006E9B9E(U), :006E9BA6(U), :006E9BB8(U), :006E9BC0(U), :006E9BF1(U)
|:006E9BF9(U), :006E9C01(U), :006E9C09(U), :006E9C1B(U), :006E9C2D(U)
|:006E9C3F(U), :006E9C51(U), :006E9C59(U), :006E9C6B(U), :006E9C73(U)
|:006E9C7B(U), :006E9C83(U), :006E9C8B(U), :006E9C93(U), :006E9D35(U)
|:006E9D40(U), :006E9D4B(U), :006E9D56(U), :006E9D61(U), :006E9D6C(U)
|:006E9D8A(U), :006E9E0C(U), :006E9E14(U), :006E9E2A(U), :006E9E3D(U)
|:006E9E45(U), :006E9E5B(U), :006E9EAC(U), :006E9EBA(U), :006E9EC2(U)
|:006E9EF5(U), :006E9F05(U), :006E9F30(U), :006E9F3E(U), :006E9F46(U)
|:006E9F79(U), :006E9F89(U), :006E9FB4(U), :006E9FC2(U), :006E9FCA(U)
|:006E9FFD(U), :006EA028(U), :006EA036(U), :006EA03E(U), :006EA071(U)
|:006EA0D1(U), :006EA0DF(U), :006EA0ED(U), :006EA0FB(U), :006EA109(U)
|:006EA11F(U), :006EA12D(U), :006EA135(U), :006EA191(U), :006EA19F(U)
|:006EA1AD(U), :006EA1BB(U), :006EA1C9(U), :006EA1DF(U), :006EA1ED(U)
|:006EA1F5(U), :006EA25C(U), :006EA26A(U), :006EA272(U), :006EA2A5(U)
|:006EA2D0(U), :006EA2DE(U), :006EA2E6(U), :006EA319(U), :006EA361(U)
|:006EA36F(U), :006EA37D(U), :006EA38B(U), :006EA399(U), :006EA3AF(U)
|:006EA3BD(U), :006EA3C5(U), :006EA413(U), :006EA44C(U), :006EA45A(U)
|:006EA462(U), :006EA50D(U), :006EA52A(U), :006EA532(U), :006EA53A(U)
|:006EA542(U), :006EA54A(U), :006EA5DC(U), :006EA713(U), :006EA724(U)
|:006EA72C(U), :006EA757(U), :006EA760(U), :006EA768(U), :006EA839(U)
|:006EA841(U), :006EA856(U), :006EA861(U), :006EA869(U), :006EA874(U)
|:006EA87F(U), :006EA88A(U), :006EA8A5(U), :006EA8B0(U), :006EA903(U)
|:006EA963(U), :006EA96B(U), :006EA973(U), :006EA97B(U), :006EA991(U)
|:006EA9A4(U), :006EA9AC(U), :006EA9B4(U), :006EA9BC(U), :006EA9C4(U)
|:006EAAE7(U), :006EAAF2(U), :006EAAFD(U), :006EAB13(U), :006EAB1E(U)
|:006EAB29(U), :006EAB34(U), :006EAB4A(U), :006EAB55(U), :006EAB60(U)
|:006EAB73(U), :006EABA3(U), :006EABC6(U), :006EABD1(U), :006EABDC(U)
|:006EABF2(U), :006EABFD(U), :006EAC08(U), :006EAC13(U), :006EAC29(U)
|:006EAC34(U), :006EAC3F(U), :006EAC52(U), :006EAC96(U), :006EACA1(U)
|:006EACAC(U), :006EACC2(U), :006EACCD(U), :006EACD8(U), :006EACE3(U)
|:006EAD43(U), :006EAD63(U), :006EAD6B(U), :006EAD98(U), :006EADB2(U)
|:006EADC4(U), :006EADD6(U), :006EAE47(U), :006EAE4F(U), :006EAE57(U)
|:006EAE69(U), :006EAE79(U), :006EAE81(U), :006EAF44(U), :006EAF52(U)
|:006EAF76(U), :006EAF7E(U), :006EAFB1(U), :006EAFBF(U), :006EAFE3(U)
|:006EAFEB(U), :006EB00D(U), :006EB015(U), :006EB01D(U), :006EB07A(U)
|:006EB085(U), :006EB090(U), :006EB09B(U), :006EB0B1(U), :006EB0BC(U)
|:006EB0C7(U), :006EB0D2(U), :006EB0DD(U), :006EB0E8(U), :006EB0F3(U)
|:006EB0FE(U), :006EB109(U), :006EB114(U), :006EB11F(U), :006EB12A(U)
|:006EB135(U), :006EB140(U), :006EB14B(U), :006EB156(U), :006EB161(U)
|:006EB16C(U), :006EB177(U), :006EB193(U), :006EB1B0(U), :006EB1C7(U)
|:006EB1D2(U), :006EB20C(U), :006EB217(U), :006EB222(U), :006EB22D(U)
|:006EB24D(U), :006EB258(U), :006EB263(U), :006EB26E(U), :006EB28E(U)
|:006EB299(U), :006EB2A4(U), :006EB2AF(U), :006EB2C4(U), :006EB2CF(U)
|:006EB2FE(U), :006EB309(U), :006EB314(U), :006EB33A(U), :006EB345(U)
|:006EB369(U), :006EB374(U), :006EB37F(U), :006EB38A(U), :006EB3A4(U)
|:006EB42A(U), :006EB436(U), :006EB441(U), :006EB46A(U), :006EB475(U)
|:006EB4C6(U), :006EB4D1(U), :006EB4F1(U), :006EB4FC(U), :006EB50E(U)
|:006EB530(U), :006EB538(U), :006EB581(U), :006EB58F(U), :006EB5C6(U)
|:006EB5D4(U), :006EB5E2(U), :006EB5F0(U), :006EB5FE(U), :006EB614(U)
|:006EB622(U), :006EB62A(U), :006EB6B6(U), :006EB6C1(U), :006EB6C9(U)
|:006EB6D9(U), :006EB6E1(U), :006EB6E9(U), :006EB6F1(U), :006EB701(U)
|:006EB709(U), :006EB711(U), :006EB727(U), :006EB732(U), :006EB73A(U)
|:006EB74A(U), :006EB752(U), :006EB75A(U), :006EB762(U), :006EB772(U)
|:006EB77A(U), :006EB782(U), :006EB7C6(U), :006EB7D1(U), :006EB7F2(U)
|:006EB7FD(U), :006EB808(U), :006EB813(U), :006EB81E(U), :006EB829(U)
|:006EB834(U), :006EB83F(U), :006EB84A(U), :006EB855(U), :006EB860(U)
|:006EB86B(U), :006EB876(U), :006EB881(U), :006EB88C(U), :006EB897(U)
|:006EB8A2(U), :006EB8BE(U), :006EB8DB(U), :006EB8F2(U), :006EB8FD(U)
|:006EB916(U), :006EB921(U), :006EB942(U), :006EB94D(U), :006EB958(U)
|:006EB963(U), :006EB96E(U), :006EB979(U), :006EB984(U), :006EB98F(U)
|:006EB99A(U), :006EB9A5(U), :006EB9B0(U), :006EB9BB(U), :006EB9C6(U)
|:006EB9D1(U), :006EB9DC(U), :006EB9E7(U), :006EB9F2(U), :006EBA0E(U)
|:006EBA2B(U), :006EBA42(U), :006EBA4D(U), :006EBA66(U), :006EBA71(U)
|:006EBA92(U), :006EBA9D(U), :006EBAA8(U), :006EBAB3(U), :006EBABE(U)
|:006EBAC9(U), :006EBAD4(U), :006EBADF(U), :006EBAEA(U), :006EBAF5(U)
|:006EBB00(U), :006EBB0B(U), :006EBB16(U), :006EBB21(U), :006EBB2C(U)
|:006EBB37(U), :006EBB42(U), :006EBB5E(U), :006EBB7B(U), :006EBB92(U)
|:006EBB9D(U), :006EBBB6(U), :006EBBC1(U), :006EBBE2(U), :006EBBED(U)
|:006EBBF8(U), :006EBC03(U), :006EBC0E(U), :006EBC19(U), :006EBC24(U)
|:006EBC2F(U), :006EBC3A(U), :006EBC45(U), :006EBC50(U), :006EBC5B(U)
|:006EBC66(U), :006EBC71(U), :006EBC7C(U), :006EBC87(U), :006EBC92(U)
|:006EBCAE(U), :006EBCCB(U), :006EBCE2(U), :006EBCED(U), :006EBD06(U)
|:006EBD11(U), :006EBD32(U), :006EBD3D(U), :006EBD48(U), :006EBD53(U)
|:006EBD5E(U), :006EBD69(U), :006EBD74(U), :006EBD7F(U), :006EBD8A(U)
|:006EBD95(U), :006EBDA0(U), :006EBDAB(U), :006EBDB6(U), :006EBDC1(U)
|:006EBDCC(U), :006EBDD7(U), :006EBDE2(U), :006EBDFE(U), :006EBE1B(U)
|:006EBE32(U), :006EBE3D(U), :006EBE53(U), :006EBE5B(U), :006EBE63(U)
|:006EBE79(U), :006EBE96(U), :006EBEA1(U), :006EBEAC(U), :006EBEC2(U)
|:006EBECD(U), :006EBED8(U), :006EBEE3(U), :006EBEF9(U), :006EBF04(U)
|:006EBF0F(U), :006EBF17(U), :006EBF22(U), :006EBF2A(U), :006EBF57(U)
|:006EBF62(U), :006EBF6D(U), :006EBF83(U), :006EBF8E(U), :006EBF99(U)
|:006EBFA4(U), :006EBFBA(U), :006EBFC5(U), :006EBFD0(U), :006EBFF3(U)
|:006EBFFB(U), :006EC003(U), :006EC019(U), :006EC033(U), :006EC03B(U)
|:006EC043(U), :006EC059(U), :006EC073(U), :006EC07B(U), :006EC083(U)
|:006EC099(U), :006EC0B3(U), :006EC0BB(U), :006EC0C3(U), :006EC0D9(U)
|:006EC0F3(U), :006EC0FB(U), :006EC103(U), :006EC119(U), :006EC147(U)
|:006EC152(U), :006EC15D(U), :006EC173(U), :006EC17E(U), :006EC189(U)
|:006EC194(U), :006EC1AA(U), :006EC1B5(U), :006EC1C0(U), :006EC1D3(U)
|:006EC217(U), :006EC222(U), :006EC22D(U), :006EC243(U), :006EC24E(U)
|:006EC259(U), :006EC264(U), :006EC27A(U), :006EC285(U), :006EC290(U)
|:006EC2A3(U), :006EC2F6(U), :006EC301(U), :006EC322(U), :006EC32D(U)
|:006EC338(U), :006EC343(U), :006EC34E(U), :006EC359(U), :006EC364(U)
|:006EC36F(U), :006EC37A(U), :006EC385(U), :006EC390(U), :006EC39B(U)
|:006EC3A6(U), :006EC3B1(U), :006EC3BC(U), :006EC3C7(U), :006EC3D2(U)
|:006EC3EE(U), :006EC40B(U), :006EC422(U), :006EC42D(U), :006EC443(U)
|:006EC44B(U), :006EC453(U), :006EC469(U), :006EC486(U), :006EC491(U)
|:006EC4B2(U), :006EC4BD(U), :006EC4C8(U), :006EC4D3(U), :006EC4DE(U)
|:006EC4E9(U), :006EC4F4(U), :006EC4FF(U), :006EC50A(U), :006EC515(U)
|:006EC520(U), :006EC52B(U), :006EC536(U), :006EC541(U), :006EC54C(U)
|:006EC557(U), :006EC562(U), :006EC57E(U), :006EC59B(U), :006EC5B2(U)
|:006EC5BD(U), :006EC5D3(U), :006EC5DB(U), :006EC5E3(U), :006EC5F9(U)
|:006EC61E(U), :006EC63C(U), :006EC69F(U), :006EC6AA(U), :006EC6B5(U)
|:006EC6C0(U), :006EC6CB(U), :006EC6D6(U), :006EC6E1(U), :006EC6EC(U)
|:006EC6F7(U), :006EC702(U), :006EC70D(U), :006EC718(U), :006EC723(U)
|:006EC72E(U), :006EC739(U), :006EC744(U), :006EC74F(U), :006EC76B(U)
|:006EC788(U), :006EC79F(U), :006EC7AA(U), :006EC7D3(U), :006EC7DB(U)
|:006EC7E3(U), :006EC7F9(U), :006EC816(U), :006EC821(U), :006EC842(U)
|:006EC84D(U), :006EC858(U), :006EC863(U), :006EC86E(U), :006EC879(U)
|:006EC884(U), :006EC88F(U), :006EC89A(U), :006EC8A5(U), :006EC8B0(U)
|:006EC8BB(U), :006EC8C6(U), :006EC8D1(U), :006EC8DC(U), :006EC8E7(U)
|:006EC8F2(U), :006EC90E(U), :006EC92B(U), :006EC942(U), :006EC94D(U)
|:006EC963(U), :006EC96B(U), :006EC973(U), :006EC989(U), :006EC9CE(U)
|:006EC9D9(U), :006EC9FA(U), :006ECA05(U), :006ECA10(U), :006ECA1B(U)
|:006ECA26(U), :006ECA31(U), :006ECA3C(U), :006ECA47(U), :006ECA52(U)
|:006ECA5D(U), :006ECA68(U), :006ECA73(U), :006ECA7E(U), :006ECA89(U)
|:006ECA94(U), :006ECA9F(U), :006ECAAA(U), :006ECAC6(U), :006ECAE3(U)
|:006ECAFA(U), :006ECB05(U), :006ECB23(U), :006ECB2B(U), :006ECB33(U)
|:006ECB49(U), :006ECB66(U), :006ECB71(U), :006ECB92(U), :006ECB9D(U)
|:006ECBA8(U), :006ECBB3(U), :006ECBBE(U), :006ECBC9(U), :006ECBD4(U)
|:006ECBDF(U), :006ECBEA(U), :006ECBF5(U), :006ECC00(U), :006ECC0B(U)
|:006ECC16(U), :006ECC21(U), :006ECC2C(U), :006ECC37(U), :006ECC42(U)
|:006ECC5E(U), :006ECC7B(U), :006ECC92(U), :006ECC9D(U), :006ECCB3(U)
|:006ECCBB(U), :006ECCC3(U), :006ECCD9(U), :006ECD43(U), :006ECD55(U)
|:006ECD79(U), :006ECD9B(U), :006ECDB3(U), :006ECDBB(U), :006ECDC3(U)
|:006ECDCB(U), :006ECDD3(U), :006ECDDB(U), :006ECDE3(U), :006ECDEB(U)
|:006ECDF3(U), :006ECDFB(U), :006ECE03(U), :006ECE15(U), :006ECE1D(U)
|:006ECE25(U), :006ECE2D(U), :006ECE35(U), :006ECE3D(U), :006ECE45(U)
|:006ECE63(U), :006ECE6B(U), :006ECE93(U), :006ECE9B(U), :006ECEA3(U)
|:006ECEAB(U), :006ECEB3(U), :006ECEBB(U), :006ECEC3(U), :006ECECB(U)
|:006ECED3(U), :006ECEDB(U), :006ECEE3(U), :006ECF13(U), :006ECF29(U)
|:006ECF34(U), :006ECF3F(U), :006ECF4A(U), :006ECF55(U), :006ECF60(U)
|:006ECF6B(U), :006ECF76(U), :006ECF88(U), :006ECF9A(U), :006ECFA2(U)
|:006ECFAA(U), :006ECFB2(U), :006ECFBA(U), :006ECFC2(U), :006ECFD4(U)
|:006ECFDC(U), :006ECFE4(U), :006ECFF7(U), :006ECFFF(U), :006ED007(U)
|:006ED00F(U), :006ED017(U), :006ED01F(U), :006ED027(U), :006ED02F(U)
|:006ED03A(U), :006ED045(U), :006ED050(U), :006ED05B(U), :006ED066(U)
|:006ED071(U), :006ED07C(U), :006ED087(U), :006ED0CF(U), :006ED0D7(U)
|:006ED0E9(U), :006ED0F1(U), :006ED20F(U), :006ED217(U), :006ED21F(U)
|:006ED227(U), :006ED22F(U), :006ED237(U), :006ED23F(U), :006ED24A(U)
|:006ED252(U), :006ED264(U), :006ED26C(U), :006ED274(U), :006ED27F(U)
|:006ED287(U), :006ED299(U), :006ED2A1(U), :006ED2A9(U), :006ED2BB(U)
|:006ED2C3(U), :006ED2CB(U), :006ED2D3(U), :006ED2DB(U), :006ED2E3(U)
|:006ED303(U), :006ED5D1(U), :006ED5DC(U), :006ED5E7(U), :006ED5F2(U)
|:006ED5FD(U), :006ED608(U), :006ED613(U), :006ED61E(U), :006ED629(U)
|:006ED634(U), :006ED63F(U), :006ED64A(U), :006ED655(U), :006ED66B(U)
|:006ED68C(U), :006ED697(U), :006ED6D5(U), :006ED6E0(U), :006ED71E(U)
|:006ED729(U), :006ED734(U), :006ED73F(U), :006ED74A(U), :006ED755(U)
|:006ED760(U), :006ED76B(U), :006ED776(U), :006ED781(U), :006ED7BF(U)
|:006ED7C7(U), :006ED7CF(U), :006ED7D7(U), :006ED7E9(U), :006ED7F1(U)
|:006ED7F9(U), :006ED801(U), :006ED809(U), :006EDB45(U), :006EDB4D(U)
|:006EDB55(U), :006EDB87(U), :006EDB8F(U), :006EDB97(U), :006EDB9F(U)
|:006EDBA7(U), :006EDBB9(U), :006EDBC1(U), :006EDBC9(U), :006EDBD1(U)
|:006EDBD9(U), :006EDBE1(U), :006EDBE9(U), :006EDBF1(U), :006EDBF9(U)
|:006EDC01(U), :006EDC09(U), :006EDC11(U), :006EDC19(U), :006EDC2B(U)
|:006EDC33(U), :006EDC3B(U), :006EDC43(U), :006EDC4B(U), :006EDC53(U)
|:006EDC5B(U), :006EDC63(U), :006EDC79(U), :006EDC8C(U), :006EDC94(U)
|:006EDC9C(U), :006EDCA4(U), :006EDCAC(U), :006EDCC2(U), :006EDCD5(U)
|:006EDCDD(U), :006EDCE5(U), :006EDCED(U), :006EDD03(U), :006EDD16(U)
|:006EDD1E(U), :006EDD26(U), :006EDD2E(U), :006EDD36(U), :006EDD3E(U)
|:006EDD46(U), :006EDD4E(U), :006EDD56(U), :006EDD5E(U), :006EDD66(U)
|:006EDD6E(U), :006EDD76(U), :006EDD7E(U), :006EDD86(U), :006EDD8E(U)
|:006EDD96(U), :006EDD9E(U), :006EDDA6(U), :006EDDBC(U), :006EDDCF(U)
|:006EDDD7(U), :006EDDDF(U), :006EDDE7(U), :006EDDEF(U), :006EDDF7(U)
|:006EDDFF(U), :006EDE07(U), :006EDE0F(U), :006EDE17(U), :006EDE1F(U)
|:006EDE27(U), :006EDE2F(U), :006EDE37(U), :006EDE3F(U), :006EDE47(U)
|:006EDE4F(U), :006EDE57(U), :006EDE5F(U), :006EDE67(U), :006EDE79(U)
|:006EDE81(U), :006EDE89(U), :006EDE91(U), :006EDE99(U), :006EDEA1(U)
|:006EDEA9(U), :006EDEB1(U), :006EDEB9(U), :006EDEC1(U), :006EDEC9(U)
|:006EDED1(U), :006EDEE3(U), :006EDEEB(U), :006EDEF3(U), :006EDEFB(U)
|:006EDF03(U), :006EDF0B(U), :006EDF13(U), :006EDF1B(U), :006EDF23(U)
|:006EDF2B(U), :006EDF33(U), :006EDF3B(U), :006EDF43(U), :006EDF4B(U)
|:006EDF53(U), :006EDF5B(U), :006EDF63(U), :006EDF6B(U), :006EDF73(U)
|:006EDF7B(U), :006EDF83(U), :006EDF8B(U), :006EDF93(U), :006EDF9B(U)
|:006EDFA3(U), :006EDFAB(U), :006EDFB3(U), :006EDFBB(U), :006EDFC3(U)
|:006EDFCB(U), :006EDFD3(U), :006EDFDB(U), :006EDFE3(U), :006EE003(U)
|:006EE00B(U), :006EE013(U), :006EE01B(U), :006EE023(U), :006EE02B(U)
|:006EE033(U), :006EE03B(U), :006EE043(U), :006EE04B(U), :006EE053(U)
|:006EE05B(U), :006EE063(U), :006EE06B(U), :006EE073(U), :006EE07B(U)
|:006EE083(U), :006EE08B(U), :006EE093(U), :006EE09B(U), :006EE0A3(U)
|:006EE0AB(U), :006EE0B3(U), :006EE0BB(U), :006EE0C3(U), :006EE0CB(U)
|:006EE0D3(U), :006EE0DB(U), :006EE0E3(U), :006EE0EB(U), :006EE0F3(U)
|:006EE0FB(U), :006EE103(U), :006EE10B(U), :006EE113(U), :006EE11B(U)
|:006EE123(U), :006EE12B(U), :006EE133(U), :006EE13B(U), :006EE143(U)
|:006EE14B(U), :006EE153(U), :006EE15B(U), :006EE163(U), :006EE16B(U)
|:006EE173(U), :006EE17B(U), :006EE18D(U), :006EE195(U), :006EE19D(U)
|:006EE1A5(U), :006EE1AD(U), :006EE1B5(U), :006EE1BD(U), :006EE1C5(U)
|:006EE1CD(U), :006EE1E3(U), :006EE1EC(U), :006EE1F4(U), :006EE1FC(U)
|:006EE204(U), :006EE20C(U), :006EE214(U), :006EE21C(U), :006EE224(U)
|:006EE22C(U), :006EE234(U), :006EE23C(U), :006EE244(U), :006EE24C(U)
|:006EE254(U), :006EE25C(U), :006EE264(U), :006EE26C(U), :006EE274(U)
|:006EE27C(U), :006EE284(U), :006EE28C(U), :006EE294(U), :006EE29C(U)
|:006EE2A4(U), :006EE2AC(U), :006EE2B4(U), :006EE2BC(U), :006EE2C4(U)
|:006EE2CC(U), :006EE2D4(U), :006EE2DC(U), :006EE2E4(U), :006EE2EC(U)
|:006EE2F4(U), :006EE2FC(U), :006EE304(U), :006EE30C(U), :006EE314(U)
|:006EE31C(U), :006EE324(U), :006EE32C(U), :006EE334(U), :006EE33C(U)
|:006EE344(U), :006EE34C(U), :006EE354(U), :006EE35C(U), :006EE364(U)
|:006EE36C(U), :006EE374(U), :006EE37C(U), :006EE384(U), :006EE38C(U)
|:006EE394(U), :006EE39C(U), :006EE3A4(U), :006EE3AC(U), :006EE3B4(U)
|:006EE3BC(U), :006EE3C4(U), :006EE3CC(U), :006EE3D4(U), :006EE3DC(U)
|:006EE3E4(U), :006EE3EC(U), :006EE3F4(U), :006EE3FC(U), :006EE404(U)
|:006EE40C(U), :006EE414(U), :006EE41C(U), :006EE424(U), :006EE42C(U)
|:006EE434(U), :006EE43C(U), :006EE444(U), :006EE44C(U), :006EE454(U)
|:006EE45C(U), :006EE464(U), :006EE46C(U), :006EE474(U), :006EE47C(U)
|:006EE484(U), :006EE48C(U), :006EE494(U), :006EE49C(U), :006EE4A4(U)
|:006EE4AC(U), :006EE4B4(U), :006EE4BC(U), :006EE4C4(U), :006EE4CC(U)
|:006EE4D4(U), :006EE4DC(U), :006EE4E4(U), :006EE4EC(U), :006EE4F4(U)
|:006EE4FC(U), :006EE504(U), :006EE50C(U), :006EE514(U), :006EE51C(U)
|:006EE524(U), :006EE52C(U), :006EE534(U), :006EE53C(U), :006EE544(U)
|:006EE556(U), :006EE55E(U), :006EE566(U), :006EE56E(U), :006EE576(U)
|:006EE57E(U), :006EE586(U), :006EE58E(U), :006EE596(U), :006EE5D7(U)
|:006EE5DF(U), :006EE5E7(U), :006EE5EF(U), :006EE5F7(U), :006EE5FF(U)
|:006EE607(U), :006EE60F(U), :006EE617(U), :006EE61F(U), :006EE627(U)
|:006EE62F(U), :006EE637(U), :006EE63F(U), :006EE647(U), :006EE64F(U)
|:006EE657(U), :006EE669(U), :006EE671(U), :006EE679(U), :006EE681(U)
|:006EE689(U), :006EE691(U), :006EE699(U), :006EE6A1(U), :006EE6A9(U)
|:006EE6B1(U), :006EE6B9(U), :006EE6C1(U), :006EE6C9(U), :006EE6DF(U)
|:006EE6F3(U), :006EE6FB(U), :006EE703(U), :006EE70B(U), :006EE713(U)
|:006EE71B(U), :006EE723(U), :006EE72B(U), :006EE733(U), :006EE753(U)
|:006EE765(U), :006EE777(U), :006EE789(U), :006EE791(U), :006EE799(U)
|:006EE7A1(U), :006EE7A9(U), :006EE7B1(U), :006EE7B9(U), :006EE7C1(U)
|:006EE7C9(U), :006EE7D1(U), :006EE7D9(U), :006EE7EB(U), :006EE823(U)
|:006EE83D(U), :006EE857(U), :006EE869(U), :006EE881(U), :006EE893(U)
|:006EE8A5(U), :006EEA91(U), :006EEA9C(U), :006EEAA7(U), :006EEB08(U)
|:006EEC4D(U), :006EED45(U), :006EED4D(U), :006EED6A(U), :006EED72(U)
|:006EED7A(U), :006EED8C(U), :006EEDA9(U), :006EEDB1(U), :006EEDC3(U)
|:006EEE23(U), :006EEE2B(U), :006EEE33(U), :006EEE84(U), :006EEE97(U)
|:006EEE9F(U), :006EEED0(U), :006EEEDB(U), :006EEEE6(U), :006EEF68(U)
|:006EEF70(U), :006EEF78(U), :006EEF80(U), :006EEF88(U), :006EEFBE(U)
|:006EEFDC(U), :006EEFE4(U), :006EEFEC(U), :006EEFF4(U), :006EEFFC(U)
|:006EF004(U), :006EF00C(U), :006EF014(U), :006EF01C(U), :006EF024(U)
|:006EF02C(U), :006EF034(U), :006EF03C(U), :006EF044(U), :006EF04C(U)
|:006EF054(U), :006EF05C(U), :006EF064(U), :006EF096(U), :006EF09E(U)
|:006EF0B8(U), :006EF0DE(U), :006EF11B(U), :006EF123(U), :006EF159(U)
|:006EF164(U), :006EF16F(U), :006EF1EE(U), :006EF205(U), :006EF22F(U)
|:006EF246(U), :006EF270(U), :006EF287(U), :006EF2B1(U), :006EF2CA(U)
|:006EF2F6(U), :006EF30F(U), :006EF33B(U), :006EF343(U), :006EF34B(U)
|:006EF353(U), :006EF397(U), :006EF3B0(U), :006EF755(U), :006EF7B8(U)
|:006EF873(U), :006EF90E(U), :006EF962(U), :006EF9B4(U), :006EF9BF(U)
|:006EF9D9(U), :006EF9EB(U), :006EF9F3(U), :006EF9FB(U), :006EFA03(U)
|:006EFA0B(U), :006EFA25(U), :006EFA37(U), :006EFA89(U), :006EFA94(U)
|:006EFAB3(U), :006EFAF2(U), :006EFB09(U), :006EFB20(U), :006EFB37(U)
|:006EFB61(U), :006EFB78(U), :006EFBA2(U), :006EFBBB(U), :006EFBE7(U)
|:006EFC00(U), :006EFC2C(U), :006EFC45(U), :006EFC79(U), :006EFC92(U)
|:006EFD0E(U), :006EFD17(U), :006EFD1F(U), :006EFD27(U), :006EFD2F(U)
|:006EFD88(U), :006EFDB8(U), :006EFDC6(U), :006EFDDC(U), :006EFE0C(U)
|:006EFE1A(U), :006EFE30(U), :006EFE38(U), :006EFE40(U), :006EFE48(U)
|:006EFE50(U), :006EFE58(U), :006EFE60(U), :006EFE68(U), :006EFE70(U)
|:006EFE78(U), :006EFE80(U), :006EFED1(U), :006EFEDF(U), :006EFF21(U)
|:006EFF2F(U), :006EFF75(U), :006EFF87(U), :006EFF8F(U), :006EFFE1(U)
|:006EFFE9(U), :006EFFF1(U), :006EFFF9(U), :006F00E4(U), :006F016F(U)
|:006F0219(U), :006F0221(U), :006F0229(U), :006F0231(U), :006F0239(U)
|:006F0241(U), :006F0249(U), :006F0251(U), :006F0259(U), :006F0261(U)
|:006F0269(U), :006F0271(U), :006F0279(U), :006F0281(U), :006F0289(U)
|:006F0291(U), :006F0299(U), :006F02A1(U), :006F02A9(U), :006F02B1(U)
|:006F02B9(U), :006F02C1(U), :006F02C9(U), :006F02D1(U), :006F02D9(U)
|:006F02F9(U), :006F0302(U), :006F0314(U), :006F032A(U), :006F0345(U)
|:006F034D(U), :006F0355(U), :006F035D(U), :006F0365(U), :006F036D(U)
|:006F0375(U), :006F038B(U), :006F03BE(U), :006F03C6(U), :006F03CE(U)
|:006F03D6(U), :006F03F6(U), :006F03FF(U), :006F0407(U), :006F040F(U)
|:006F0417(U), :006F041F(U), :006F043F(U), :006F0448(U), :006F0450(U)
|:006F0458(U), :006F0460(U), :006F0468(U), :006F048A(U), :006F0492(U)
|:006F049A(U), :006F04A2(U), :006F04AA(U), :006F04BA(U), :006F04C2(U)
|:006F04CA(U), :006F04D2(U), :006F05A3(U), :006F05AE(U), :006F05B6(U)
|:006F05C8(U), :006F05DA(U), :006F05E2(U), :006F05F4(U), :006F05FC(U)
|:006F060C(U), :006F061C(U), :006F0624(U), :006F0634(U), :006F0644(U)
|:006F064C(U), :006F065C(U), :006F066C(U), :006F0674(U), :006F0684(U)
|:006F0694(U), :006F069C(U), :006F06AC(U), :006F06BC(U), :006F06C4(U)
|:006F06D4(U), :006F06E4(U), :006F06EC(U), :006F06FC(U), :006F070C(U)
|:006F0714(U), :006F0724(U), :006F0734(U), :006F073C(U), :006F074C(U)
|:006F075C(U), :006F0764(U), :006F0774(U), :006F0784(U), :006F078C(U)
|:006F079C(U), :006F07AC(U), :006F07B4(U), :006F07C4(U), :006F07D4(U)
|:006F07DC(U), :006F07EC(U), :006F07FC(U), :006F0804(U), :006F0814(U)
|:006F0824(U), :006F082C(U), :006F083C(U), :006F084C(U), :006F0854(U)
|:006F0864(U), :006F0874(U), :006F087C(U), :006F088C(U), :006F089C(U)
|:006F08A4(U), :006F08B4(U), :006F08C4(U), :006F08CC(U), :006F08DC(U)
|:006F08EC(U), :006F08F4(U), :006F0904(U), :006F0914(U), :006F091C(U)
|:006F092C(U), :006F093C(U), :006F0944(U), :006F0954(U), :006F0964(U)
|:006F096C(U), :006F097C(U), :006F098C(U), :006F0994(U), :006F09A4(U)
|:006F09B4(U), :006F09BC(U), :006F09CC(U), :006F09DC(U), :006F09E4(U)
|:006F09F4(U), :006F0A04(U), :006F0A0C(U), :006F0A1C(U), :006F0A2C(U)
|:006F0A34(U), :006F0A44(U), :006F0A54(U), :006F0A5C(U), :006F0A6C(U)
|:006F0A7C(U), :006F0A84(U), :006F0A8C(U), :006F0A94(U), :006F0A9C(U)
|:006F0AA4(U), :006F0AAC(U), :006F0AB4(U), :006F0ABC(U), :006F0AC4(U)
|:006F0ACC(U), :006F0AD4(U), :006F0ADC(U), :006F0AE4(U), :006F0AEC(U)
|:006F0AF4(U), :006F0AFC(U), :006F0B04(U), :006F0B0C(U), :006F0B14(U)
|:006F0B1C(U), :006F0B24(U), :006F0B2C(U), :006F0B34(U), :006F0B3C(U)
|:006F0B44(U), :006F0B4C(U), :006F0B54(U), :006F0B5C(U), :006F0B64(U)
|:006F0B6C(U), :006F0B86(U), :006F0B98(U), :006F0BB3(U), :006F0BD6(U)
|:006F0BF3(U), :006F0C13(U), :006F0C45(U), :006F0C83(U), :006F0CAA(U)
|:006F0CE3(U), :006F0D0A(U), :006F0DB9(U), :006F0DC4(U), :006F0DCF(U)
|:006F0E7A(U), :006F0EB3(U), :006F0EEC(U), :006F0F25(U), :006F0F62(U)
|:006F0F84(U), :006F0F94(U), :006F0FB9(U), :006F0FF8(U), :006F1000(U)
|:006F1008(U), :006F10C1(U), :006F10CC(U), :006F10D7(U), :006F1144(U)
|:006F114C(U), :006F1163(U), :006F1197(U), :006F11D9(U), :006F11E4(U)
|:006F11EF(U), :006F1307(U), :006F130F(U), :006F132A(U), :006F1332(U)
|:006F133A(U), :006F1342(U), :006F1365(U), :006F136D(U), :006F1375(U)
|:006F137D(U), :006F1398(U), :006F13A0(U), :006F13C8(U), :006F13D0(U)
|:006F13D8(U), :006F13EA(U), :006F13F2(U), :006F1415(U), :006F141D(U)
|:006F142F(U), :006F1437(U), :006F1449(U), :006F1451(U), :006F1463(U)
|:006F146B(U), :006F147D(U), :006F149B(U), :006F14C3(U), :006F14CE(U)
|:006F14D9(U), :006F1537(U), :006F1545(U), :006F157B(U), :006F1583(U)
|:006F15AB(U), :006F1605(U), :006F1610(U), :006F161B(U), :006F167C(U)
|:006F16B3(U), :006F16CE(U), :006F16FE(U), :006F1709(U), :006F1714(U)
|:006F17B1(U), :006F17C5(U), :006F17CD(U), :006F17D5(U), :006F17DD(U)
|:006F17E5(U), :006F1839(U), :006F1841(U), :006F1849(U), :006F1851(U)
|:006F1859(U), :006F1861(U), :006F1869(U), :006F1871(U), :006F1879(U)
|:006F1881(U), :006F1889(U), :006F1891(U), :006F18DE(U), :006F18E6(U)
|:006F18EE(U), :006F18F6(U), :006F18FE(U), :006F1906(U), :006F190E(U)
|:006F1916(U), :006F191E(U), :006F1926(U), :006F192E(U), :006F1936(U)
|:006F19F3(U), :006F1A47(U), :006F1A6A(U), :006F1A7C(U), :006F1A94(U)
|:006F1A9C(U), :006F1AA4(U), :006F1AAC(U), :006F1AB4(U), :006F1ABC(U)
|:006F1AC4(U), :006F1ACC(U), :006F1AD4(U), :006F1ADC(U), :006F1AE4(U)
|:006F1AEC(U), :006F1AF4(U), :006F1AFC(U), :006F1B04(U), :006F1B0C(U)
|:006F1B14(U), :006F1B1C(U), :006F1B24(U), :006F1B2C(U), :006F1B34(U)
|:006F1B3C(U), :006F1B44(U), :006F1B4C(U), :006F1B54(U), :006F1B5C(U)
|:006F1B64(U), :006F1B6C(U), :006F1B74(U), :006F1B96(U), :006F1BBF(U)
|:006F1C03(U), :006F1C3C(U), :006F1C75(U), :006F1CAC(U), :006F1CF7(U)
|:006F1D02(U), :006F1D0A(U), :006F1D12(U), :006F1DBA(U), :006F1DC5(U)
|:006F1DD0(U), :006F1E52(U), :006F1EAE(U), :006F1F31(U), :006F1FDF(U)
|:006F2017(U), :006F2061(U), :006F206F(U), :006F20B1(U), :006F20BF(U)
|:006F2101(U), :006F210F(U), :006F2171(U), :006F23E1(U), :006F23EF(U)
|:006F2571(U), :006F257C(U), :006F2587(U), :006F2613(U), :006F263C(U)
|:006F2675(U), :006F26B9(U), :006F26F2(U), :006F272F(U), :006F276C(U)
|:006F27A9(U), :006F2822(U), :006F282D(U), :006F2838(U), :006F28B7(U)
|:006F28D9(U), :006F2903(U), :006F2932(U), :006F295B(U), :006F2994(U)
|:006F29CD(U), :006F29FA(U), :006F2A35(U), :006F2A72(U), :006F2AAF(U)
|:006F2AD3(U), :006F2B3F(U), :006F2B6B(U), :006F2B73(U), :006F2B7B(U)
|:006F2B83(U), :006F2BB3(U), :006F2BBE(U), :006F2BC9(U), :006F2C48(U)
|:006F2C6A(U), :006F2C94(U), :006F2CC3(U), :006F2CEC(U), :006F2D25(U)
|:006F2D5E(U), :006F2DA2(U), :006F2DF7(U), :006F2E02(U), :006F2E0D(U)
|:006F2E8C(U), :006F2EAE(U), :006F2ED8(U), :006F2F07(U), :006F2F30(U)
|:006F2F69(U), :006F2FA2(U), :006F2FCF(U), :006F300A(U), :006F3047(U)
|:006F3084(U), :006F30A8(U), :006F3114(U), :006F3140(U), :006F3148(U)
|:006F3150(U), :006F3158(U), :006F3188(U), :006F3193(U), :006F319E(U)
|:006F321D(U), :006F323F(U), :006F3269(U), :006F3298(U), :006F32AE(U)
|:006F32CF(U), :006F3308(U), :006F33D2(U), :006F33DD(U), :006F33E8(U)
|:006F3454(U), :006F3475(U), :006F34AE(U), :006F34FD(U), :006F3522(U)
|:006F355F(U), :006F35A1(U), :006F35FF(U), :006F360A(U), :006F363A(U)
|:006F3645(U), :006F3675(U), :006F3680(U), :006F36B2(U), :006F36BD(U)
|:006F36EF(U), :006F36FA(U), :006F372C(U), :006F3737(U), :006F3787(U)
|:006F37AC(U), :006F37C7(U), :006F384F(U), :006F3857(U), :006F385F(U)
|:006F3867(U), :006F386F(U), :006F3877(U), :006F387F(U), :006F3887(U)
|:006F388F(U), :006F3897(U), :006F389F(U), :006F38A7(U), :006F38AF(U)
|:006F38B7(U), :006F38BF(U), :006F38C7(U), :006F38D9(U), :006F38EB(U)
|:006F38FD(U), :006F390F(U), :006F3921(U), :006F3933(U), :006F3945(U)
|:006F3975(U), :006F3980(U), :006F398B(U), :006F3A18(U), :006F3A3A(U)
|:006F3A64(U), :006F3A91(U), :006F3AA6(U), :006F3ABC(U), :006F3AE3(U)
|:006F3B25(U), :006F3B69(U), :006F3C03(U), :006F3C0E(U), :006F3C19(U)
|:006F3C85(U), :006F3CA6(U), :006F3CC8(U), :006F3E0B(U), :006F3E39(U)
|:006F3E5B(U), :006F3EB3(U), :006F3EC9(U), :006F3EE3(U), :006F3EEB(U)
|:006F3EF3(U), :006F3EFB(U), :006F3F03(U), :006F3F0B(U), :006F3F13(U)
|:006F3F1B(U), :006F3F23(U), :006F3F2B(U), :006F3F33(U), :006F3F49(U)
|:006F3F63(U), :006F3F79(U), :006F3F93(U), :006F3FA9(U), :006F400C(U)
|:006F4022(U), :006F405F(U), :006F406D(U), :006F407B(U), :006F4089(U)
|:006F4091(U), :006F4099(U), :006F40BA(U), :006F40DA(U), :006F40FB(U)
|:006F4134(U), :006F4169(U), :006F4171(U), :006F4183(U), :006F418B(U)
|:006F419D(U), :006F424A(U), :006F4255(U), :006F425D(U), :006F42EC(U)
|:006F42F7(U), :006F4302(U), :006F43A3(U), :006F43CD(U), :006F43D5(U)
|:006F43DD(U), :006F43E5(U), :006F43ED(U), :006F43F5(U), :006F4416(U)
|:006F442D(U), :006F4444(U), :006F445B(U), :006F4464(U), :006F446C(U)
|:006F448D(U), :006F44A4(U), :006F44BB(U), :006F44D4(U), :006F44DD(U)
|:006F44E5(U), :006F4508(U), :006F4521(U), :006F453A(U), :006F4553(U)
|:006F455C(U), :006F4564(U), :006F4587(U), :006F45A0(U), :006F45B9(U)
|:006F45D2(U), :006F45DB(U), :006F45E3(U), :006F4606(U), :006F461F(U)
|:006F4638(U), :006F4651(U), :006F46A4(U), :006F46AF(U), :006F46BA(U)
|:006F474F(U), :006F4788(U), :006F47CC(U), :006F4810(U), :006F483D(U)
|:006F4871(U), :006F488E(U), :006F48AB(U), :006F48C8(U), :006F48D4(U)
|:006F48DF(U), :006F4A4C(U), :006F4A57(U), :006F4A62(U), :006F4B17(U)
|:006F4B22(U), :006F4B4C(U), :006F4B77(U), :006F4C76(U), :006F4C81(U)
|:006F4C8C(U), :006F4C97(U), :006F4F13(U), :006F4F5D(U), :006F4F6B(U)
|:006F4F79(U), :006F509E(U), :006F50A9(U), :006F50B4(U), :006F50CA(U)
|:006F50D5(U), :006F50E0(U), :006F50EB(U), :006F5101(U), :006F510C(U)
|:006F5117(U), :006F512A(U), :006F5156(U), :006F5161(U), :006F5169(U)
|:006F5184(U), :006F518C(U), :006F5194(U), :006F519C(U), :006F51AC(U)
|:006F51B4(U), :006F51BC(U), :006F51CC(U), :006F5283(U), :006F528E(U)
|:006F5296(U), :006F52B6(U), :006F52C1(U), :006F52CC(U), :006F52E2(U)
|:006F52ED(U), :006F52F8(U), :006F5303(U), :006F5339(U), :006F5344(U)
|:006F534C(U), :006F535C(U), :006F5364(U), :006F536C(U), :006F5374(U)
|:006F5384(U), :006F538C(U), :006F5394(U), :006F53A4(U), :006F53AC(U)
|:006F53B4(U), :006F53C4(U), :006F53CC(U), :006F53D4(U), :006F53DC(U)
|:006F53EC(U), :006F53F4(U), :006F53FC(U), :006F5412(U), :006F5436(U)
|:006F5441(U), :006F544C(U), :006F5462(U), :006F546D(U), :006F5478(U)
|:006F5483(U), :006F54BB(U), :006F54C3(U), :006F54CB(U), :006F54D3(U)
|:006F54E3(U), :006F54EB(U), :006F54F3(U), :006F54FB(U), :006F550B(U)
|:006F5513(U), :006F551B(U), :006F552E(U), :006F5546(U), :006F5551(U)
|:006F555C(U), :006F5572(U), :006F557D(U), :006F5588(U), :006F5593(U)
|:006F55CB(U), :006F55D3(U), :006F55DB(U), :006F55E3(U), :006F55F3(U)
|:006F55FB(U), :006F5603(U), :006F560B(U), :006F561B(U), :006F5623(U)
|:006F562E(U), :006F5641(U), :006F566B(U), :006F5673(U), :006F567B(U)
|:006F5683(U), :006F5693(U), :006F569B(U), :006F56A3(U), :006F56AB(U)
|:006F56BB(U), :006F56C3(U), :006F56CB(U), :006F56DB(U), :006F5706(U)
|:006F5711(U), :006F571C(U), :006F5732(U), :006F573D(U), :006F5748(U)
|:006F5753(U), :006F578B(U), :006F5793(U), :006F579B(U), :006F57A3(U)
|:006F57B3(U), :006F57BB(U), :006F57C3(U), :006F57CB(U), :006F57DB(U)
|:006F57E3(U), :006F57EE(U), :006F5801(U), :006F582B(U), :006F5833(U)
|:006F583B(U), :006F5843(U), :006F5853(U), :006F585B(U), :006F5863(U)
|:006F586B(U), :006F587B(U), :006F5883(U), :006F588E(U), :006F58A1(U)
|:006F58C3(U), :006F58CB(U), :006F58DD(U), :006F5914(U), :006F595C(U)
|:006F59C4(U), :006F59CC(U), :006F59D4(U), :006F59DC(U), :006F59F6(U)
|:006F59FE(U), :006F5A10(U), :006F5A93(U), :006F5A9E(U), :006F5B06(U)
|:006F5B23(U), :006F5C13(U), :006F5C1B(U), :006F5C2D(U), :006F5C35(U)
|:006F5C4B(U), :006F5CCD(U), :006F5CD5(U), :006F5CE7(U), :006F5CEF(U)
|:006F5D05(U), :006F5D64(U), :006F5D6C(U), :006F5D82(U), :006F5DCF(U)
|:006F5DD7(U), :006F5DE9(U), :006F5DF1(U), :006F5E07(U), :006F5E71(U)
|:006F5E79(U), :006F5E8B(U), :006F5E93(U), :006F5EA9(U), :006F5F13(U)
|:006F5F1B(U), :006F5F2D(U), :006F5F35(U), :006F5F4B(U), :006F5F93(U)
|:006F5F9B(U), :006F5FAD(U), :006F5FB5(U), :006F5FCB(U), :006F604D(U)
|:006F6055(U), :006F6067(U), :006F606F(U), :006F6085(U), :006F60A0(U)
|:006F60EF(U), :006F60F7(U), :006F6109(U), :006F6111(U), :006F6127(U)
|:006F6186(U), :006F618E(U), :006F61A4(U), :006F61E6(U), :006F61EE(U)
|:006F6204(U), :006F6246(U), :006F624E(U), :006F6264(U), :006F62A6(U)
|:006F62AE(U), :006F62C4(U), :006F6306(U), :006F630E(U), :006F6316(U)
|:006F632C(U), :006F636E(U), :006F6376(U), :006F638C(U), :006F63A7(U)
|:006F63FB(U), :006F6406(U), :006F640E(U), :006F6416(U), :006F6428(U)
|:006F643E(U), :006F6486(U), :006F648E(U), :006F64A0(U), :006F64A8(U)
|:006F64BE(U), :006F6506(U), :006F650E(U), :006F6520(U), :006F6536(U)
|:006F6573(U), :006F6589(U), :006F65B1(U), :006F65C7(U), :006F65EA(U)
|:006F65F2(U), :006F65FA(U), :006F6602(U), :006F6639(U), :006F664F(U)
|:006F6677(U), :006F668D(U), :006F66C0(U), :006F66D8(U), :006F671F(U)
|:006F6735(U), :006F6792(U), :006F679A(U), :006F67A2(U), :006F67D9(U)
|:006F67EF(U), :006F684C(U), :006F6854(U), :006F688B(U), :006F6893(U)
|:006F689B(U), :006F68A3(U), :006F68AB(U), :006F68C1(U), :006F68F4(U)
|:006F68FC(U), :006F6904(U), :006F690C(U), :006F6914(U), :006F691C(U)
|:006F6924(U), :006F692C(U), :006F6934(U), :006F693C(U), :006F697E(U)
|:006F6989(U), :006F6991(U), :006F6999(U), :006F69AB(U), :006F69C1(U)
|:006F6A33(U), :006F6A3E(U), :006F6A46(U), :006F6A4E(U), :006F6A60(U)
|:006F6A76(U), :006F6AD8(U), :006F6AE0(U), :006F6AE8(U), :006F6AF0(U)
|:006F6AF8(U), :006F6B52(U), :006F6B5A(U), :006F6B6C(U), :006F6B82(U)
|:006F6BE9(U), :006F6BFF(U), :006F6C22(U), :006F6C2A(U), :006F6C6C(U)
|:006F6C74(U), :006F6C86(U), :006F6C9C(U), :006F6CAF(U), :006F6CB7(U)
|:006F6CBF(U), :006F6CC7(U), :006F6CCF(U), :006F6CD7(U), :006F6CDF(U)
|:006F6D3D(U), :006F6D53(U), :006F6D86(U), :006F6D8E(U), :006F6DA0(U)
|:006F6DB6(U), :006F6E1D(U), :006F6E25(U), :006F6E3B(U), :006F6E7D(U)
|:006F6E93(U), :006F6EE8(U), :006F6F1F(U), :006F6F35(U), :006F6F97(U)
|:006F6F9F(U), :006F6FB5(U), :006F6FEA(U), :006F7021(U), :006F7037(U)
|:006F705F(U), :006F7075(U), :006F70C7(U), :006F70DD(U), :006F7157(U)
|:006F716D(U), :006F71A0(U), :006F71A8(U), :006F71BA(U), :006F71D0(U)
|:006F724C(U), :006F7262(U), :006F72BF(U), :006F72C7(U), :006F72D9(U)
|:006F72EF(U), :006F7337(U), :006F733F(U), :006F7351(U), :006F7367(U)
|:006F73B6(U), :006F73CC(U), :006F73DF(U), :006F73E7(U), :006F73EF(U)
|:006F73F7(U), :006F73FF(U), :006F7407(U), :006F7439(U), :006F7441(U)
|:006F7453(U), :006F7469(U), :006F74A6(U), :006F74BC(U), :006F763E(U)
|:006F769E(U), :006F76BE(U), :006F76C9(U), :006F76EE(U), :006F770E(U)
|:006F774E(U), :006F776E(U), :006F77EE(U), :006F780E(U), :006F786E(U)
|:006F788E(U), :006F7AF2(U), :006F7B08(U), :006F7B52(U), :006F7B68(U)
|:006F7B7B(U), :006F7B83(U), :006F7BB5(U), :006F7BBD(U), :006F7C17(U)
|:006F7C22(U), :006F7C2A(U), :006F7C32(U), :006F7C44(U), :006F7C5A(U)
|:006F7C6D(U), :006F7C75(U), :006F7CBC(U), :006F7CC4(U), :006F7CD6(U)
|:006F7CDE(U), :006F7CF4(U), :006F7D39(U), :006F7D44(U), :006F7D4C(U)
|:006F7D62(U), :006F7D6A(U), :006F7D72(U), :006F7D84(U), :006F7D8C(U)
|:006F7D94(U), :006F7DAA(U), :006F7DD2(U), :006F7DDA(U), :006F7DE2(U)
|:006F7DF2(U), :006F7E41(U), :006F7E4C(U), :006F7E54(U), :006F7E6A(U)
|:006F7E72(U), :006F7E7A(U), :006F7E8C(U), :006F7E94(U), :006F7E9C(U)
|:006F7EB2(U), :006F7EDA(U), :006F7EE2(U), :006F7EEA(U), :006F7EFA(U)
|:006F7F4C(U), :006F7F54(U), :006F7F5F(U), :006F7F67(U), :006F7F7D(U)
|:006F7F85(U), :006F7F8D(U), :006F7F9F(U), :006F7FA7(U), :006F7FAF(U)
|:006F7FB7(U), :006F7FBF(U), :006F7FD5(U), :006F801F(U), :006F8027(U)
|:006F802F(U), :006F803F(U), :006F8096(U), :006F80A1(U), :006F80A9(U)
|:006F80BF(U), :006F80C7(U), :006F80CF(U), :006F80E1(U), :006F80E9(U)
|:006F80F1(U), :006F80F9(U), :006F8101(U), :006F8109(U), :006F8111(U)
|:006F8127(U), :006F814A(U), :006F8179(U), :006F8181(U), :006F8189(U)
|:006F8199(U), :006F81E0(U), :006F81E8(U), :006F81F0(U), :006F81F8(U)
|:006F820E(U), :006F826B(U), :006F8273(U), :006F827E(U), :006F8286(U)
|:006F829C(U), :006F82A4(U), :006F82AC(U), :006F82B4(U), :006F82C6(U)
|:006F82CE(U), :006F82D6(U), :006F82DE(U), :006F82E6(U), :006F82FC(U)
|:006F832F(U), :006F8376(U), :006F837E(U), :006F8386(U), :006F8396(U)
|:006F83E8(U), :006F83F0(U), :006F8402(U), :006F8418(U), :006F8492(U)
|:006F849D(U), :006F84A5(U), :006F84AD(U), :006F84BF(U), :006F84D5(U)
|:006F8508(U), :006F8510(U), :006F8518(U), :006F8520(U), :006F8528(U)
|:006F8530(U), :006F8538(U), :006F8540(U), :006F8548(U), :006F8550(U)
|:006F8558(U), :006F8560(U), :006F8568(U), :006F8570(U), :006F8578(U)
|:006F8580(U), :006F8588(U), :006F85BF(U), :006F85C7(U), :006F8629(U)
|:006F8631(U), :006F8643(U), :006F8659(U), :006F8691(U), :006F8699(U)
|:006F86DB(U), :006F86E6(U), :006F86EE(U), :006F8700(U), :006F8716(U)
|:006F8739(U), :006F8741(U), :006F8749(U), :006F8751(U), :006F8759(U)
|:006F8771(U), :006F8789(U), :006F87A1(U), :006F87B1(U), :006F87C1(U)
|:006F87D1(U), :006F8818(U), :006F8820(U), :006F8828(U), :006F8830(U)
|:006F8838(U), :006F8840(U), :006F8848(U), :006F8850(U), :006F8858(U)
|:006F8860(U), :006F8868(U), :006F8870(U), :006F8878(U), :006F8880(U)
|:006F88CF(U), :006F88E5(U), :006F88F8(U), :006F891F(U), :006F8927(U)
|:006F893D(U), :006F8987(U), :006F898F(U), :006F8997(U), :006F89AD(U)
|:006F8A3E(U), :006F8A49(U), :006F8A6E(U), :006F8AB6(U), :006F8AE6(U)
|:006F8B0E(U), :006F8B21(U), :006F8B46(U), :006F8B6E(U), :006F8B81(U)
|:006F8BBE(U), :006F8BFE(U), :006F8C33(U), :006F8C5C(U), :006F8C95(U)
|:006F8CCE(U), :006F8D07(U), :006F8D44(U), :006F8D81(U), :006F8DBE(U)
|:006F8DFB(U), :006F8E38(U), :006F8EA4(U), :006F8EAC(U), :006F8F3A(U)
|:006F8F42(U), :006F8F6B(U), :006F9026(U), :006F9049(U), :006F9072(U)
|:006F90BF(U), :006F90C7(U), :006F9122(U), :006F914B(U), :006F9184(U)
|:006F91C8(U), :006F91E6(U), :006F91F8(U), :006F921A(U), :006F925B(U)
|:006F92BE(U), :006F9311(U), :006F933A(U), :006F9373(U), :006F93AC(U)
|:006F93E5(U), :006F9422(U), :006F945F(U), :006F949C(U), :006F94F2(U)
|:006F9521(U), :006F955E(U), :006F959B(U), :006F9614(U), :006F961C(U)
|:006F9624(U), :006F96B4(U), :006F96D7(U), :006F9700(U), :006F9730(U)
|:006F9751(U), :006F9793(U), :006F97D7(U), :006F97DF(U), :006F97E7(U)
|:006F97FC(U), :006F9807(U), :006F9812(U), :006F9828(U), :006F9833(U)
|:006F983E(U), :006F9849(U), :006F9867(U), :006F986F(U), :006F9877(U)
|:006F9887(U), :006F98B0(U), :006F98BB(U), :006F9936(U), :006F9941(U)
|:006F9949(U), :006F9951(U), :006F9973(U), :006F997B(U), :006F9983(U)
|:006F998B(U), :006F9993(U), :006F999B(U), :006F99A3(U), :006F99AB(U)
|:006F99B3(U), :006F99BB(U), :006F99E5(U), :006F99ED(U), :006F99FF(U)
|:006F9A21(U), :006F9A3E(U), :006F9A6B(U), :006F9B81(U), :006F9CE6(U)
|:006F9CEE(U), :006F9D09(U), :006F9D21(U), :006F9D33(U), :006F9DB1(U)
|:006F9DBC(U), :006F9DC7(U), :006F9DD2(U), :006F9DDD(U), :006F9DE8(U)
|:006F9DF3(U), :006F9DFE(U), :006F9E27(U), :006F9E45(U), :006F9E50(U)
|:006F9E5B(U), :006F9E66(U), :006F9E9A(U), :006F9EB8(U), :006F9EC3(U)
|:006F9F1D(U), :006F9F30(U), :006F9F38(U), :006F9F43(U), :006F9F61(U)
|:006FA05D(U), :006FA065(U), :006FA07D(U), :006FA0A6(U), :006FA0E8(U)
|:006FA0F0(U), :006FA0F8(U), :006FA13E(U), :006FA14F(U), :006FA157(U)
|:006FA181(U), :006FA189(U), :006FA1A1(U), :006FA1CA(U), :006FA1D2(U)
|:006FA216(U), :006FA236(U), :006FA256(U), :006FA273(U), :006FA296(U)
|:006FA2B3(U), :006FA2BE(U), :006FA2DB(U), :006FA313(U), :006FA33B(U)
|:006FA346(U), :006FA36B(U), :006FA38E(U), :006FA41E(U), :006FA453(U)
|:006FA47E(U), :006FA4B3(U), :006FA4DB(U), :006FA4E6(U), :006FA533(U)
|:006FA53B(U), :006FA573(U), :006FA57B(U), :006FA623(U), :006FA62E(U)
|:006FA653(U), :006FA65E(U), :006FA873(U), :006FA87B(U), :006FA893(U)
|:006FA89E(U), :006FA8A6(U), :006FA8B1(U), :006FA927(U), :006FA932(U)
|:006FA95B(U), :006FA987(U), :006FA992(U), :006FA9BB(U), :006FA9D3(U)
|:006FA9DB(U), :006FA9FB(U), :006FAA03(U), :006FABC4(U), :006FABCF(U)
|:006FABF5(U), :006FAC00(U), :006FAC33(U), :006FAC3E(U), :006FADF4(U)
|:006FADFF(U), :006FAE2D(U), :006FAE38(U), :006FAE84(U), :006FAE8F(U)
|:006FAEBD(U), :006FAEC8(U), :006FB089(U), :006FB094(U), :006FB09F(U)
|:006FB120(U), :006FB13B(U), :006FB156(U), :006FB166(U), :006FB16E(U)
|:006FB176(U), :006FB1A2(U), :006FB219(U), :006FB224(U), :006FB22F(U)
|:006FB33F(U), :006FB347(U), :006FB34F(U), :006FB357(U), :006FB35F(U)
|:006FB367(U), :006FB36F(U), :006FB377(U), :006FB37F(U), :006FB387(U)
|:006FB46D(U), :006FB475(U), :006FB487(U), :006FB48F(U), :006FB4A1(U)
|:006FB4A9(U), :006FB4BF(U), :006FB4EB(U), :006FB4F3(U), :006FB4FB(U)
|:006FB503(U), :006FB523(U), :006FB533(U), :006FB55D(U), :006FB565(U)
|:006FB577(U), :006FB57F(U), :006FB587(U), :006FB58F(U), :006FB597(U)
|:006FB59F(U), :006FB5A7(U), :006FB5AF(U), :006FB5C1(U), :006FB5C9(U)
|:006FB5D1(U), :006FB5D9(U), :006FB5E1(U), :006FB5E9(U), :006FB5F1(U)
|:006FB5F9(U), :006FB601(U), :006FB65F(U), :006FB676(U), :006FB68D(U)
|:006FB6A4(U), :006FB6D8(U), :006FB6F7(U), :006FB702(U), :006FB70D(U)
|:006FB7F3(U), :006FB7FE(U), :006FB809(U), :006FB89F(U), :006FB8F5(U)
|:006FB917(U), :006FB92E(U), :006FB967(U), :006FB97E(U), :006FB9B9(U)
|:006FB9D2(U), :006FBA0F(U), :006FBA28(U), :006FBA65(U), :006FBA7E(U)
|:006FBAE9(U), :006FBB04(U), :006FBB2F(U), :006FBB4E(U), :006FBB59(U)
|:006FBB64(U), :006FBC16(U), :006FBC21(U), :006FBC2C(U), :006FBC9D(U)
|:006FBCBF(U), :006FBCD6(U), :006FBD0F(U), :006FBD26(U), :006FBD61(U)
|:006FBD7A(U), :006FBDB7(U), :006FBDD0(U), :006FBE0D(U), :006FBE26(U)
|:006FBE52(U), :006FBE5A(U), :006FBE62(U), :006FBE6A(U), :006FBE72(U)
|:006FBE7A(U), :006FBE95(U), :006FBED2(U), :006FBEDD(U), :006FBEE8(U)
|:006FBF59(U), :006FBF7B(U), :006FBF92(U), :006FBFCB(U), :006FBFE2(U)
|:006FC01D(U), :006FC036(U), :006FC058(U), :006FC07B(U), :006FC094(U)
|:006FC0C0(U), :006FC0D3(U), :006FC0E3(U), :006FC0F5(U), :006FC108(U)
|:006FC118(U), :006FC12A(U), :006FC13D(U), :006FC14D(U), :006FC192(U)
|:006FC19D(U), :006FC1A8(U), :006FC230(U), :006FC271(U), :006FC27C(U)
|:006FC287(U), :006FC2D7(U), :006FC2EA(U), :006FC2F2(U), :006FC302(U)
|:006FC323(U), :006FC342(U), :006FC34D(U), :006FC358(U), :006FC403(U)
|:006FC422(U), :006FC42D(U), :006FC438(U), :006FC4F6(U), :006FC526(U)
|:006FC531(U), :006FC53C(U), :006FC5D4(U), :006FC5EF(U), :006FC6B5(U)
|:006FC6BD(U), :006FC6C5(U), :006FC6CD(U), :006FC705(U), :006FC70D(U)
|:006FC715(U), :006FC71D(U), :006FC725(U), :006FC72D(U), :006FC793(U)
|:006FC79B(U), :006FC7A3(U), :006FC7AB(U), :006FC7B3(U), :006FC7BB(U)
|:006FC7C3(U), :006FC7CB(U), :006FC7D3(U), :006FC7F4(U), :006FC907(U)
|:006FC90F(U), :006FC931(U), :006FC939(U), :006FCA0B(U), :006FCA13(U)
|:006FCA31(U), :006FCA5A(U), :006FCA6E(U), :006FCACF(U), :006FCADF(U)
|:006FCB31(U), :006FCB39(U), :006FCB4E(U), :006FCB59(U), :006FCB6F(U)
|:006FCB7A(U), :006FCB85(U), :006FCB98(U), :006FCBAB(U), :006FCBB6(U)
|:006FCBC1(U), :006FCBCC(U), :006FCC10(U), :006FCC20(U), :006FCC49(U)
|:006FCC5D(U), :006FCCCE(U), :006FCCF4(U), :006FCD33(U), :006FCDAB(U)
|:006FCF7D(U), :006FCFF3(U), :006FCFFB(U), :006FD0E3(U), :006FD0EB(U)
|:006FD123(U), :006FD143(U), :006FD18B(U), :006FD1B8(U), :006FD1E5(U)
|:006FD21A(U), :006FD27E(U), :006FD382(U), :006FD528(U), :006FD555(U)
|:006FD582(U), :006FD5B7(U), :006FD5EC(U), :006FD6BE(U), :006FDA03(U)
|:006FDA0B(U), :006FDA13(U), :006FDA49(U), :006FDB79(U), :006FDC8B(U)
|:006FDC9E(U), :006FDCC7(U), :006FDCDB(U), :006FDD83(U), :006FDDCB(U)
|:006FDE26(U), :006FDE2F(U), :006FDE37(U), :006FDE3F(U), :006FDE47(U)
|:006FDE59(U), :006FDE6B(U), :006FDE73(U), :006FDE89(U), :006FDED2(U)
|:006FDEDA(U), :006FDEE2(U), :006FDEEA(U), :006FDEF2(U), :006FDF64(U)
|:006FDFB6(U), :006FDFFE(U), :006FE01C(U), :006FE031(U), :006FE072(U)
|:006FE0A3(U), :006FE0F5(U), :006FE100(U), :006FE10B(U), :006FE158(U)
|:006FE163(U), :006FE16E(U), :006FE179(U), :006FE18C(U), :006FE503(U)
|:006FE586(U), :006FE5E7(U), :006FE637(U), :006FE6F5(U), :006FE700(U)
|:006FE70B(U), :006FE7A3(U), :006FE851(U), :006FE85C(U), :006FE867(U)
|:006FE8C5(U), :006FE8D3(U), :006FE8E1(U), :006FE8F7(U), :006FE8FF(U)
|:006FE92F(U), :006FE93A(U), :006FE945(U), :006FE9A3(U), :006FE9B1(U)
|:006FE9BF(U), :006FE9D5(U), :006FE9DD(U), :006FEA0D(U), :006FEA18(U)
|:006FEA23(U), :006FEA81(U), :006FEA8F(U), :006FEA9D(U), :006FEAB3(U)
|:006FEABB(U), :006FEADB(U), :006FEAE9(U), :006FEAF7(U), :006FEB1B(U)
|:006FEB51(U), :006FEB87(U), :006FEBBF(U), :006FEBCA(U), :006FEBD5(U)
|:006FEC33(U), :006FEC8D(U), :006FED31(U), :006FED3C(U), :006FED47(U)
|:006FEDD5(U), :006FEDE0(U), :006FEDEB(U), :006FEF01(U), :006FEF0C(U)
|:006FEF17(U), :006FEF8F(U), :006FEF9A(U), :006FEFA5(U), :006FF047(U)
|:006FF075(U), :006FF0B3(U), :006FF0BE(U), :006FF0C9(U), :006FF191(U)
|:006FF19C(U), :006FF1A7(U), :006FF373(U), :006FF37B(U), :006FF395(U)
|:006FF39D(U), :006FF3D7(U), :006FF400(U), :006FF41B(U), :006FF42D(U)
|:006FF435(U), :006FF455(U), :006FF45E(U), :006FF4C1(U), :006FF539(U)
|:006FF5AA(U), :006FF5B2(U), :006FF5BA(U), :006FF5C2(U), :006FF61F(U)
|:006FF64B(U), :006FF66E(U), :006FF676(U), :006FF67E(U), :006FF686(U)
|:006FF68E(U), :006FF696(U), :006FF69E(U), :006FF6A6(U), :006FF6AE(U)
|:006FF6B6(U), :006FF6BE(U), :006FF6C6(U), :006FF783(U), :006FF7B4(U)
|:006FF81C(U), :006FF835(U), :006FF856(U), :006FF883(U), :006FF8AD(U)
|:006FF8BF(U), :006FF8D1(U), :006FF8FA(U), :006FF91C(U), :006FF960(U)
|:006FF982(U), :006FF9C6(U), :006FFA03(U), :006FFA41(U), :006FFA7F(U)
|:006FFAF1(U), :006FFAFC(U), :006FFB07(U), :006FFB65(U), :006FFB95(U)
|:006FFBA0(U), :006FFBAB(U), :006FFC09(U), :006FFC39(U), :006FFC44(U)
|:006FFC4F(U), :006FFD11(U), :006FFD1C(U), :006FFD27(U), :006FFD85(U)
|:006FFD93(U), :006FFDB4(U), :006FFDBC(U), :006FFDDC(U), :006FFDEA(U)
|:006FFE20(U), :006FFE63(U), :006FFE6B(U), :006FFE73(U), :006FFE7B(U)
|:006FFE83(U), :006FFE99(U), :006FFED1(U), :006FFEDC(U), :006FFEE7(U)
|:006FFF45(U), :006FFF53(U), :006FFFA3(U), :006FFFB5(U), :006FFFBD(U)
|:006FFFCF(U), :006FFFE1(U), :006FFFE9(U), :006FFFFB(U), :00700015(U)
|:00700049(U), :00700066(U), :007000B1(U), :007000BF(U), :00700101(U)
|:0070010F(U), :00700151(U), :0070015F(U), :00700193(U), :007001B3(U)
|:007001D3(U), :007001F3(U), :0070021E(U), :00700259(U), :00700294(U)
|:007002D9(U), :007002FB(U), :00700362(U), :0070042A(U), :00700483(U)
|:007004A5(U), :007004AD(U), :00700505(U), :0070052D(U), :00700547(U)
|:00700623(U), :007006E4(U), :007006FF(U), :0070071A(U), :00700783(U)
|:007007A3(U), :007007E4(U), :00700833(U), :00700883(U), :007008DB(U)
|:007008F3(U), :00700903(U), :00700953(U), :007009B4(U), :007009EA(U)
|:00700A64(U), :00700A92(U), :00700ADB(U), :00700B09(U), :00700B43(U)
|:00700BBB(U), :00700BE9(U), :00700C2B(U), :00700C63(U), :00700CBB(U)
|:00700CE9(U), :00700D2B(U), :00700E35(U), :00700E52(U), :00700E8A(U)
|:00700E9C(U), :00700EAE(U), :00700EC0(U), :00700ED2(U), :00700EDA(U)
|:00700EEC(U), :00700F02(U), :00700F15(U), :00700F27(U), :00700F2F(U)
|:00700F37(U), :00700F3F(U), :00700F47(U), :00700F5D(U), :00700F66(U)
|:00700F6E(U), :00700F76(U), :00700F88(U), :00700F90(U), :00700F98(U)
|:00700FAE(U), :00700FC1(U), :00700FC9(U), :00700FD1(U), :00700FE3(U)
|:00700FF9(U), :00701013(U), :0070105A(U), :00701078(U), :00701095(U)
|:007010D0(U), :007011BF(U), :007011C7(U), :007011CF(U), :007011D7(U)
|:007011DF(U), :007011E7(U), :007011EF(U), :007011F7(U), :007011FF(U)
|:0070124F(U), :00701297(U), :007012A9(U), :007012B1(U), :007012E8(U)
|:0070144E(U), :007014F7(U), :007015C0(U), :007015F6(U), :00701631(U)
|:0070163C(U), :00701647(U), :007016BE(U), :007016EA(U), :007016F2(U)
|:00701702(U), :00701714(U), :00701726(U), :00701791(U), :0070179F(U)
|:007017CD(U), :007017DB(U), :00701809(U), :00701817(U), :00701889(U)
|:00701894(U), :0070189F(U), :0070192D(U), :00701938(U), :00701943(U)
|:007019C5(U), :00701A07(U), :00701A12(U), :00701A1D(U), :00701AB2(U)
|:00701AD4(U), :00701B10(U), :00701B22(U), :00701B2A(U), :00701C41(U)
|:00701C4F(U), :00701CC1(U), :00701CCC(U), :00701CD7(U), :00701D9A(U)
|:00701DA2(U), :00701DE7(U), :00701DFD(U), :00701E31(U), :00701E3C(U)
|:00701E47(U), :00701EB3(U), :00701EC1(U), :00701EC9(U), :00701ED1(U)
|:00701F2F(U), :00701F4E(U), :007020B3(U), :007023B1(U), :007023BC(U)
|:007023C7(U), :00702505(U), :00702510(U), :0070251B(U), :0070258C(U)
|:007025A3(U), :007025DC(U), :007025F3(U), :00702636(U), :00702682(U)
|:007026E1(U), :007026EC(U), :007026F7(U), :007027E9(U), :0070285D(U)
|:007028A7(U), :007028EB(U), :00702923(U), :00702935(U), :00702947(U)
|:00702959(U), :00702992(U), :0070299A(U), :007029D1(U), :007029DC(U)
|:007029E7(U), :00702AC5(U), :00702B2E(U), :00702B72(U), :00702B9F(U)
|:00702C1B(U), :00702E37(U), :00702ED7(U), :00702EDF(U), :00702EF1(U)
|:00702EF9(U), :00702F01(U), :00702FAC(U), :0070313B(U), :0070318E(U)
|:007031D1(U), :007031DC(U), :007031E7(U), :00703282(U), :0070328A(U)
|:0070329A(U), :007032E1(U), :007032E9(U), :00703301(U), :00703309(U)
|:00703319(U), :00703321(U), :00703331(U), :00703339(U), :00703349(U)
|:00703351(U), :00703361(U), :00703369(U), :00703379(U), :00703381(U)
|:00703391(U), :00703399(U), :007033A9(U), :007033B1(U), :007033C1(U)
|:007033C9(U), :007033D9(U), :007033E1(U), :007033F1(U), :007033F9(U)
|:00703409(U), :00703411(U), :00703421(U), :00703429(U), :00703439(U)
|:00703441(U), :00703451(U), :00703459(U), :00703469(U), :00703471(U)
|:00703481(U), :00703489(U), :00703499(U), :007034A1(U), :007034B1(U)
|:007034B9(U), :007034C9(U), :007034D1(U), :007034E1(U), :007034E9(U)
|:007034F1(U), :007034F9(U), :00703501(U), :00703509(U), :00703511(U)
|:00703519(U), :00703521(U), :00703529(U), :00703531(U), :00703539(U)
|:00703541(U), :00703549(U), :00703551(U), :00703559(U), :00703561(U)
|:00703569(U), :00703571(U), :00703579(U), :00703581(U), :00703589(U)
|:00703591(U), :00703599(U), :007035A1(U), :007035A9(U), :007035B1(U)
|:007035B9(U), :007035C1(U), :007035C9(U), :007035D1(U), :007035D9(U)
|:007035FB(U), :00703603(U), :0070360B(U), :00703613(U), :0070361B(U)
|:00703623(U), :0070362B(U), :00703633(U), :0070363B(U), :00703669(U)
|:00703674(U), :0070367F(U), :007036F8(U), :00703703(U), :0070370E(U)
|:007037BB(U), :007037D2(U), :00703809(U), :00703814(U), :0070381F(U)
|:007038CD(U), :007038D5(U), :0070394E(U), :00703959(U), :00703964(U)
|:007039E3(U), :00703A3E(U), :00703A4C(U), :00703A5A(U), :00703AFA(U)
|:00703B25(U), :00703B6D(U), :00703BC3(U), :00703DBE(U), :00703DE9(U)
|:00703E3C(U), :00703E84(U), :00703ED0(U), :00703F1C(U), :00703F68(U)
|:00703FB4(U), :00704000(U), :0070404C(U), :007040F9(U), :00704214(U)
|:007042AA(U), :007042FD(U), :00704305(U), :0070435A(U), :0070436C(U)
|:00704446(U), :00704468(U), :00704503(U), :0070450B(U), :0070459E(U)
|:007045B0(U), :007045D2(U), :007045EC(U), :00704670(U), :007047E4(U)
|:0070493E(U), :00704A08(U), :00704AFD(U), :00704B2C(U), :00704B5B(U)
|:00704B99(U), :00704BBC(U), :00704C01(U), :00704C24(U), :00704D2E(U)
|:00704DF1(U), :00704DFF(U), :00704E0D(U), :00704E3F(U), :00704E47(U)
|:00704E4F(U), :00704E70(U), :00704E92(U), :00704EB4(U), :00704EED(U)
|:00704F31(U), :00704F6E(U), :00704FAB(U), :00704FE8(U), :00704FF1(U)
|:00704FF9(U), :00705001(U), :00705009(U), :00705011(U), :00705034(U)
|:00705058(U), :00705079(U), :00705087(U), :00705095(U), :007050C3(U)
|:007050CB(U), :007050D3(U), :007050E9(U), :007050FC(U), :00705104(U)
|:0070510C(U), :00705114(U), :0070511C(U), :00705124(U), :0070512C(U)
|:00705134(U), :00705146(U), :0070517E(U), :0070519E(U), :007051A6(U)
|:007051EC(U), :00705226(U), :0070522E(U), :00705236(U), :00705248(U)
|:0070525D(U), :00705268(U), :00705273(U), :0070527E(U), :007052D2(U)
|:00705335(U), :00705340(U), :007053E2(U), :007053F4(U), :00705406(U)
|:0070540E(U), :00705416(U), :007054FE(U), :00705506(U), :00705520(U)
|:00705528(U), :0070561E(U), :0070564B(U), :0070566D(U), :0070568A(U)
|:007058EE(U), :007058F6(U), :00705908(U), :00705938(U), :0070594D(U)
|:00705958(U), :00705963(U), :0070596E(U), :00705979(U), :00705984(U)
|:0070598F(U), :007059A4(U), :007059AF(U), :007059E3(U), :007059F9(U)
|:00705A04(U), :00705A0F(U), :00705A1A(U), :00705A75(U), :00705A80(U)
|:00705BDE(U), :00705BE9(U), :00705C06(U), :00705C11(U), :00705C23(U)
|:00705C2B(U), :00705C7A(U), :00705C82(U), :00705C94(U), :00705C9C(U)
|:00705CA4(U), :00705CAC(U), :00705CB4(U), :00705CBC(U), :00705CCE(U)
|:00705D5E(U), :00705D69(U), :00705DA9(U), :00705DB4(U), :00705E8E(U)
|:007060BD(U), :007060C5(U), :007060D7(U), :007060DF(U), :007060E7(U)
|:007060EF(U), :007060F7(U), :00706109(U), :00706111(U), :00706119(U)
|:0070612B(U), :00706136(U), :0070613E(U), :00706146(U), :0070614E(U)
|:00706156(U), :0070615E(U), :00706170(U), :00706178(U), :00706180(U)
|:00706192(U), :0070619D(U), :007061A5(U), :007061AD(U), :007061B5(U)
|:007061BD(U), :007061C5(U), :007061D7(U), :007061DF(U), :007061E7(U)
|:0070628F(U), :0070629A(U), :007062AC(U), :007062B4(U), :007062BC(U)
|:007062C4(U), :007062FB(U), :00706645(U), :0070664D(U), :007066A0(U)
|:007066C9(U), :007066D9(U), :007066FF(U), :00706721(U), :00706731(U)
|:00706741(U), :00706751(U), :007068DA(U), :00706911(U), :00706948(U)
|:00706A2A(U), :00706A35(U), :00706A55(U), :00706A75(U), :00706AAE(U)
|:00706AB9(U), :00706AEF(U), :00706C39(U), :00706CAF(U), :00706CB7(U)
|:00706DA0(U), :00706DB6(U), :00707000(U), :00707085(U), :00707126(U)
|:007071E6(U), :007071EE(U), :007071F6(U), :007071FE(U), :00707210(U)
|:00707218(U), :0070722A(U), :00707232(U), :00707447(U), :007074D9(U)
|:007074E4(U), :007074EC(U), :007074F4(U), :0070751A(U), :007075B2(U)
|:00707600(U), :0070760B(U), :0070768E(U), :00707696(U), :0070769E(U)
|:007076A6(U), :007076AE(U), :007076B6(U), :007076D3(U), :00707A56(U)
|:00707A88(U), :00707A9E(U), :00707AD0(U), :00707AE6(U), :00707B18(U)
|:00707B2E(U), :00707BB3(U), :00707BD6(U), :00707C08(U), :00707C1E(U)
|:00707C50(U), :00707C66(U), :00707C98(U), :00707CAE(U), :00707D33(U)
|:00707D45(U), :00707D4D(U), :00707D55(U)
|
:004033C0 8B01                    mov eax, dword ptr [ecx]
:004033C2 8B48F4                  mov ecx, dword ptr [eax-0C]
:004033C5 83E80C                  sub eax, 0000000C
:004033C8 49                      dec ecx
:004033C9 8908                    mov dword ptr [eax], ecx
:004033CB 7507                    jne 004033D4
:004033CD 50                      push eax
:004033CE E82DDF1D00              call 005E1300
:004033D3 59                      pop ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004033CB(C)
|
:004033D4 C3                      ret
:004033D5 90                      nop
:004033D6 90                      nop
:004033D7 90                      nop
:004033D8 90                      nop
:004033D9 90                      nop
:004033DA 90                      nop
:004033DB 90                      nop
:004033DC 90                      nop
:004033DD 90                      nop
:004033DE 90                      nop
:004033DF 90                      nop

* Referenced by a CALL at Addresses:
|:00401462   , :0069F897   
|
:004033E0 6AFF                    push FFFFFFFF
:004033E2 688BEF6C00              push 006CEF8B
:004033E7 64A100000000            mov eax, dword ptr fs:[00000000]
:004033ED 50                      push eax
:004033EE 64892500000000          mov dword ptr fs:[00000000], esp
:004033F5 83EC0C                  sub esp, 0000000C
:004033F8 56                      push esi
:004033F9 8BF1                    mov esi, ecx
:004033FB 57                      push edi
:004033FC 89742408                mov dword ptr [esp+08], esi
:00403400 C70600000000            mov dword ptr [esi], 00000000
:00403406 C7460400000000          mov [esi+04], 00000000
:0040340D C744241C00000000        mov [esp+1C], 00000000
:00403415 C7460800000000          mov [esi+08], 00000000
:0040341C 8B7C2424                mov edi, dword ptr [esp+24]
:00403420 C644241C01              mov [esp+1C], 01
:00403425 85FF                    test edi, edi
:00403427 7443                    je 0040346C
:00403429 8D0CFD00000000          lea ecx, dword ptr [8*edi+00000000]
:00403430 81F980000000            cmp ecx, 00000080
:00403436 760B                    jbe 00403443
:00403438 51                      push ecx
:00403439 E842DE1D00              call 005E1280
:0040343E 83C404                  add esp, 00000004
:00403441 EB2B                    jmp 0040346E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403436(C)
|
:00403443 8D41FF                  lea eax, dword ptr [ecx-01]
:00403446 C1E803                  shr eax, 03
:00403449 8D1485FC977A00          lea edx, dword ptr [4*eax+007A97FC]
:00403450 8B0485FC977A00          mov eax, dword ptr [4*eax+007A97FC]
:00403457 85C0                    test eax, eax
:00403459 7406                    je 00403461
:0040345B 8B08                    mov ecx, dword ptr [eax]
:0040345D 890A                    mov dword ptr [edx], ecx
:0040345F EB0D                    jmp 0040346E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403459(C)
|
:00403461 51                      push ecx
:00403462 E8190D0000              call 00404180
:00403467 83C404                  add esp, 00000004
:0040346A EB02                    jmp 0040346E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403427(C)
|
:0040346C 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403441(U), :0040345F(U), :0040346A(U)
|
:0040346E 8D14F8                  lea edx, dword ptr [eax+8*edi]
:00403471 8906                    mov dword ptr [esi], eax
:00403473 894604                  mov dword ptr [esi+04], eax
:00403476 895608                  mov dword ptr [esi+08], edx
:00403479 8B4C2424                mov ecx, dword ptr [esp+24]
:0040347D 8D54240C                lea edx, dword ptr [esp+0C]
:00403481 51                      push ecx
:00403482 52                      push edx
:00403483 57                      push edi
:00403484 50                      push eax
:00403485 C644242C03              mov [esp+2C], 03
:0040348A E8610E0000              call 004042F0
:0040348F 8B4C2424                mov ecx, dword ptr [esp+24]
:00403493 83C410                  add esp, 00000010
:00403496 894604                  mov dword ptr [esi+04], eax
:00403499 8BC6                    mov eax, esi
:0040349B 5F                      pop edi
:0040349C 5E                      pop esi
:0040349D 64890D00000000          mov dword ptr fs:[00000000], ecx
:004034A4 83C418                  add esp, 00000018
:004034A7 C20400                  ret 0004


:004034AA 90                      nop
:004034AB 90                      nop
:004034AC 90                      nop
:004034AD 90                      nop
:004034AE 90                      nop
:004034AF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401655(U), :0069FAC5(U), :007046A8(U), :007046D9(U), :00704DA3(U)
|
:004034B0 6AFF                    push FFFFFFFF
:004034B2 68ABEF6C00              push 006CEFAB
:004034B7 64A100000000            mov eax, dword ptr fs:[00000000]
:004034BD 50                      push eax
:004034BE 64892500000000          mov dword ptr fs:[00000000], esp
:004034C5 83EC08                  sub esp, 00000008
:004034C8 8B11                    mov edx, dword ptr [ecx]
:004034CA 894C2400                mov dword ptr [esp], ecx
:004034CE 89542404                mov dword ptr [esp+04], edx
:004034D2 85D2                    test edx, edx
:004034D4 C744241000000000        mov [esp+10], 00000000
:004034DC 7440                    je 0040351E
:004034DE 8B4108                  mov eax, dword ptr [ecx+08]
:004034E1 2BC2                    sub eax, edx
:004034E3 C1F803                  sar eax, 03
:004034E6 C1E003                  shl eax, 03
:004034E9 3D80000000              cmp eax, 00000080
:004034EE 7618                    jbe 00403508
:004034F0 52                      push edx
:004034F1 E80ADE1D00              call 005E1300
:004034F6 83C404                  add esp, 00000004
:004034F9 8B4C2408                mov ecx, dword ptr [esp+08]
:004034FD 64890D00000000          mov dword ptr fs:[00000000], ecx
:00403504 83C414                  add esp, 00000014
:00403507 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004034EE(C)
|
:00403508 48                      dec eax
:00403509 C1E803                  shr eax, 03
:0040350C 8B0C85FC977A00          mov ecx, dword ptr [4*eax+007A97FC]
:00403513 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:0040351A 890A                    mov dword ptr [edx], ecx
:0040351C 8910                    mov dword ptr [eax], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004034DC(C)
|
:0040351E 8B4C2408                mov ecx, dword ptr [esp+08]
:00403522 64890D00000000          mov dword ptr fs:[00000000], ecx
:00403529 83C414                  add esp, 00000014
:0040352C C3                      ret


:0040352D 90                      nop
:0040352E 90                      nop
:0040352F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CEF73(U), :00704D93(U), :007070F4(U)
|
:00403530 C3                      ret
:00403531 90                      nop
:00403532 90                      nop
:00403533 90                      nop
:00403534 90                      nop
:00403535 90                      nop
:00403536 90                      nop
:00403537 90                      nop
:00403538 90                      nop
:00403539 90                      nop
:0040353A 90                      nop
:0040353B 90                      nop
:0040353C 90                      nop
:0040353D 90                      nop
:0040353E 90                      nop
:0040353F 90                      nop
:00403540 8B4104                  mov eax, dword ptr [ecx+04]
:00403543 40                      inc eax
:00403544 894104                  mov dword ptr [ecx+04], eax
:00403547 C3                      ret


:00403548 90                      nop
:00403549 90                      nop
:0040354A 90                      nop
:0040354B 90                      nop
:0040354C 90                      nop
:0040354D 90                      nop
:0040354E 90                      nop
:0040354F 90                      nop
:00403550 8B4104                  mov eax, dword ptr [ecx+04]
:00403553 48                      dec eax
:00403554 894104                  mov dword ptr [ecx+04], eax
:00403557 750D                    jne 00403566
:00403559 85C9                    test ecx, ecx
:0040355B 7407                    je 00403564
:0040355D 8B01                    mov eax, dword ptr [ecx]
:0040355F 6A01                    push 00000001
:00403561 FF5008                  call [eax+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040355B(C)
|
:00403564 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403557(C)
|
:00403566 C3                      ret
:00403567 90                      nop
:00403568 90                      nop
:00403569 90                      nop
:0040356A 90                      nop
:0040356B 90                      nop
:0040356C 90                      nop
:0040356D 90                      nop
:0040356E 90                      nop
:0040356F 90                      nop
:00403570 33C0                    xor eax, eax
:00403572 C3                      ret


:00403573 90                      nop
:00403574 90                      nop
:00403575 90                      nop
:00403576 90                      nop
:00403577 90                      nop
:00403578 90                      nop
:00403579 90                      nop
:0040357A 90                      nop
:0040357B 90                      nop
:0040357C 90                      nop
:0040357D 90                      nop
:0040357E 90                      nop
:0040357F 90                      nop
:00403580 32C0                    xor al, al
:00403582 C3                      ret


:00403583 90                      nop
:00403584 90                      nop
:00403585 90                      nop
:00403586 90                      nop
:00403587 90                      nop
:00403588 90                      nop
:00403589 90                      nop
:0040358A 90                      nop
:0040358B 90                      nop
:0040358C 90                      nop
:0040358D 90                      nop
:0040358E 90                      nop
:0040358F 90                      nop

* Referenced by a CALL at Addresses:
|:00402588   , :00409B87   , :00415F5A   , :0041C9F2   , :00426D0E   
|:0042D4A1   , :00446B17   , :00448F5A   , :0044A04A   , :0044F513   
|:004529D2   , :0045614C   , :004588CA   , :0045BAB1   , :0045CF7A   
|:0045DBEC   , :0045FE8C   , :00461D52   , :004654E9   , :00466C1F   
|:004674A6   , :00574C1E   , :0057843A   , :00586AE8   , :0058A0A2   
|:0058E59B   , :0058F210   , :0058F87C   , :005A1957   , :005A2A4A   
|:005D6FF9   , :005D7C12   , :005DB753   , :005DCA9E   , :005DCD2C   
|:005DD7FA   , :005DE992   , :005DEC42   , :005DEEE9   , :0061F0AA   
|:0062B86A   , :0063E838   , :0063E99C   , :0063F431   , :00642027   
|
:00403590 6AFF                    push FFFFFFFF
:00403592 68D0EF6C00              push 006CEFD0
:00403597 64A100000000            mov eax, dword ptr fs:[00000000]
:0040359D 50                      push eax
:0040359E 64892500000000          mov dword ptr fs:[00000000], esp
:004035A5 83EC08                  sub esp, 00000008
:004035A8 53                      push ebx
:004035A9 55                      push ebp
:004035AA 57                      push edi
:004035AB 8BD9                    mov ebx, ecx
:004035AD 8D6B04                  lea ebp, dword ptr [ebx+04]
:004035B0 C744241C00000000        mov [esp+1C], 00000000
:004035B8 896C2410                mov dword ptr [esp+10], ebp
:004035BC C7450000000000          mov [ebp+00], 00000000
:004035C3 A100987A00              mov eax, dword ptr [007A9800]
:004035C8 C644241C01              mov [esp+1C], 01
:004035CD 85C0                    test eax, eax
:004035CF 740A                    je 004035DB
:004035D1 8B08                    mov ecx, dword ptr [eax]
:004035D3 890D00987A00            mov dword ptr [007A9800], ecx
:004035D9 EB51                    jmp 0040362C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004035CF(C)
|
:004035DB 8D54240C                lea edx, dword ptr [esp+0C]
:004035DF C744240C14000000        mov [esp+0C], 00000014
:004035E7 52                      push edx
:004035E8 6A10                    push 00000010
:004035EA E8810D0000              call 00404370
:004035EF 8B7C2414                mov edi, dword ptr [esp+14]
:004035F3 83C408                  add esp, 00000008
:004035F6 83FF01                  cmp edi, 00000001
:004035F9 7431                    je 0040362C
:004035FB 8D4810                  lea ecx, dword ptr [eax+10]
:004035FE 56                      push esi
:004035FF 890D00987A00            mov dword ptr [007A9800], ecx
:00403605 8BD1                    mov edx, ecx
:00403607 83C110                  add ecx, 00000010
:0040360A BE01000000              mov esi, 00000001
:0040360F 4F                      dec edi
:00403610 3BFE                    cmp edi, esi
:00403612 7411                    je 00403625

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403623(C)
|
:00403614 890A                    mov dword ptr [edx], ecx
:00403616 8B7C2410                mov edi, dword ptr [esp+10]
:0040361A 8BD1                    mov edx, ecx
:0040361C 46                      inc esi
:0040361D 83C110                  add ecx, 00000010
:00403620 4F                      dec edi
:00403621 3BFE                    cmp edi, esi
:00403623 75EF                    jne 00403614

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403612(C)
|
:00403625 C70200000000            mov dword ptr [edx], 00000000
:0040362B 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004035D9(U), :004035F9(C)
|
:0040362C 8B4C2414                mov ecx, dword ptr [esp+14]
:00403630 8900                    mov dword ptr [eax], eax
:00403632 894004                  mov dword ptr [eax+04], eax
:00403635 894500                  mov dword ptr [ebp+00], eax
:00403638 5F                      pop edi
:00403639 C70390877000            mov dword ptr [ebx], 00708790
:0040363F 8BC3                    mov eax, ebx
:00403641 5D                      pop ebp
:00403642 5B                      pop ebx
:00403643 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040364A 83C414                  add esp, 00000014
:0040364D C3                      ret


:0040364E 90                      nop
:0040364F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CEFC3(U), :006D1893(U), :006D1921(U), :006D1BD2(U), :006D2AE5(U)
|:006D3322(U), :006D347F(U), :006D3723(U), :006D43AB(U), :006D5E03(U)
|:006D6639(U), :006D671D(U), :006D7163(U), :006D9CC3(U), :006DAD06(U)
|:006DAF7F(U), :006EEEB2(U), :006F10A3(U), :006F1D9C(U), :006F2553(U)
|:006F2804(U), :006F2B95(U), :006F2DD9(U), :006F316A(U), :006F33B4(U)
|:006F3957(U), :006F3BE5(U), :006F4A2E(U), :006FB7D5(U), :006FC174(U)
|:006FC508(U), :006FC69B(U), :006FE833(U), :006FE911(U), :006FE9EF(U)
|:006FEBA1(U), :006FED13(U), :006FEDB7(U), :006FEEE3(U), :006FEF71(U)
|:006FF095(U), :006FF173(U), :006FFAD3(U), :006FFB77(U), :006FFC1B(U)
|:006FFCF3(U), :006FFEB3(U), :00701613(U), :0070186B(U), :0070190F(U)
|:00701CA3(U), :00701E13(U), :00702393(U), :007026C3(U), :007029B3(U)
|:007031B3(U), :00703930(U)
|
:00403650 C3                      ret
:00403651 90                      nop
:00403652 90                      nop
:00403653 90                      nop
:00403654 90                      nop
:00403655 90                      nop
:00403656 90                      nop
:00403657 90                      nop
:00403658 90                      nop
:00403659 90                      nop
:0040365A 90                      nop
:0040365B 90                      nop
:0040365C 90                      nop
:0040365D 90                      nop
:0040365E 90                      nop
:0040365F 90                      nop

* Referenced by a CALL at Addresses:
|:004032D7   , :00404C47   , :00406087   , :00409577   , :004095E7   
|:00413E67   , :00415E77   , :00417257   , :0041C6C7   , :004240A7   
|:0042BB57   , :0042D397   , :0042D407   , :00436E37   , :00437417   
|:0043B557   , :0043CFC7   , :00446017   , :00447987   , :0044B1E7   
|:0044B2A7   , :0044B317   , :0044F107   , :0044F177   , :0044F247   
|:004577B7   , :00457AB7   , :00457B77   , :00457C37   , :00459347   
|:0045BA37   , :0045CF07   , :0045F797   , :0045F807   , :00460967   
|:00461BB7   , :00461C97   , :00463597   , :00464787   , :00468CB7   
|:00468D77   , :00469007   , :00469117   , :00469E07   , :0046A9C7   
|:005783DD   , :005792C7   , :00580147   , :00589047   , :0058A037   
|:0058C5C7   , :00593E77   , :00594367   , :005948E7   , :00594BE7   
|:00595067   , :00595167   , :0059EE27   , :0059EE97   , :0059EFC7   
|:0059F037   , :0059F177   , :0059F1E7   , :0059F317   , :0059F387   
|:0059F4C7   , :0059F587   , :0059F747   , :0059F837   , :0059FA47   
|:0059FB07   , :005A6C47   , :005A6D87   , :005A6E47   , :005A7207   
|:005C9157   , :005C91C7   , :005C9237   , :005C92A7   , :005C9317   
|:005D7BA7   , :005DA557   , :005DF9E7   , :005DFB67   , :005DFC77   
|:005DFCE7   , :005DFD87   , :005E121D   , :00600307   , :006026A7   
|:00608227   , :00608297   , :006083FD   , :00608467   , :006093C7   
|:0060CC77   , :00620097   , :006200F7   , :0062BF37   , :0062C017   
|:0062E4A7   , :0063EF27   , :00644A57   , :00644C77   , :00644D67   
|:00644E27   , :00644F17   , :006544B7   
|
:00403660 51                      push ecx
:00403661 8B54240C                mov edx, dword ptr [esp+0C]
:00403665 56                      push esi
:00403666 8B74240C                mov esi, dword ptr [esp+0C]
:0040366A C744240400000000        mov [esp+04], 00000000
:00403672 85C9                    test ecx, ecx
:00403674 8D4604                  lea eax, dword ptr [esi+04]
:00403677 890E                    mov dword ptr [esi], ecx
:00403679 8910                    mov dword ptr [eax], edx
:0040367B 8B542414                mov edx, dword ptr [esp+14]
:0040367F 895004                  mov dword ptr [eax+04], edx
:00403682 8B542418                mov edx, dword ptr [esp+18]
:00403686 895008                  mov dword ptr [eax+08], edx
:00403689 8B54241C                mov edx, dword ptr [esp+1C]
:0040368D 89500C                  mov dword ptr [eax+0C], edx
:00403690 7406                    je 00403698
:00403692 56                      push esi
:00403693 E858AC1F00              call 005FE2F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403690(C)
|
:00403698 8BC6                    mov eax, esi
:0040369A 5E                      pop esi
:0040369B 59                      pop ecx
:0040369C C21400                  ret 0014


:0040369F 90                      nop
:004036A0 56                      push esi
:004036A1 8BF1                    mov esi, ecx
:004036A3 E878AB1F00              call 005FE220
:004036A8 F644240801              test [esp+08], 01
:004036AD 7409                    je 004036B8
:004036AF 56                      push esi
:004036B0 E84BDC1D00              call 005E1300
:004036B5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004036AD(C)
|
:004036B8 8BC6                    mov eax, esi
:004036BA 5E                      pop esi
:004036BB C20400                  ret 0004


:004036BE 90                      nop
:004036BF 90                      nop

* Referenced by a CALL at Addresses:
|:004025FE   , :0040260B   , :00402618   , :00402628   , :00402638   
|:00409C07   , :00409C14   , :00409C21   , :00409C31   , :00409C41   
|:004121BF   , :004123C7   , :00412552   , :004127C4   , :00412CF4   
|:00412EF1   , :00413054   , :004132C4   , :00415FB6   , :00415FC3   
|:00415FD0   , :00415FDD   , :00415FED   , :00415FFD   , :00417760   
|:00417770   , :00417F05   , :00417F12   , :00417F1F   , :00417F2C   
|:00417F3C   , :00417F4C   , :00419AD0   , :00419ADD   , :00419AEA   
|:00419AFA   , :00419B0A   , :0041CA4C   , :0041CA59   , :0041CA66   
|:0041CA73   , :0041CA83   , :0041CA93   , :004268C3   , :004268D0   
|:004268DD   , :004268ED   , :004268FD   , :00426D6A   , :00426D77   
|:00426D84   , :00426D91   , :00426DA1   , :00426DB1   , :004292F6   
|:00429303   , :00429310   , :0042931D   , :0042932D   , :0042933D   
|:00429909   , :00429919   , :00429929   , :0042C2CC   , :0042C2D9   
|:0042C2E6   , :0042C2F3   , :0042C303   , :0042C313   , :0042D4FB   
|:0042D507   , :0042D513   , :0042D51F   , :0042D52E   , :0042D53D   
|:0043C329   , :0043C336   , :0043C343   , :0043C350   , :0043C360   
|:0043C370   , :00446B73   , :00446B80   , :00446B8D   , :00446B9A   
|:00446BAA   , :00446BBA   , :00447251   , :0044725E   , :0044726B   
|:0044727B   , :0044728B   , :00447746   , :00447753   , :00447760   
|:0044776D   , :0044777D   , :0044778D   , :00448FD1   , :00448FDE   
|:00448FEB   , :00448FFB   , :0044900B   , :0044A0C1   , :0044A0CE   
|:0044A0DB   , :0044A0EB   , :0044A0FB   , :0044B475   , :0044B482   
|:0044B492   , :0044B4A2   , :0044F573   , :0044F580   , :0044F58D   
|:0044F59A   , :0044F5AA   , :0044F5BA   , :00452A4B   , :00452A58   
|:00452A65   , :00452A75   , :00452A89   , :004561B9   , :004561C1   
|:004561C9   , :004561D4   , :004561DF   , :00458940   , :0045894D   
|:0045895A   , :0045896A   , :0045897A   , :0045BB23   , :0045BB30   
|:0045BB3D   , :0045BB4D   , :0045BB5D   , :0045C6E6   , :0045C6F3   
|:0045C700   , :0045C70D   , :0045C71D   , :0045C72D   , :0045CFF0   
|:0045CFFD   , :0045D00A   , :0045D01A   , :0045D02A   , :0045DC4E   
|:0045DC5E   , :0045DC6E   , :0045DC7E   , :0045DC91   , :0045DCA4   
|:0045FEFE   , :0045FF0B   , :0045FF18   , :0045FF28   , :0045FF38   
|:00461DB0   , :00461DBD   , :00461DCA   , :00461DD7   , :00461DE7   
|:00461DF7   , :0046382B   , :0046383B   , :0046384B   , :0046385B   
|:0046386E   , :00463881   , :0046455A   , :00464567   , :00464577   
|:00464587   , :00465545   , :00465552   , :0046555F   , :0046556C   
|:0046557C   , :0046558C   , :00466C91   , :00466C9E   , :00466CAB   
|:00466CBB   , :00466CCB   , :004674FD   , :00467509   , :00467515   
|:00467521   , :00467530   , :0046753F   , :00574C74   , :00574C81   
|:00574C8E   , :00574C9B   , :00574CAB   , :00574CBB   , :00576961   
|:0057696E   , :0057697B   , :00576988   , :00576998   , :005769A8   
|:00578496   , :005784A3   , :005784B0   , :005784BD   , :005784CD   
|:005784DD   , :00586B65   , :00586B75   , :00586B85   , :00586B98   
|:00586BAB   , :005895BF   , :005895D3   , :0058A100   , :0058A10D   
|:0058A11A   , :0058A127   , :0058A137   , :0058A147   , :0058E60F   
|:0058E61C   , :0058E629   , :0058E639   , :0058E649   , :0058F26C   
|:0058F279   , :0058F286   , :0058F293   , :0058F2A3   , :0058F2B3   
|:0058F8D4   , :0058F8E1   , :0058F8EE   , :0058F8FB   , :0058F90B   
|:0058F91B   , :00593115   , :00593122   , :0059312F   , :0059313C   
|:0059314C   , :0059315C   , :005975BC   , :005975C9   , :005975D6   
|:005975E3   , :005975F3   , :00597603   , :005989EC   , :005989F9   
|:00598A06   , :00598A13   , :00598A23   , :00598A33   , :0059950C   
|:00599519   , :00599526   , :00599533   , :00599543   , :00599553   
|:0059A92C   , :0059A939   , :0059A946   , :0059A953   , :0059A963   
|:0059A973   , :0059B53C   , :0059B549   , :0059B556   , :0059B563   
|:0059B573   , :0059B583   , :0059DAFC   , :0059DB09   , :0059DB16   
|:0059DB23   , :0059DB33   , :0059DB43   , :0059E8FC   , :0059E909   
|:0059E916   , :0059E923   , :0059E933   , :0059E943   , :005A19CB   
|:005A19D8   , :005A19E5   , :005A19F5   , :005A1A05   , :005A2AC0   
|:005A2ACD   , :005A2ADA   , :005A2AEA   , :005A2AFA   , :005D7055   
|:005D7062   , :005D706F   , :005D707C   , :005D708C   , :005D709C   
|:005D7C8B   , :005D7C98   , :005D7CA5   , :005D7CB5   , :005D7CC5   
|:005DB7B1   , :005DB7BE   , :005DB7CB   , :005DB7D8   , :005DB7E8   
|:005DB7F8   , :005DBBA3   , :005DBBB0   , :005DBBBD   , :005DBBCD   
|:005DBBDD   , :005DCAFC   , :005DCB09   , :005DCB16   , :005DCB23   
|:005DCB33   , :005DCB43   , :005DCD88   , :005DCD95   , :005DCDA2   
|:005DCDAF   , :005DCDBF   , :005DCDCF   , :005DD871   , :005DD87E   
|:005DD88B   , :005DD89B   , :005DD8AB   , :005DEA01   , :005DEA0D   
|:005DEA19   , :005DEA28   , :005DEA37   , :005DECA0   , :005DECAC   
|:005DECB8   , :005DECC4   , :005DECD3   , :005DECE2   , :005DEF47   
|:005DEF53   , :005DEF5F   , :005DEF6B   , :005DEF7A   , :005DEF89   
|:005DF31A   , :005DF327   , :005DF337   , :005DF347   , :005FE5C6   
|:005FE5D3   , :005FE5E0   , :005FE5ED   , :005FE5FD   , :005FE60D   
|:005FE886   , :005FE893   , :005FE8A0   , :005FE8AD   , :005FE8BD   
|:005FE8CD   , :005FEB46   , :005FEB53   , :005FEB60   , :005FEB6D   
|:005FEB7D   , :005FEB8D   , :005FF926   , :005FF933   , :005FF940   
|:005FF94D   , :005FF95D   , :005FF96D   , :00600460   , :00600470   
|:006005C2   , :006005CF   , :006005DC   , :006005E9   , :006005F9   
|:00600609   , :00600F86   , :00600F93   , :00600FA3   , :00600FB3   
|:00601130   , :0060113D   , :0060114D   , :0060115D   , :006018F9   
|:00601906   , :00601913   , :00601920   , :00601930   , :00601940   
|:00602910   , :00602920   , :00608644   , :00608651   , :00608661   
|:00608671   , :00608824   , :00608831   , :00608841   , :00608851   
|:00608B2A   , :00608B37   , :00608B44   , :00608B51   , :00608B61   
|:00608B71   , :006094E6   , :006094F3   , :00609500   , :0060950D   
|:0060951D   , :0060952D   , :0060A9F1   , :0060A9FE   , :0060AA0B   
|:0060AA1B   , :0060AA2B   , :0061EA90   , :0061EAA0   , :0061EC50   
|:0061EC60   , :0061F106   , :0061F113   , :0061F120   , :0061F12D   
|:0061F13D   , :0061F14D   , :00620293   , :0062029F   , :006202AE   
|:006202BD   , :00621776   , :00621783   , :00621790   , :0062179D   
|:006217AD   , :006217BD   , :0062A485   , :0062A492   , :0062A49F   
|:0062A4AC   , :0062A4BC   , :0062A4CC   , :0062B8C6   , :0062B8D3   
|:0062B8E0   , :0062B8ED   , :0062B8FD   , :0062B90D   , :0062CA36   
|:0062CA43   , :0062CA50   , :0062CA5D   , :0062CA6D   , :0062CA7D   
|:0063E8AC   , :0063E8B9   , :0063E8C6   , :0063E8D6   , :0063E8E6   
|:0063EA0A   , :0063EA17   , :0063EA24   , :0063EA34   , :0063EA44   
|:0063F4A5   , :0063F4B2   , :0063F4BF   , :0063F4CF   , :0063F4DF   
|:00641CE7   , :00641CF4   , :00641D01   , :00641D11   , :00641D21   
|:00642081   , :00642089   , :00642091   , :00642099   , :006420A4   
|:006420AF   
|
:004036C0 8BC1                    mov eax, ecx
:004036C2 53                      push ebx
:004036C3 33C9                    xor ecx, ecx
:004036C5 33D2                    xor edx, edx
:004036C7 8D5804                  lea ebx, dword ptr [eax+04]
:004036CA 56                      push esi
:004036CB 33F6                    xor esi, esi
:004036CD 57                      push edi
:004036CE 890B                    mov dword ptr [ebx], ecx
:004036D0 83CFFF                  or edi, FFFFFFFF
:004036D3 C70000000000            mov dword ptr [eax], 00000000
:004036D9 895304                  mov dword ptr [ebx+04], edx
:004036DC 897308                  mov dword ptr [ebx+08], esi
:004036DF 897B0C                  mov dword ptr [ebx+0C], edi
:004036E2 5F                      pop edi
:004036E3 5E                      pop esi
:004036E4 5B                      pop ebx
:004036E5 C3                      ret


:004036E6 90                      nop
:004036E7 90                      nop
:004036E8 90                      nop
:004036E9 90                      nop
:004036EA 90                      nop
:004036EB 90                      nop
:004036EC 90                      nop
:004036ED 90                      nop
:004036EE 90                      nop
:004036EF 90                      nop

* Referenced by a CALL at Addresses:
|:00412A36   , :00413096   , :0041351E   , :0041382E   , :005DB8AD   
|:005DB900   , :005DED91   , :005DEDE0   , :005DF03A   , :005DF089   
|:006233A5   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CEE28(U), :006CEE33(U), :006CEE3E(U), :006CEE49(U), :006CEE57(U)
|:006CEE65(U), :006CEEC9(U), :006CEF02(U), :006CF113(U), :006CF14C(U)
|:006CF185(U), :006CF1C0(U), :006CF229(U), :006CF251(U), :006CF29B(U)
|:006CF32D(U), :006CF37A(U), :006CF3E3(U), :006CF3FD(U), :006CF506(U)
|:006CF57C(U), :006CF593(U), :006CF5FC(U), :006CF613(U), :006CF635(U)
|:006CF64C(U), :006CF69C(U), :006CF6F2(U), :006CF85A(U), :006CF865(U)
|:006CF870(U), :006CF87B(U), :006CF889(U), :006CF897(U), :006CF96C(U)
|:006CF9BE(U), :006CFA14(U), :006CFAFF(U), :006CFB4F(U), :006CFBA3(U)
|:006CFBF9(U), :006CFC4F(U), :006CFCA5(U), :006CFDD2(U), :006CFE31(U)
|:006CFEBB(U), :006CFF26(U), :006CFF8E(U), :006D001F(U), :006D0095(U)
|:006D0100(U), :006D014C(U), :006D01A3(U), :006D0245(U), :006D02A5(U)
|:006D041B(U), :006D0495(U), :006D04F5(U), :006D0557(U), :006D05FB(U)
|:006D06A5(U), :006D070D(U), :006D076F(U), :006D082C(U), :006D0875(U)
|:006D08C7(U), :006D0981(U), :006D0A03(U), :006D0A8B(U), :006D0B59(U)
|:006D0B62(U), :006D0BA3(U), :006D0BAC(U), :006D0C03(U), :006D0C0C(U)
|:006D0C4D(U), :006D0C56(U), :006D0C97(U), :006D0CA0(U), :006D0D13(U)
|:006D0D1C(U), :006D0D5D(U), :006D0D66(U), :006D0DBD(U), :006D0DC6(U)
|:006D0E07(U), :006D0E10(U), :006D0E51(U), :006D0E5A(U), :006D0ECD(U)
|:006D0ED6(U), :006D0FB8(U), :006D1008(U), :006D11A7(U), :006D11E7(U)
|:006D1364(U), :006D140A(U), :006D1415(U), :006D1420(U), :006D142B(U)
|:006D1439(U), :006D1447(U), :006D15DC(U), :006D16C4(U), :006D1863(U)
|:006D1879(U), :006D18D2(U), :006D18DD(U), :006D18E8(U), :006D18F3(U)
|:006D1901(U), :006D190F(U), :006D1960(U), :006D196B(U), :006D1976(U)
|:006D1981(U), :006D198F(U), :006D199D(U), :006D1C11(U), :006D1C1C(U)
|:006D1C27(U), :006D1C32(U), :006D1C40(U), :006D1C4E(U), :006D1DFE(U)
|:006D1E15(U), :006D1E65(U), :006D1E87(U), :006D1E9E(U), :006D203A(U)
|:006D2045(U), :006D2050(U), :006D205B(U), :006D2069(U), :006D2077(U)
|:006D208F(U), :006D20A5(U), :006D20BB(U), :006D2129(U), :006D213F(U)
|:006D2270(U), :006D227B(U), :006D22AC(U), :006D22B7(U), :006D22C2(U)
|:006D2663(U), :006D26A6(U), :006D2705(U), :006D2B24(U), :006D2B2F(U)
|:006D2B3A(U), :006D2B45(U), :006D2B53(U), :006D2B61(U), :006D2C0B(U)
|:006D2C16(U), :006D2C21(U), :006D2C2C(U), :006D2C3A(U), :006D2C48(U)
|:006D2C58(U), :006D2CDA(U), :006D2D1B(U), :006D2D5C(U), :006D2D9F(U)
|:006D2DE4(U), :006D2E42(U), :006D2EB0(U), :006D2F1E(U), :006D2F8C(U)
|:006D2FA5(U), :006D301B(U), :006D3034(U), :006D30AA(U), :006D30C3(U)
|:006D3135(U), :006D314C(U), :006D318E(U), :006D31A5(U), :006D31D7(U)
|:006D31EE(U), :006D325F(U), :006D32CD(U), :006D3361(U), :006D336C(U)
|:006D3377(U), :006D3382(U), :006D3390(U), :006D339E(U), :006D34BE(U)
|:006D34C9(U), :006D34D4(U), :006D34DF(U), :006D34ED(U), :006D34FB(U)
|:006D358B(U), :006D3762(U), :006D376D(U), :006D3778(U), :006D3783(U)
|:006D3791(U), :006D379F(U), :006D37DF(U), :006D3818(U), :006D38C6(U)
|:006D3916(U), :006D396A(U), :006D39C0(U), :006D3A16(U), :006D3A6C(U)
|:006D3B4C(U), :006D3B5A(U), :006D3B68(U), :006D3B76(U), :006D3B87(U)
|:006D3B98(U), :006D3D2C(U), :006D3EB5(U), :006D3EE4(U), :006D3F0B(U)
|:006D3FCC(U), :006D4062(U), :006D40BB(U), :006D411A(U), :006D416D(U)
|:006D42EF(U), :006D438C(U), :006D43EA(U), :006D43F5(U), :006D4400(U)
|:006D440B(U), :006D4419(U), :006D4427(U), :006D4523(U), :006D4A08(U)
|:006D4C08(U), :006D4D29(U), :006D4E4D(U), :006D4F00(U), :006D4F91(U)
|:006D509B(U), :006D5161(U), :006D5228(U), :006D5301(U), :006D53C3(U)
|:006D541C(U), :006D5475(U), :006D5629(U), :006D56F3(U), :006D56FB(U)
|:006D5773(U), :006D5781(U), :006D57E6(U), :006D57FD(U), :006D58D3(U)
|:006D58E9(U), :006D5973(U), :006D5989(U), :006D5ADC(U), :006D5D2B(U)
|:006D5D41(U), :006D5DD1(U), :006D5DF1(U), :006D5E42(U), :006D5E4D(U)
|:006D5E58(U), :006D5E63(U), :006D5E71(U), :006D5E7F(U), :006D5E95(U)
|:006D5EA3(U), :006D5F4C(U), :006D5F63(U), :006D5FB3(U), :006D617F(U)
|:006D63DC(U), :006D63E7(U), :006D642A(U), :006D645B(U), :006D6466(U)
|:006D65AA(U), :006D65B5(U), :006D65C0(U), :006D65CB(U), :006D65D9(U)
|:006D65E7(U), :006D6626(U), :006D6678(U), :006D6683(U), :006D668E(U)
|:006D6699(U), :006D66A7(U), :006D66B5(U), :006D675C(U), :006D6767(U)
|:006D6772(U), :006D677D(U), :006D678B(U), :006D6799(U), :006D68EB(U)
|:006D693D(U), :006D6993(U), :006D6A24(U), :006D6A68(U), :006D6A81(U)
|:006D6ADB(U), :006D6B52(U), :006D6B5D(U), :006D6B68(U), :006D6B73(U)
|:006D6B81(U), :006D6B8F(U), :006D6C49(U), :006D6C9D(U), :006D6D5D(U)
|:006D6DA1(U), :006D6DBA(U), :006D6E14(U), :006D6E8B(U), :006D6E96(U)
|:006D6EA1(U), :006D6EAC(U), :006D6EBA(U), :006D6EC8(U), :006D6F82(U)
|:006D6FD6(U), :006D7047(U), :006D708B(U), :006D70A4(U), :006D70FE(U)
|:006D71A2(U), :006D71AD(U), :006D71B8(U), :006D71C3(U), :006D71D1(U)
|:006D71DF(U), :006D72A3(U), :006D7370(U), :006D73F6(U), :006D7560(U)
|:006D75B6(U), :006D760C(U), :006D7651(U), :006D77D7(U), :006D77EE(U)
|:006D78BC(U), :006D793A(U), :006D7990(U), :006D79E6(U), :006D7ABB(U)
|:006D7B0F(U), :006D7B65(U), :006D7C65(U), :006D7CDA(U), :006D7CE5(U)
|:006D7CF0(U), :006D7CFB(U), :006D7D09(U), :006D7D17(U), :006D7D59(U)
|:006D7ECC(U), :006D7F9C(U), :006D80B4(U), :006D81AC(U), :006D82C4(U)
|:006D839C(U), :006D8422(U), :006D849C(U), :006D84A7(U), :006D84B2(U)
|:006D84BD(U), :006D84CB(U), :006D84D9(U), :006D84EF(U), :006D8613(U)
|:006D862D(U), :006D86D1(U), :006D878B(U), :006D8845(U), :006D8907(U)
|:006D8976(U), :006D8A8C(U), :006D8AA6(U), :006D8B08(U), :006D8B86(U)
|:006D8C95(U), :006D8D35(U), :006D8E65(U), :006D8E70(U), :006D8E7B(U)
|:006D8E86(U), :006D8E94(U), :006D8EA2(U), :006D8F48(U), :006D8F91(U)
|:006D8FDA(U), :006D9072(U), :006D90C8(U), :006D91ED(U), :006D92A1(U)
|:006D947A(U), :006D9485(U), :006D9490(U), :006D949B(U), :006D94A9(U)
|:006D94B7(U), :006D9543(U), :006D9593(U), :006D960F(U), :006D9626(U)
|:006D97D5(U), :006D986A(U), :006D98BA(U), :006D990E(U), :006D9970(U)
|:006D9A09(U), :006D9A78(U), :006D9A8F(U), :006D9B1A(U), :006D9B25(U)
|:006D9B30(U), :006D9B3B(U), :006D9B49(U), :006D9B57(U), :006D9D02(U)
|:006D9D0D(U), :006D9D18(U), :006D9D23(U), :006D9D31(U), :006D9D3F(U)
|:006D9D4F(U), :006D9D65(U), :006D9DE1(U), :006D9DEC(U), :006D9E6A(U)
|:006D9E75(U), :006D9E80(U), :006D9E8B(U), :006D9E99(U), :006D9EA7(U)
|:006D9F20(U), :006D9F70(U), :006D9FC6(U), :006DA01C(U), :006DA072(U)
|:006DA0C8(U), :006DA179(U), :006DA184(U), :006DA18F(U), :006DA19A(U)
|:006DA1A8(U), :006DA1B6(U), :006DA241(U), :006DA291(U), :006DA2E5(U)
|:006DA33B(U), :006DA3BD(U), :006DA3FA(U), :006DA6FA(U), :006DA705(U)
|:006DA710(U), :006DA71B(U), :006DA729(U), :006DA737(U), :006DA809(U)
|:006DA898(U), :006DA930(U), :006DA980(U), :006DA9D4(U), :006DAA7C(U)
|:006DAB1A(U), :006DAB25(U), :006DAB30(U), :006DAB3B(U), :006DAB49(U)
|:006DAB57(U), :006DAB9F(U), :006DABB5(U), :006DABCB(U), :006DACD0(U)
|:006DACDB(U), :006DACE6(U), :006DAD45(U), :006DAD50(U), :006DAD5B(U)
|:006DAD66(U), :006DAD74(U), :006DAD82(U), :006DAE1A(U), :006DAE79(U)
|:006DAEE1(U), :006DAF27(U), :006DAFBE(U), :006DAFC9(U), :006DAFD4(U)
|:006DAFDF(U), :006DAFED(U), :006DAFFB(U), :006DB1BA(U), :006DB20A(U)
|:006DB25E(U), :006DB2A8(U), :006DB2B3(U), :006DB2BE(U), :006DB2C9(U)
|:006DB2D7(U), :006DB2E5(U), :006DB2FD(U), :006DB392(U), :006DB3E2(U)
|:006DB476(U), :006DB519(U), :006DB524(U), :006DB52F(U), :006DB53A(U)
|:006DB548(U), :006DB556(U), :006DB566(U), :006DB595(U), :006DB5B7(U)
|:006DB5D9(U), :006DB5FB(U), :006DB61D(U), :006DB63F(U), :006DB700(U)
|:006DB70B(U), :006DB716(U), :006DB721(U), :006DB72F(U), :006DB73D(U)
|:006DB79F(U), :006DB7EF(U), :006DB845(U), :006DB8BF(U), :006DB8D6(U)
|:006DB996(U), :006DB9BE(U), :006DB9EF(U), :006DBA1E(U), :006DBA49(U)
|:006DBAAC(U), :006DBAC3(U), :006DBB88(U), :006DBBD8(U), :006DBC68(U)
|:006EEAB2(U), :006EEABD(U), :006EEAC8(U), :006EEAD3(U), :006EEAE1(U)
|:006EEAEF(U), :006EEB68(U), :006EECE0(U), :006EEEF1(U), :006EEEFC(U)
|:006EEF07(U), :006EEF12(U), :006EEF20(U), :006EEF2E(U), :006EF17A(U)
|:006EF185(U), :006EF190(U), :006EF19B(U), :006EF1A9(U), :006EF1B7(U)
|:006EF3C9(U), :006EFAC3(U), :006EFCCB(U), :006EFD6A(U), :006EFD72(U)
|:006EFD9A(U), :006EFDA2(U), :006EFDEE(U), :006EFDF6(U), :006EFEA9(U)
|:006EFEF5(U), :006EFF45(U), :006F0DDA(U), :006F0DE5(U), :006F0DF0(U)
|:006F0DFB(U), :006F0E09(U), :006F0E17(U), :006F0E91(U), :006F0ECA(U)
|:006F0F03(U), :006F0F3E(U), :006F0F7B(U), :006F10E2(U), :006F10ED(U)
|:006F10F8(U), :006F1103(U), :006F1111(U), :006F111F(U), :006F11AE(U)
|:006F11FA(U), :006F1205(U), :006F1210(U), :006F121B(U), :006F1229(U)
|:006F1237(U), :006F1247(U), :006F125D(U), :006F14E4(U), :006F14EF(U)
|:006F14FA(U), :006F1505(U), :006F1513(U), :006F1521(U), :006F155B(U)
|:006F15B9(U), :006F1626(U), :006F1631(U), :006F163C(U), :006F1647(U)
|:006F1655(U), :006F1663(U), :006F171F(U), :006F172A(U), :006F1735(U)
|:006F1740(U), :006F174E(U), :006F175C(U), :006F1806(U), :006F1BD6(U)
|:006F1C1A(U), :006F1C53(U), :006F1C8E(U), :006F1D4F(U), :006F1D69(U)
|:006F1DDB(U), :006F1DE6(U), :006F1DF1(U), :006F1DFC(U), :006F1E0A(U)
|:006F1E18(U), :006F1E4A(U), :006F1E8F(U), :006F1ECF(U), :006F1EE6(U)
|:006F1F12(U), :006F1F52(U), :006F1F69(U), :006F1FD1(U), :006F2009(U)
|:006F207D(U), :006F2088(U), :006F20CD(U), :006F20D8(U), :006F211D(U)
|:006F2128(U), :006F23A1(U), :006F2405(U), :006F2592(U), :006F259D(U)
|:006F25A8(U), :006F25B3(U), :006F25C1(U), :006F25CF(U), :006F2653(U)
|:006F268C(U), :006F26D0(U), :006F270B(U), :006F2748(U), :006F2785(U)
|:006F27C2(U), :006F27E6(U), :006F2843(U), :006F284E(U), :006F2859(U)
|:006F2864(U), :006F2872(U), :006F2880(U), :006F2896(U), :006F28F0(U)
|:006F2972(U), :006F29AB(U), :006F2A11(U), :006F2A4E(U), :006F2A8B(U)
|:006F2AF7(U), :006F2B1B(U), :006F2B58(U), :006F2BD4(U), :006F2BDF(U)
|:006F2BEA(U), :006F2BF5(U), :006F2C03(U), :006F2C11(U), :006F2C27(U)
|:006F2C81(U), :006F2D03(U), :006F2D3C(U), :006F2D80(U), :006F2DC6(U)
|:006F2E18(U), :006F2E23(U), :006F2E2E(U), :006F2E39(U), :006F2E47(U)
|:006F2E55(U), :006F2E6B(U), :006F2EC5(U), :006F2F47(U), :006F2F80(U)
|:006F2FE6(U), :006F3023(U), :006F3060(U), :006F30CC(U), :006F30F0(U)
|:006F312D(U), :006F31A9(U), :006F31B4(U), :006F31BF(U), :006F31CA(U)
|:006F31D8(U), :006F31E6(U), :006F31FC(U), :006F3256(U), :006F32E6(U)
|:006F331F(U), :006F3372(U), :006F3389(U), :006F33F3(U), :006F33FE(U)
|:006F3409(U), :006F3414(U), :006F3422(U), :006F3430(U), :006F3446(U)
|:006F348C(U), :006F34C5(U), :006F3579(U), :006F35BB(U), :006F35F3(U)
|:006F362E(U), :006F3669(U), :006F36A6(U), :006F36E3(U), :006F3720(U)
|:006F375D(U), :006F37A3(U), :006F37F5(U), :006F3811(U), :006F3996(U)
|:006F39A1(U), :006F39AC(U), :006F39B7(U), :006F39C5(U), :006F39D3(U)
|:006F39E9(U), :006F3A51(U), :006F3AFD(U), :006F3B3F(U), :006F3BA0(U)
|:006F3BBA(U), :006F3C24(U), :006F3C2F(U), :006F3C3A(U), :006F3C45(U)
|:006F3C53(U), :006F3C61(U), :006F3C77(U), :006F3CDF(U), :006F3DD1(U)
|:006F3E31(U), :006F3EA1(U), :006F40D1(U), :006F4112(U), :006F414B(U)
|:006F4224(U), :006F423E(U), :006F4281(U), :006F429B(U), :006F430D(U)
|:006F4318(U), :006F4323(U), :006F432E(U), :006F433C(U), :006F434A(U)
|:006F4360(U), :006F4381(U), :006F43BA(U), :006F46C5(U), :006F46D0(U)
|:006F46DB(U), :006F46E6(U), :006F46F4(U), :006F4702(U), :006F472E(U)
|:006F4766(U), :006F479F(U), :006F47EE(U), :006F4834(U), :006F49CD(U)
|:006F49E4(U), :006F4A0D(U), :006F4A6D(U), :006F4A78(U), :006F4A83(U)
|:006F4A8E(U), :006F4A9C(U), :006F4AAA(U), :006F4B94(U), :006F4BBF(U)
|:006F4BE7(U), :006F4C12(U), :006F4C3D(U), :006F4C6A(U), :006F4CC0(U)
|:006F4CED(U), :006F4D1A(U), :006F4D47(U), :006F4D74(U), :006F4DA1(U)
|:006F4DCE(U), :006F4DFB(U), :006F4E28(U), :006F4E55(U), :006F4E82(U)
|:006F4EAC(U), :006F4ED6(U), :006F4F00(U), :006F5061(U), :006F8C73(U)
|:006F8CAC(U), :006F8CE5(U), :006F8D20(U), :006F8D5D(U), :006F8D9A(U)
|:006F8DD7(U), :006F8E14(U), :006F8E51(U), :006F8FF8(U), :006F900F(U)
|:006F9089(U), :006F90E8(U), :006F90FF(U), :006F9162(U), :006F919B(U)
|:006F923B(U), :006F9252(U), :006F927C(U), :006F9293(U), :006F92DF(U)
|:006F92F6(U), :006F9351(U), :006F938A(U), :006F93C3(U), :006F93FE(U)
|:006F943B(U), :006F9478(U), :006F94B5(U), :006F94D9(U), :006F953A(U)
|:006F9577(U), :006F95B4(U), :006F9645(U), :006F965C(U), :006F9686(U)
|:006F969D(U), :006F9717(U), :006F9768(U), :006F978A(U), :006F97B4(U)
|:006FB0AA(U), :006FB0B5(U), :006FB0C0(U), :006FB0CB(U), :006FB0D9(U)
|:006FB0E7(U), :006FB0FF(U), :006FB1B9(U), :006FB1F0(U), :006FB23A(U)
|:006FB245(U), :006FB250(U), :006FB25B(U), :006FB269(U), :006FB277(U)
|:006FB287(U), :006FB329(U), :006FB43E(U), :006FB449(U), :006FB718(U)
|:006FB723(U), :006FB72E(U), :006FB739(U), :006FB747(U), :006FB755(U)
|:006FB773(U), :006FB789(U), :006FB814(U), :006FB81F(U), :006FB82A(U)
|:006FB835(U), :006FB843(U), :006FB851(U), :006FB861(U), :006FB945(U)
|:006FB995(U), :006FB9EB(U), :006FBA41(U), :006FBA97(U), :006FBB6F(U)
|:006FBB7A(U), :006FBB85(U), :006FBB90(U), :006FBB9E(U), :006FBBAC(U)
|:006FBBCA(U), :006FBBE0(U), :006FBC37(U), :006FBC42(U), :006FBC4D(U)
|:006FBC58(U), :006FBC66(U), :006FBC74(U), :006FBCED(U), :006FBD3D(U)
|:006FBD93(U), :006FBDE9(U), :006FBE3F(U), :006FBEF3(U), :006FBEFE(U)
|:006FBF09(U), :006FBF14(U), :006FBF22(U), :006FBF30(U), :006FBFA9(U)
|:006FBFF9(U), :006FC04F(U), :006FC0AD(U), :006FC1B3(U), :006FC1BE(U)
|:006FC1C9(U), :006FC1D4(U), :006FC1E2(U), :006FC1F0(U), :006FC292(U)
|:006FC29D(U), :006FC2A8(U), :006FC2B3(U), :006FC2C1(U), :006FC2CF(U)
|:006FC363(U), :006FC36E(U), :006FC379(U), :006FC384(U), :006FC392(U)
|:006FC3A0(U), :006FC3BE(U), :006FC3D4(U), :006FC443(U), :006FC44E(U)
|:006FC459(U), :006FC464(U), :006FC472(U), :006FC480(U), :006FC49E(U)
|:006FC4B4(U), :006FC547(U), :006FC552(U), :006FC55D(U), :006FC568(U)
|:006FC576(U), :006FC584(U), :006FC594(U), :006FC62A(U), :006FC635(U)
|:006FC65E(U), :006FC67E(U), :006FE716(U), :006FE721(U), :006FE72C(U)
|:006FE737(U), :006FE745(U), :006FE753(U), :006FE872(U), :006FE87D(U)
|:006FE888(U), :006FE893(U), :006FE8A1(U), :006FE8AF(U), :006FE8EF(U)
|:006FE950(U), :006FE95B(U), :006FE966(U), :006FE971(U), :006FE97F(U)
|:006FE98D(U), :006FE9CD(U), :006FEA2E(U), :006FEA39(U), :006FEA44(U)
|:006FEA4F(U), :006FEA5D(U), :006FEA6B(U), :006FEAAB(U), :006FEBE0(U)
|:006FEBEB(U), :006FEBF6(U), :006FEC01(U), :006FEC0F(U), :006FEC1D(U)
|:006FEC41(U), :006FEC49(U), :006FEC5F(U), :006FEC9B(U), :006FECB4(U)
|:006FECBF(U), :006FED52(U), :006FED5D(U), :006FED68(U), :006FED73(U)
|:006FED81(U), :006FED8F(U), :006FEDF6(U), :006FEE01(U), :006FEE0C(U)
|:006FEE17(U), :006FEE25(U), :006FEE33(U), :006FEF22(U), :006FEF2D(U)
|:006FEF38(U), :006FEF43(U), :006FEF51(U), :006FEF5F(U), :006FEFB0(U)
|:006FEFBB(U), :006FEFC6(U), :006FEFD1(U), :006FEFDF(U), :006FEFED(U)
|:006FF003(U), :006FF0D4(U), :006FF0DF(U), :006FF0EA(U), :006FF0F5(U)
|:006FF103(U), :006FF111(U), :006FF150(U), :006FF1B2(U), :006FF1BD(U)
|:006FF1C8(U), :006FF1D3(U), :006FF1E1(U), :006FF1EF(U), :006FF302(U)
|:006FF314(U), :006FF49F(U), :006FF4D8(U), :006FF517(U), :006FF550(U)
|:006FF5E3(U), :006FF89A(U), :006FF93E(U), :006FF9A4(U), :006FF9DF(U)
|:006FFA1C(U), :006FFB12(U), :006FFB1D(U), :006FFB28(U), :006FFB33(U)
|:006FFB41(U), :006FFB4F(U), :006FFBB6(U), :006FFBC1(U), :006FFBCC(U)
|:006FFBD7(U), :006FFBE5(U), :006FFBF3(U), :006FFC5A(U), :006FFC65(U)
|:006FFC70(U), :006FFC7B(U), :006FFC89(U), :006FFC97(U), :006FFCCB(U)
|:006FFD32(U), :006FFD3D(U), :006FFD48(U), :006FFD53(U), :006FFD61(U)
|:006FFD6F(U), :006FFDA1(U), :006FFEF2(U), :006FFEFD(U), :006FFF08(U)
|:006FFF13(U), :006FFF21(U), :006FFF2F(U), :006FFF61(U), :006FFF69(U)
|:007000CD(U), :007000D8(U), :0070011D(U), :00700128(U), :0070016D(U)
|:00700178(U), :00701652(U), :0070165D(U), :00701668(U), :00701673(U)
|:00701681(U), :0070168F(U), :00701849(U), :00701851(U), :007018AA(U)
|:007018B5(U), :007018C0(U), :007018CB(U), :007018D9(U), :007018E7(U)
|:007018FD(U), :0070194E(U), :00701959(U), :00701964(U), :0070196F(U)
|:0070197D(U), :0070198B(U), :007019A1(U), :00701A28(U), :00701A33(U)
|:00701A3E(U), :00701A49(U), :00701A57(U), :00701A65(U), :00701A91(U)
|:00701AEB(U), :00701B79(U), :00701BB6(U), :00701BCD(U), :00701C02(U)
|:00701C19(U), :00701C65(U), :00701C91(U), :00701CE2(U), :00701CED(U)
|:00701CF8(U), :00701D03(U), :00701D11(U), :00701D1F(U), :00701E52(U)
|:00701E5D(U), :00701E68(U), :00701E73(U), :00701E81(U), :00701E8F(U)
|:00701EA5(U), :00701F21(U), :00701FC7(U), :00701FD9(U), :00701FEB(U)
|:00701FFE(U), :00702013(U), :007023D2(U), :007023DD(U), :007023E8(U)
|:007023F3(U), :00702401(U), :0070240F(U), :00702425(U), :0070242D(U)
|:00702443(U), :00702471(U), :0070248A(U), :00702495(U), :00702526(U)
|:00702531(U), :0070253C(U), :00702547(U), :00702555(U), :00702563(U)
|:007025BA(U), :0070260A(U), :00702702(U), :0070270D(U), :00702718(U)
|:00702723(U), :00702731(U), :0070273F(U), :007029F2(U), :007029FD(U)
|:00702A08(U), :00702A13(U), :00702A21(U), :00702A2F(U), :007031F2(U)
|:007031FD(U), :00703208(U), :00703213(U), :00703221(U), :0070322F(U)
|:0070368A(U), :00703695(U), :007036A0(U), :007036AB(U), :007036B9(U)
|:007036C7(U), :00703719(U), :00703724(U), :0070372F(U), :0070373A(U)
|:00703748(U), :00703756(U), :00703777(U), :00703799(U), :0070382A(U)
|:00703835(U), :00703840(U), :0070384B(U), :00703859(U), :00703867(U)
|:00703893(U), :007038A9(U), :007038C5(U), :0070396F(U), :0070397A(U)
|:00703985(U), :00703990(U), :0070399E(U), :007039AC(U), :007039C2(U)
|:007039FA(U), :00703A68(U), :00703A76(U), :00703A84(U), :00703A92(U)
|:00703AA3(U), :00703AB4(U), :00703AD0(U), :00703B42(U), :00703B98(U)
|:00703BEE(U), :00703C3C(U), :00703C5B(U), :00703C85(U), :00703CA1(U)
|:00703CCB(U), :00703CE7(U), :00703D5B(U), :00703D85(U), :00703E11(U)
|:00703E59(U), :00703EA3(U), :00703EEF(U), :00703F3B(U), :00703F87(U)
|:00703FD3(U), :0070401F(U), :0070406B(U), :00704090(U), :007040A6(U)
|:007040B8(U), :007040CE(U), :00704110(U), :00704166(U), :00704171(U)
|:00704ECB(U), :00704F04(U), :00704F4A(U), :00704F87(U), :00704FC4(U)
|:0070530F(U), :00705329(U), :00705367(U), :00705381(U), :00705436(U)
|:00705469(U)
|
:004036F0 8BC1                    mov eax, ecx
:004036F2 8B08                    mov ecx, dword ptr [eax]
:004036F4 85C9                    test ecx, ecx
:004036F6 7406                    je 004036FE
:004036F8 50                      push eax
:004036F9 E822AC1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004036F6(C)
|
:004036FE C3                      ret
:004036FF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CEDBF(U), :006DDB5B(U), :006F127D(U), :006F89D0(U), :006FE0AE(U)
|:007020DE(U), :00702143(U), :00702159(U)
|
:00403700 C3                      ret
:00403701 90                      nop
:00403702 90                      nop
:00403703 90                      nop
:00403704 90                      nop
:00403705 90                      nop
:00403706 90                      nop
:00403707 90                      nop
:00403708 90                      nop
:00403709 90                      nop
:0040370A 90                      nop
:0040370B 90                      nop
:0040370C 90                      nop
:0040370D 90                      nop
:0040370E 90                      nop
:0040370F 90                      nop

* Referenced by a CALL at Address:
|:00403923   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CECA3(U), :006FC8DB(U), :006FC8F5(U)
|
:00403710 6AFF                    push FFFFFFFF
:00403712 68FBEF6C00              push 006CEFFB
:00403717 64A100000000            mov eax, dword ptr fs:[00000000]
:0040371D 50                      push eax
:0040371E 64892500000000          mov dword ptr fs:[00000000], esp
:00403725 83EC0C                  sub esp, 0000000C
:00403728 53                      push ebx
:00403729 55                      push ebp
:0040372A 8BE9                    mov ebp, ecx
:0040372C 56                      push esi
:0040372D 57                      push edi
:0040372E 896C2410                mov dword ptr [esp+10], ebp
:00403732 C7450074837000          mov [ebp+00], 00708374
:00403739 33DB                    xor ebx, ebx
:0040373B 3BEB                    cmp ebp, ebx
:0040373D 895C2424                mov dword ptr [esp+24], ebx
:00403741 741A                    je 0040375D
:00403743 8B4504                  mov eax, dword ptr [ebp+04]
:00403746 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403749 3BC3                    cmp eax, ebx
:0040374B 7403                    je 00403750
:0040374D 894808                  mov dword ptr [eax+08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040374B(C)
|
:00403750 3BCB                    cmp ecx, ebx
:00403752 7403                    je 00403757
:00403754 894104                  mov dword ptr [ecx+04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403752(C)
|
:00403757 895D08                  mov dword ptr [ebp+08], ebx
:0040375A 895D04                  mov dword ptr [ebp+04], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403741(C)
|
:0040375D 8B450C                  mov eax, dword ptr [ebp+0C]
:00403760 8B30                    mov esi, dword ptr [eax]
:00403762 8B4608                  mov eax, dword ptr [esi+08]
:00403765 8D4E0C                  lea ecx, dword ptr [esi+0C]
:00403768 3BC1                    cmp eax, ecx
:0040376A 757E                    jne 004037EA
:0040376C 3BF3                    cmp esi, ebx
:0040376E 89742414                mov dword ptr [esp+14], esi
:00403772 7471                    je 004037E5
:00403774 8D7E0C                  lea edi, dword ptr [esi+0C]
:00403777 C644242402              mov [esp+24], 02
:0040377C 3BC7                    cmp eax, edi
:0040377E 7418                    je 00403798

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403796(C)
|
:00403780 51                      push ecx
:00403781 8D54241C                lea edx, dword ptr [esp+1C]
:00403785 8BCC                    mov ecx, esp
:00403787 52                      push edx
:00403788 8901                    mov dword ptr [ecx], eax
:0040378A 8BCE                    mov ecx, esi
:0040378C E88F0B0000              call 00404320
:00403791 8B4608                  mov eax, dword ptr [esi+08]
:00403794 3BC7                    cmp eax, edi
:00403796 75E8                    jne 00403780

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040377E(C)
|
:00403798 8B4704                  mov eax, dword ptr [edi+04]
:0040379B 8B4F08                  mov ecx, dword ptr [edi+08]
:0040379E 3BC3                    cmp eax, ebx
:004037A0 C7076C837000            mov dword ptr [edi], 0070836C
:004037A6 7403                    je 004037AB
:004037A8 894808                  mov dword ptr [eax+08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004037A6(C)
|
:004037AB 3BCB                    cmp ecx, ebx
:004037AD 7403                    je 004037B2
:004037AF 894104                  mov dword ptr [ecx+04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004037AD(C)
|
:004037B2 895F08                  mov dword ptr [edi+08], ebx
:004037B5 895F04                  mov dword ptr [edi+04], ebx
:004037B8 8B4604                  mov eax, dword ptr [esi+04]
:004037BB 8B4E08                  mov ecx, dword ptr [esi+08]
:004037BE 3BC3                    cmp eax, ebx
:004037C0 885C2424                mov byte ptr [esp+24], bl
:004037C4 C7066C837000            mov dword ptr [esi], 0070836C
:004037CA 7403                    je 004037CF
:004037CC 894808                  mov dword ptr [eax+08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004037CA(C)
|
:004037CF 3BCB                    cmp ecx, ebx
:004037D1 7403                    je 004037D6
:004037D3 894104                  mov dword ptr [ecx+04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004037D1(C)
|
:004037D6 56                      push esi
:004037D7 895E08                  mov dword ptr [esi+08], ebx
:004037DA 895E04                  mov dword ptr [esi+04], ebx
:004037DD E81EDB1D00              call 005E1300
:004037E2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403772(C)
|
:004037E5 8B450C                  mov eax, dword ptr [ebp+0C]
:004037E8 8918                    mov dword ptr [eax], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040376A(C)
|
:004037EA 8B4504                  mov eax, dword ptr [ebp+04]
:004037ED 8B4D08                  mov ecx, dword ptr [ebp+08]
:004037F0 3BC3                    cmp eax, ebx
:004037F2 C745006C837000          mov [ebp+00], 0070836C
:004037F9 7403                    je 004037FE
:004037FB 894808                  mov dword ptr [eax+08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004037F9(C)
|
:004037FE 3BCB                    cmp ecx, ebx
:00403800 7403                    je 00403805
:00403802 894104                  mov dword ptr [ecx+04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403800(C)
|
:00403805 8B4C241C                mov ecx, dword ptr [esp+1C]
:00403809 5F                      pop edi
:0040380A 895D08                  mov dword ptr [ebp+08], ebx
:0040380D 895D04                  mov dword ptr [ebp+04], ebx
:00403810 5E                      pop esi
:00403811 5D                      pop ebp
:00403812 64890D00000000          mov dword ptr fs:[00000000], ecx
:00403819 5B                      pop ebx
:0040381A 83C418                  add esp, 00000018
:0040381D C3                      ret


:0040381E 90                      nop
:0040381F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CEE83(U), :006CEF51(U)
|
:00403820 64A100000000            mov eax, dword ptr fs:[00000000]
:00403826 6AFF                    push FFFFFFFF
:00403828 6818F06C00              push 006CF018
:0040382D 50                      push eax
:0040382E 64892500000000          mov dword ptr fs:[00000000], esp
:00403835 56                      push esi
:00403836 8B11                    mov edx, dword ptr [ecx]
:00403838 8B02                    mov eax, dword ptr [edx]
:0040383A 3BC2                    cmp eax, edx
:0040383C 741C                    je 0040385A
:0040383E 8B350C987A00            mov esi, dword ptr [007A980C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403858(C)
|
:00403844 8BD0                    mov edx, eax
:00403846 8B00                    mov eax, dword ptr [eax]
:00403848 85D2                    test edx, edx
:0040384A 740A                    je 00403856
:0040384C 8932                    mov dword ptr [edx], esi
:0040384E 8BF2                    mov esi, edx
:00403850 89350C987A00            mov dword ptr [007A980C], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040384A(C)
|
:00403856 3B01                    cmp eax, dword ptr [ecx]
:00403858 75EA                    jne 00403844

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040383C(C)
|
:0040385A 8B01                    mov eax, dword ptr [ecx]
:0040385C 8900                    mov dword ptr [eax], eax
:0040385E 8B01                    mov eax, dword ptr [ecx]
:00403860 894004                  mov dword ptr [eax+04], eax
:00403863 8B09                    mov ecx, dword ptr [ecx]
:00403865 85C9                    test ecx, ecx
:00403867 740D                    je 00403876
:00403869 A10C987A00              mov eax, dword ptr [007A980C]
:0040386E 8901                    mov dword ptr [ecx], eax
:00403870 890D0C987A00            mov dword ptr [007A980C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403867(C)
|
:00403876 8B4C2404                mov ecx, dword ptr [esp+04]
:0040387A 5E                      pop esi
:0040387B 64890D00000000          mov dword ptr fs:[00000000], ecx
:00403882 83C40C                  add esp, 0000000C
:00403885 C3                      ret


:00403886 90                      nop
:00403887 90                      nop
:00403888 90                      nop
:00403889 90                      nop
:0040388A 90                      nop
:0040388B 90                      nop
:0040388C 90                      nop
:0040388D 90                      nop
:0040388E 90                      nop
:0040388F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:006CEE75(U)
|
:00403890 C3                      ret
:00403891 90                      nop
:00403892 90                      nop
:00403893 90                      nop
:00403894 90                      nop
:00403895 90                      nop
:00403896 90                      nop
:00403897 90                      nop
:00403898 90                      nop
:00403899 90                      nop
:0040389A 90                      nop
:0040389B 90                      nop
:0040389C 90                      nop
:0040389D 90                      nop
:0040389E 90                      nop
:0040389F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CEDC7(U), :006F1285(U), :006F89D8(U), :006FE0B6(U), :007020E9(U)
|:00702151(U), :00702167(U), :00702226(U), :00702266(U), :00702274(U)
|
:004038A0 6AFF                    push FFFFFFFF
:004038A2 683BF06C00              push 006CF03B
:004038A7 64A100000000            mov eax, dword ptr fs:[00000000]
:004038AD 50                      push eax
:004038AE 64892500000000          mov dword ptr fs:[00000000], esp
:004038B5 83EC08                  sub esp, 00000008
:004038B8 8B11                    mov edx, dword ptr [ecx]
:004038BA 894C2400                mov dword ptr [esp], ecx
:004038BE 89542404                mov dword ptr [esp+04], edx
:004038C2 85D2                    test edx, edx
:004038C4 C744241000000000        mov [esp+10], 00000000
:004038CC 7440                    je 0040390E
:004038CE 8B4108                  mov eax, dword ptr [ecx+08]
:004038D1 2BC2                    sub eax, edx
:004038D3 C1F802                  sar eax, 02
:004038D6 C1E002                  shl eax, 02
:004038D9 3D80000000              cmp eax, 00000080
:004038DE 7618                    jbe 004038F8
:004038E0 52                      push edx
:004038E1 E81ADA1D00              call 005E1300
:004038E6 83C404                  add esp, 00000004
:004038E9 8B4C2408                mov ecx, dword ptr [esp+08]
:004038ED 64890D00000000          mov dword ptr fs:[00000000], ecx
:004038F4 83C414                  add esp, 00000014
:004038F7 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004038DE(C)
|
:004038F8 48                      dec eax
:004038F9 C1E803                  shr eax, 03
:004038FC 8B0C85FC977A00          mov ecx, dword ptr [4*eax+007A97FC]
:00403903 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:0040390A 890A                    mov dword ptr [edx], ecx
:0040390C 8910                    mov dword ptr [eax], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004038CC(C)
|
:0040390E 8B4C2408                mov ecx, dword ptr [esp+08]
:00403912 64890D00000000          mov dword ptr fs:[00000000], ecx
:00403919 83C414                  add esp, 00000014
:0040391C C3                      ret


:0040391D 90                      nop
:0040391E 90                      nop
:0040391F 90                      nop
:00403920 56                      push esi
:00403921 8BF1                    mov esi, ecx
:00403923 E8E8FDFFFF              call 00403710
:00403928 F644240801              test [esp+08], 01
:0040392D 7409                    je 00403938
:0040392F 56                      push esi
:00403930 E8CBD91D00              call 005E1300
:00403935 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040392D(C)
|
:00403938 8BC6                    mov eax, esi
:0040393A 5E                      pop esi
:0040393B C20400                  ret 0004


:0040393E 90                      nop
:0040393F 90                      nop
:00403940 53                      push ebx
:00403941 56                      push esi
:00403942 8BF1                    mov esi, ecx
:00403944 33DB                    xor ebx, ebx
:00403946 57                      push edi
:00403947 8B4E08                  mov ecx, dword ptr [esi+08]
:0040394A C70678877000            mov dword ptr [esi], 00708778
:00403950 3BCB                    cmp ecx, ebx
:00403952 7416                    je 0040396A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403968(C)
|
:00403954 8B791C                  mov edi, dword ptr [ecx+1C]
:00403957 3BCB                    cmp ecx, ebx
:00403959 89590C                  mov dword ptr [ecx+0C], ebx
:0040395C 7406                    je 00403964
:0040395E 8B01                    mov eax, dword ptr [ecx]
:00403960 6A01                    push 00000001
:00403962 FF10                    call dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040395C(C)
|
:00403964 3BFB                    cmp edi, ebx
:00403966 8BCF                    mov ecx, edi
:00403968 75EA                    jne 00403954

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403952(C)
|
:0040396A 8B4610                  mov eax, dword ptr [esi+10]
:0040396D 8B7E14                  mov edi, dword ptr [esi+14]
:00403970 3BC3                    cmp eax, ebx
:00403972 895E08                  mov dword ptr [esi+08], ebx
:00403975 895E0C                  mov dword ptr [esi+0C], ebx
:00403978 7403                    je 0040397D
:0040397A 89781C                  mov dword ptr [eax+1C], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403978(C)
|
:0040397D 3BFB                    cmp edi, ebx
:0040397F 7403                    je 00403984
:00403981 894718                  mov dword ptr [edi+18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040397F(C)
|
:00403984 8B4E04                  mov ecx, dword ptr [esi+04]
:00403987 3BCB                    cmp ecx, ebx
:00403989 742D                    je 004039B8
:0040398B 3BF3                    cmp esi, ebx
:0040398D 7405                    je 00403994
:0040398F 8D56F8                  lea edx, dword ptr [esi-08]
:00403992 EB02                    jmp 00403996

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040398D(C)
|
:00403994 33D2                    xor edx, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403992(U)
|
:00403996 55                      push ebp
:00403997 8B6914                  mov ebp, dword ptr [ecx+14]
:0040399A 3BEA                    cmp ebp, edx
:0040399C 5D                      pop ebp
:0040399D 7503                    jne 004039A2
:0040399F 894114                  mov dword ptr [ecx+14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040399D(C)
|
:004039A2 3BF3                    cmp esi, ebx
:004039A4 7405                    je 004039AB
:004039A6 8D4EF8                  lea ecx, dword ptr [esi-08]
:004039A9 EB02                    jmp 004039AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004039A4(C)
|
:004039AB 33C9                    xor ecx, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004039A9(U)
|
:004039AD 8B4604                  mov eax, dword ptr [esi+04]
:004039B0 394810                  cmp dword ptr [eax+10], ecx
:004039B3 7503                    jne 004039B8
:004039B5 897810                  mov dword ptr [eax+10], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403989(C), :004039B3(C)
|
:004039B8 8A442410                mov al, byte ptr [esp+10]
:004039BC 895E14                  mov dword ptr [esi+14], ebx
:004039BF A801                    test al, 01
:004039C1 895E10                  mov dword ptr [esi+10], ebx
:004039C4 895E04                  mov dword ptr [esi+04], ebx
:004039C7 7409                    je 004039D2
:004039C9 56                      push esi
:004039CA E831D91D00              call 005E1300
:004039CF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004039C7(C)
|
:004039D2 8BC6                    mov eax, esi
:004039D4 5F                      pop edi
:004039D5 5E                      pop esi
:004039D6 5B                      pop ebx
:004039D7 C20400                  ret 0004


:004039DA 90                      nop
:004039DB 90                      nop
:004039DC 90                      nop
:004039DD 90                      nop
:004039DE 90                      nop
:004039DF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CEF86(U), :00704D9B(U)
|
:004039E0 6AFF                    push FFFFFFFF
:004039E2 685BF06C00              push 006CF05B
:004039E7 64A100000000            mov eax, dword ptr fs:[00000000]
:004039ED 50                      push eax
:004039EE 64892500000000          mov dword ptr fs:[00000000], esp
:004039F5 51                      push ecx
:004039F6 894C2400                mov dword ptr [esp], ecx
:004039FA 8B11                    mov edx, dword ptr [ecx]
:004039FC C744240C00000000        mov [esp+0C], 00000000
:00403A04 85D2                    test edx, edx
:00403A06 7440                    je 00403A48
:00403A08 8B4108                  mov eax, dword ptr [ecx+08]
:00403A0B 2BC2                    sub eax, edx
:00403A0D C1F803                  sar eax, 03
:00403A10 C1E003                  shl eax, 03
:00403A13 3D80000000              cmp eax, 00000080
:00403A18 7618                    jbe 00403A32
:00403A1A 52                      push edx
:00403A1B E8E0D81D00              call 005E1300
:00403A20 83C404                  add esp, 00000004
:00403A23 8B4C2404                mov ecx, dword ptr [esp+04]
:00403A27 64890D00000000          mov dword ptr fs:[00000000], ecx
:00403A2E 83C410                  add esp, 00000010
:00403A31 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403A18(C)
|
:00403A32 48                      dec eax
:00403A33 C1E803                  shr eax, 03
:00403A36 8B0C85FC977A00          mov ecx, dword ptr [4*eax+007A97FC]
:00403A3D 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:00403A44 890A                    mov dword ptr [edx], ecx
:00403A46 8910                    mov dword ptr [eax], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403A06(C)
|
:00403A48 8B4C2404                mov ecx, dword ptr [esp+04]
:00403A4C 64890D00000000          mov dword ptr fs:[00000000], ecx
:00403A53 83C410                  add esp, 00000010
:00403A56 C3                      ret


:00403A57 90                      nop
:00403A58 90                      nop
:00403A59 90                      nop
:00403A5A 90                      nop
:00403A5B 90                      nop
:00403A5C 90                      nop
:00403A5D 90                      nop
:00403A5E 90                      nop
:00403A5F 90                      nop

* Referenced by a CALL at Address:
|:00402AE1   
|
:00403A60 8B442404                mov eax, dword ptr [esp+04]
:00403A64 8B09                    mov ecx, dword ptr [ecx]
:00403A66 8908                    mov dword ptr [eax], ecx
:00403A68 C20400                  ret 0004


:00403A6B 90                      nop
:00403A6C 90                      nop
:00403A6D 90                      nop
:00403A6E 90                      nop
:00403A6F 90                      nop

* Referenced by a CALL at Address:
|:00402AED   
|
:00403A70 8B44240C                mov eax, dword ptr [esp+0C]
:00403A74 50                      push eax
:00403A75 E886020000              call 00403D00
:00403A7A 8B4C2408                mov ecx, dword ptr [esp+08]
:00403A7E 8B5104                  mov edx, dword ptr [ecx+04]
:00403A81 8908                    mov dword ptr [eax], ecx
:00403A83 895004                  mov dword ptr [eax+04], edx
:00403A86 8902                    mov dword ptr [edx], eax
:00403A88 894104                  mov dword ptr [ecx+04], eax
:00403A8B 8B4C2404                mov ecx, dword ptr [esp+04]
:00403A8F 8901                    mov dword ptr [ecx], eax
:00403A91 8BC1                    mov eax, ecx
:00403A93 C20C00                  ret 000C


:00403A96 90                      nop
:00403A97 90                      nop
:00403A98 90                      nop
:00403A99 90                      nop
:00403A9A 90                      nop
:00403A9B 90                      nop
:00403A9C 90                      nop
:00403A9D 90                      nop
:00403A9E 90                      nop
:00403A9F 90                      nop

* Referenced by a CALL at Address:
|:004026A6   
|
:00403AA0 6AFF                    push FFFFFFFF
:00403AA2 6878F06C00              push 006CF078
:00403AA7 64A100000000            mov eax, dword ptr fs:[00000000]
:00403AAD 50                      push eax
:00403AAE 64892500000000          mov dword ptr fs:[00000000], esp
:00403AB5 83EC08                  sub esp, 00000008
:00403AB8 55                      push ebp
:00403AB9 8BE9                    mov ebp, ecx
:00403ABB 56                      push esi
:00403ABC 57                      push edi
:00403ABD 896C2410                mov dword ptr [esp+10], ebp
:00403AC1 C7450000000000          mov [ebp+00], 00000000
:00403AC8 A10C987A00              mov eax, dword ptr [007A980C]
:00403ACD C744241C00000000        mov [esp+1C], 00000000
:00403AD5 85C0                    test eax, eax
:00403AD7 740D                    je 00403AE6
:00403AD9 8B08                    mov ecx, dword ptr [eax]
:00403ADB 890D0C987A00            mov dword ptr [007A980C], ecx
:00403AE1 E93A010000              jmp 00403C20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403AD7(C)
|
:00403AE6 8B0D44987A00            mov ecx, dword ptr [007A9844]
:00403AEC 8B3D40987A00            mov edi, dword ptr [007A9840]
:00403AF2 2BCF                    sub ecx, edi
:00403AF4 BA14000000              mov edx, 00000014
:00403AF9 81F920030000            cmp ecx, 00000320
:00403AFF 8954240C                mov dword ptr [esp+0C], edx
:00403B03 7213                    jb 00403B18
:00403B05 8BC7                    mov eax, edi
:00403B07 81C720030000            add edi, 00000320
:00403B0D 893D40987A00            mov dword ptr [007A9840], edi
:00403B13 E9D9000000              jmp 00403BF1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403B03(C)
|
:00403B18 83F928                  cmp ecx, 00000028
:00403B1B 7221                    jb 00403B3E
:00403B1D B8CDCCCCCC              mov eax, CCCCCCCD
:00403B22 F7E1                    mul ecx
:00403B24 C1EA05                  shr edx, 05
:00403B27 8954240C                mov dword ptr [esp+0C], edx
:00403B2B 8BC7                    mov eax, edi
:00403B2D 8D0C92                  lea ecx, dword ptr [edx+4*edx]
:00403B30 8D0CCF                  lea ecx, dword ptr [edi+8*ecx]
:00403B33 890D40987A00            mov dword ptr [007A9840], ecx
:00403B39 E9AE000000              jmp 00403BEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403B1B(C)
|
:00403B3E 8B353C987A00            mov esi, dword ptr [007A983C]
:00403B44 C1EE04                  shr esi, 04
:00403B47 83C607                  add esi, 00000007
:00403B4A 83E6F8                  and esi, FFFFFFF8
:00403B4D 81C640060000            add esi, 00000640
:00403B53 85C9                    test ecx, ecx
:00403B55 761C                    jbe 00403B73
:00403B57 49                      dec ecx
:00403B58 C1E903                  shr ecx, 03
:00403B5B 8B148DFC977A00          mov edx, dword ptr [4*ecx+007A97FC]
:00403B62 8D048DFC977A00          lea eax, dword ptr [4*ecx+007A97FC]
:00403B69 8917                    mov dword ptr [edi], edx
:00403B6B 8B0D40987A00            mov ecx, dword ptr [007A9840]
:00403B71 8908                    mov dword ptr [eax], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403B55(C)
|
:00403B73 56                      push esi
:00403B74 E807D71D00              call 005E1280
:00403B79 83C404                  add esp, 00000004
:00403B7C A340987A00              mov dword ptr [007A9840], eax
:00403B81 85C0                    test eax, eax
:00403B83 753F                    jne 00403BC4
:00403B85 B928000000              mov ecx, 00000028

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403BAF(C)
|
:00403B8A 8D51FF                  lea edx, dword ptr [ecx-01]
:00403B8D C1EA03                  shr edx, 03
:00403B90 8B0495FC977A00          mov eax, dword ptr [4*edx+007A97FC]
:00403B97 8D1495FC977A00          lea edx, dword ptr [4*edx+007A97FC]
:00403B9E 85C0                    test eax, eax
:00403BA0 0F8598000000            jne 00403C3E
:00403BA6 83C108                  add ecx, 00000008
:00403BA9 81F980000000            cmp ecx, 00000080
:00403BAF 76D9                    jbe 00403B8A
:00403BB1 56                      push esi
:00403BB2 A344987A00              mov dword ptr [007A9844], eax
:00403BB7 E8C4D61D00              call 005E1280
:00403BBC 83C404                  add esp, 00000004
:00403BBF A340987A00              mov dword ptr [007A9840], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403B83(C)
|
:00403BC4 8B3D3C987A00            mov edi, dword ptr [007A983C]
:00403BCA 8D4C240C                lea ecx, dword ptr [esp+0C]
:00403BCE 03FE                    add edi, esi
:00403BD0 03C6                    add eax, esi
:00403BD2 893D3C987A00            mov dword ptr [007A983C], edi
:00403BD8 A344987A00              mov dword ptr [007A9844], eax
:00403BDD 51                      push ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403C53(U)
|
:00403BDE 6A28                    push 00000028
:00403BE0 E88B070000              call 00404370
:00403BE5 8B542414                mov edx, dword ptr [esp+14]
:00403BE9 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403B39(U)
|
:00403BEC 83FA01                  cmp edx, 00000001
:00403BEF 742F                    je 00403C20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403B13(U)
|
:00403BF1 8D4828                  lea ecx, dword ptr [eax+28]
:00403BF4 BF01000000              mov edi, 00000001
:00403BF9 890D0C987A00            mov dword ptr [007A980C], ecx
:00403BFF 8BF1                    mov esi, ecx
:00403C01 83C128                  add ecx, 00000028
:00403C04 4A                      dec edx
:00403C05 3BD7                    cmp edx, edi
:00403C07 7411                    je 00403C1A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403C18(C)
|
:00403C09 890E                    mov dword ptr [esi], ecx
:00403C0B 8B54240C                mov edx, dword ptr [esp+0C]
:00403C0F 8BF1                    mov esi, ecx
:00403C11 47                      inc edi
:00403C12 83C128                  add ecx, 00000028
:00403C15 4A                      dec edx
:00403C16 3BD7                    cmp edx, edi
:00403C18 75EF                    jne 00403C09

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403C07(C)
|
:00403C1A C70600000000            mov dword ptr [esi], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403AE1(U), :00403BEF(C)
|
:00403C20 8B4C2414                mov ecx, dword ptr [esp+14]
:00403C24 8900                    mov dword ptr [eax], eax
:00403C26 894004                  mov dword ptr [eax+04], eax
:00403C29 894500                  mov dword ptr [ebp+00], eax
:00403C2C 5F                      pop edi
:00403C2D 8BC5                    mov eax, ebp
:00403C2F 5E                      pop esi
:00403C30 5D                      pop ebp
:00403C31 64890D00000000          mov dword ptr fs:[00000000], ecx
:00403C38 83C414                  add esp, 00000014
:00403C3B C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403BA0(C)
|
:00403C3E 8B30                    mov esi, dword ptr [eax]
:00403C40 A340987A00              mov dword ptr [007A9840], eax
:00403C45 03C1                    add eax, ecx
:00403C47 8932                    mov dword ptr [edx], esi
:00403C49 A344987A00              mov dword ptr [007A9844], eax
:00403C4E 8D44240C                lea eax, dword ptr [esp+0C]
:00403C52 50                      push eax
:00403C53 EB89                    jmp 00403BDE
:00403C55 90                      nop
:00403C56 90                      nop
:00403C57 90                      nop
:00403C58 90                      nop
:00403C59 90                      nop
:00403C5A 90                      nop
:00403C5B 90                      nop
:00403C5C 90                      nop
:00403C5D 90                      nop
:00403C5E 90                      nop
:00403C5F 90                      nop

* Referenced by a CALL at Addresses:
|:00401FEF   , :0058B5A2   , :005F8784   , :00623646   , :006236A9   
|
:00403C60 8BC1                    mov eax, ecx
:00403C62 33C9                    xor ecx, ecx
:00403C64 8908                    mov dword ptr [eax], ecx
:00403C66 894804                  mov dword ptr [eax+04], ecx
:00403C69 894808                  mov dword ptr [eax+08], ecx
:00403C6C C20400                  ret 0004


:00403C6F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CEFCB(U), :006D1FE3(U), :006F25F3(U), :006FC6A3(U), :006FE7FE(U)
|:006FE813(U)
|
:00403C70 C3                      ret
:00403C71 90                      nop
:00403C72 90                      nop
:00403C73 90                      nop
:00403C74 90                      nop
:00403C75 90                      nop
:00403C76 90                      nop
:00403C77 90                      nop
:00403C78 90                      nop
:00403C79 90                      nop
:00403C7A 90                      nop
:00403C7B 90                      nop
:00403C7C 90                      nop
:00403C7D 90                      nop
:00403C7E 90                      nop
:00403C7F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CEF7E(U), :006CEFA6(U), :006CF056(U), :007046E4(U), :00704DAB(U)
|:00704DC6(U)
|
:00403C80 C3                      ret
:00403C81 90                      nop
:00403C82 90                      nop
:00403C83 90                      nop
:00403C84 90                      nop
:00403C85 90                      nop
:00403C86 90                      nop
:00403C87 90                      nop
:00403C88 90                      nop
:00403C89 90                      nop
:00403C8A 90                      nop
:00403C8B 90                      nop
:00403C8C 90                      nop
:00403C8D 90                      nop
:00403C8E 90                      nop
:00403C8F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CEDD7(U), :006CEF26(U), :006D6344(U), :006D64A6(U), :006DA532(U)
|:006DBED6(U), :006DCBB6(U), :006DCCAE(U), :006DCE8F(U), :006DCECF(U)
|:006DD12E(U), :006DD136(U), :006DD1CF(U), :006DDFEF(U), :006DE56F(U)
|:006DE59E(U), :006DE5CE(U), :006DE7F3(U), :006DE82E(U), :006DE866(U)
|:006DE88E(U), :006DE8C6(U), :006DE90E(U), :006DE946(U), :006DEC7E(U)
|:006DF0B5(U), :006DF0EE(U), :006DF0F9(U), :006DF104(U), :006DF2BE(U)
|:006DF2C6(U), :006DFC5E(U), :006DFC80(U), :006DFCAC(U), :006DFDCB(U)
|:006E07AF(U), :006E07B7(U), :006E08AC(U), :006E0B98(U), :006E0BAB(U)
|:006E0BBE(U), :006E2A50(U), :006E4963(U), :006E496B(U), :006E4973(U)
|:006E4D93(U), :006E5F5C(U), :006E6BF2(U), :006E8DF4(U), :006EA4A7(U)
|:006EA4C9(U), :006EA4E3(U), :006EA4EB(U), :006F1D82(U), :006F5C6E(U)
|:006F5C86(U), :006F5FEE(U), :006F6006(U), :006F63C9(U), :006F6758(U)
|:006F6760(U), :006F6812(U), :006F681A(U), :006F69E4(U), :006F69EC(U)
|:006F6A99(U), :006F6AA1(U), :006F6BA5(U), :006F6BAD(U), :006F6DD9(U)
|:006F6DE1(U), :006F6EB6(U), :006F7098(U), :006F70A0(U), :006F7108(U)
|:006F7110(U), :006F7118(U), :006F7120(U), :006F7128(U), :006F7130(U)
|:006F71F3(U), :006F71FB(U), :006F7285(U), :006F728D(U), :006F8327(U)
|:006F8337(U), :006F843B(U), :006F8443(U), :006F844B(U), :006F84F8(U)
|:006F87A9(U), :006F87B9(U), :006F87C9(U), :006F87D9(U), :006F87E1(U)
|
:00403C90 C3                      ret
:00403C91 90                      nop
:00403C92 90                      nop
:00403C93 90                      nop
:00403C94 90                      nop
:00403C95 90                      nop
:00403C96 90                      nop
:00403C97 90                      nop
:00403C98 90                      nop
:00403C99 90                      nop
:00403C9A 90                      nop
:00403C9B 90                      nop
:00403C9C 90                      nop
:00403C9D 90                      nop
:00403C9E 90                      nop
:00403C9F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CEF59(U), :006CF013(U), :006CF073(U)
|
:00403CA0 C3                      ret
:00403CA1 90                      nop
:00403CA2 90                      nop
:00403CA3 90                      nop
:00403CA4 90                      nop
:00403CA5 90                      nop
:00403CA6 90                      nop
:00403CA7 90                      nop
:00403CA8 90                      nop
:00403CA9 90                      nop
:00403CAA 90                      nop
:00403CAB 90                      nop
:00403CAC 90                      nop
:00403CAD 90                      nop
:00403CAE 90                      nop
:00403CAF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CEDDF(U), :006CF036(U), :006F128D(U), :006F89E0(U), :006F89F0(U)
|:006FE1E4(U), :007022B1(U), :007022BC(U), :00702336(U)
|
:00403CB0 C3                      ret
:00403CB1 90                      nop
:00403CB2 90                      nop
:00403CB3 90                      nop
:00403CB4 90                      nop
:00403CB5 90                      nop
:00403CB6 90                      nop
:00403CB7 90                      nop
:00403CB8 90                      nop
:00403CB9 90                      nop
:00403CBA 90                      nop
:00403CBB 90                      nop
:00403CBC 90                      nop
:00403CBD 90                      nop
:00403CBE 90                      nop
:00403CBF 90                      nop

* Referenced by a CALL at Addresses:
|:00402426   , :00481886   , :004936E5   , :0049B04D   , :004A5EDE   
|:004B40DF   , :005AEAC1   , :005B7BAC   , :005B82A4   , :005B83E7   
|:005B844B   , :005C01FB   , :005C0E10   , :005C22F2   , :005C2397   
|:005C246F   
|
:00403CC0 8B4C2404                mov ecx, dword ptr [esp+04]
:00403CC4 85C9                    test ecx, ecx
:00403CC6 7430                    je 00403CF8
:00403CC8 8B442408                mov eax, dword ptr [esp+08]
:00403CCC C1E002                  shl eax, 02
:00403CCF 3D80000000              cmp eax, 00000080
:00403CD4 760C                    jbe 00403CE2
:00403CD6 51                      push ecx
:00403CD7 E824D61D00              call 005E1300
:00403CDC 83C404                  add esp, 00000004
:00403CDF C20800                  ret 0008



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403CD4(C)
|
:00403CE2 48                      dec eax
:00403CE3 C1E803                  shr eax, 03
:00403CE6 8B1485FC977A00          mov edx, dword ptr [4*eax+007A97FC]
:00403CED 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:00403CF4 8911                    mov dword ptr [ecx], edx
:00403CF6 8908                    mov dword ptr [eax], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403CC6(C)
|
:00403CF8 C20800                  ret 0008
:00403CFB 90                      nop
:00403CFC 90                      nop
:00403CFD 90                      nop
:00403CFE 90                      nop
:00403CFF 90                      nop

* Referenced by a CALL at Address:
|:00403A75   
|
:00403D00 51                      push ecx
:00403D01 A10C987A00              mov eax, dword ptr [007A980C]
:00403D06 56                      push esi
:00403D07 85C0                    test eax, eax
:00403D09 57                      push edi
:00403D0A 740A                    je 00403D16
:00403D0C 8B08                    mov ecx, dword ptr [eax]
:00403D0E 890D0C987A00            mov dword ptr [007A980C], ecx
:00403D14 EB4F                    jmp 00403D65

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403D0A(C)
|
:00403D16 8D542408                lea edx, dword ptr [esp+08]
:00403D1A C744240814000000        mov [esp+08], 00000014
:00403D22 52                      push edx
:00403D23 6A28                    push 00000028
:00403D25 E846060000              call 00404370
:00403D2A 8B7C2410                mov edi, dword ptr [esp+10]
:00403D2E 83C408                  add esp, 00000008
:00403D31 83FF01                  cmp edi, 00000001
:00403D34 742F                    je 00403D65
:00403D36 8D4828                  lea ecx, dword ptr [eax+28]
:00403D39 BE01000000              mov esi, 00000001
:00403D3E 890D0C987A00            mov dword ptr [007A980C], ecx
:00403D44 8BD1                    mov edx, ecx
:00403D46 83C128                  add ecx, 00000028
:00403D49 4F                      dec edi
:00403D4A 3BFE                    cmp edi, esi
:00403D4C 7411                    je 00403D5F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403D5D(C)
|
:00403D4E 890A                    mov dword ptr [edx], ecx
:00403D50 8B7C2408                mov edi, dword ptr [esp+08]
:00403D54 8BD1                    mov edx, ecx
:00403D56 46                      inc esi
:00403D57 83C128                  add ecx, 00000028
:00403D5A 4F                      dec edi
:00403D5B 3BFE                    cmp edi, esi
:00403D5D 75EF                    jne 00403D4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403D4C(C)
|
:00403D5F C70200000000            mov dword ptr [edx], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403D14(U), :00403D34(C)
|
:00403D65 8D4808                  lea ecx, dword ptr [eax+08]
:00403D68 85C9                    test ecx, ecx
:00403D6A 742C                    je 00403D98
:00403D6C 8B542410                mov edx, dword ptr [esp+10]
:00403D70 8B32                    mov esi, dword ptr [edx]
:00403D72 8931                    mov dword ptr [ecx], esi
:00403D74 8B7204                  mov esi, dword ptr [edx+04]
:00403D77 897104                  mov dword ptr [ecx+04], esi
:00403D7A 8B7208                  mov esi, dword ptr [edx+08]
:00403D7D 897108                  mov dword ptr [ecx+08], esi
:00403D80 8B720C                  mov esi, dword ptr [edx+0C]
:00403D83 89710C                  mov dword ptr [ecx+0C], esi
:00403D86 8B7210                  mov esi, dword ptr [edx+10]
:00403D89 897110                  mov dword ptr [ecx+10], esi
:00403D8C 8B7214                  mov esi, dword ptr [edx+14]
:00403D8F 897114                  mov dword ptr [ecx+14], esi
:00403D92 8B5218                  mov edx, dword ptr [edx+18]
:00403D95 895118                  mov dword ptr [ecx+18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403D6A(C)
|
:00403D98 5F                      pop edi
:00403D99 5E                      pop esi
:00403D9A 59                      pop ecx
:00403D9B C20400                  ret 0004


:00403D9E 90                      nop
:00403D9F 90                      nop
:00403DA0 56                      push esi
:00403DA1 8BF1                    mov esi, ecx
:00403DA3 33D2                    xor edx, edx
:00403DA5 8B4604                  mov eax, dword ptr [esi+04]
:00403DA8 8B4E08                  mov ecx, dword ptr [esi+08]
:00403DAB 3BC2                    cmp eax, edx
:00403DAD C7066C837000            mov dword ptr [esi], 0070836C
:00403DB3 7403                    je 00403DB8
:00403DB5 894808                  mov dword ptr [eax+08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403DB3(C)
|
:00403DB8 3BCA                    cmp ecx, edx
:00403DBA 7403                    je 00403DBF
:00403DBC 894104                  mov dword ptr [ecx+04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403DBA(C)
|
:00403DBF 8A442408                mov al, byte ptr [esp+08]
:00403DC3 895608                  mov dword ptr [esi+08], edx
:00403DC6 A801                    test al, 01
:00403DC8 895604                  mov dword ptr [esi+04], edx
:00403DCB 7409                    je 00403DD6
:00403DCD 56                      push esi
:00403DCE E82DD51D00              call 005E1300
:00403DD3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403DCB(C)
|
:00403DD6 8BC6                    mov eax, esi
:00403DD8 5E                      pop esi
:00403DD9 C20400                  ret 0004


:00403DDC 90                      nop
:00403DDD 90                      nop
:00403DDE 90                      nop
:00403DDF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CECAB(U), :006CECB3(U), :006CECBE(U), :006CEFE3(U), :006CEFEB(U)
|:006CEFF6(U), :006FC8D3(U), :006FC8ED(U), :00704CA3(U), :00704CE5(U)
|:00704CF0(U), :00704D03(U), :00704D0E(U)
|
:00403DE0 8B4104                  mov eax, dword ptr [ecx+04]
:00403DE3 8B5108                  mov edx, dword ptr [ecx+08]
:00403DE6 56                      push esi
:00403DE7 33F6                    xor esi, esi
:00403DE9 3BC6                    cmp eax, esi
:00403DEB C7016C837000            mov dword ptr [ecx], 0070836C
:00403DF1 7403                    je 00403DF6
:00403DF3 895008                  mov dword ptr [eax+08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403DF1(C)
|
:00403DF6 3BD6                    cmp edx, esi
:00403DF8 7403                    je 00403DFD
:00403DFA 894204                  mov dword ptr [edx+04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403DF8(C)
|
:00403DFD 897108                  mov dword ptr [ecx+08], esi
:00403E00 897104                  mov dword ptr [ecx+04], esi
:00403E03 5E                      pop esi
:00403E04 C3                      ret


:00403E05 90                      nop
:00403E06 90                      nop
:00403E07 90                      nop
:00403E08 90                      nop
:00403E09 90                      nop
:00403E0A 90                      nop
:00403E0B 90                      nop
:00403E0C 90                      nop
:00403E0D 90                      nop
:00403E0E 90                      nop
:00403E0F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CECE9(U), :006CECF4(U), :006CECFF(U), :006CED3F(U), :006CED4A(U)
|:006D0FAD(U), :006D0FFD(U), :006D145D(U), :006D146B(U), :006D1791(U)
|:006D17B9(U), :006D17E1(U), :006D26C5(U), :006D2724(U), :006D2B77(U)
|:006D2B85(U), :006D2BA7(U), :006D35CA(U), :006D3641(U), :006D3661(U)
|:006D36C1(U), :006D36E9(U), :006D4A1E(U), :006D59D9(U), :006D59E7(U)
|:006D59F5(U), :006D5A03(U), :006D5A11(U), :006D5A1F(U), :006D5A2D(U)
|:006D5A3B(U), :006D5C5F(U), :006D5C6D(U), :006D5C7B(U), :006D5C89(U)
|:006D5C97(U), :006D5CA5(U), :006D5CB3(U), :006D7B86(U), :006D7B94(U)
|:006D7C41(U), :006D7C4F(U), :006D8519(U), :006D9779(U), :006D9787(U)
|:006D9795(U), :006D97A3(U), :006D97B1(U), :006D97BF(U), :006D97CD(U)
|:006D999C(U), :006D99AA(U), :006D99B8(U), :006D99C6(U), :006D99D4(U)
|:006D99E2(U), :006D99F0(U), :006DAB6D(U), :006DAB7B(U), :006DAC71(U)
|:006DAC7F(U), :006DB484(U), :006DB67E(U), :006DB874(U), :006DB8ED(U)
|:006DBC5D(U), :006DD9E7(U), :006DDC82(U), :006EFDD4(U), :006EFE28(U)
|:006F12F1(U), :006F12FF(U), :006F13C0(U), :006F1553(U), :006F1E3C(U)
|:006F1EA6(U), :006F1F29(U), :006F1F91(U), :006F1FA7(U), :006F2041(U)
|:006F234F(U), :006FEB31(U), :006FEB3F(U), :006FEB67(U), :006FEB75(U)
|:006FFE36(U), :006FFE44(U)
|
:00403E10 8B09                    mov ecx, dword ptr [ecx]
:00403E12 85C9                    test ecx, ecx
:00403E14 7405                    je 00403E1B
:00403E16 8B01                    mov eax, dword ptr [ecx]
:00403E18 FF6004                  jmp [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E14(C)
|
:00403E1B C3                      ret
:00403E1C 90                      nop
:00403E1D 90                      nop
:00403E1E 90                      nop
:00403E1F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CEDFC(U), :006CF82E(U), :006D13DE(U), :006D18A6(U), :006D1934(U)
|:006D1BE5(U), :006D200E(U), :006D2AF8(U), :006D2BDF(U), :006D3335(U)
|:006D3492(U), :006D3736(U), :006D3B14(U), :006D43BE(U), :006D5E16(U)
|:006D657E(U), :006D664C(U), :006D6730(U), :006D6B26(U), :006D6E5F(U)
|:006D7176(U), :006D7CAE(U), :006D8470(U), :006D8E39(U), :006D944E(U)
|:006D9AEE(U), :006D9CD6(U), :006D9E3E(U), :006DA14D(U), :006DA6CE(U)
|:006DAAEE(U), :006DAD19(U), :006DAF92(U), :006DB27C(U), :006DB4ED(U)
|:006DB6D4(U), :006EEA86(U), :006EEEC5(U), :006EF14E(U), :006F0DAE(U)
|:006F10B6(U), :006F11CE(U), :006F14B8(U), :006F15FA(U), :006F16F3(U)
|:006F1DAF(U), :006F2566(U), :006F2817(U), :006F2BA8(U), :006F2DEC(U)
|:006F317D(U), :006F33C7(U), :006F396A(U), :006F3BF8(U), :006F42E1(U)
|:006F4699(U), :006F4A41(U), :006FB07E(U), :006FB20E(U), :006FB6EC(U)
|:006FB7E8(U), :006FBB43(U), :006FBC0B(U), :006FBEC7(U), :006FC187(U)
|:006FC266(U), :006FC337(U), :006FC417(U), :006FC51B(U), :006FE6EA(U)
|:006FE846(U), :006FE924(U), :006FEA02(U), :006FEBB4(U), :006FED26(U)
|:006FEDCA(U), :006FEEF6(U), :006FEF84(U), :006FF0A8(U), :006FF186(U)
|:006FFAE6(U), :006FFB8A(U), :006FFC2E(U), :006FFD06(U), :006FFEC6(U)
|:00701626(U), :0070187E(U), :00701922(U), :007019FC(U), :00701CB6(U)
|:00701E26(U), :007023A6(U), :007024FA(U), :007026D6(U), :007029C6(U)
|:007031C6(U), :0070365E(U), :007036ED(U), :007037FE(U), :00703943(U)
|:00703A30(U)
|
:00403E20 53                      push ebx
:00403E21 56                      push esi
:00403E22 8BF1                    mov esi, ecx
:00403E24 33DB                    xor ebx, ebx
:00403E26 57                      push edi
:00403E27 8B4E08                  mov ecx, dword ptr [esi+08]
:00403E2A C70678877000            mov dword ptr [esi], 00708778
:00403E30 3BCB                    cmp ecx, ebx
:00403E32 7416                    je 00403E4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E48(C)
|
:00403E34 8B791C                  mov edi, dword ptr [ecx+1C]
:00403E37 3BCB                    cmp ecx, ebx
:00403E39 89590C                  mov dword ptr [ecx+0C], ebx
:00403E3C 7406                    je 00403E44
:00403E3E 8B01                    mov eax, dword ptr [ecx]
:00403E40 6A01                    push 00000001
:00403E42 FF10                    call dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E3C(C)
|
:00403E44 3BFB                    cmp edi, ebx
:00403E46 8BCF                    mov ecx, edi
:00403E48 75EA                    jne 00403E34

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E32(C)
|
:00403E4A 8B4610                  mov eax, dword ptr [esi+10]
:00403E4D 8B7E14                  mov edi, dword ptr [esi+14]
:00403E50 3BC3                    cmp eax, ebx
:00403E52 895E08                  mov dword ptr [esi+08], ebx
:00403E55 895E0C                  mov dword ptr [esi+0C], ebx
:00403E58 7403                    je 00403E5D
:00403E5A 89781C                  mov dword ptr [eax+1C], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E58(C)
|
:00403E5D 3BFB                    cmp edi, ebx
:00403E5F 7403                    je 00403E64
:00403E61 894718                  mov dword ptr [edi+18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E5F(C)
|
:00403E64 8B4E04                  mov ecx, dword ptr [esi+04]
:00403E67 3BCB                    cmp ecx, ebx
:00403E69 742D                    je 00403E98
:00403E6B 3BF3                    cmp esi, ebx
:00403E6D 7405                    je 00403E74
:00403E6F 8D56F8                  lea edx, dword ptr [esi-08]
:00403E72 EB02                    jmp 00403E76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E6D(C)
|
:00403E74 33D2                    xor edx, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E72(U)
|
:00403E76 55                      push ebp
:00403E77 8B6914                  mov ebp, dword ptr [ecx+14]
:00403E7A 3BEA                    cmp ebp, edx
:00403E7C 5D                      pop ebp
:00403E7D 7503                    jne 00403E82
:00403E7F 894114                  mov dword ptr [ecx+14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E7D(C)
|
:00403E82 3BF3                    cmp esi, ebx
:00403E84 7405                    je 00403E8B
:00403E86 8D4EF8                  lea ecx, dword ptr [esi-08]
:00403E89 EB02                    jmp 00403E8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E84(C)
|
:00403E8B 33C9                    xor ecx, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E89(U)
|
:00403E8D 8B4604                  mov eax, dword ptr [esi+04]
:00403E90 394810                  cmp dword ptr [eax+10], ecx
:00403E93 7503                    jne 00403E98
:00403E95 897810                  mov dword ptr [eax+10], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403E69(C), :00403E93(C)
|
:00403E98 895E14                  mov dword ptr [esi+14], ebx
:00403E9B 895E10                  mov dword ptr [esi+10], ebx
:00403E9E 895E04                  mov dword ptr [esi+04], ebx
:00403EA1 5F                      pop edi
:00403EA2 5E                      pop esi
:00403EA3 5B                      pop ebx
:00403EA4 C3                      ret


:00403EA5 90                      nop
:00403EA6 90                      nop
:00403EA7 90                      nop
:00403EA8 90                      nop
:00403EA9 90                      nop
:00403EAA 90                      nop
:00403EAB 90                      nop
:00403EAC 90                      nop
:00403EAD 90                      nop
:00403EAE 90                      nop
:00403EAF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CECD3(U), :006CECDE(U), :006CED29(U), :006CED34(U), :006CF293(U)
|:006CF34E(U), :006D2BAF(U), :006F0E2D(U), :006F1031(U), :006FE098(U)
|
:00403EB0 8B09                    mov ecx, dword ptr [ecx]
:00403EB2 85C9                    test ecx, ecx
:00403EB4 7405                    je 00403EBB
:00403EB6 8B01                    mov eax, dword ptr [ecx]
:00403EB8 FF6004                  jmp [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403EB4(C)
|
:00403EBB C3                      ret
:00403EBC 90                      nop
:00403EBD 90                      nop
:00403EBE 90                      nop
:00403EBF 90                      nop
:00403EC0 51                      push ecx
:00403EC1 A128FE7200              mov eax, dword ptr [0072FE28]
:00403EC6 56                      push esi
:00403EC7 8B74240C                mov esi, dword ptr [esp+0C]
:00403ECB 50                      push eax

* Possible StringData Ref from Data Obj ->"Image"
                                  |
:00403ECC 68D0B17800              push 0078B1D0
:00403ED1 8BCE                    mov ecx, esi
:00403ED3 C744240C00000000        mov [esp+0C], 00000000
:00403EDB E8D0711E00              call 005EB0B0
:00403EE0 8BC6                    mov eax, esi
:00403EE2 5E                      pop esi
:00403EE3 59                      pop ecx
:00403EE4 C20400                  ret 0004


:00403EE7 90                      nop
:00403EE8 90                      nop
:00403EE9 90                      nop
:00403EEA 90                      nop
:00403EEB 90                      nop
:00403EEC 90                      nop
:00403EED 90                      nop
:00403EEE 90                      nop
:00403EEF 90                      nop
:00403EF0 B001                    mov al, 01
:00403EF2 C3                      ret


:00403EF3 90                      nop
:00403EF4 90                      nop
:00403EF5 90                      nop
:00403EF6 90                      nop
:00403EF7 90                      nop
:00403EF8 90                      nop
:00403EF9 90                      nop
:00403EFA 90                      nop
:00403EFB 90                      nop
:00403EFC 90                      nop
:00403EFD 90                      nop
:00403EFE 90                      nop
:00403EFF 90                      nop
:00403F00 C3                      ret


:00403F01 90                      nop
:00403F02 90                      nop
:00403F03 90                      nop
:00403F04 90                      nop
:00403F05 90                      nop
:00403F06 90                      nop
:00403F07 90                      nop
:00403F08 90                      nop
:00403F09 90                      nop
:00403F0A 90                      nop
:00403F0B 90                      nop
:00403F0C 90                      nop
:00403F0D 90                      nop
:00403F0E 90                      nop
:00403F0F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0061BF05(U), :006CED6F(U), :006CED9A(U), :006CF2E5(U), :006F0FC1(U)
|:006FD193(U), :006FD1C0(U), :006FD1ED(U), :006FD222(U), :006FD289(U)
|:006FD2A6(U), :006FD38A(U), :006FD530(U), :006FD55D(U), :006FD58A(U)
|:006FD5BF(U), :006FD5F4(U), :006FD6C6(U), :006FE07A(U), :00701456(U)
|:00701502(U), :007015CB(U), :0070268A(U), :00702FB4(U), :00703143(U)
|:00703196(U), :0070421F(U), :007047EF(U), :00704946(U), :00704A13(U)
|:00704B08(U), :00704B37(U), :00704B66(U), :00704BA1(U), :00704BC4(U)
|:00704C09(U), :00704C2C(U), :00704D36(U), :007066AB(U), :007066E1(U)
|:00706729(U), :00706739(U), :00706749(U), :00706759(U), :00707008(U)
|:0070708D(U), :00707522(U), :007075BA(U), :00707A61(U), :00707AA9(U)
|:00707AF1(U), :00707B39(U), :00707BE1(U), :00707C29(U), :00707C71(U)
|:00707CB9(U)
|
:00403F10 8B4104                  mov eax, dword ptr [ecx+04]
:00403F13 8B48F4                  mov ecx, dword ptr [eax-0C]
:00403F16 83E80C                  sub eax, 0000000C
:00403F19 49                      dec ecx
:00403F1A 8908                    mov dword ptr [eax], ecx
:00403F1C 7507                    jne 00403F25
:00403F1E 50                      push eax
:00403F1F E8DCD31D00              call 005E1300
:00403F24 59                      pop ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403F1C(C)
|
:00403F25 C3                      ret
:00403F26 90                      nop
:00403F27 90                      nop
:00403F28 90                      nop
:00403F29 90                      nop
:00403F2A 90                      nop
:00403F2B 90                      nop
:00403F2C 90                      nop
:00403F2D 90                      nop
:00403F2E 90                      nop
:00403F2F 90                      nop
:00403F30 56                      push esi
:00403F31 8BF1                    mov esi, ecx
:00403F33 E8A8000000              call 00403FE0
:00403F38 F644240801              test [esp+08], 01
:00403F3D 7409                    je 00403F48
:00403F3F 56                      push esi
:00403F40 E8BBD31D00              call 005E1300
:00403F45 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403F3D(C)
|
:00403F48 8BC6                    mov eax, esi
:00403F4A 5E                      pop esi
:00403F4B C20400                  ret 0004


:00403F4E 90                      nop
:00403F4F 90                      nop
:00403F50 56                      push esi
:00403F51 8BF1                    mov esi, ecx
:00403F53 E818000000              call 00403F70
:00403F58 F644240801              test [esp+08], 01
:00403F5D 7409                    je 00403F68
:00403F5F 56                      push esi
:00403F60 E89BD31D00              call 005E1300
:00403F65 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403F5D(C)
|
:00403F68 8BC6                    mov eax, esi
:00403F6A 5E                      pop esi
:00403F6B C20400                  ret 0004


:00403F6E 90                      nop
:00403F6F 90                      nop

* Referenced by a CALL at Address:
|:00403F53   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:007066D1(U), :00707A93(U), :00707B93(U), :00707C13(U), :00707D13(U)
|
:00403F70 6AFF                    push FFFFFFFF
:00403F72 6898F06C00              push 006CF098
:00403F77 64A100000000            mov eax, dword ptr fs:[00000000]
:00403F7D 50                      push eax
:00403F7E 64892500000000          mov dword ptr fs:[00000000], esp
:00403F85 51                      push ecx
:00403F86 56                      push esi
:00403F87 8BF1                    mov esi, ecx
:00403F89 89742404                mov dword ptr [esp+04], esi
:00403F8D C70604847000            mov dword ptr [esi], 00708404
:00403F93 8B4633                  mov eax, dword ptr [esi+33]
:00403F96 C744241000000000        mov [esp+10], 00000000
:00403F9E 85C0                    test eax, eax
:00403FA0 7410                    je 00403FB2
:00403FA2 50                      push eax
:00403FA3 E858D31D00              call 005E1300
:00403FA8 83C404                  add esp, 00000004
:00403FAB C7463300000000          mov [esi+33], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403FA0(C)
|
:00403FB2 8BCE                    mov ecx, esi
:00403FB4 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00403FBC E83F9F1E00              call 005EDF00
:00403FC1 8B4C2408                mov ecx, dword ptr [esp+08]
:00403FC5 5E                      pop esi
:00403FC6 64890D00000000          mov dword ptr fs:[00000000], ecx
:00403FCD 83C410                  add esp, 00000010
:00403FD0 C3                      ret


:00403FD1 90                      nop
:00403FD2 90                      nop
:00403FD3 90                      nop
:00403FD4 90                      nop
:00403FD5 90                      nop
:00403FD6 90                      nop
:00403FD7 90                      nop
:00403FD8 90                      nop
:00403FD9 90                      nop
:00403FDA 90                      nop
:00403FDB 90                      nop
:00403FDC 90                      nop
:00403FDD 90                      nop
:00403FDE 90                      nop
:00403FDF 90                      nop

* Referenced by a CALL at Address:
|:00403F33   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CED7F(U), :006CEDAA(U), :006CF2F5(U), :006F0FD1(U), :006FD1FD(U)
|:006FD232(U), :006FD59A(U), :006FD5CF(U), :006FD604(U), :006FE090(U)
|:00701466(U), :00704956(U), :00704B7C(U), :0070709D(U), :00707ADB(U)
|:00707B73(U), :00707C5B(U), :00707CF3(U)
|
:00403FE0 6AFF                    push FFFFFFFF
:00403FE2 68B8F06C00              push 006CF0B8
:00403FE7 64A100000000            mov eax, dword ptr fs:[00000000]
:00403FED 50                      push eax
:00403FEE 64892500000000          mov dword ptr fs:[00000000], esp
:00403FF5 51                      push ecx
:00403FF6 56                      push esi
:00403FF7 8BF1                    mov esi, ecx
:00403FF9 89742404                mov dword ptr [esp+04], esi
:00403FFD C70604847000            mov dword ptr [esi], 00708404
:00404003 8B4633                  mov eax, dword ptr [esi+33]
:00404006 C744241000000000        mov [esp+10], 00000000
:0040400E 85C0                    test eax, eax
:00404010 7410                    je 00404022
:00404012 50                      push eax
:00404013 E8E8D21D00              call 005E1300
:00404018 83C404                  add esp, 00000004
:0040401B C7463300000000          mov [esi+33], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404010(C)
|
:00404022 8BCE                    mov ecx, esi
:00404024 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:0040402C E8CF9E1E00              call 005EDF00
:00404031 8B4C2408                mov ecx, dword ptr [esp+08]
:00404035 5E                      pop esi
:00404036 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040403D 83C410                  add esp, 00000010
:00404040 C3                      ret


:00404041 90                      nop
:00404042 90                      nop
:00404043 90                      nop
:00404044 90                      nop
:00404045 90                      nop
:00404046 90                      nop
:00404047 90                      nop
:00404048 90                      nop
:00404049 90                      nop
:0040404A 90                      nop
:0040404B 90                      nop
:0040404C 90                      nop
:0040404D 90                      nop
:0040404E 90                      nop
:0040404F 90                      nop
:00404050 8BC1                    mov eax, ecx
:00404052 53                      push ebx
:00404053 8B4C240C                mov ecx, dword ptr [esp+0C]
:00404057 56                      push esi
:00404058 8B502F                  mov edx, dword ptr [eax+2F]
:0040405B 8B5819                  mov ebx, dword ptr [eax+19]
:0040405E 0FAF5104                imul edx, dword ptr [ecx+04]
:00404062 8B09                    mov ecx, dword ptr [ecx]
:00404064 8D148A                  lea edx, dword ptr [edx+4*ecx]
:00404067 8B4833                  mov ecx, dword ptr [eax+33]
:0040406A 8B340A                  mov esi, dword ptr [edx+ecx]
:0040406D 8B501D                  mov edx, dword ptr [eax+1D]
:00404070 8A4826                  mov cl, byte ptr [eax+26]
:00404073 23D6                    and edx, esi
:00404075 D3EA                    shr edx, cl
:00404077 33C9                    xor ecx, ecx
:00404079 23DE                    and ebx, esi
:0040407B 8A4829                  mov cl, byte ptr [eax+29]
:0040407E D2E2                    shl dl, cl
:00404080 8A4825                  mov cl, byte ptr [eax+25]
:00404083 D3EB                    shr ebx, cl
:00404085 33C9                    xor ecx, ecx
:00404087 8A4828                  mov cl, byte ptr [eax+28]
:0040408A 81E2FF000000            and edx, 000000FF
:00404090 D2E3                    shl bl, cl
:00404092 8A4827                  mov cl, byte ptr [eax+27]
:00404095 81E3FF000000            and ebx, 000000FF
:0040409B 895C2410                mov dword ptr [esp+10], ebx
:0040409F 8B5821                  mov ebx, dword ptr [eax+21]
:004040A2 23DE                    and ebx, esi
:004040A4 5E                      pop esi
:004040A5 D3EB                    shr ebx, cl
:004040A7 33C9                    xor ecx, ecx
:004040A9 8A482A                  mov cl, byte ptr [eax+2A]
:004040AC 8B442408                mov eax, dword ptr [esp+08]
:004040B0 D2E3                    shl bl, cl
:004040B2 885001                  mov byte ptr [eax+01], dl
:004040B5 8A54240C                mov dl, byte ptr [esp+0C]
:004040B9 885002                  mov byte ptr [eax+02], dl
:004040BC C64003FF                mov [eax+03], FF
:004040C0 8818                    mov byte ptr [eax], bl
:004040C2 5B                      pop ebx
:004040C3 C20800                  ret 0008


:004040C6 90                      nop
:004040C7 90                      nop
:004040C8 90                      nop
:004040C9 90                      nop
:004040CA 90                      nop
:004040CB 90                      nop
:004040CC 90                      nop
:004040CD 90                      nop
:004040CE 90                      nop
:004040CF 90                      nop
:004040D0 8B542408                mov edx, dword ptr [esp+08]
:004040D4 8BC1                    mov eax, ecx
:004040D6 33C9                    xor ecx, ecx
:004040D8 56                      push esi
:004040D9 8A4A01                  mov cl, byte ptr [edx+01]
:004040DC 57                      push edi
:004040DD 8BF1                    mov esi, ecx
:004040DF 8A4829                  mov cl, byte ptr [eax+29]
:004040E2 D3EE                    shr esi, cl
:004040E4 8A4826                  mov cl, byte ptr [eax+26]
:004040E7 D3E6                    shl esi, cl
:004040E9 8B481D                  mov ecx, dword ptr [eax+1D]
:004040EC 23F1                    and esi, ecx
:004040EE 33C9                    xor ecx, ecx
:004040F0 8A4A02                  mov cl, byte ptr [edx+02]
:004040F3 8BF9                    mov edi, ecx
:004040F5 8A4828                  mov cl, byte ptr [eax+28]
:004040F8 D3EF                    shr edi, cl
:004040FA 8A4825                  mov cl, byte ptr [eax+25]
:004040FD D3E7                    shl edi, cl
:004040FF 8B4819                  mov ecx, dword ptr [eax+19]
:00404102 23F9                    and edi, ecx
:00404104 33C9                    xor ecx, ecx
:00404106 8A0A                    mov cl, byte ptr [edx]
:00404108 0BF7                    or esi, edi
:0040410A 8BD1                    mov edx, ecx
:0040410C 8A482A                  mov cl, byte ptr [eax+2A]
:0040410F D3EA                    shr edx, cl
:00404111 8A4827                  mov cl, byte ptr [eax+27]
:00404114 8B7821                  mov edi, dword ptr [eax+21]
:00404117 D3E2                    shl edx, cl
:00404119 8B4C240C                mov ecx, dword ptr [esp+0C]
:0040411D 23D7                    and edx, edi
:0040411F 5F                      pop edi
:00404120 0BF2                    or esi, edx
:00404122 8B502F                  mov edx, dword ptr [eax+2F]
:00404125 0FAF5104                imul edx, dword ptr [ecx+04]
:00404129 8B09                    mov ecx, dword ptr [ecx]
:0040412B 8B4033                  mov eax, dword ptr [eax+33]
:0040412E 8D148A                  lea edx, dword ptr [edx+4*ecx]
:00404131 893402                  mov dword ptr [edx+eax], esi
:00404134 5E                      pop esi
:00404135 C20800                  ret 0008


:00404138 90                      nop
:00404139 90                      nop
:0040413A 90                      nop
:0040413B 90                      nop
:0040413C 90                      nop
:0040413D 90                      nop
:0040413E 90                      nop
:0040413F 90                      nop
:00404140 8B442408                mov eax, dword ptr [esp+08]
:00404144 8B512F                  mov edx, dword ptr [ecx+2F]
:00404147 0FAF5004                imul edx, dword ptr [eax+04]
:0040414B 8B00                    mov eax, dword ptr [eax]
:0040414D 8D1482                  lea edx, dword ptr [edx+4*eax]
:00404150 8B4133                  mov eax, dword ptr [ecx+33]
:00404153 8B0C02                  mov ecx, dword ptr [edx+eax]
:00404156 8B442404                mov eax, dword ptr [esp+04]
:0040415A 8908                    mov dword ptr [eax], ecx
:0040415C C20800                  ret 0008


:0040415F 90                      nop
:00404160 8B442404                mov eax, dword ptr [esp+04]
:00404164 8B512F                  mov edx, dword ptr [ecx+2F]
:00404167 0FAF5004                imul edx, dword ptr [eax+04]
:0040416B 8B00                    mov eax, dword ptr [eax]
:0040416D 8D1482                  lea edx, dword ptr [edx+4*eax]
:00404170 8B4133                  mov eax, dword ptr [ecx+33]
:00404173 8B4C2408                mov ecx, dword ptr [esp+08]
:00404177 8B09                    mov ecx, dword ptr [ecx]
:00404179 890C02                  mov dword ptr [edx+eax], ecx
:0040417C C20800                  ret 0008


:0040417F 90                      nop

* Referenced by a CALL at Addresses:
|:00403462   , :0040664F   , :00406AA5   , :00425475   , :0042595F   
|:00425B16   , :004379E0   , :00447334   , :0045FB2F   , :00464DC2   
|:0046E031   , :0046E36F   , :0046E6FF   , :0047291F   , :00478192   
|:00479828   , :00479B26   , :00479C23   , :0047AAA4   , :0047AD56   
|:0047AF92   , :0047B1B5   , :0047B29B   , :0047BBB1   , :0047C57D   
|:0047FA2F   , :004855C5   , :00487637   , :0048A7EF   , :0048AAEF   
|:0048B311   , :00492747   , :00493F11   , :0049414F   , :00494245   
|:00497483   , :0049779C   , :00497D74   , :004A532F   , :004AC6BF   
|:004AF626   , :004B5315   , :004BC47F   , :004BCC08   , :004BE535   
|:004BE79D   , :004F31E1   , :0050F8CA   , :0050FB2A   , :00511CB5   
|:005123F3   , :0053B343   , :0053C97F   , :0054A134   , :00565B26   
|:00565D15   , :00565EE1   , :00573B48   , :00573C44   , :00574860   
|:0057A3AF   , :0057A54F   , :0057AEDC   , :0057B2F1   , :0057D46D   
|:0058930F   , :00595745   , :005A7B6F   , :005AAAB5   , :005AC7AF   
|:005BBFB5   , :005D1495   , :005D1715   , :005D1CC6   , :005D2198   
|:005D3528   , :005D385C   , :005D3DCC   , :005E27E8   , :005E29CF   
|:005E2D0D   , :005E49BF   , :005E7E5A   , :005E822F   , :005E83CF   
|:005E85DD   , :005EA97F   , :005EADDF   , :005EC00C   , :005EFA35   
|:005F407F   , :005F422F   , :005FA88B   , :005FAF16   , :0060337C   
|:0060EBEF   , :00610CF7   , :006113EF   , :0061194F   , :00611C29   
|:00611F26   , :00612EB1   , :00619E1B   , :0061A447   , :0061A96F   
|:00622FCF   , :00627D5F   , :0062820F   , :0063128D   , :0063464F   
|:00634800   , :00647308   , :0064A10E   , :0064B54F   , :0064FE25   
|:0065572B   , :006567CD   , :00658792   , :00658A05   , :00658C84   
|:0065A9FF   , :0066D9DF   , :006722DF   , :0067396B   , :0067B9CF   
|:0067C78D   , :0067DF2C   , :00687D59   , :0068825F   , :006883FF   
|:0068B97F   , :0068BF5F   , :0069580A   , :006CE851   
|
:00404180 51                      push ecx
:00404181 8B442408                mov eax, dword ptr [esp+08]
:00404185 53                      push ebx
:00404186 56                      push esi
:00404187 57                      push edi
:00404188 8B3D40987A00            mov edi, dword ptr [007A9840]
:0040418E 8D7007                  lea esi, dword ptr [eax+07]
:00404191 A144987A00              mov eax, dword ptr [007A9844]
:00404196 83E6F8                  and esi, FFFFFFF8
:00404199 2BC7                    sub eax, edi
:0040419B BB14000000              mov ebx, 00000014
:004041A0 8D0CB6                  lea ecx, dword ptr [esi+4*esi]
:004041A3 895C240C                mov dword ptr [esp+0C], ebx
:004041A7 C1E102                  shl ecx, 02
:004041AA 3BC1                    cmp eax, ecx
:004041AC 720F                    jb 004041BD
:004041AE 8BC7                    mov eax, edi
:004041B0 03F9                    add edi, ecx
:004041B2 893D40987A00            mov dword ptr [007A9840], edi
:004041B8 E9DB000000              jmp 00404298

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004041AC(C)
|
:004041BD 3BC6                    cmp eax, esi
:004041BF 721E                    jb 004041DF
:004041C1 33D2                    xor edx, edx
:004041C3 F7F6                    div esi
:004041C5 8BD8                    mov ebx, eax
:004041C7 8BC7                    mov eax, edi
:004041C9 8BCB                    mov ecx, ebx
:004041CB 895C240C                mov dword ptr [esp+0C], ebx
:004041CF 0FAFCE                  imul ecx, esi
:004041D2 03F9                    add edi, ecx
:004041D4 893D40987A00            mov dword ptr [007A9840], edi
:004041DA E9B4000000              jmp 00404293

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004041BF(C)
|
:004041DF 8B153C987A00            mov edx, dword ptr [007A983C]
:004041E5 C1EA04                  shr edx, 04
:004041E8 83C207                  add edx, 00000007
:004041EB 83E2F8                  and edx, FFFFFFF8
:004041EE 85C0                    test eax, eax
:004041F0 8D1C4A                  lea ebx, dword ptr [edx+2*ecx]
:004041F3 761C                    jbe 00404211
:004041F5 48                      dec eax
:004041F6 C1E803                  shr eax, 03
:004041F9 8B0C85FC977A00          mov ecx, dword ptr [4*eax+007A97FC]
:00404200 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:00404207 890F                    mov dword ptr [edi], ecx
:00404209 8B1540987A00            mov edx, dword ptr [007A9840]
:0040420F 8910                    mov dword ptr [eax], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004041F3(C)
|
:00404211 53                      push ebx
:00404212 E869D01D00              call 005E1280
:00404217 83C404                  add esp, 00000004
:0040421A A340987A00              mov dword ptr [007A9840], eax
:0040421F 85C0                    test eax, eax
:00404221 7549                    jne 0040426C
:00404223 81FE80000000            cmp esi, 00000080
:00404229 8BCE                    mov ecx, esi
:0040422B 7727                    ja 00404254

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404252(C)
|
:0040422D 8D41FF                  lea eax, dword ptr [ecx-01]
:00404230 C1E803                  shr eax, 03
:00404233 8D1485FC977A00          lea edx, dword ptr [4*eax+007A97FC]
:0040423A 8B0485FC977A00          mov eax, dword ptr [4*eax+007A97FC]
:00404241 85C0                    test eax, eax
:00404243 0F8588000000            jne 004042D1
:00404249 83C108                  add ecx, 00000008
:0040424C 81F980000000            cmp ecx, 00000080
:00404252 76D9                    jbe 0040422D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040422B(C)
|
:00404254 53                      push ebx
:00404255 C70544987A0000000000    mov dword ptr [007A9844], 00000000
:0040425F E81CD01D00              call 005E1280
:00404264 83C404                  add esp, 00000004
:00404267 A340987A00              mov dword ptr [007A9840], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404221(C)
|
:0040426C 8B0D3C987A00            mov ecx, dword ptr [007A983C]
:00404272 8D54240C                lea edx, dword ptr [esp+0C]
:00404276 03CB                    add ecx, ebx
:00404278 03C3                    add eax, ebx
:0040427A 890D3C987A00            mov dword ptr [007A983C], ecx
:00404280 A344987A00              mov dword ptr [007A9844], eax
:00404285 52                      push edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004042E6(U)
|
:00404286 56                      push esi
:00404287 E8E4000000              call 00404370
:0040428C 8B5C2414                mov ebx, dword ptr [esp+14]
:00404290 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004041DA(U)
|
:00404293 83FB01                  cmp ebx, 00000001
:00404296 7434                    je 004042CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004041B8(U)
|
:00404298 8D56FF                  lea edx, dword ptr [esi-01]
:0040429B 8D0C30                  lea ecx, dword ptr [eax+esi]
:0040429E C1EA03                  shr edx, 03
:004042A1 BF01000000              mov edi, 00000001
:004042A6 890C95FC977A00          mov dword ptr [4*edx+007A97FC], ecx
:004042AD 8BD1                    mov edx, ecx
:004042AF 03CE                    add ecx, esi
:004042B1 4B                      dec ebx
:004042B2 3BDF                    cmp ebx, edi
:004042B4 7410                    je 004042C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004042C4(C)
|
:004042B6 890A                    mov dword ptr [edx], ecx
:004042B8 8B5C240C                mov ebx, dword ptr [esp+0C]
:004042BC 8BD1                    mov edx, ecx
:004042BE 47                      inc edi
:004042BF 03CE                    add ecx, esi
:004042C1 4B                      dec ebx
:004042C2 3BDF                    cmp ebx, edi
:004042C4 75F0                    jne 004042B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004042B4(C)
|
:004042C6 C70200000000            mov dword ptr [edx], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404296(C)
|
:004042CC 5F                      pop edi
:004042CD 5E                      pop esi
:004042CE 5B                      pop ebx
:004042CF 59                      pop ecx
:004042D0 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404243(C)
|
:004042D1 8B38                    mov edi, dword ptr [eax]
:004042D3 893A                    mov dword ptr [edx], edi
:004042D5 A340987A00              mov dword ptr [007A9840], eax
:004042DA 03C1                    add eax, ecx
:004042DC 8D4C240C                lea ecx, dword ptr [esp+0C]
:004042E0 A344987A00              mov dword ptr [007A9844], eax
:004042E5 51                      push ecx
:004042E6 EB9E                    jmp 00404286
:004042E8 90                      nop
:004042E9 90                      nop
:004042EA 90                      nop
:004042EB 90                      nop
:004042EC 90                      nop
:004042ED 90                      nop
:004042EE 90                      nop
:004042EF 90                      nop

* Referenced by a CALL at Addresses:
|:0040348A   , :0064B437   , :0064B5A6   , :00651718   
|
:004042F0 8B4C2408                mov ecx, dword ptr [esp+08]
:004042F4 8B442404                mov eax, dword ptr [esp+04]
:004042F8 85C9                    test ecx, ecx
:004042FA 761A                    jbe 00404316
:004042FC 8B54240C                mov edx, dword ptr [esp+0C]
:00404300 56                      push esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404313(C)
|
:00404301 85C0                    test eax, eax
:00404303 740A                    je 0040430F
:00404305 8B32                    mov esi, dword ptr [edx]
:00404307 8930                    mov dword ptr [eax], esi
:00404309 8B7204                  mov esi, dword ptr [edx+04]
:0040430C 897004                  mov dword ptr [eax+04], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404303(C)
|
:0040430F 83C008                  add eax, 00000008
:00404312 49                      dec ecx
:00404313 75EC                    jne 00404301
:00404315 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004042FA(C)
|
:00404316 C3                      ret
:00404317 90                      nop
:00404318 90                      nop
:00404319 90                      nop
:0040431A 90                      nop
:0040431B 90                      nop
:0040431C 90                      nop
:0040431D 90                      nop
:0040431E 90                      nop
:0040431F 90                      nop

* Referenced by a CALL at Addresses:
|:00402E0A   , :0040378C   
|
:00404320 8B442408                mov eax, dword ptr [esp+08]
:00404324 83C10C                  add ecx, 0000000C
:00404327 3BC1                    cmp eax, ecx
:00404329 7434                    je 0040435F
:0040432B 8BD0                    mov edx, eax
:0040432D 83C008                  add eax, 00000008
:00404330 56                      push esi
:00404331 57                      push edi
:00404332 8B4A04                  mov ecx, dword ptr [edx+04]
:00404335 8B38                    mov edi, dword ptr [eax]
:00404337 85C9                    test ecx, ecx
:00404339 8BF7                    mov esi, edi
:0040433B 7403                    je 00404340
:0040433D 897108                  mov dword ptr [ecx+08], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040433B(C)
|
:00404340 85F6                    test esi, esi
:00404342 7403                    je 00404347
:00404344 894E04                  mov dword ptr [esi+04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404342(C)
|
:00404347 C70000000000            mov dword ptr [eax], 00000000
:0040434D 8B44240C                mov eax, dword ptr [esp+0C]
:00404351 C7420400000000          mov [edx+04], 00000000
:00404358 8938                    mov dword ptr [eax], edi
:0040435A 5F                      pop edi
:0040435B 5E                      pop esi
:0040435C C20800                  ret 0008



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404329(C)
|
:0040435F 8B442404                mov eax, dword ptr [esp+04]
:00404363 8908                    mov dword ptr [eax], ecx
:00404365 C20800                  ret 0008


:00404368 90                      nop
:00404369 90                      nop
:0040436A 90                      nop
:0040436B 90                      nop
:0040436C 90                      nop
:0040436D 90                      nop
:0040436E 90                      nop
:0040436F 90                      nop

* Referenced by a CALL at Addresses:
|:004035EA   , :00403BE0   , :00403D25   , :00404287   , :00406564   
|:004153BA   , :00415564   , :0041C83A   , :00424F90   , :00425145   
|:00425E7B   , :004260AA   , :0042622A   , :004466CA   , :00446834   
|:004468D4   , :00447D14   , :00457FDD   , :00458475   , :004594FD   
|:00464A44   , :00464FA5   , :0046975A   , :004697F5   , :004726F4   
|:00479EDD   , :0047B8BD   , :0047BAC6   , :0047E05A   , :0047E1C9   
|:0047E343   , :00482B4A   , :00482F24   , :00485425   , :0048B795   
|:0048B815   , :00493110   , :00493320   , :00493B40   , :00493CD5   
|:00496249   , :004AC50D   , :004AF0CA   , :004AF224   , :004BBA10   
|:004BBCE0   , :004BBDB0   , :004BC125   , :004BE5A5   , :004BE635   
|:004BF36D   , :004BF78A   , :004CCA97   , :004F2E50   , :00511AB6   
|:0053382F   , :00533903   , :0053A4E2   , :0053C80F   , :0053D0A5   
|:00543119   , :0054ACC5   , :0054B4A5   , :0057329A   , :005735B5   
|:005736A4   , :00573724   , :00579A9A   , :00579C5A   , :00579E9A   
|:0057A82A   , :0057C00C   , :0057D29A   , :0057D344   , :00582520   
|:0059692A   , :005A798D   , :005AC604   , :005AC684   , :005C94D4   
|:005D0850   , :005D0920   , :005D10A5   , :005D32C9   , :005D531C   
|:005DFF2F   , :005E2E9A   , :005E8715   , :005EA334   , :005EA454   
|:005EACF5   , :005EFCEA   , :005F002D   , :005F080A   , :005F092F   
|:005F0B84   , :005F3F5D   , :005F9510   , :005F9E10   , :005FA0FA   
|:005FA574   , :005FA664   , :005FAD2A   , :005FE4A4   , :0060273A   
|:006035DA   , :00603784   , :0060EA26   , :0060EAFD   , :0061211C   
|:0061347D   , :00617740   , :0061A805   , :0061AE73   , :0061AFE5   
|:0061DF17   , :00620EB4   , :0062210B   , :00622CFA   , :00622DB4   
|:00622E54   , :0062329A   , :00627F5A   , :006280CA   , :0062E5F4   
|:00633D75   , :00634EED   , :00645D39   , :00646309   , :00646909   
|:00649C65   , :0064DE3D   , :0064FFD6   , :00651E8D   , :00658666   
|:00658F49   , :0066C93D   , :0066D867   , :00672CCA   , :00672FD6   
|:0067320A   , :0067341A   , :00673724   , :00676355   , :006764F4   
|:006879D0   , :0068898C   , :00688ACA   , :00688F65   , :0068BB0D   
|:00695590   , :00695655   , :006A7424   , :006AAAA5   
|
:00404370 53                      push ebx
:00404371 8B5C2408                mov ebx, dword ptr [esp+08]
:00404375 55                      push ebp
:00404376 8B6C2410                mov ebp, dword ptr [esp+10]
:0040437A 8B1544987A00            mov edx, dword ptr [007A9844]
:00404380 A140987A00              mov eax, dword ptr [007A9840]
:00404385 8B4D00                  mov ecx, dword ptr [ebp+00]
:00404388 2BD0                    sub edx, eax
:0040438A 0FAFCB                  imul ecx, ebx
:0040438D 56                      push esi
:0040438E 3BD1                    cmp edx, ecx
:00404390 57                      push edi
:00404391 0F83B7000000            jnb 0040444E
:00404397 8B353C987A00            mov esi, dword ptr [007A983C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404448(C)
|
:0040439D 3BD3                    cmp edx, ebx
:0040439F 0F83D3000000            jnb 00404478
:004043A5 C1EE04                  shr esi, 04
:004043A8 83C607                  add esi, 00000007
:004043AB 83E6F8                  and esi, FFFFFFF8
:004043AE 85D2                    test edx, edx
:004043B0 8D3C4E                  lea edi, dword ptr [esi+2*ecx]
:004043B3 761B                    jbe 004043D0
:004043B5 4A                      dec edx
:004043B6 C1EA03                  shr edx, 03
:004043B9 8D0C95FC977A00          lea ecx, dword ptr [4*edx+007A97FC]
:004043C0 8B1495FC977A00          mov edx, dword ptr [4*edx+007A97FC]
:004043C7 8910                    mov dword ptr [eax], edx
:004043C9 A140987A00              mov eax, dword ptr [007A9840]
:004043CE 8901                    mov dword ptr [ecx], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004043B3(C)
|
:004043D0 57                      push edi
:004043D1 E8AACE1D00              call 005E1280
:004043D6 83C404                  add esp, 00000004
:004043D9 A340987A00              mov dword ptr [007A9840], eax
:004043DE 85C0                    test eax, eax
:004043E0 7545                    jne 00404427
:004043E2 81FB80000000            cmp ebx, 00000080
:004043E8 8BCB                    mov ecx, ebx
:004043EA 7723                    ja 0040440F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040440D(C)
|
:004043EC 8D51FF                  lea edx, dword ptr [ecx-01]
:004043EF C1EA03                  shr edx, 03
:004043F2 8B0495FC977A00          mov eax, dword ptr [4*edx+007A97FC]
:004043F9 8D1495FC977A00          lea edx, dword ptr [4*edx+007A97FC]
:00404400 85C0                    test eax, eax
:00404402 755A                    jne 0040445E
:00404404 83C108                  add ecx, 00000008
:00404407 81F980000000            cmp ecx, 00000080
:0040440D 76DD                    jbe 004043EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004043EA(C)
|
:0040440F 57                      push edi
:00404410 C70544987A0000000000    mov dword ptr [007A9844], 00000000
:0040441A E861CE1D00              call 005E1280
:0040441F 83C404                  add esp, 00000004
:00404422 A340987A00              mov dword ptr [007A9840], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004043E0(C)
|
:00404427 8B353C987A00            mov esi, dword ptr [007A983C]
:0040442D 8D1438                  lea edx, dword ptr [eax+edi]
:00404430 03F7                    add esi, edi
:00404432 891544987A00            mov dword ptr [007A9844], edx
:00404438 89353C987A00            mov dword ptr [007A983C], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404476(U)
|
:0040443E 8B4D00                  mov ecx, dword ptr [ebp+00]
:00404441 2BD0                    sub edx, eax
:00404443 0FAFCB                  imul ecx, ebx
:00404446 3BD1                    cmp edx, ecx
:00404448 0F824FFFFFFF            jb 0040439D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404391(C)
|
:0040444E 8BD0                    mov edx, eax
:00404450 03C1                    add eax, ecx
:00404452 5F                      pop edi
:00404453 5E                      pop esi
:00404454 A340987A00              mov dword ptr [007A9840], eax
:00404459 5D                      pop ebp
:0040445A 8BC2                    mov eax, edx
:0040445C 5B                      pop ebx
:0040445D C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404402(C)
|
:0040445E 8B30                    mov esi, dword ptr [eax]
:00404460 8932                    mov dword ptr [edx], esi
:00404462 8B353C987A00            mov esi, dword ptr [007A983C]
:00404468 8D1408                  lea edx, dword ptr [eax+ecx]
:0040446B A340987A00              mov dword ptr [007A9840], eax
:00404470 891544987A00            mov dword ptr [007A9844], edx
:00404476 EBC6                    jmp 0040443E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040439F(C)
|
:00404478 8BC2                    mov eax, edx
:0040447A 33D2                    xor edx, edx
:0040447C F7F3                    div ebx
:0040447E 5F                      pop edi
:0040447F 5E                      pop esi
:00404480 894500                  mov dword ptr [ebp+00], eax
:00404483 8B0D40987A00            mov ecx, dword ptr [007A9840]
:00404489 0FAFC3                  imul eax, ebx
:0040448C 8BD1                    mov edx, ecx
:0040448E 03C8                    add ecx, eax
:00404490 5D                      pop ebp
:00404491 890D40987A00            mov dword ptr [007A9840], ecx
:00404497 8BC2                    mov eax, edx
:00404499 5B                      pop ebx
:0040449A C3                      ret


:0040449B 90                      nop
:0040449C 90                      nop
:0040449D 90                      nop
:0040449E 90                      nop
:0040449F 90                      nop
:004044A0 83E908                  sub ecx, 00000008
:004044A3 E948EEFFFF              jmp 004032F0
:004044A8 CC                      int 03
:004044A9 CC                      int 03
:004044AA CC                      int 03
:004044AB CC                      int 03
:004044AC CC                      int 03
:004044AD CC                      int 03
:004044AE CC                      int 03
:004044AF CC                      int 03
:004044B0 83E908                  sub ecx, 00000008
:004044B3 E9C8EDFFFF              jmp 00403280
:004044B8 CC                      int 03
:004044B9 CC                      int 03
:004044BA CC                      int 03
:004044BB CC                      int 03
:004044BC CC                      int 03
:004044BD CC                      int 03
:004044BE CC                      int 03
:004044BF CC                      int 03

* Referenced by a CALL at Addresses:
|:00402192   , :00409125   , :00409315   , :004805CA   , :004902CD   
|:004A393C   , :004AA7CC   , :004AA951   , :004AB1F8   , :004B4E74   
|:004B4E80   , :004CCBCE   , :004F13CD   , :004F16BF   , :004F1846   
|:00533D02   , :005682E8   , :0056869E   , :00568A92   , :00568C27   
|:00568CDF   , :00568DBF   , :00568E9D   , :00568F7D   , :0056905F   
|:0056913E   , :0056921D   , :005692FC   , :005693E6   , :005694D0   
|:005696A7   , :00569A4D   , :005700BF   , :005B5CD5   , :005B6857   
|
:004044C0 8BC1                    mov eax, ecx
:004044C2 66C7000000              mov word ptr [eax], 0000
:004044C7 66C740020000            mov [eax+02], 0000
:004044CD C3                      ret


:004044CE 90                      nop
:004044CF 90                      nop

* Referenced by a CALL at Addresses:
|:00402363   , :004CA29A   , :004EC5A1   , :004EC5D2   , :00558E4E   
|
:004044D0 8BC1                    mov eax, ecx
:004044D2 8B4C2404                mov ecx, dword ptr [esp+04]
:004044D6 85C9                    test ecx, ecx
:004044D8 7425                    je 004044FF
:004044DA 668B4904                mov cx, word ptr [ecx+04]
:004044DE 66894802                mov word ptr [eax+02], cx
:004044E2 8B15089C7A00            mov edx, dword ptr [007A9C08]
:004044E8 81E1FFFF0000            and ecx, 0000FFFF
:004044EE 8B92CD050000            mov edx, dword ptr [edx+000005CD]
:004044F4 668B4CCA06              mov cx, word ptr [edx+8*ecx+06]
:004044F9 668908                  mov word ptr [eax], cx
:004044FC C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004044D8(C)
|
:004044FF 66C7000000              mov word ptr [eax], 0000
:00404504 66C740020000            mov [eax+02], 0000
:0040450A C20400                  ret 0004


:0040450D 90                      nop
:0040450E 90                      nop
:0040450F 90                      nop

* Referenced by a CALL at Addresses:
|:0040464A   , :004047A2   , :004048F6   , :00404A47   , :0042B4EB   
|:00462893   
|
:00404510 8B442408                mov eax, dword ptr [esp+08]
:00404514 83F85F                  cmp eax, 0000005F
:00404517 7C14                    jl 0040452D
:00404519 8B442404                mov eax, dword ptr [esp+04]
:0040451D C60000                  mov byte ptr [eax], 00
:00404520 C64001D4                mov [eax+01], D4
:00404524 C64002C0                mov [eax+02], C0
:00404528 C64003FF                mov [eax+03], FF
:0040452C C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404517(C)
|
:0040452D 83F842                  cmp eax, 00000042
:00404530 7C14                    jl 00404546
:00404532 8B442404                mov eax, dword ptr [esp+04]
:00404536 C60000                  mov byte ptr [eax], 00
:00404539 C64001B6                mov [eax+01], B6
:0040453D C64002DC                mov [eax+02], DC
:00404541 C64003FF                mov [eax+03], FF
:00404545 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404530(C)
|
:00404546 83F821                  cmp eax, 00000021
:00404549 8B442404                mov eax, dword ptr [esp+04]
:0040454D C60000                  mov byte ptr [eax], 00
:00404550 7C0D                    jl 0040455F
:00404552 C6400176                mov [eax+01], 76
:00404556 C64002F8                mov [eax+02], F8
:0040455A C64003FF                mov [eax+03], FF
:0040455E C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404550(C)
|
:0040455F C6400100                mov [eax+01], 00
:00404563 C64002F8                mov [eax+02], F8
:00404567 C64003FF                mov [eax+03], FF
:0040456B C3                      ret


:0040456C 90                      nop
:0040456D 90                      nop
:0040456E 90                      nop
:0040456F 90                      nop

* Referenced by a CALL at Address:
|:0042A133   
|
:00404570 6AFF                    push FFFFFFFF
:00404572 68C6F16C00              push 006CF1C6
:00404577 64A100000000            mov eax, dword ptr fs:[00000000]
:0040457D 50                      push eax
:0040457E 64892500000000          mov dword ptr fs:[00000000], esp
:00404585 83EC40                  sub esp, 00000040
:00404588 A128FE7200              mov eax, dword ptr [0072FE28]
:0040458D 53                      push ebx
:0040458E 56                      push esi
:0040458F 57                      push edi
:00404590 8BF1                    mov esi, ecx
:00404592 33DB                    xor ebx, ebx
:00404594 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/back/accuracy"
                                  |
:00404595 6818B27800              push 0078B218
:0040459A 8D4C2418                lea ecx, dword ptr [esp+18]
:0040459E 8974241C                mov dword ptr [esp+1C], esi
:004045A2 895C2414                mov dword ptr [esp+14], ebx
:004045A6 E8056B1E00              call 005EB0B0
:004045AB 8B542464                mov edx, dword ptr [esp+64]
:004045AF 8B44245C                mov eax, dword ptr [esp+5C]
:004045B3 8D4C2410                lea ecx, dword ptr [esp+10]
:004045B7 895C2454                mov dword ptr [esp+54], ebx
:004045BB 51                      push ecx
:004045BC 52                      push edx
:004045BD 50                      push eax
:004045BE 8BCE                    mov ecx, esi
:004045C0 E86BBF1F00              call 00600530
:004045C5 8B4C2410                mov ecx, dword ptr [esp+10]
:004045C9 C644245402              mov [esp+54], 02
:004045CE 8D41F4                  lea eax, dword ptr [ecx-0C]
:004045D1 8B49F4                  mov ecx, dword ptr [ecx-0C]
:004045D4 49                      dec ecx
:004045D5 8908                    mov dword ptr [eax], ecx
:004045D7 7509                    jne 004045E2
:004045D9 50                      push eax
:004045DA E821CD1D00              call 005E1300
:004045DF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004045D7(C)
|
:004045E2 8B542460                mov edx, dword ptr [esp+60]
:004045E6 55                      push ebp
:004045E7 6A01                    push 00000001
:004045E9 53                      push ebx
:004045EA 8BCE                    mov ecx, esi
:004045EC 8996F6000000            mov dword ptr [esi+000000F6], edx
:004045F2 C706A8877000            mov dword ptr [esi], 007087A8
:004045F8 C74608A0877000          mov [esi+08], 007087A0
:004045FF FF1500897000            call dword ptr [00708900]
:00404605 682A010000              push 0000012A
:0040460A E871CC1D00              call 005E1280
:0040460F 8BF8                    mov edi, eax
:00404611 83C404                  add esp, 00000004
:00404614 897C2464                mov dword ptr [esp+64], edi
:00404618 3BFB                    cmp edi, ebx
:0040461A C644245803              mov [esp+58], 03
:0040461F 0F84DE000000            je 00404703
:00404625 A128FE7200              mov eax, dword ptr [0072FE28]
:0040462A 8D4C2468                lea ecx, dword ptr [esp+68]
:0040462E 50                      push eax

* Possible StringData Ref from Data Obj ->"95%"
                                  |
:0040462F 6814B27800              push 0078B214
:00404634 E8776A1E00              call 005EB0B0
:00404639 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040463D 6A5F                    push 0000005F
:0040463F 51                      push ecx
:00404640 C644246004              mov [esp+60], 04
:00404645 BD704B4000              mov ebp, 00404B70
:0040464A E8C1FEFFFF              call 00404510
:0040464F 33D2                    xor edx, edx
:00404651 33C9                    xor ecx, ecx
:00404653 8A10                    mov dl, byte ptr [eax]
:00404655 8A4801                  mov cl, byte ptr [eax+01]
:00404658 89542468                mov dword ptr [esp+68], edx
:0040465C 33D2                    xor edx, edx
:0040465E DB442468                fild dword ptr [esp+68]
:00404662 8A5002                  mov dl, byte ptr [eax+02]
:00404665 894C2468                mov dword ptr [esp+68], ecx
:00404669 83C408                  add esp, 00000008
:0040466C 33C0                    xor eax, eax
:0040466E D80D98877000            fmul dword ptr [00708798]
:00404674 DB442460                fild dword ptr [esp+60]
:00404678 89542460                mov dword ptr [esp+60], edx
:0040467C 50                      push eax
:0040467D 8D442440                lea eax, dword ptr [esp+40]
:00404681 BB03000000              mov ebx, 00000003
:00404686 D80D98877000            fmul dword ptr [00708798]
:0040468C DB442464                fild dword ptr [esp+64]
:00404690 55                      push ebp
:00404691 50                      push eax
:00404692 8BCE                    mov ecx, esi
:00404694 895C241C                mov dword ptr [esp+1C], ebx
:00404698 D80D98877000            fmul dword ptr [00708798]
:0040469E D95C242C                fstp dword ptr [esp+2C]
:004046A2 D95C2430                fstp dword ptr [esp+30]
:004046A6 D95C2434                fstp dword ptr [esp+34]
:004046AA E871050000              call 00404C20
:004046AF 6A00                    push 00000000
:004046B1 8D4C2424                lea ecx, dword ptr [esp+24]
:004046B5 6A02                    push 00000002
:004046B7 51                      push ecx
:004046B8 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:004046BE 8D542474                lea edx, dword ptr [esp+74]
:004046C2 6A00                    push 00000000
:004046C4 C744243C06000000        mov [esp+3C], 00000006
:004046CC C74424400A000000        mov [esp+40], 0000000A
:004046D4 C744244426000000        mov [esp+44], 00000026
:004046DC C744244817000000        mov [esp+48], 00000017
:004046E4 52                      push edx
:004046E5 8B511C                  mov edx, dword ptr [ecx+1C]
:004046E8 8BCF                    mov ecx, edi
:004046EA 52                      push edx
:004046EB 50                      push eax
:004046EC 8D442448                lea eax, dword ptr [esp+48]
:004046F0 C744247405000000        mov [esp+74], 00000005
:004046F8 50                      push eax
:004046F9 56                      push esi
:004046FA E8B1A31F00              call 005FEAB0
:004046FF 8BF8                    mov edi, eax
:00404701 EB02                    jmp 00404705

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040461F(C)
|
:00404703 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404701(U)
|
:00404705 F6C302                  test bl, 02
:00404708 C744245806000000        mov [esp+58], 00000006
:00404710 7419                    je 0040472B
:00404712 8B4C243C                mov ecx, dword ptr [esp+3C]
:00404716 83E3FD                  and ebx, FFFFFFFD
:00404719 85C9                    test ecx, ecx
:0040471B 895C2410                mov dword ptr [esp+10], ebx
:0040471F 740A                    je 0040472B
:00404721 8D54243C                lea edx, dword ptr [esp+3C]
:00404725 52                      push edx
:00404726 E8F59B1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404710(C), :0040471F(C)
|
:0040472B F6C301                  test bl, 01
:0040472E C744245802000000        mov [esp+58], 00000002
:00404736 741A                    je 00404752
:00404738 8B442468                mov eax, dword ptr [esp+68]
:0040473C 83E3FE                  and ebx, FFFFFFFE
:0040473F 83C0F4                  add eax, FFFFFFF4
:00404742 8B08                    mov ecx, dword ptr [eax]
:00404744 49                      dec ecx
:00404745 8908                    mov dword ptr [eax], ecx
:00404747 7509                    jne 00404752
:00404749 50                      push eax
:0040474A E8B1CB1D00              call 005E1300
:0040474F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404736(C), :00404747(C)
|
:00404752 682A010000              push 0000012A
:00404757 C747205F000000          mov [edi+20], 0000005F
:0040475E E81DCB1D00              call 005E1280
:00404763 83C404                  add esp, 00000004
:00404766 89442464                mov dword ptr [esp+64], eax
:0040476A 85C0                    test eax, eax
:0040476C C644245808              mov [esp+58], 08
:00404771 0F84E0000000            je 00404857
:00404777 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040477D 51                      push ecx

* Possible StringData Ref from Data Obj ->"66%"
                                  |
:0040477E 6810B27800              push 0078B210
:00404783 8D4C2470                lea ecx, dword ptr [esp+70]
:00404787 E824691E00              call 005EB0B0
:0040478C 83CB04                  or ebx, 00000004
:0040478F 8D54241C                lea edx, dword ptr [esp+1C]
:00404793 6A42                    push 00000042
:00404795 52                      push edx
:00404796 C644246009              mov [esp+60], 09
:0040479B BF704B4000              mov edi, 00404B70
:004047A0 33ED                    xor ebp, ebp
:004047A2 E869FDFFFF              call 00404510
:004047A7 33C9                    xor ecx, ecx
:004047A9 33D2                    xor edx, edx
:004047AB 8A08                    mov cl, byte ptr [eax]
:004047AD 8A5001                  mov dl, byte ptr [eax+01]
:004047B0 894C2468                mov dword ptr [esp+68], ecx
:004047B4 33C9                    xor ecx, ecx
:004047B6 DB442468                fild dword ptr [esp+68]
:004047BA 8A4802                  mov cl, byte ptr [eax+02]
:004047BD 89542468                mov dword ptr [esp+68], edx
:004047C1 83C408                  add esp, 00000008
:004047C4 8D54243C                lea edx, dword ptr [esp+3C]
:004047C8 D80D98877000            fmul dword ptr [00708798]
:004047CE DB442460                fild dword ptr [esp+60]
:004047D2 894C2460                mov dword ptr [esp+60], ecx
:004047D6 55                      push ebp
:004047D7 83CB08                  or ebx, 00000008
:004047DA 57                      push edi
:004047DB D80D98877000            fmul dword ptr [00708798]
:004047E1 DB442468                fild dword ptr [esp+68]
:004047E5 52                      push edx
:004047E6 8BCE                    mov ecx, esi
:004047E8 895C241C                mov dword ptr [esp+1C], ebx
:004047EC D80D98877000            fmul dword ptr [00708798]
:004047F2 D95C242C                fstp dword ptr [esp+2C]
:004047F6 D95C2430                fstp dword ptr [esp+30]
:004047FA D95C2434                fstp dword ptr [esp+34]
:004047FE E81D040000              call 00404C20
:00404803 55                      push ebp
:00404804 8D4C2424                lea ecx, dword ptr [esp+24]
:00404808 6A02                    push 00000002
:0040480A 51                      push ecx
:0040480B 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00404811 8D542474                lea edx, dword ptr [esp+74]
:00404815 55                      push ebp
:00404816 C744243C06000000        mov [esp+3C], 00000006
:0040481E C744244018000000        mov [esp+40], 00000018
:00404826 C744244426000000        mov [esp+44], 00000026
:0040482E C744244825000000        mov [esp+48], 00000025
:00404836 52                      push edx
:00404837 8B511C                  mov edx, dword ptr [ecx+1C]
:0040483A 8B4C2478                mov ecx, dword ptr [esp+78]
:0040483E 52                      push edx
:0040483F 50                      push eax
:00404840 8D442448                lea eax, dword ptr [esp+48]
:00404844 C74424740A000000        mov [esp+74], 0000000A
:0040484C 50                      push eax
:0040484D 56                      push esi
:0040484E E85DA21F00              call 005FEAB0
:00404853 8BF8                    mov edi, eax
:00404855 EB02                    jmp 00404859

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404771(C)
|
:00404857 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404855(U)
|
:00404859 F6C308                  test bl, 08
:0040485C C74424580B000000        mov [esp+58], 0000000B
:00404864 7419                    je 0040487F
:00404866 8B4C243C                mov ecx, dword ptr [esp+3C]
:0040486A 83E3F7                  and ebx, FFFFFFF7
:0040486D 85C9                    test ecx, ecx
:0040486F 895C2410                mov dword ptr [esp+10], ebx
:00404873 740A                    je 0040487F
:00404875 8D54243C                lea edx, dword ptr [esp+3C]
:00404879 52                      push edx
:0040487A E8A19A1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404864(C), :00404873(C)
|
:0040487F F6C304                  test bl, 04
:00404882 C744245802000000        mov [esp+58], 00000002
:0040488A 741A                    je 004048A6
:0040488C 8B442468                mov eax, dword ptr [esp+68]
:00404890 83E3FB                  and ebx, FFFFFFFB
:00404893 83C0F4                  add eax, FFFFFFF4
:00404896 8B08                    mov ecx, dword ptr [eax]
:00404898 49                      dec ecx
:00404899 8908                    mov dword ptr [eax], ecx
:0040489B 7509                    jne 004048A6
:0040489D 50                      push eax
:0040489E E85DCA1D00              call 005E1300
:004048A3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040488A(C), :0040489B(C)
|
:004048A6 682A010000              push 0000012A
:004048AB C7472042000000          mov [edi+20], 00000042
:004048B2 E8C9C91D00              call 005E1280
:004048B7 83C404                  add esp, 00000004
:004048BA 89442464                mov dword ptr [esp+64], eax
:004048BE 85C0                    test eax, eax
:004048C0 C64424580D              mov [esp+58], 0D
:004048C5 0F84DD000000            je 004049A8
:004048CB 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:004048D1 51                      push ecx

* Possible StringData Ref from Data Obj ->"33%"
                                  |
:004048D2 680CB27800              push 0078B20C
:004048D7 8D4C2470                lea ecx, dword ptr [esp+70]
:004048DB E8D0671E00              call 005EB0B0
:004048E0 83CB10                  or ebx, 00000010
:004048E3 8D54241C                lea edx, dword ptr [esp+1C]
:004048E7 6A21                    push 00000021
:004048E9 52                      push edx
:004048EA C64424600E              mov [esp+60], 0E
:004048EF BF704B4000              mov edi, 00404B70
:004048F4 33ED                    xor ebp, ebp
:004048F6 E815FCFFFF              call 00404510
:004048FB 33C9                    xor ecx, ecx
:004048FD 33D2                    xor edx, edx
:004048FF 8A08                    mov cl, byte ptr [eax]
:00404901 8A5001                  mov dl, byte ptr [eax+01]
:00404904 894C2468                mov dword ptr [esp+68], ecx
:00404908 33C9                    xor ecx, ecx
:0040490A DB442468                fild dword ptr [esp+68]
:0040490E 8A4802                  mov cl, byte ptr [eax+02]
:00404911 89542468                mov dword ptr [esp+68], edx
:00404915 83C408                  add esp, 00000008
:00404918 8D54243C                lea edx, dword ptr [esp+3C]
:0040491C D80D98877000            fmul dword ptr [00708798]
:00404922 DB442460                fild dword ptr [esp+60]
:00404926 894C2460                mov dword ptr [esp+60], ecx
:0040492A 55                      push ebp
:0040492B 83CB20                  or ebx, 00000020
:0040492E 57                      push edi
:0040492F D80D98877000            fmul dword ptr [00708798]
:00404935 DB442468                fild dword ptr [esp+68]
:00404939 52                      push edx
:0040493A 8BCE                    mov ecx, esi
:0040493C 895C241C                mov dword ptr [esp+1C], ebx
:00404940 D80D98877000            fmul dword ptr [00708798]
:00404946 D95C242C                fstp dword ptr [esp+2C]
:0040494A D95C2430                fstp dword ptr [esp+30]
:0040494E D95C2434                fstp dword ptr [esp+34]
:00404952 E8C9020000              call 00404C20
:00404957 B926000000              mov ecx, 00000026
:0040495C 55                      push ebp
:0040495D 894C2434                mov dword ptr [esp+34], ecx
:00404961 894C2438                mov dword ptr [esp+38], ecx
:00404965 8D4C2424                lea ecx, dword ptr [esp+24]
:00404969 6A02                    push 00000002
:0040496B 51                      push ecx
:0040496C 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00404972 8D542474                lea edx, dword ptr [esp+74]
:00404976 55                      push ebp
:00404977 C744243C06000000        mov [esp+3C], 00000006
:0040497F C744244833000000        mov [esp+48], 00000033
:00404987 52                      push edx
:00404988 8B511C                  mov edx, dword ptr [ecx+1C]
:0040498B 8B4C2478                mov ecx, dword ptr [esp+78]
:0040498F 52                      push edx
:00404990 50                      push eax
:00404991 8D442448                lea eax, dword ptr [esp+48]
:00404995 50                      push eax
:00404996 56                      push esi
:00404997 C744247C0F000000        mov [esp+7C], 0000000F
:0040499F E80CA11F00              call 005FEAB0
:004049A4 8BF8                    mov edi, eax
:004049A6 EB02                    jmp 004049AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004048C5(C)
|
:004049A8 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004049A6(U)
|
:004049AA F6C320                  test bl, 20
:004049AD C744245810000000        mov [esp+58], 00000010
:004049B5 7419                    je 004049D0
:004049B7 8B4C243C                mov ecx, dword ptr [esp+3C]
:004049BB 83E3DF                  and ebx, FFFFFFDF
:004049BE 85C9                    test ecx, ecx
:004049C0 895C2410                mov dword ptr [esp+10], ebx
:004049C4 740A                    je 004049D0
:004049C6 8D54243C                lea edx, dword ptr [esp+3C]
:004049CA 52                      push edx
:004049CB E850991F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004049B5(C), :004049C4(C)
|
:004049D0 F6C310                  test bl, 10
:004049D3 C744245802000000        mov [esp+58], 00000002
:004049DB 741A                    je 004049F7
:004049DD 8B442468                mov eax, dword ptr [esp+68]
:004049E1 83E3EF                  and ebx, FFFFFFEF
:004049E4 83C0F4                  add eax, FFFFFFF4
:004049E7 8B08                    mov ecx, dword ptr [eax]
:004049E9 49                      dec ecx
:004049EA 8908                    mov dword ptr [eax], ecx
:004049EC 7509                    jne 004049F7
:004049EE 50                      push eax
:004049EF E80CC91D00              call 005E1300
:004049F4 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004049DB(C), :004049EC(C)
|
:004049F7 682A010000              push 0000012A
:004049FC C7472021000000          mov [edi+20], 00000021
:00404A03 E878C81D00              call 005E1280
:00404A08 83C404                  add esp, 00000004
:00404A0B 89442464                mov dword ptr [esp+64], eax
:00404A0F 85C0                    test eax, eax
:00404A11 C644245812              mov [esp+58], 12
:00404A16 0F84E0000000            je 00404AFC
:00404A1C 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:00404A22 51                      push ecx

* Possible StringData Ref from Data Obj ->"1%"
                                  |
:00404A23 6808B27800              push 0078B208
:00404A28 8D4C2470                lea ecx, dword ptr [esp+70]
:00404A2C E87F661E00              call 005EB0B0
:00404A31 83CB40                  or ebx, 00000040
:00404A34 8D54241C                lea edx, dword ptr [esp+1C]
:00404A38 6A01                    push 00000001
:00404A3A 52                      push edx
:00404A3B C644246013              mov [esp+60], 13
:00404A40 BF704B4000              mov edi, 00404B70
:00404A45 33ED                    xor ebp, ebp
:00404A47 E8C4FAFFFF              call 00404510
:00404A4C 33C9                    xor ecx, ecx
:00404A4E 33D2                    xor edx, edx
:00404A50 8A08                    mov cl, byte ptr [eax]
:00404A52 8A5001                  mov dl, byte ptr [eax+01]
:00404A55 894C2468                mov dword ptr [esp+68], ecx
:00404A59 33C9                    xor ecx, ecx
:00404A5B DB442468                fild dword ptr [esp+68]
:00404A5F 8A4802                  mov cl, byte ptr [eax+02]
:00404A62 89542468                mov dword ptr [esp+68], edx
:00404A66 83C408                  add esp, 00000008
:00404A69 8D54243C                lea edx, dword ptr [esp+3C]
:00404A6D D80D98877000            fmul dword ptr [00708798]
:00404A73 DB442460                fild dword ptr [esp+60]
:00404A77 894C2460                mov dword ptr [esp+60], ecx
:00404A7B 55                      push ebp
:00404A7C 80CB80                  or bl, 80
:00404A7F 57                      push edi
:00404A80 D80D98877000            fmul dword ptr [00708798]
:00404A86 DB442468                fild dword ptr [esp+68]
:00404A8A 52                      push edx
:00404A8B 8BCE                    mov ecx, esi
:00404A8D 895C241C                mov dword ptr [esp+1C], ebx
:00404A91 D80D98877000            fmul dword ptr [00708798]
:00404A97 D95C242C                fstp dword ptr [esp+2C]
:00404A9B D95C2430                fstp dword ptr [esp+30]
:00404A9F D95C2434                fstp dword ptr [esp+34]
:00404AA3 E878010000              call 00404C20
:00404AA8 55                      push ebp
:00404AA9 8D4C2424                lea ecx, dword ptr [esp+24]
:00404AAD 6A02                    push 00000002
:00404AAF 51                      push ecx
:00404AB0 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00404AB6 8D542474                lea edx, dword ptr [esp+74]
:00404ABA 55                      push ebp
:00404ABB C744243C06000000        mov [esp+3C], 00000006
:00404AC3 C744244034000000        mov [esp+40], 00000034
:00404ACB C744244426000000        mov [esp+44], 00000026
:00404AD3 C744244841000000        mov [esp+48], 00000041
:00404ADB 52                      push edx
:00404ADC 8B511C                  mov edx, dword ptr [ecx+1C]
:00404ADF 8B4C2478                mov ecx, dword ptr [esp+78]
:00404AE3 52                      push edx
:00404AE4 50                      push eax
:00404AE5 8D442448                lea eax, dword ptr [esp+48]
:00404AE9 C744247414000000        mov [esp+74], 00000014
:00404AF1 50                      push eax
:00404AF2 56                      push esi
:00404AF3 E8B89F1F00              call 005FEAB0
:00404AF8 8BF8                    mov edi, eax
:00404AFA EB02                    jmp 00404AFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404A16(C)
|
:00404AFC 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404AFA(U)
|
:00404AFE F6C380                  test bl, 80
:00404B01 C744245815000000        mov [esp+58], 00000015
:00404B09 5D                      pop ebp
:00404B0A 7419                    je 00404B25
:00404B0C 8B4C2438                mov ecx, dword ptr [esp+38]
:00404B10 80E37F                  and bl, 7F
:00404B13 85C9                    test ecx, ecx
:00404B15 895C240C                mov dword ptr [esp+0C], ebx
:00404B19 740A                    je 00404B25
:00404B1B 8D542438                lea edx, dword ptr [esp+38]
:00404B1F 52                      push edx
:00404B20 E8FB971F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404B0A(C), :00404B19(C)
|
:00404B25 F6C340                  test bl, 40
:00404B28 C744245402000000        mov [esp+54], 00000002
:00404B30 7417                    je 00404B49
:00404B32 8B442464                mov eax, dword ptr [esp+64]
:00404B36 83C0F4                  add eax, FFFFFFF4
:00404B39 8B08                    mov ecx, dword ptr [eax]
:00404B3B 49                      dec ecx
:00404B3C 8908                    mov dword ptr [eax], ecx
:00404B3E 7509                    jne 00404B49
:00404B40 50                      push eax
:00404B41 E8BAC71D00              call 005E1300
:00404B46 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404B30(C), :00404B3E(C)
|
:00404B49 8B4C244C                mov ecx, dword ptr [esp+4C]
:00404B4D C7472001000000          mov [edi+20], 00000001
:00404B54 8BC6                    mov eax, esi
:00404B56 5F                      pop edi
:00404B57 5E                      pop esi
:00404B58 5B                      pop ebx
:00404B59 64890D00000000          mov dword ptr fs:[00000000], ecx
:00404B60 83C44C                  add esp, 0000004C
:00404B63 C20C00                  ret 000C


:00404B66 90                      nop
:00404B67 90                      nop
:00404B68 90                      nop
:00404B69 90                      nop
:00404B6A 90                      nop
:00404B6B 90                      nop
:00404B6C 90                      nop
:00404B6D 90                      nop
:00404B6E 90                      nop
:00404B6F 90                      nop
:00404B70 8B442404                mov eax, dword ptr [esp+04]
:00404B74 56                      push esi
:00404B75 8BF1                    mov esi, ecx
:00404B77 8B4804                  mov ecx, dword ptr [eax+04]
:00404B7A 8B4120                  mov eax, dword ptr [ecx+20]
:00404B7D 85C0                    test eax, eax
:00404B7F 7C0C                    jl 00404B8D
:00404B81 8B8EF6000000            mov ecx, dword ptr [esi+000000F6]
:00404B87 50                      push eax
:00404B88 E8C3D70300              call 00442350

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404B7F(C)
|
:00404B8D 8B16                    mov edx, dword ptr [esi]
:00404B8F 6A10                    push 00000010
:00404B91 8BCE                    mov ecx, esi
:00404B93 FF5234                  call [edx+34]
:00404B96 5E                      pop esi
:00404B97 C20400                  ret 0004


:00404B9A 90                      nop
:00404B9B 90                      nop
:00404B9C 90                      nop
:00404B9D 90                      nop
:00404B9E 90                      nop
:00404B9F 90                      nop
:00404BA0 8B01                    mov eax, dword ptr [ecx]
:00404BA2 6A10                    push 00000010
:00404BA4 FF5034                  call [eax+34]
:00404BA7 B001                    mov al, 01
:00404BA9 C20C00                  ret 000C


:00404BAC 90                      nop
:00404BAD 90                      nop
:00404BAE 90                      nop
:00404BAF 90                      nop
:00404BB0 E90B000000              jmp 00404BC0
:00404BB5 90                      nop
:00404BB6 90                      nop
:00404BB7 90                      nop
:00404BB8 90                      nop
:00404BB9 90                      nop
:00404BBA 90                      nop
:00404BBB 90                      nop
:00404BBC 90                      nop
:00404BBD 90                      nop
:00404BBE 90                      nop
:00404BBF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404BB0(U)
|
:00404BC0 D90560837000            fld dword ptr [00708360]
:00404BC6 D83594877000            fdiv dword ptr [00708794]
:00404BCC D91D48987A00            fstp dword ptr [007A9848]
:00404BD2 C3                      ret


:00404BD3 90                      nop
:00404BD4 90                      nop
:00404BD5 90                      nop
:00404BD6 90                      nop
:00404BD7 90                      nop
:00404BD8 90                      nop
:00404BD9 90                      nop
:00404BDA 90                      nop
:00404BDB 90                      nop
:00404BDC 90                      nop
:00404BDD 90                      nop
:00404BDE 90                      nop
:00404BDF 90                      nop
:00404BE0 8A0DA8D47A00            mov cl, byte ptr [007AD4A8]
:00404BE6 B001                    mov al, 01
:00404BE8 84C8                    test al, cl
:00404BEA 7508                    jne 00404BF4
:00404BEC 0AC8                    or cl, al
:00404BEE 880DA8D47A00            mov byte ptr [007AD4A8], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404BEA(C)
|
:00404BF4 E907000000              jmp 00404C00
:00404BF9 90                      nop
:00404BFA 90                      nop
:00404BFB 90                      nop
:00404BFC 90                      nop
:00404BFD 90                      nop
:00404BFE 90                      nop
:00404BFF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404BF4(U)
|
:00404C00 6880104000              push 00401080
:00404C05 E853982B00              call 006BE45D
:00404C0A 59                      pop ecx
:00404C0B C3                      ret


:00404C0C 90                      nop
:00404C0D 90                      nop
:00404C0E 90                      nop
:00404C0F 90                      nop
:00404C10 8B91F2000000            mov edx, dword ptr [ecx+000000F2]
:00404C16 33C0                    xor eax, eax
:00404C18 85D2                    test edx, edx
:00404C1A 0F94C0                  sete al
:00404C1D C3                      ret


:00404C1E 90                      nop
:00404C1F 90                      nop

* Referenced by a CALL at Addresses:
|:004046AA   , :004047FE   , :00404952   , :00404AA3   
|
:00404C20 51                      push ecx
:00404C21 8B44240C                mov eax, dword ptr [esp+0C]
:00404C25 53                      push ebx
:00404C26 56                      push esi
:00404C27 57                      push edi
:00404C28 83EC10                  sub esp, 00000010
:00404C2B 33D2                    xor edx, edx
:00404C2D 8BDC                    mov ebx, esp
:00404C2F 33F6                    xor esi, esi
:00404C31 33FF                    xor edi, edi
:00404C33 8903                    mov dword ptr [ebx], eax
:00404C35 897C241C                mov dword ptr [esp+1C], edi
:00404C39 895304                  mov dword ptr [ebx+04], edx
:00404C3C 897308                  mov dword ptr [ebx+08], esi
:00404C3F 8B742424                mov esi, dword ptr [esp+24]
:00404C43 56                      push esi
:00404C44 897B0C                  mov dword ptr [ebx+0C], edi
:00404C47 E814EAFFFF              call 00403660
:00404C4C 8BC6                    mov eax, esi
:00404C4E 5F                      pop edi
:00404C4F 5E                      pop esi
:00404C50 5B                      pop ebx
:00404C51 59                      pop ecx
:00404C52 C20C00                  ret 000C


:00404C55 90                      nop
:00404C56 90                      nop
:00404C57 90                      nop
:00404C58 90                      nop
:00404C59 90                      nop
:00404C5A 90                      nop
:00404C5B 90                      nop
:00404C5C 90                      nop
:00404C5D 90                      nop
:00404C5E 90                      nop
:00404C5F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404D43(U)
|
:00404C60 56                      push esi
:00404C61 8BF1                    mov esi, ecx
:00404C63 E878000000              call 00404CE0
:00404C68 F644240801              test [esp+08], 01
:00404C6D 7409                    je 00404C78
:00404C6F 56                      push esi
:00404C70 E88BC61D00              call 005E1300
:00404C75 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404C6D(C)
|
:00404C78 8BC6                    mov eax, esi
:00404C7A 5E                      pop esi
:00404C7B C20400                  ret 0004


:00404C7E 90                      nop
:00404C7F 90                      nop

* Referenced by a CALL at Address:
|:00600CE3   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CF0DB(U), :006CF55B(U), :006CF5B1(U), :006CF5D3(U), :006CF705(U)
|:006D12CB(U), :006D1DB3(U), :006D1F14(U), :006D2450(U), :006D3877(U)
|:006D3ACC(U), :006D4A9A(U), :006D5F2B(U), :006D685B(U), :006D729B(U)
|:006D762A(U), :006D7819(U), :006D7A01(U), :006D7DFD(U), :006D856F(U)
|:006D89CB(U), :006D976B(U), :006D998E(U), :006DA8CB(U), :006DA9F2(U)
|:006DAA2D(U), :006DB16B(U), :006DB45A(U), :006DB65A(U), :006DB858(U)
|:006DB9D3(U), :006DBA8B(U), :006DBB0B(U), :006DBBEB(U), :006EFABB(U)
|:006EFCC0(U)
|
:00404C80 6AFF                    push FFFFFFFF
:00404C82 68D8F16C00              push 006CF1D8
:00404C87 64A100000000            mov eax, dword ptr fs:[00000000]
:00404C8D 50                      push eax
:00404C8E 64892500000000          mov dword ptr fs:[00000000], esp
:00404C95 51                      push ecx
:00404C96 56                      push esi
:00404C97 8BF1                    mov esi, ecx
:00404C99 89742404                mov dword ptr [esp+04], esi
:00404C9D 8B8EF2000000            mov ecx, dword ptr [esi+000000F2]
:00404CA3 C744241000000000        mov [esp+10], 00000000
:00404CAB 85C9                    test ecx, ecx
:00404CAD 7405                    je 00404CB4
:00404CAF 8B01                    mov eax, dword ptr [ecx]
:00404CB1 FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404CAD(C)
|
:00404CB4 8BCE                    mov ecx, esi
:00404CB6 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00404CBE E81D7D1F00              call 005FC9E0
:00404CC3 8B4C2408                mov ecx, dword ptr [esp+08]
:00404CC7 5E                      pop esi
:00404CC8 64890D00000000          mov dword ptr fs:[00000000], ecx
:00404CCF 83C410                  add esp, 00000010
:00404CD2 C3                      ret


:00404CD3 90                      nop
:00404CD4 90                      nop
:00404CD5 90                      nop
:00404CD6 90                      nop
:00404CD7 90                      nop
:00404CD8 90                      nop
:00404CD9 90                      nop
:00404CDA 90                      nop
:00404CDB 90                      nop
:00404CDC 90                      nop
:00404CDD 90                      nop
:00404CDE 90                      nop
:00404CDF 90                      nop

* Referenced by a CALL at Address:
|:00404C63   
|
:00404CE0 6AFF                    push FFFFFFFF
:00404CE2 68F8F16C00              push 006CF1F8
:00404CE7 64A100000000            mov eax, dword ptr fs:[00000000]
:00404CED 50                      push eax
:00404CEE 64892500000000          mov dword ptr fs:[00000000], esp
:00404CF5 51                      push ecx
:00404CF6 56                      push esi
:00404CF7 8BF1                    mov esi, ecx
:00404CF9 89742404                mov dword ptr [esp+04], esi
:00404CFD 8B8EF2000000            mov ecx, dword ptr [esi+000000F2]
:00404D03 C744241000000000        mov [esp+10], 00000000
:00404D0B 85C9                    test ecx, ecx
:00404D0D 7405                    je 00404D14
:00404D0F 8B01                    mov eax, dword ptr [ecx]
:00404D11 FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404D0D(C)
|
:00404D14 8BCE                    mov ecx, esi
:00404D16 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00404D1E E8BD7C1F00              call 005FC9E0
:00404D23 8B4C2408                mov ecx, dword ptr [esp+08]
:00404D27 5E                      pop esi
:00404D28 64890D00000000          mov dword ptr fs:[00000000], ecx
:00404D2F 83C410                  add esp, 00000010
:00404D32 C3                      ret


:00404D33 90                      nop
:00404D34 90                      nop
:00404D35 90                      nop
:00404D36 90                      nop
:00404D37 90                      nop
:00404D38 90                      nop
:00404D39 90                      nop
:00404D3A 90                      nop
:00404D3B 90                      nop
:00404D3C 90                      nop
:00404D3D 90                      nop
:00404D3E 90                      nop
:00404D3F 90                      nop
:00404D40 83E908                  sub ecx, 00000008
:00404D43 E918FFFFFF              jmp 00404C60
:00404D48 CC                      int 03
:00404D49 CC                      int 03
:00404D4A CC                      int 03
:00404D4B CC                      int 03
:00404D4C CC                      int 03
:00404D4D CC                      int 03
:00404D4E CC                      int 03
:00404D4F CC                      int 03

* Referenced by a CALL at Address:
|:00405CDC   
|
:00404D50 83EC08                  sub esp, 00000008
:00404D53 8B442418                mov eax, dword ptr [esp+18]
:00404D57 56                      push esi
:00404D58 8BF1                    mov esi, ecx
:00404D5A 50                      push eax
:00404D5B 8B4C241C                mov ecx, dword ptr [esp+1C]
:00404D5F 8D542408                lea edx, dword ptr [esp+08]
:00404D63 51                      push ecx
:00404D64 52                      push edx
:00404D65 8BCE                    mov ecx, esi
:00404D67 C744241000000000        mov [esp+10], 00000000
:00404D6F C74424140C000000        mov [esp+14], 0000000C
:00404D77 E8E4C21F00              call 00601060
:00404D7C 8B4C2410                mov ecx, dword ptr [esp+10]
:00404D80 8B01                    mov eax, dword ptr [ecx]
:00404D82 89862C010000            mov dword ptr [esi+0000012C], eax
:00404D88 8B50F4                  mov edx, dword ptr [eax-0C]
:00404D8B 42                      inc edx
:00404D8C 8950F4                  mov dword ptr [eax-0C], edx
:00404D8F 8B4104                  mov eax, dword ptr [ecx+04]
:00404D92 898630010000            mov dword ptr [esi+00000130], eax
:00404D98 8B442414                mov eax, dword ptr [esp+14]
:00404D9C 8B10                    mov edx, dword ptr [eax]
:00404D9E 899638010000            mov dword ptr [esi+00000138], edx
:00404DA4 8B5004                  mov edx, dword ptr [eax+04]
:00404DA7 89963C010000            mov dword ptr [esi+0000013C], edx
:00404DAD 8B4008                  mov eax, dword ptr [eax+08]
:00404DB0 898640010000            mov dword ptr [esi+00000140], eax
:00404DB6 C70624897000            mov dword ptr [esi], 00708924
:00404DBC C746081C897000          mov [esi+08], 0070891C
:00404DC3 D94104                  fld dword ptr [ecx+04]
:00404DC6 D80D14897000            fmul dword ptr [00708914]
:00404DCC E8BF9B2B00              call 006BE990
:00404DD1 898634010000            mov dword ptr [esi+00000134], eax
:00404DD7 8BC6                    mov eax, esi
:00404DD9 5E                      pop esi
:00404DDA 83C408                  add esp, 00000008
:00404DDD C21000                  ret 0010


:00404DE0 6AFF                    push FFFFFFFF
:00404DE2 6870F26C00              push 006CF270
:00404DE7 64A100000000            mov eax, dword ptr fs:[00000000]
:00404DED 50                      push eax
:00404DEE 64892500000000          mov dword ptr fs:[00000000], esp
:00404DF5 83EC58                  sub esp, 00000058
:00404DF8 53                      push ebx
:00404DF9 55                      push ebp
:00404DFA 56                      push esi
:00404DFB 8BF1                    mov esi, ecx
:00404DFD 57                      push edi
:00404DFE 6A01                    push 00000001
:00404E00 8B8EC8000000            mov ecx, dword ptr [esi+000000C8]
:00404E06 8BBEC0000000            mov edi, dword ptr [esi+000000C0]
:00404E0C 8B86CC000000            mov eax, dword ptr [esi+000000CC]
:00404E12 8B9EC4000000            mov ebx, dword ptr [esi+000000C4]
:00404E18 2BCF                    sub ecx, edi
:00404E1A 8B7C247C                mov edi, dword ptr [esp+7C]
:00404E1E 894C2464                mov dword ptr [esp+64], ecx
:00404E22 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00404E28 2BC3                    sub eax, ebx
:00404E2A 33DB                    xor ebx, ebx
:00404E2C 8D91DC000000            lea edx, dword ptr [ecx+000000DC]
:00404E32 895C245C                mov dword ptr [esp+5C], ebx
:00404E36 52                      push edx
:00404E37 8D542460                lea edx, dword ptr [esp+60]
:00404E3B 895C2464                mov dword ptr [esp+64], ebx
:00404E3F 8944246C                mov dword ptr [esp+6C], eax
:00404E43 8B01                    mov eax, dword ptr [ecx]
:00404E45 52                      push edx
:00404E46 57                      push edi
:00404E47 FF5034                  call [eax+34]
:00404E4A 8B8634010000            mov eax, dword ptr [esi+00000134]
:00404E50 50                      push eax

* Possible StringData Ref from Data Obj ->"%d%%"
                                  |
:00404E51 6878B27800              push 0078B278
:00404E56 E8556F1E00              call 005EBDB0
:00404E5B 8B00                    mov eax, dword ptr [eax]
:00404E5D 83C408                  add esp, 00000008
:00404E60 89442410                mov dword ptr [esp+10], eax
:00404E64 FF40F4                  inc [eax-0C]
:00404E67 8B862C010000            mov eax, dword ptr [esi+0000012C]
:00404E6D 895C2470                mov dword ptr [esp+70], ebx
:00404E71 89442478                mov dword ptr [esp+78], eax
:00404E75 FF40F4                  inc [eax-0C]
:00404E78 8B8EC8000000            mov ecx, dword ptr [esi+000000C8]
:00404E7E 8B96C0000000            mov edx, dword ptr [esi+000000C0]
:00404E84 8B86CC000000            mov eax, dword ptr [esi+000000CC]
:00404E8A 8BAEC4000000            mov ebp, dword ptr [esi+000000C4]
:00404E90 2BCA                    sub ecx, edx
:00404E92 2BC5                    sub eax, ebp
:00404E94 894C2440                mov dword ptr [esp+40], ecx
:00404E98 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00404E9E 895C2438                mov dword ptr [esp+38], ebx
:00404EA2 895C243C                mov dword ptr [esp+3C], ebx
:00404EA6 89442444                mov dword ptr [esp+44], eax
:00404EAA 8B5158                  mov edx, dword ptr [ecx+58]
:00404EAD 89542420                mov dword ptr [esp+20], edx
:00404EB1 8B415C                  mov eax, dword ptr [ecx+5C]
:00404EB4 8BAECC000000            mov ebp, dword ptr [esi+000000CC]
:00404EBA 89442424                mov dword ptr [esp+24], eax
:00404EBE 8B8638010000            mov eax, dword ptr [esi+00000138]
:00404EC4 8B5160                  mov edx, dword ptr [ecx+60]
:00404EC7 89442414                mov dword ptr [esp+14], eax
:00404ECB 8B8640010000            mov eax, dword ptr [esi+00000140]
:00404ED1 89542428                mov dword ptr [esp+28], edx
:00404ED5 8B963C010000            mov edx, dword ptr [esi+0000013C]
:00404EDB 8944241C                mov dword ptr [esp+1C], eax
:00404EDF 8B86C4000000            mov eax, dword ptr [esi+000000C4]
:00404EE5 89542418                mov dword ptr [esp+18], edx
:00404EE9 8B96C0000000            mov edx, dword ptr [esi+000000C0]
:00404EEF 2BE8                    sub ebp, eax
:00404EF1 8B86C8000000            mov eax, dword ptr [esi+000000C8]
:00404EF7 2BC2                    sub eax, edx
:00404EF9 8B9634010000            mov edx, dword ptr [esi+00000134]
:00404EFF 0FAFD0                  imul edx, eax
:00404F02 B81F85EB51              mov eax, 51EB851F
:00404F07 C644247001              mov [esp+70], 01
:00404F0C F7EA                    imul edx
:00404F0E C1FA05                  sar edx, 05
:00404F11 895C2448                mov dword ptr [esp+48], ebx
:00404F15 8BC2                    mov eax, edx
:00404F17 C1E81F                  shr eax, 1F
:00404F1A 03D0                    add edx, eax
:00404F1C 8D442414                lea eax, dword ptr [esp+14]
:00404F20 6A01                    push 00000001
:00404F22 4D                      dec ebp
:00404F23 50                      push eax
:00404F24 8D442450                lea eax, dword ptr [esp+50]
:00404F28 89542458                mov dword ptr [esp+58], edx
:00404F2C C744245401000000        mov [esp+54], 00000001
:00404F34 896C245C                mov dword ptr [esp+5C], ebp
:00404F38 8B11                    mov edx, dword ptr [ecx]
:00404F3A 50                      push eax
:00404F3B 57                      push edi
:00404F3C FF5234                  call [edx+34]
:00404F3F D944241C                fld dword ptr [esp+1C]
:00404F43 D80D948A7000            fmul dword ptr [00708A94]
:00404F49 D9442418                fld dword ptr [esp+18]
:00404F4D D80D948A7000            fmul dword ptr [00708A94]
:00404F53 D9442414                fld dword ptr [esp+14]
:00404F57 D80D948A7000            fmul dword ptr [00708A94]
:00404F5D 8B96C8000000            mov edx, dword ptr [esi+000000C8]
:00404F63 8BAEC0000000            mov ebp, dword ptr [esi+000000C0]
:00404F69 8B4C2450                mov ecx, dword ptr [esp+50]
:00404F6D 2BD5                    sub edx, ebp
:00404F6F 89542450                mov dword ptr [esp+50], edx
:00404F73 8D54242C                lea edx, dword ptr [esp+2C]
:00404F77 D95C242C                fstp dword ptr [esp+2C]
:00404F7B 894C2448                mov dword ptr [esp+48], ecx
:00404F7F 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00404F85 D95C2430                fstp dword ptr [esp+30]
:00404F89 6A01                    push 00000001
:00404F8B 52                      push edx
:00404F8C D95C243C                fstp dword ptr [esp+3C]
:00404F90 8B01                    mov eax, dword ptr [ecx]
:00404F92 8D542450                lea edx, dword ptr [esp+50]
:00404F96 52                      push edx
:00404F97 57                      push edi
:00404F98 FF5034                  call [eax+34]
:00404F9B 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00404FA1 53                      push ebx
:00404FA2 8D542414                lea edx, dword ptr [esp+14]
:00404FA6 6A01                    push 00000001
:00404FA8 52                      push edx
:00404FA9 8D542444                lea edx, dword ptr [esp+44]
:00404FAD 52                      push edx
:00404FAE 8D542430                lea edx, dword ptr [esp+30]
:00404FB2 C744244801000000        mov [esp+48], 00000001
:00404FBA C744245020000000        mov [esp+50], 00000020
:00404FC2 8B01                    mov eax, dword ptr [ecx]
:00404FC4 52                      push edx
:00404FC5 8B5114                  mov edx, dword ptr [ecx+14]
:00404FC8 52                      push edx
:00404FC9 57                      push edi
:00404FCA FF501C                  call [eax+1C]
:00404FCD 8B86C8000000            mov eax, dword ptr [esi+000000C8]
:00404FD3 8B96C0000000            mov edx, dword ptr [esi+000000C0]
:00404FD9 2BC2                    sub eax, edx
:00404FDB 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00404FE1 83E802                  sub eax, 00000002
:00404FE4 53                      push ebx
:00404FE5 89442444                mov dword ptr [esp+44], eax
:00404FE9 8D44247C                lea eax, dword ptr [esp+7C]
:00404FED 53                      push ebx
:00404FEE 50                      push eax
:00404FEF 8D442444                lea eax, dword ptr [esp+44]
:00404FF3 C744244426000000        mov [esp+44], 00000026
:00404FFB 8B11                    mov edx, dword ptr [ecx]
:00404FFD 50                      push eax
:00404FFE 8D442430                lea eax, dword ptr [esp+30]
:00405002 50                      push eax
:00405003 8B4114                  mov eax, dword ptr [ecx+14]
:00405006 50                      push eax
:00405007 57                      push edi
:00405008 FF521C                  call [edx+1C]
:0040500B 8B4C2478                mov ecx, dword ptr [esp+78]
:0040500F 885C2470                mov byte ptr [esp+70], bl
:00405013 5F                      pop edi
:00405014 8D41F4                  lea eax, dword ptr [ecx-0C]
:00405017 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040501A 49                      dec ecx
:0040501B 8908                    mov dword ptr [eax], ecx
:0040501D 5E                      pop esi
:0040501E 5D                      pop ebp
:0040501F 5B                      pop ebx
:00405020 7509                    jne 0040502B
:00405022 50                      push eax
:00405023 E8D8C21D00              call 005E1300
:00405028 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405020(C)
|
:0040502B 8B542400                mov edx, dword ptr [esp]
:0040502F C7442460FFFFFFFF        mov [esp+60], FFFFFFFF
:00405037 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040503A 8D42F4                  lea eax, dword ptr [edx-0C]
:0040503D 49                      dec ecx
:0040503E 8908                    mov dword ptr [eax], ecx
:00405040 7509                    jne 0040504B
:00405042 50                      push eax
:00405043 E8B8C21D00              call 005E1300
:00405048 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405040(C)
|
:0040504B 8B4C2458                mov ecx, dword ptr [esp+58]
:0040504F 64890D00000000          mov dword ptr fs:[00000000], ecx
:00405056 83C464                  add esp, 00000064
:00405059 C20400                  ret 0004


:0040505C 90                      nop
:0040505D 90                      nop
:0040505E 90                      nop
:0040505F 90                      nop
:00405060 6AFF                    push FFFFFFFF
:00405062 6833F36C00              push 006CF333
:00405067 64A100000000            mov eax, dword ptr fs:[00000000]
:0040506D 50                      push eax
:0040506E 64892500000000          mov dword ptr fs:[00000000], esp
:00405075 83EC4C                  sub esp, 0000004C
:00405078 A128FE7200              mov eax, dword ptr [0072FE28]
:0040507D 55                      push ebp
:0040507E 56                      push esi
:0040507F 57                      push edi
:00405080 8BF1                    mov esi, ecx
:00405082 33ED                    xor ebp, ebp
:00405084 50                      push eax

* Possible StringData Ref from Data Obj ->"Actor"
                                  |
:00405085 68DCB27800              push 0078B2DC
:0040508A 8D4C2418                lea ecx, dword ptr [esp+18]
:0040508E 89742420                mov dword ptr [esp+20], esi
:00405092 896C2414                mov dword ptr [esp+14], ebp
:00405096 E815601E00              call 005EB0B0
:0040509B 8B442468                mov eax, dword ptr [esp+68]
:0040509F 8D4C2410                lea ecx, dword ptr [esp+10]
:004050A3 8D542424                lea edx, dword ptr [esp+24]
:004050A7 51                      push ecx
:004050A8 52                      push edx
:004050A9 50                      push eax
:004050AA 8BCE                    mov ecx, esi
:004050AC 896C246C                mov dword ptr [esp+6C], ebp
:004050B0 896C2430                mov dword ptr [esp+30], ebp
:004050B4 896C2434                mov dword ptr [esp+34], ebp
:004050B8 C7442438AE010000        mov [esp+38], 000001AE
:004050C0 C744243CA0000000        mov [esp+3C], 000000A0
:004050C8 E8D3D91F00              call 00602AA0
:004050CD 8B4C2410                mov ecx, dword ptr [esp+10]
:004050D1 C644246002              mov [esp+60], 02
:004050D6 8D41F4                  lea eax, dword ptr [ecx-0C]
:004050D9 8B49F4                  mov ecx, dword ptr [ecx-0C]
:004050DC 49                      dec ecx
:004050DD 8908                    mov dword ptr [eax], ecx
:004050DF 7509                    jne 004050EA
:004050E1 50                      push eax
:004050E2 E819C21D00              call 005E1300
:004050E7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004050DF(C)
|
:004050EA 53                      push ebx
:004050EB 89AE02010000            mov dword ptr [esi+00000102], ebp
:004050F1 33C9                    xor ecx, ecx
:004050F3 B860564000              mov eax, 00405660
:004050F8 51                      push ecx
:004050F9 8D54242C                lea edx, dword ptr [esp+2C]
:004050FD 50                      push eax
:004050FE 52                      push edx
:004050FF 8BCE                    mov ecx, esi
:00405101 C644247003              mov [esp+70], 03
:00405106 E8550F0000              call 00406060
:0040510B 8BD8                    mov ebx, eax
:0040510D 8DBE1A010000            lea edi, dword ptr [esi+0000011A]
:00405113 C644246404              mov [esp+64], 04
:00405118 C60700                  mov byte ptr [edi], 00
:0040511B 896F01                  mov dword ptr [edi+01], ebp
:0040511E E89DE81F00              call 006039C0
:00405123 894705                  mov dword ptr [edi+05], eax
:00405126 53                      push ebx
:00405127 8D4F0D                  lea ecx, dword ptr [edi+0D]
:0040512A 895709                  mov dword ptr [edi+09], edx
:0040512D E85E120000              call 00406390
:00405132 8B4C2428                mov ecx, dword ptr [esp+28]
:00405136 BB06000000              mov ebx, 00000006
:0040513B 3BCD                    cmp ecx, ebp
:0040513D 885C2464                mov byte ptr [esp+64], bl
:00405141 740A                    je 0040514D
:00405143 8D442428                lea eax, dword ptr [esp+28]
:00405147 50                      push eax
:00405148 E8D3911F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405141(C)
|
:0040514D 8D54246C                lea edx, dword ptr [esp+6C]
:00405151 8D8E3B010000            lea ecx, dword ptr [esi+0000013B]
:00405157 52                      push edx
:00405158 C644246807              mov [esp+68], 07
:0040515D E82E130000              call 00406490
:00405162 8BCE                    mov ecx, esi
:00405164 C644246409              mov [esp+64], 09
:00405169 C706A48A7000            mov dword ptr [esi], 00708AA4
:0040516F C746089C8A7000          mov [esi+08], 00708A9C
:00405176 E8457F1F00              call 005FD0C0
:0040517B 680B010000              push 0000010B
:00405180 E8FBC01D00              call 005E1280
:00405185 83C404                  add esp, 00000004
:00405188 89442418                mov dword ptr [esp+18], eax
:0040518C 3BC5                    cmp eax, ebp
:0040518E C64424640A              mov [esp+64], 0A
:00405193 742B                    je 004051C0
:00405195 8D4C2428                lea ecx, dword ptr [esp+28]
:00405199 895C2428                mov dword ptr [esp+28], ebx
:0040519D 51                      push ecx
:0040519E 56                      push esi
:0040519F 8BC8                    mov ecx, eax
:004051A1 C744243417000000        mov [esp+34], 00000017
:004051A9 C7442438E2000000        mov [esp+38], 000000E2
:004051B1 C744243C99000000        mov [esp+3C], 00000099
:004051B9 E8A2C61F00              call 00601860
:004051BE EB02                    jmp 004051C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405193(C)
|
:004051C0 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004051BE(U)
|
:004051C2 8986FA000000            mov dword ptr [esi+000000FA], eax
:004051C8 8B86C8000000            mov eax, dword ptr [esi+000000C8]
:004051CE 8BAEC0000000            mov ebp, dword ptr [esi+000000C0]
:004051D4 8D9E0A010000            lea ebx, dword ptr [esi+0000010A]
:004051DA 2BC5                    sub eax, ebp
:004051DC 8BEB                    mov ebp, ebx
:004051DE B9E9000000              mov ecx, 000000E9
:004051E3 BA17000000              mov edx, 00000017
:004051E8 894D00                  mov dword ptr [ebp+00], ecx
:004051EB 83C0FA                  add eax, FFFFFFFA
:004051EE C744243499000000        mov [esp+34], 00000099
:004051F6 6A3B                    push 0000003B
:004051F8 895504                  mov dword ptr [ebp+04], edx
:004051FB 8B542438                mov edx, dword ptr [esp+38]
:004051FF C644246809              mov [esp+68], 09
:00405204 894508                  mov dword ptr [ebp+08], eax
:00405207 89550C                  mov dword ptr [ebp+0C], edx
:0040520A E871C01D00              call 005E1280
:0040520F 8BE8                    mov ebp, eax
:00405211 83C404                  add esp, 00000004
:00405214 896C2418                mov dword ptr [esp+18], ebp
:00405218 85ED                    test ebp, ebp
:0040521A 0F84B4000000            je 004052D4
:00405220 8B430C                  mov eax, dword ptr [ebx+0C]
:00405223 8B4B04                  mov ecx, dword ptr [ebx+04]
:00405226 8B13                    mov edx, dword ptr [ebx]
:00405228 2BC1                    sub eax, ecx
:0040522A 8B4B08                  mov ecx, dword ptr [ebx+08]
:0040522D 8B1D88DA7900            mov ebx, dword ptr [0079DA88]
:00405233 2BCA                    sub ecx, edx
:00405235 43                      inc ebx
:00405236 894C2420                mov dword ptr [esp+20], ecx
:0040523A 89442424                mov dword ptr [esp+24], eax
:0040523E 891D88DA7900            mov dword ptr [0079DA88], ebx
:00405244 C744244094DA7900        mov [esp+40], 0079DA94
:0040524C 68FF000000              push 000000FF
:00405251 6800FF0000              push 0000FF00
:00405256 680000FF00              push 00FF0000
:0040525B 8D4C2448                lea ecx, dword ptr [esp+48]
:0040525F C64424700C              mov [esp+70], 0C
:00405264 C744244880847000        mov [esp+48], 00708480
:0040526C C644245020              mov [esp+50], 20
:00405271 E87A701E00              call 005EC2F0
:00405276 8D442420                lea eax, dword ptr [esp+20]
:0040527A 8D4C243C                lea ecx, dword ptr [esp+3C]
:0040527E 50                      push eax
:0040527F 51                      push ecx
:00405280 8BCD                    mov ecx, ebp
:00405282 C644246C0D              mov [esp+6C], 0D
:00405287 E8748B1E00              call 005EDE00
:0040528C C7450004847000          mov [ebp+00], 00708404
:00405293 8B450C                  mov eax, dword ptr [ebp+0C]
:00405296 0FAF4508                imul eax, dword ptr [ebp+08]
:0040529A C1E002                  shl eax, 02
:0040529D 50                      push eax
:0040529E C64424680E              mov [esp+68], 0E
:004052A3 E8D8BF1D00              call 005E1280
:004052A8 83C404                  add esp, 00000004
:004052AB 894533                  mov dword ptr [ebp+33], eax
:004052AE 8B542440                mov edx, dword ptr [esp+40]
:004052B2 C644246410              mov [esp+64], 10
:004052B7 8B4AF4                  mov ecx, dword ptr [edx-0C]
:004052BA 8D42F4                  lea eax, dword ptr [edx-0C]
:004052BD 49                      dec ecx
:004052BE 8908                    mov dword ptr [eax], ecx
:004052C0 7509                    jne 004052CB
:004052C2 50                      push eax
:004052C3 E838C01D00              call 005E1300
:004052C8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004052C0(C)
|
:004052CB C7450080837000          mov [ebp+00], 00708380
:004052D2 EB02                    jmp 004052D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040521A(C)
|
:004052D4 33ED                    xor ebp, ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004052D2(U)
|
:004052D6 8B8E02010000            mov ecx, dword ptr [esi+00000102]
:004052DC C644246409              mov [esp+64], 09
:004052E1 85C9                    test ecx, ecx
:004052E3 89AE02010000            mov dword ptr [esi+00000102], ebp
:004052E9 7405                    je 004052F0
:004052EB 8B01                    mov eax, dword ptr [ecx]
:004052ED FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004052E9(C)
|
:004052F0 8B8E02010000            mov ecx, dword ptr [esi+00000102]
:004052F6 33C0                    xor eax, eax
:004052F8 89442428                mov dword ptr [esp+28], eax
:004052FC 50                      push eax
:004052FD 8B5108                  mov edx, dword ptr [ecx+08]
:00405300 89442430                mov dword ptr [esp+30], eax
:00405304 89542434                mov dword ptr [esp+34], edx
:00405308 8B510C                  mov edx, dword ptr [ecx+0C]
:0040530B 89542438                mov dword ptr [esp+38], edx
:0040530F 8B11                    mov edx, dword ptr [ecx]
:00405311 6A01                    push 00000001
:00405313 8D442430                lea eax, dword ptr [esp+30]
:00405317 68F4B47A00              push 007AB4F4
:0040531C 50                      push eax
:0040531D FF5230                  call [edx+30]
:00405320 682A010000              push 0000012A
:00405325 E856BF1D00              call 005E1280
:0040532A 8BD8                    mov ebx, eax
:0040532C 83C404                  add esp, 00000004
:0040532F 895C2418                mov dword ptr [esp+18], ebx
:00405333 85DB                    test ebx, ebx
:00405335 C644246411              mov [esp+64], 11
:0040533A 747E                    je 004053BA
:0040533C 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:00405342 51                      push ecx

* Possible StringData Ref from Data Obj ->"Close"
                                  |
:00405343 68D4B27800              push 0078B2D4
:00405348 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040534C E85F5D1E00              call 005EB0B0
:00405351 8BAEC8000000            mov ebp, dword ptr [esi+000000C8]
:00405357 8B96C0000000            mov edx, dword ptr [esi+000000C0]
:0040535D 33C9                    xor ecx, ecx
:0040535F B830CD5F00              mov eax, 005FCD30
:00405364 2BEA                    sub ebp, edx
:00405366 51                      push ecx
:00405367 8D542440                lea edx, dword ptr [esp+40]
:0040536B 50                      push eax
:0040536C 52                      push edx
:0040536D 8BCE                    mov ecx, esi
:0040536F C644247012              mov [esp+70], 12
:00405374 83ED41                  sub ebp, 00000041
:00405377 C744241C03000000        mov [esp+1C], 00000003
:0040537F E8DC0C0000              call 00406060
:00405384 8D4D3C                  lea ecx, dword ptr [ebp+3C]
:00405387 8D542428                lea edx, dword ptr [esp+28]
:0040538B 894C2430                mov dword ptr [esp+30], ecx
:0040538F 8D4C2414                lea ecx, dword ptr [esp+14]
:00405393 51                      push ecx
:00405394 50                      push eax
:00405395 52                      push edx
:00405396 56                      push esi
:00405397 8BCB                    mov ecx, ebx
:00405399 C744247413000000        mov [esp+74], 00000013
:004053A1 896C2438                mov dword ptr [esp+38], ebp
:004053A5 C744243C03000000        mov [esp+3C], 00000003
:004053AD C744244411000000        mov [esp+44], 00000011
:004053B5 E876911F00              call 005FE530

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040533A(C)
|
:004053BA 8B5C2410                mov ebx, dword ptr [esp+10]
:004053BE C744246414000000        mov [esp+64], 00000014
:004053C6 F6C302                  test bl, 02
:004053C9 7419                    je 004053E4
:004053CB 8B4C243C                mov ecx, dword ptr [esp+3C]
:004053CF 83E3FD                  and ebx, FFFFFFFD
:004053D2 85C9                    test ecx, ecx
:004053D4 895C2410                mov dword ptr [esp+10], ebx
:004053D8 740A                    je 004053E4
:004053DA 8D44243C                lea eax, dword ptr [esp+3C]
:004053DE 50                      push eax
:004053DF E83C8F1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004053C9(C), :004053D8(C)
|
:004053E4 F6C301                  test bl, 01
:004053E7 C744246409000000        mov [esp+64], 00000009
:004053EF 5B                      pop ebx
:004053F0 7418                    je 0040540A
:004053F2 8B4C2410                mov ecx, dword ptr [esp+10]
:004053F6 8D41F4                  lea eax, dword ptr [ecx-0C]
:004053F9 8B49F4                  mov ecx, dword ptr [ecx-0C]
:004053FC 49                      dec ecx
:004053FD 8908                    mov dword ptr [eax], ecx
:004053FF 7509                    jne 0040540A
:00405401 50                      push eax
:00405402 E8F9BE1D00              call 005E1300
:00405407 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004053F0(C), :004053FF(C)
|
:0040540A C7860601000000000000    mov dword ptr [esi+00000106], 00000000
:00405414 C60701                  mov byte ptr [edi], 01
:00405417 C74701F4010000          mov [edi+01], 000001F4
:0040541E E89DE51F00              call 006039C0
:00405423 894705                  mov dword ptr [edi+05], eax
:00405426 8B4701                  mov eax, dword ptr [edi+01]
:00405429 895709                  mov dword ptr [edi+09], edx
:0040542C 8B4F05                  mov ecx, dword ptr [edi+05]
:0040542F 8B6F09                  mov ebp, dword ptr [edi+09]
:00405432 897C2414                mov dword ptr [esp+14], edi
:00405436 99                      cdq
:00405437 03C1                    add eax, ecx
:00405439 13D5                    adc edx, ebp
:0040543B 894705                  mov dword ptr [edi+05], eax
:0040543E 895709                  mov dword ptr [edi+09], edx
:00405441 8D542414                lea edx, dword ptr [esp+14]
:00405445 52                      push edx
:00405446 51                      push ecx
:00405447 54                      push esp
:00405448 B9ADB67A00              mov ecx, 007AB6AD
:0040544D E87E0F0000              call 004063D0
:00405452 8D442424                lea eax, dword ptr [esp+24]
:00405456 B9ADB67A00              mov ecx, 007AB6AD
:0040545B 50                      push eax
:0040545C E87F0F0000              call 004063E0
:00405461 8B4C2458                mov ecx, dword ptr [esp+58]
:00405465 8BC6                    mov eax, esi
:00405467 5F                      pop edi
:00405468 5E                      pop esi
:00405469 5D                      pop ebp
:0040546A 64890D00000000          mov dword ptr fs:[00000000], ecx
:00405471 83C458                  add esp, 00000058
:00405474 C20400                  ret 0004


:00405477 90                      nop
:00405478 90                      nop
:00405479 90                      nop
:0040547A 90                      nop
:0040547B 90                      nop
:0040547C 90                      nop
:0040547D 90                      nop
:0040547E 90                      nop
:0040547F 90                      nop

* Referenced by a CALL at Address:
|:004060A3   
|
:00405480 6AFF                    push FFFFFFFF
:00405482 687FF36C00              push 006CF37F
:00405487 64A100000000            mov eax, dword ptr fs:[00000000]
:0040548D 50                      push eax
:0040548E 64892500000000          mov dword ptr fs:[00000000], esp
:00405495 83EC0C                  sub esp, 0000000C
:00405498 53                      push ebx
:00405499 8BD9                    mov ebx, ecx
:0040549B 55                      push ebp
:0040549C 56                      push esi
:0040549D 57                      push edi
:0040549E 895C2410                mov dword ptr [esp+10], ebx
:004054A2 C703A48A7000            mov dword ptr [ebx], 00708AA4
:004054A8 C743089C8A7000          mov [ebx+08], 00708A9C
:004054AF C744242400000000        mov [esp+24], 00000000
:004054B7 8DBB3B010000            lea edi, dword ptr [ebx+0000013B]
:004054BD 897C2414                mov dword ptr [esp+14], edi
:004054C1 8B6F04                  mov ebp, dword ptr [edi+04]
:004054C4 8B37                    mov esi, dword ptr [edi]
:004054C6 3BF5                    cmp esi, ebp
:004054C8 C644242403              mov [esp+24], 03
:004054CD 741C                    je 004054EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004054E9(C)
|
:004054CF 8B06                    mov eax, dword ptr [esi]
:004054D1 83E80C                  sub eax, 0000000C
:004054D4 8B08                    mov ecx, dword ptr [eax]
:004054D6 49                      dec ecx
:004054D7 8908                    mov dword ptr [eax], ecx
:004054D9 7509                    jne 004054E4
:004054DB 50                      push eax
:004054DC E81FBE1D00              call 005E1300
:004054E1 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004054D9(C)
|
:004054E4 83C608                  add esi, 00000008
:004054E7 3BF5                    cmp esi, ebp
:004054E9 75E4                    jne 004054CF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004054CD(C)
|
:004054EB 8B0F                    mov ecx, dword ptr [edi]
:004054ED 8B4708                  mov eax, dword ptr [edi+08]
:004054F0 2BC1                    sub eax, ecx
:004054F2 C644242404              mov [esp+24], 04
:004054F7 C1F803                  sar eax, 03
:004054FA 85C9                    test ecx, ecx
:004054FC 740D                    je 0040550B
:004054FE C1E003                  shl eax, 03
:00405501 50                      push eax
:00405502 51                      push ecx
:00405503 E8A8140000              call 004069B0
:00405508 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004054FC(C)
|
:0040550B 8DAB1A010000            lea ebp, dword ptr [ebx+0000011A]
:00405511 896C2414                mov dword ptr [esp+14], ebp
:00405515 8B0DADB67A00            mov ecx, dword ptr [007AB6AD]
:0040551B C644242405              mov [esp+24], 05
:00405520 8BF9                    mov edi, ecx
:00405522 8B01                    mov eax, dword ptr [ecx]
:00405524 3BC7                    cmp eax, edi
:00405526 7423                    je 0040554B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405549(C)
|
:00405528 8B4808                  mov ecx, dword ptr [eax+08]
:0040552B 8B30                    mov esi, dword ptr [eax]
:0040552D 3BCD                    cmp ecx, ebp
:0040552F 7514                    jne 00405545
:00405531 51                      push ecx
:00405532 8BCC                    mov ecx, esp
:00405534 8901                    mov dword ptr [ecx], eax
:00405536 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040553A 51                      push ecx
:0040553B B9ADB67A00              mov ecx, 007AB6AD
:00405540 E8AB140000              call 004069F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040552F(C)
|
:00405545 3BF7                    cmp esi, edi
:00405547 8BC6                    mov eax, esi
:00405549 75DD                    jne 00405528

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405526(C)
|
:0040554B 8B4D0D                  mov ecx, dword ptr [ebp+0D]
:0040554E 8D450D                  lea eax, dword ptr [ebp+0D]
:00405551 85C9                    test ecx, ecx
:00405553 C644242401              mov [esp+24], 01
:00405558 7406                    je 00405560
:0040555A 50                      push eax
:0040555B E8C08D1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405558(C)
|
:00405560 8B8B02010000            mov ecx, dword ptr [ebx+00000102]
:00405566 C644242400              mov [esp+24], 00
:0040556B 85C9                    test ecx, ecx
:0040556D 7405                    je 00405574
:0040556F 8B11                    mov edx, dword ptr [ecx]
:00405571 FF5204                  call [edx+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040556D(C)
|
:00405574 8BCB                    mov ecx, ebx
:00405576 C7442424FFFFFFFF        mov [esp+24], FFFFFFFF
:0040557E E88DD51F00              call 00602B10
:00405583 8B4C241C                mov ecx, dword ptr [esp+1C]
:00405587 5F                      pop edi
:00405588 5E                      pop esi
:00405589 5D                      pop ebp
:0040558A 64890D00000000          mov dword ptr fs:[00000000], ecx
:00405591 5B                      pop ebx
:00405592 83C418                  add esp, 00000018
:00405595 C3                      ret


:00405596 90                      nop
:00405597 90                      nop
:00405598 90                      nop
:00405599 90                      nop
:0040559A 90                      nop
:0040559B 90                      nop
:0040559C 90                      nop
:0040559D 90                      nop
:0040559E 90                      nop
:0040559F 90                      nop
:004055A0 83EC10                  sub esp, 00000010
:004055A3 53                      push ebx
:004055A4 8B5C2418                mov ebx, dword ptr [esp+18]
:004055A8 56                      push esi
:004055A9 57                      push edi
:004055AA 8BF1                    mov esi, ecx
:004055AC 53                      push ebx
:004055AD E8BED51F00              call 00602B70
:004055B2 8B86FA000000            mov eax, dword ptr [esi+000000FA]
:004055B8 6A00                    push 00000000
:004055BA 05C0000000              add eax, 000000C0
:004055BF 8B480C                  mov ecx, dword ptr [eax+0C]
:004055C2 8B5008                  mov edx, dword ptr [eax+08]
:004055C5 8B7804                  mov edi, dword ptr [eax+04]
:004055C8 8B00                    mov eax, dword ptr [eax]
:004055CA 83C102                  add ecx, 00000002
:004055CD 83E802                  sub eax, 00000002
:004055D0 894C241C                mov dword ptr [esp+1C], ecx
:004055D4 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:004055DA 83C202                  add edx, 00000002
:004055DD 83EF02                  sub edi, 00000002
:004055E0 89442410                mov dword ptr [esp+10], eax
:004055E4 8D442410                lea eax, dword ptr [esp+10]
:004055E8 897C2414                mov dword ptr [esp+14], edi
:004055EC 89542418                mov dword ptr [esp+18], edx
:004055F0 8B11                    mov edx, dword ptr [ecx]
:004055F2 50                      push eax
:004055F3 53                      push ebx
:004055F4 FF5220                  call [edx+20]
:004055F7 8B8E0A010000            mov ecx, dword ptr [esi+0000010A]
:004055FD 8DBE0A010000            lea edi, dword ptr [esi+0000010A]
:00405603 83E902                  sub ecx, 00000002
:00405606 6A00                    push 00000000
:00405608 8B4708                  mov eax, dword ptr [edi+08]
:0040560B 8B5704                  mov edx, dword ptr [edi+04]
:0040560E 894C2410                mov dword ptr [esp+10], ecx
:00405612 8B4F0C                  mov ecx, dword ptr [edi+0C]
:00405615 83C102                  add ecx, 00000002
:00405618 83C002                  add eax, 00000002
:0040561B 894C241C                mov dword ptr [esp+1C], ecx
:0040561F 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00405625 83EA02                  sub edx, 00000002
:00405628 89442418                mov dword ptr [esp+18], eax
:0040562C 8D442410                lea eax, dword ptr [esp+10]
:00405630 89542414                mov dword ptr [esp+14], edx
:00405634 8B11                    mov edx, dword ptr [ecx]
:00405636 50                      push eax
:00405637 53                      push ebx
:00405638 FF5220                  call [edx+20]
:0040563B 8B8602010000            mov eax, dword ptr [esi+00000102]
:00405641 8B13                    mov edx, dword ptr [ebx]
:00405643 6A00                    push 00000000
:00405645 6A00                    push 00000000
:00405647 57                      push edi
:00405648 50                      push eax
:00405649 8BCB                    mov ecx, ebx
:0040564B FF5228                  call [edx+28]
:0040564E 5F                      pop edi
:0040564F 5E                      pop esi
:00405650 5B                      pop ebx
:00405651 83C410                  add esp, 00000010
:00405654 C20400                  ret 0004


:00405657 90                      nop
:00405658 90                      nop
:00405659 90                      nop
:0040565A 90                      nop
:0040565B 90                      nop
:0040565C 90                      nop
:0040565D 90                      nop
:0040565E 90                      nop
:0040565F 90                      nop
:00405660 55                      push ebp
:00405661 8BEC                    mov ebp, esp
:00405663 6AFF                    push FFFFFFFF
:00405665 680BF46C00              push 006CF40B
:0040566A 64A100000000            mov eax, dword ptr fs:[00000000]
:00405670 50                      push eax
:00405671 64892500000000          mov dword ptr fs:[00000000], esp
:00405678 81EC50010000            sub esp, 00000150
:0040567E 53                      push ebx
:0040567F 56                      push esi
:00405680 8BF1                    mov esi, ecx
:00405682 33D2                    xor edx, edx
:00405684 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040568A 668B15BA997A00          mov dx, word ptr [007A99BA]
:00405691 33DB                    xor ebx, ebx
:00405693 57                      push edi
:00405694 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:0040569A 895DDC                  mov dword ptr [ebp-24], ebx
:0040569D 8D04D0                  lea eax, dword ptr [eax+8*edx]
:004056A0 668B5006                mov dx, word ptr [eax+06]
:004056A4 663B15B8997A00          cmp dx, word ptr [007A99B8]
:004056AB 7418                    je 004056C5
:004056AD 66891DB8997A00          mov word ptr [007A99B8], bx
:004056B4 66891DBA997A00          mov word ptr [007A99BA], bx
:004056BB 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:004056C1 8B09                    mov ecx, dword ptr [ecx]
:004056C3 EB02                    jmp 004056C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004056AB(C)
|
:004056C5 8B08                    mov ecx, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004056C3(U)
|
:004056C7 8B01                    mov eax, dword ptr [ecx]
:004056C9 8D55B0                  lea edx, dword ptr [ebp-50]
:004056CC 52                      push edx
:004056CD FF904C020000            call dword ptr [eax+0000024C]
:004056D3 8BF8                    mov edi, eax
:004056D5 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:004056DB 33D2                    xor edx, edx
:004056DD 668B15BA997A00          mov dx, word ptr [007A99BA]
:004056E4 895DFC                  mov dword ptr [ebp-04], ebx
:004056E7 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:004056ED 8D04D0                  lea eax, dword ptr [eax+8*edx]
:004056F0 668B5006                mov dx, word ptr [eax+06]
:004056F4 663B15B8997A00          cmp dx, word ptr [007A99B8]
:004056FB 7418                    je 00405715
:004056FD 66891DB8997A00          mov word ptr [007A99B8], bx
:00405704 66891DBA997A00          mov word ptr [007A99BA], bx
:0040570B 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:00405711 8B01                    mov eax, dword ptr [ecx]
:00405713 EB02                    jmp 00405717

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004056FB(C)
|
:00405715 8B00                    mov eax, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405713(U)
|
:00405717 054A010000              add eax, 0000014A

* Possible StringData Ref from Data Obj ->" ["
                                  |
:0040571C 68E8B27800              push 0078B2E8
:00405721 50                      push eax
:00405722 8D45E0                  lea eax, dword ptr [ebp-20]
:00405725 50                      push eax
:00405726 E8950B0000              call 004062C0
:0040572B 57                      push edi
:0040572C 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:0040572F 50                      push eax
:00405730 51                      push ecx
:00405731 C645FC01                mov [ebp-04], 01
:00405735 E8E60A0000              call 00406220

* Possible StringData Ref from Data Obj ->"]"
                                  |
:0040573A 68E4B27800              push 0078B2E4
:0040573F 8D55D8                  lea edx, dword ptr [ebp-28]
:00405742 50                      push eax
:00405743 52                      push edx
:00405744 C645FC02                mov [ebp-04], 02
:00405748 E8730B0000              call 004062C0
:0040574D 83C424                  add esp, 00000024
:00405750 8B16                    mov edx, dword ptr [esi]
:00405752 50                      push eax
:00405753 8BCE                    mov ecx, esi
:00405755 C645FC03                mov [ebp-04], 03
:00405759 FF5278                  call [edx+78]
:0040575C 8B45D8                  mov eax, dword ptr [ebp-28]
:0040575F C645FC02                mov [ebp-04], 02
:00405763 83C0F4                  add eax, FFFFFFF4
:00405766 8B08                    mov ecx, dword ptr [eax]
:00405768 49                      dec ecx
:00405769 8908                    mov dword ptr [eax], ecx
:0040576B 7509                    jne 00405776
:0040576D 50                      push eax
:0040576E E88DBB1D00              call 005E1300
:00405773 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040576B(C)
|
:00405776 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00405779 C645FC01                mov [ebp-04], 01
:0040577D 8D41F4                  lea eax, dword ptr [ecx-0C]
:00405780 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00405783 49                      dec ecx
:00405784 8908                    mov dword ptr [eax], ecx
:00405786 7509                    jne 00405791
:00405788 50                      push eax
:00405789 E872BB1D00              call 005E1300
:0040578E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405786(C)
|
:00405791 8B55E0                  mov edx, dword ptr [ebp-20]
:00405794 C645FC00                mov [ebp-04], 00
:00405798 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040579B 8D42F4                  lea eax, dword ptr [edx-0C]
:0040579E 49                      dec ecx
:0040579F 8908                    mov dword ptr [eax], ecx
:004057A1 7509                    jne 004057AC
:004057A3 50                      push eax
:004057A4 E857BB1D00              call 005E1300
:004057A9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004057A1(C)
|
:004057AC 8B45B0                  mov eax, dword ptr [ebp-50]
:004057AF 83CBFF                  or ebx, FFFFFFFF
:004057B2 83C0F4                  add eax, FFFFFFF4
:004057B5 895DFC                  mov dword ptr [ebp-04], ebx
:004057B8 8B08                    mov ecx, dword ptr [eax]
:004057BA 49                      dec ecx
:004057BB 8908                    mov dword ptr [eax], ecx
:004057BD 7509                    jne 004057C8
:004057BF 50                      push eax
:004057C0 E83BBB1D00              call 005E1300
:004057C5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004057BD(C)
|
:004057C8 8B0D88DA7900            mov ecx, dword ptr [0079DA88]
:004057CE C745CC94DA7900          mov [ebp-34], 0079DA94
:004057D5 41                      inc ecx
:004057D6 890D88DA7900            mov dword ptr [0079DA88], ecx
:004057DC 8D4DCC                  lea ecx, dword ptr [ebp-34]
:004057DF 8DBE3B010000            lea edi, dword ptr [esi+0000013B]
:004057E5 51                      push ecx
:004057E6 6A00                    push 00000000
:004057E8 8BCF                    mov ecx, edi
:004057EA C745FC04000000          mov [ebp-04], 00000004
:004057F1 E81A0C0000              call 00406410
:004057F6 8B55CC                  mov edx, dword ptr [ebp-34]
:004057F9 895DFC                  mov dword ptr [ebp-04], ebx
:004057FC 8B4AF4                  mov ecx, dword ptr [edx-0C]
:004057FF 8D42F4                  lea eax, dword ptr [edx-0C]
:00405802 49                      dec ecx
:00405803 8908                    mov dword ptr [eax], ecx
:00405805 7509                    jne 00405810
:00405807 50                      push eax
:00405808 E8F3BA1D00              call 005E1300
:0040580D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405805(C)
|
:00405810 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00405816 33D2                    xor edx, edx
:00405818 668B15BA997A00          mov dx, word ptr [007A99BA]
:0040581F 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00405825 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00405828 668B5006                mov dx, word ptr [eax+06]
:0040582C 663B15B8997A00          cmp dx, word ptr [007A99B8]
:00405833 741A                    je 0040584F
:00405835 33DB                    xor ebx, ebx
:00405837 66891DB8997A00          mov word ptr [007A99B8], bx
:0040583E 66891DBA997A00          mov word ptr [007A99BA], bx
:00405845 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:0040584B 8B08                    mov ecx, dword ptr [eax]
:0040584D EB04                    jmp 00405853

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405833(C)
|
:0040584F 8B08                    mov ecx, dword ptr [eax]
:00405851 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040584D(U)
|
:00405853 8B01                    mov eax, dword ptr [ecx]
:00405855 57                      push edi
:00405856 FF9048020000            call dword ptr [eax+00000248]
:0040585C 8B8E02010000            mov ecx, dword ptr [esi+00000102]
:00405862 8B9606010000            mov edx, dword ptr [esi+00000106]
:00405868 8B4108                  mov eax, dword ptr [ecx+08]
:0040586B 3BD0                    cmp edx, eax
:0040586D 7C06                    jl 00405875
:0040586F 899E06010000            mov dword ptr [esi+00000106], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040586D(C)
|
:00405875 8B8606010000            mov eax, dword ptr [esi+00000106]
:0040587B 8B510C                  mov edx, dword ptr [ecx+0C]
:0040587E 8945A0                  mov dword ptr [ebp-60], eax
:00405881 6A00                    push 00000000
:00405883 8D5801                  lea ebx, dword ptr [eax+01]
:00405886 C745A400000000          mov [ebp-5C], 00000000
:0040588D 895DA8                  mov dword ptr [ebp-58], ebx
:00405890 8955AC                  mov dword ptr [ebp-54], edx
:00405893 8B11                    mov edx, dword ptr [ecx]
:00405895 6A01                    push 00000001
:00405897 8D45A0                  lea eax, dword ptr [ebp-60]
:0040589A 6800B57A00              push 007AB500
:0040589F 50                      push eax
:004058A0 FF5230                  call [edx+30]
:004058A3 8B8602010000            mov eax, dword ptr [esi+00000102]
:004058A9 8B480C                  mov ecx, dword ptr [eax+0C]
:004058AC 894DD8                  mov dword ptr [ebp-28], ecx
:004058AF 33DB                    xor ebx, ebx
:004058B1 8D55BD                  lea edx, dword ptr [ebp-43]
:004058B4 53                      push ebx
:004058B5 52                      push edx
:004058B6 8D4DC8                  lea ecx, dword ptr [ebp-38]
:004058B9 C745FC05000000          mov [ebp-04], 00000005
:004058C0 895DC0                  mov dword ptr [ebp-40], ebx
:004058C3 895DC4                  mov dword ptr [ebp-3C], ebx
:004058C6 E8F50C0000              call 004065C0
:004058CB 8B4704                  mov eax, dword ptr [edi+04]
:004058CE 8B17                    mov edx, dword ptr [edi]
:004058D0 2BC2                    sub eax, edx
:004058D2 C645FC07                mov [ebp-04], 07
:004058D6 C1F803                  sar eax, 03
:004058D9 895DD4                  mov dword ptr [ebp-2C], ebx
:004058DC 0F84BD040000            je 00405D9F
:004058E2 DB45D8                  fild dword ptr [ebp-28]
:004058E5 B8FF000000              mov eax, 000000FF
:004058EA 33C9                    xor ecx, ecx
:004058EC 894584                  mov dword ptr [ebp-7C], eax
:004058EF 894D80                  mov dword ptr [ebp-80], ecx
:004058F2 D95DD8                  fstp dword ptr [ebp-28]
:004058F5 898568FFFFFF            mov dword ptr [ebp+FFFFFF68], eax
:004058FB 898D64FFFFFF            mov dword ptr [ebp+FFFFFF64], ecx
:00405901 89857CFFFFFF            mov dword ptr [ebp+FFFFFF7C], eax
:00405907 894D88                  mov dword ptr [ebp-78], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405D99(C)
|
:0040590A 8B0DD8B57A00            mov ecx, dword ptr [007AB5D8]
:00405910 8B15DCB57A00            mov edx, dword ptr [007AB5DC]
:00405916 A1E0B57A00              mov eax, dword ptr [007AB5E0]
:0040591B 894DE8                  mov dword ptr [ebp-18], ecx
:0040591E 85DB                    test ebx, ebx
:00405920 8955EC                  mov dword ptr [ebp-14], edx
:00405923 8945F0                  mov dword ptr [ebp-10], eax
:00405926 7536                    jne 0040595E
:00405928 8D8D24FFFFFF            lea ecx, dword ptr [ebp+FFFFFF24]
:0040592E 68000000BF              push BF000000
:00405933 51                      push ecx
:00405934 B918B67A00              mov ecx, 007AB618
:00405939 E8E2EC1E00              call 005F4620
:0040593E 8B9524FFFFFF            mov edx, dword ptr [ebp+FFFFFF24]
:00405944 8B8528FFFFFF            mov eax, dword ptr [ebp+FFFFFF28]
:0040594A 8B8D2CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF2C]
:00405950 8955E8                  mov dword ptr [ebp-18], edx
:00405953 8945EC                  mov dword ptr [ebp-14], eax
:00405956 894DF0                  mov dword ptr [ebp-10], ecx
:00405959 E9DE010000              jmp 00405B3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405926(C)
|
:0040595E 83FB01                  cmp ebx, 00000001
:00405961 7536                    jne 00405999
:00405963 8D950CFFFFFF            lea edx, dword ptr [ebp+FFFFFF0C]
:00405969 68000000BF              push BF000000
:0040596E 52                      push edx
:0040596F B9B8B57A00              mov ecx, 007AB5B8
:00405974 E8A7EC1E00              call 005F4620
:00405979 8B850CFFFFFF            mov eax, dword ptr [ebp+FFFFFF0C]
:0040597F 8B8D10FFFFFF            mov ecx, dword ptr [ebp+FFFFFF10]
:00405985 8B9514FFFFFF            mov edx, dword ptr [ebp+FFFFFF14]
:0040598B 8945E8                  mov dword ptr [ebp-18], eax
:0040598E 894DEC                  mov dword ptr [ebp-14], ecx
:00405991 8955F0                  mov dword ptr [ebp-10], edx
:00405994 E9A3010000              jmp 00405B3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405961(C)
|
:00405999 83FB02                  cmp ebx, 00000002
:0040599C 7533                    jne 004059D1
:0040599E 8D8530FFFFFF            lea eax, dword ptr [ebp+FFFFFF30]
:004059A4 68000000BF              push BF000000
:004059A9 50                      push eax
:004059AA B9C8B57A00              mov ecx, 007AB5C8
:004059AF E86CEC1E00              call 005F4620
:004059B4 8B8D30FFFFFF            mov ecx, dword ptr [ebp+FFFFFF30]
:004059BA 8B9534FFFFFF            mov edx, dword ptr [ebp+FFFFFF34]
:004059C0 8B8538FFFFFF            mov eax, dword ptr [ebp+FFFFFF38]
:004059C6 894DE8                  mov dword ptr [ebp-18], ecx
:004059C9 8955EC                  mov dword ptr [ebp-14], edx
:004059CC E968010000              jmp 00405B39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040599C(C)
|
:004059D1 83FB03                  cmp ebx, 00000003
:004059D4 7536                    jne 00405A0C
:004059D6 8D8D48FFFFFF            lea ecx, dword ptr [ebp+FFFFFF48]
:004059DC 68000000BF              push BF000000
:004059E1 51                      push ecx
:004059E2 B9F8B57A00              mov ecx, 007AB5F8
:004059E7 E834EC1E00              call 005F4620
:004059EC 8B9548FFFFFF            mov edx, dword ptr [ebp+FFFFFF48]
:004059F2 8B854CFFFFFF            mov eax, dword ptr [ebp+FFFFFF4C]
:004059F8 8B8D50FFFFFF            mov ecx, dword ptr [ebp+FFFFFF50]
:004059FE 8955E8                  mov dword ptr [ebp-18], edx
:00405A01 8945EC                  mov dword ptr [ebp-14], eax
:00405A04 894DF0                  mov dword ptr [ebp-10], ecx
:00405A07 E930010000              jmp 00405B3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004059D4(C)
|
:00405A0C 83FB04                  cmp ebx, 00000004
:00405A0F 7536                    jne 00405A47
:00405A11 8D9518FFFFFF            lea edx, dword ptr [ebp+FFFFFF18]
:00405A17 68000000BF              push BF000000
:00405A1C 52                      push edx
:00405A1D B908B67A00              mov ecx, 007AB608
:00405A22 E8F9EB1E00              call 005F4620
:00405A27 8B8518FFFFFF            mov eax, dword ptr [ebp+FFFFFF18]
:00405A2D 8B8D1CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF1C]
:00405A33 8B9520FFFFFF            mov edx, dword ptr [ebp+FFFFFF20]
:00405A39 8945E8                  mov dword ptr [ebp-18], eax
:00405A3C 894DEC                  mov dword ptr [ebp-14], ecx
:00405A3F 8955F0                  mov dword ptr [ebp-10], edx
:00405A42 E9F5000000              jmp 00405B3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405A0F(C)
|
:00405A47 83FB05                  cmp ebx, 00000005
:00405A4A 7533                    jne 00405A7F
:00405A4C 8D853CFFFFFF            lea eax, dword ptr [ebp+FFFFFF3C]
:00405A52 68000000BF              push BF000000
:00405A57 50                      push eax
:00405A58 B9E8B57A00              mov ecx, 007AB5E8
:00405A5D E8BEEB1E00              call 005F4620
:00405A62 8B8D3CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF3C]
:00405A68 8B9540FFFFFF            mov edx, dword ptr [ebp+FFFFFF40]
:00405A6E 8B8544FFFFFF            mov eax, dword ptr [ebp+FFFFFF44]
:00405A74 894DE8                  mov dword ptr [ebp-18], ecx
:00405A77 8955EC                  mov dword ptr [ebp-14], edx
:00405A7A E9BA000000              jmp 00405B39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405A4A(C)
|
:00405A7F 83FB06                  cmp ebx, 00000006
:00405A82 752C                    jne 00405AB0
:00405A84 8D8DC8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEC8]
:00405A8A 680000003F              push 3F000000
:00405A8F 51                      push ecx
:00405A90 B918B67A00              mov ecx, 007AB618

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405ADE(U), :00405B0E(U)
|
:00405A95 E886EB1E00              call 005F4620
:00405A9A 8B10                    mov edx, dword ptr [eax]
:00405A9C 8955E8                  mov dword ptr [ebp-18], edx
:00405A9F 8B4804                  mov ecx, dword ptr [eax+04]
:00405AA2 894DEC                  mov dword ptr [ebp-14], ecx
:00405AA5 8B5008                  mov edx, dword ptr [eax+08]
:00405AA8 8955F0                  mov dword ptr [ebp-10], edx
:00405AAB E98C000000              jmp 00405B3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405A82(C)
|
:00405AB0 83FB07                  cmp ebx, 00000007
:00405AB3 7513                    jne 00405AC8
:00405AB5 8D85A4FEFFFF            lea eax, dword ptr [ebp+FFFFFEA4]
:00405ABB 680000003F              push 3F000000
:00405AC0 50                      push eax
:00405AC1 B9B8B57A00              mov ecx, 007AB5B8
:00405AC6 EB5E                    jmp 00405B26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405AB3(C)
|
:00405AC8 83FB08                  cmp ebx, 00000008
:00405ACB 7513                    jne 00405AE0
:00405ACD 8D8DB0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEB0]
:00405AD3 680000003F              push 3F000000
:00405AD8 51                      push ecx
:00405AD9 B9C8B57A00              mov ecx, 007AB5C8
:00405ADE EBB5                    jmp 00405A95

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405ACB(C)
|
:00405AE0 83FB09                  cmp ebx, 00000009
:00405AE3 7513                    jne 00405AF8
:00405AE5 8D85D4FEFFFF            lea eax, dword ptr [ebp+FFFFFED4]
:00405AEB 680000003F              push 3F000000
:00405AF0 50                      push eax
:00405AF1 B9F8B57A00              mov ecx, 007AB5F8
:00405AF6 EB2E                    jmp 00405B26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405AE3(C)
|
:00405AF8 83FB0A                  cmp ebx, 0000000A
:00405AFB 7513                    jne 00405B10
:00405AFD 8D8DBCFEFFFF            lea ecx, dword ptr [ebp+FFFFFEBC]
:00405B03 680000003F              push 3F000000
:00405B08 51                      push ecx
:00405B09 B908B67A00              mov ecx, 007AB608
:00405B0E EB85                    jmp 00405A95

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405AFB(C)
|
:00405B10 83FB0B                  cmp ebx, 0000000B
:00405B13 7527                    jne 00405B3C
:00405B15 8D8558FFFFFF            lea eax, dword ptr [ebp+FFFFFF58]
:00405B1B 680000003F              push 3F000000
:00405B20 50                      push eax
:00405B21 B9E8B57A00              mov ecx, 007AB5E8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405AC6(U), :00405AF6(U)
|
:00405B26 E8F5EA1E00              call 005F4620
:00405B2B 8B08                    mov ecx, dword ptr [eax]
:00405B2D 894DE8                  mov dword ptr [ebp-18], ecx
:00405B30 8B5004                  mov edx, dword ptr [eax+04]
:00405B33 8955EC                  mov dword ptr [ebp-14], edx
:00405B36 8B4008                  mov eax, dword ptr [eax+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004059CC(U), :00405A7A(U)
|
:00405B39 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405959(U), :00405994(U), :00405A07(U), :00405A42(U), :00405AAB(U)
|:00405B13(C)
|
:00405B3C 8B3F                    mov edi, dword ptr [edi]
:00405B3E D945D8                  fld dword ptr [ebp-28]
:00405B41 D84CDF04                fmul dword ptr [edi+8*ebx+04]
:00405B45 D86DD8                  fsubr dword ptr [ebp-28]
:00405B48 E8438E2B00              call 006BE990
:00405B4D D945E8                  fld dword ptr [ebp-18]
:00405B50 D80D0C8C7000            fmul dword ptr [00708C0C]
:00405B56 8BC8                    mov ecx, eax
:00405B58 D95DE4                  fstp dword ptr [ebp-1C]
:00405B5B D945E4                  fld dword ptr [ebp-1C]
:00405B5E 9B                      wait
:00405B5F D97D9E                  fstcw word ptr [ebp-62]
:00405B62 9B                      wait
:00405B63 668B459E                mov ax, word ptr [ebp-62]
:00405B67 80CC0C                  or ah, 0C
:00405B6A 668945BA                mov word ptr [ebp-46], ax
:00405B6E D96DBA                  fldcw  [ebp-46]
:00405B71 DB9D6CFFFFFF            fistp dword ptr [ebp+FFFFFF6C]
:00405B77 D96D9E                  fldcw  [ebp-62]
:00405B7A 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:00405B80 8945E4                  mov dword ptr [ebp-1C], eax
:00405B83 3DFF000000              cmp eax, 000000FF
:00405B88 8D45E4                  lea eax, dword ptr [ebp-1C]
:00405B8B 7C03                    jl 00405B90
:00405B8D 8D4584                  lea eax, dword ptr [ebp-7C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405B8B(C)
|
:00405B90 833800                  cmp dword ptr [eax], 00000000
:00405B93 7F03                    jg 00405B98
:00405B95 8D4580                  lea eax, dword ptr [ebp-80]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405B93(C)
|
:00405B98 D945EC                  fld dword ptr [ebp-14]
:00405B9B D80D0C8C7000            fmul dword ptr [00708C0C]
:00405BA1 8B00                    mov eax, dword ptr [eax]
:00405BA3 8845E2                  mov byte ptr [ebp-1E], al
:00405BA6 D95DE4                  fstp dword ptr [ebp-1C]
:00405BA9 D945E4                  fld dword ptr [ebp-1C]
:00405BAC 9B                      wait
:00405BAD D97DBE                  fstcw word ptr [ebp-42]
:00405BB0 9B                      wait
:00405BB1 668B45BE                mov ax, word ptr [ebp-42]
:00405BB5 80CC0C                  or ah, 0C
:00405BB8 668945B6                mov word ptr [ebp-4A], ax
:00405BBC D96DB6                  fldcw  [ebp-4A]
:00405BBF DB9D78FFFFFF            fistp dword ptr [ebp+FFFFFF78]
:00405BC5 D96DBE                  fldcw  [ebp-42]
:00405BC8 8B8578FFFFFF            mov eax, dword ptr [ebp+FFFFFF78]
:00405BCE 8945E4                  mov dword ptr [ebp-1C], eax
:00405BD1 3DFF000000              cmp eax, 000000FF
:00405BD6 8D45E4                  lea eax, dword ptr [ebp-1C]
:00405BD9 7C06                    jl 00405BE1
:00405BDB 8D8568FFFFFF            lea eax, dword ptr [ebp+FFFFFF68]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405BD9(C)
|
:00405BE1 833800                  cmp dword ptr [eax], 00000000
:00405BE4 7F06                    jg 00405BEC
:00405BE6 8D8564FFFFFF            lea eax, dword ptr [ebp+FFFFFF64]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405BE4(C)
|
:00405BEC D945F0                  fld dword ptr [ebp-10]
:00405BEF D80D0C8C7000            fmul dword ptr [00708C0C]
:00405BF5 8B00                    mov eax, dword ptr [eax]
:00405BF7 8845E1                  mov byte ptr [ebp-1F], al
:00405BFA D95DE4                  fstp dword ptr [ebp-1C]
:00405BFD D945E4                  fld dword ptr [ebp-1C]
:00405C00 9B                      wait
:00405C01 D97DB2                  fstcw word ptr [ebp-4E]
:00405C04 9B                      wait
:00405C05 668B45B2                mov ax, word ptr [ebp-4E]
:00405C09 80CC0C                  or ah, 0C
:00405C0C 668945B8                mov word ptr [ebp-48], ax
:00405C10 D96DB8                  fldcw  [ebp-48]
:00405C13 DB9D70FFFFFF            fistp dword ptr [ebp+FFFFFF70]
:00405C19 D96DB2                  fldcw  [ebp-4E]
:00405C1C 8B8570FFFFFF            mov eax, dword ptr [ebp+FFFFFF70]
:00405C22 8945E4                  mov dword ptr [ebp-1C], eax
:00405C25 3DFF000000              cmp eax, 000000FF
:00405C2A 8D45E4                  lea eax, dword ptr [ebp-1C]
:00405C2D 7C06                    jl 00405C35
:00405C2F 8D857CFFFFFF            lea eax, dword ptr [ebp+FFFFFF7C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405C2D(C)
|
:00405C35 833800                  cmp dword ptr [eax], 00000000
:00405C38 7F03                    jg 00405C3D
:00405C3A 8D4588                  lea eax, dword ptr [ebp-78]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405C38(C)
|
:00405C3D 8B00                    mov eax, dword ptr [eax]
:00405C3F 8D55E0                  lea edx, dword ptr [ebp-20]
:00405C42 8845E0                  mov byte ptr [ebp-20], al
:00405C45 8B8606010000            mov eax, dword ptr [esi+00000106]
:00405C4B 8945CC                  mov dword ptr [ebp-34], eax
:00405C4E 6A00                    push 00000000
:00405C50 8D45CC                  lea eax, dword ptr [ebp-34]
:00405C53 894DD0                  mov dword ptr [ebp-30], ecx
:00405C56 8B8E02010000            mov ecx, dword ptr [esi+00000102]
:00405C5C 52                      push edx
:00405C5D 50                      push eax
:00405C5E C645E3FF                mov [ebp-1D], FF
:00405C62 E899B01E00              call 005F0D00
:00405C67 6844010000              push 00000144
:00405C6C E80FB61D00              call 005E1280
:00405C71 8BF8                    mov edi, eax
:00405C73 83C404                  add esp, 00000004
:00405C76 89BD08FFFFFF            mov dword ptr [ebp+FFFFFF08], edi
:00405C7C 85FF                    test edi, edi
:00405C7E C645FC08                mov [ebp-04], 08
:00405C82 7462                    je 00405CE6
:00405C84 33C9                    xor ecx, ecx
:00405C86 33C0                    xor eax, eax
:00405C88 51                      push ecx
:00405C89 8D8DF4FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF4]
:00405C8F 50                      push eax
:00405C90 51                      push ecx
:00405C91 8BCE                    mov ecx, esi
:00405C93 33DB                    xor ebx, ebx
:00405C95 E8C6030000              call 00406060
:00405C9A 8945E4                  mov dword ptr [ebp-1C], eax
:00405C9D 8B45DC                  mov eax, dword ptr [ebp-24]
:00405CA0 0C01                    or al, 01
:00405CA2 0C02                    or al, 02
:00405CA4 8D95E0FEFFFF            lea edx, dword ptr [ebp+FFFFFEE0]
:00405CAA 8945DC                  mov dword ptr [ebp-24], eax
:00405CAD 33C0                    xor eax, eax
:00405CAF 50                      push eax
:00405CB0 53                      push ebx
:00405CB1 52                      push edx
:00405CB2 8BCE                    mov ecx, esi
:00405CB4 C645FC09                mov [ebp-04], 09
:00405CB8 E8A3030000              call 00406060
:00405CBD 8B55E4                  mov edx, dword ptr [ebp-1C]
:00405CC0 8B8E3B010000            mov ecx, dword ptr [esi+0000013B]
:00405CC6 52                      push edx
:00405CC7 8B55D4                  mov edx, dword ptr [ebp-2C]
:00405CCA 50                      push eax
:00405CCB 8D45E8                  lea eax, dword ptr [ebp-18]
:00405CCE 50                      push eax
:00405CCF 8D04D1                  lea eax, dword ptr [ecx+8*edx]
:00405CD2 50                      push eax
:00405CD3 8BCF                    mov ecx, edi
:00405CD5 C745FC0A000000          mov [ebp-04], 0000000A
:00405CDC E86FF0FFFF              call 00404D50
:00405CE1 8B5DD4                  mov ebx, dword ptr [ebp-2C]
:00405CE4 EB02                    jmp 00405CE8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405C82(C)
|
:00405CE6 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405CE4(U)
|
:00405CE8 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00405CEB 8B55C8                  mov edx, dword ptr [ebp-38]
:00405CEE 3BCA                    cmp ecx, edx
:00405CF0 C745FC0C000000          mov [ebp-04], 0000000C
:00405CF7 898574FFFFFF            mov dword ptr [ebp+FFFFFF74], eax
:00405CFD 7411                    je 00405D10
:00405CFF 85C9                    test ecx, ecx
:00405D01 7405                    je 00405D08
:00405D03 8901                    mov dword ptr [ecx], eax
:00405D05 8B4DC4                  mov ecx, dword ptr [ebp-3C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405D01(C)
|
:00405D08 83C104                  add ecx, 00000004
:00405D0B 894DC4                  mov dword ptr [ebp-3C], ecx
:00405D0E EB12                    jmp 00405D22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405CFD(C)
|
:00405D10 8D9574FFFFFF            lea edx, dword ptr [ebp+FFFFFF74]
:00405D16 6A01                    push 00000001
:00405D18 52                      push edx
:00405D19 51                      push ecx
:00405D1A 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00405D1D E8AE080000              call 004065D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405D0E(U)
|
:00405D22 8A45DC                  mov al, byte ptr [ebp-24]
:00405D25 C745FC0B000000          mov [ebp-04], 0000000B
:00405D2C A802                    test al, 02
:00405D2E 741F                    je 00405D4F
:00405D30 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00405D33 83E1FD                  and ecx, FFFFFFFD
:00405D36 894DDC                  mov dword ptr [ebp-24], ecx
:00405D39 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:00405D3F 85C9                    test ecx, ecx
:00405D41 740C                    je 00405D4F
:00405D43 8D85E0FEFFFF            lea eax, dword ptr [ebp+FFFFFEE0]
:00405D49 50                      push eax
:00405D4A E8D1851F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405D2E(C), :00405D41(C)
|
:00405D4F 8A45DC                  mov al, byte ptr [ebp-24]
:00405D52 C745FC07000000          mov [ebp-04], 00000007
:00405D59 A801                    test al, 01
:00405D5B 741F                    je 00405D7C
:00405D5D 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00405D60 83E1FE                  and ecx, FFFFFFFE
:00405D63 894DDC                  mov dword ptr [ebp-24], ecx
:00405D66 8B8DF4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF4]
:00405D6C 85C9                    test ecx, ecx
:00405D6E 740C                    je 00405D7C
:00405D70 8D95F4FEFFFF            lea edx, dword ptr [ebp+FFFFFEF4]
:00405D76 52                      push edx
:00405D77 E8A4851F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405D5B(C), :00405D6E(C)
|
:00405D7C 8B863F010000            mov eax, dword ptr [esi+0000013F]
:00405D82 8B8E3B010000            mov ecx, dword ptr [esi+0000013B]
:00405D88 8DBE3B010000            lea edi, dword ptr [esi+0000013B]
:00405D8E 2BC1                    sub eax, ecx
:00405D90 43                      inc ebx
:00405D91 C1F803                  sar eax, 03
:00405D94 3BD8                    cmp ebx, eax
:00405D96 895DD4                  mov dword ptr [ebp-2C], ebx
:00405D99 0F826BFBFFFF            jb 0040590A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004058DC(C)
|
:00405D9F 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00405DA2 51                      push ecx
:00405DA3 8B8EFA000000            mov ecx, dword ptr [esi+000000FA]
:00405DA9 E882C01F00              call 00601E30
:00405DAE 8B9E06010000            mov ebx, dword ptr [esi+00000106]
:00405DB4 8B8E02010000            mov ecx, dword ptr [esi+00000102]
:00405DBA 43                      inc ebx
:00405DBB 6A00                    push 00000000
:00405DBD 8BC3                    mov eax, ebx
:00405DBF 899E06010000            mov dword ptr [esi+00000106], ebx
:00405DC5 8B510C                  mov edx, dword ptr [ecx+0C]
:00405DC8 40                      inc eax
:00405DC9 89458C                  mov dword ptr [ebp-74], eax
:00405DCC C7459000000000          mov [ebp-70], 00000000
:00405DD3 8D7801                  lea edi, dword ptr [eax+01]
:00405DD6 895598                  mov dword ptr [ebp-68], edx
:00405DD9 897D94                  mov dword ptr [ebp-6C], edi
:00405DDC 8B11                    mov edx, dword ptr [ecx]
:00405DDE 6A01                    push 00000001
:00405DE0 8D458C                  lea eax, dword ptr [ebp-74]
:00405DE3 68F4B47A00              push 007AB4F4
:00405DE8 50                      push eax
:00405DE9 FF5230                  call [edx+30]
:00405DEC 8B860E010000            mov eax, dword ptr [esi+0000010E]
:00405DF2 8B4DAC                  mov ecx, dword ptr [ebp-54]
:00405DF5 8B55A8                  mov edx, dword ptr [ebp-58]
:00405DF8 8B5DA4                  mov ebx, dword ptr [ebp-5C]
:00405DFB 42                      inc edx
:00405DFC 8D3C01                  lea edi, dword ptr [ecx+eax]
:00405DFF 8B8E0A010000            mov ecx, dword ptr [esi+0000010A]
:00405E05 03C3                    add eax, ebx
:00405E07 8B5DA0                  mov ebx, dword ptr [ebp-60]
:00405E0A 8955A8                  mov dword ptr [ebp-58], edx
:00405E0D 03D1                    add edx, ecx
:00405E0F 03CB                    add ecx, ebx
:00405E11 898558FFFFFF            mov dword ptr [ebp+FFFFFF58], eax
:00405E17 89955CFFFFFF            mov dword ptr [ebp+FFFFFF5C], edx
:00405E1D 8B16                    mov edx, dword ptr [esi]
:00405E1F 8D8554FFFFFF            lea eax, dword ptr [ebp+FFFFFF54]
:00405E25 898D54FFFFFF            mov dword ptr [ebp+FFFFFF54], ecx
:00405E2B 50                      push eax
:00405E2C 8BCE                    mov ecx, esi
:00405E2E 89BD60FFFFFF            mov dword ptr [ebp+FFFFFF60], edi
:00405E34 FF5208                  call [edx+08]
:00405E37 8B45C0                  mov eax, dword ptr [ebp-40]
:00405E3A 5F                      pop edi
:00405E3B 5E                      pop esi
:00405E3C C745FC0D000000          mov [ebp-04], 0000000D
:00405E43 85C0                    test eax, eax
:00405E45 5B                      pop ebx
:00405E46 7442                    je 00405E8A
:00405E48 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00405E4B 2BC8                    sub ecx, eax
:00405E4D C1F902                  sar ecx, 02
:00405E50 C1E102                  shl ecx, 02
:00405E53 81F980000000            cmp ecx, 00000080
:00405E59 7619                    jbe 00405E74
:00405E5B 50                      push eax
:00405E5C E89FB41D00              call 005E1300
:00405E61 83C404                  add esp, 00000004
:00405E64 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00405E67 64890D00000000          mov dword ptr fs:[00000000], ecx
:00405E6E 8BE5                    mov esp, ebp
:00405E70 5D                      pop ebp
:00405E71 C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405E59(C)
|
:00405E74 49                      dec ecx
:00405E75 C1E903                  shr ecx, 03
:00405E78 8B148DFC977A00          mov edx, dword ptr [4*ecx+007A97FC]
:00405E7F 8D0C8DFC977A00          lea ecx, dword ptr [4*ecx+007A97FC]
:00405E86 8910                    mov dword ptr [eax], edx
:00405E88 8901                    mov dword ptr [ecx], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405E46(C)
|
:00405E8A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00405E8D 64890D00000000          mov dword ptr fs:[00000000], ecx
:00405E94 8BE5                    mov esp, ebp
:00405E96 5D                      pop ebp
:00405E97 C20400                  ret 0004


:00405E9A 90                      nop
:00405E9B 90                      nop
:00405E9C 90                      nop
:00405E9D 90                      nop
:00405E9E 90                      nop
:00405E9F 90                      nop
:00405EA0 E90B000000              jmp 00405EB0
:00405EA5 90                      nop
:00405EA6 90                      nop
:00405EA7 90                      nop
:00405EA8 90                      nop
:00405EA9 90                      nop
:00405EAA 90                      nop
:00405EAB 90                      nop
:00405EAC 90                      nop
:00405EAD 90                      nop
:00405EAE 90                      nop
:00405EAF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405EA0(U)
|
:00405EB0 D90560837000            fld dword ptr [00708360]
:00405EB6 D83510897000            fdiv dword ptr [00708910]
:00405EBC D91D4C987A00            fstp dword ptr [007A984C]
:00405EC2 C3                      ret


:00405EC3 90                      nop
:00405EC4 90                      nop
:00405EC5 90                      nop
:00405EC6 90                      nop
:00405EC7 90                      nop
:00405EC8 90                      nop
:00405EC9 90                      nop
:00405ECA 90                      nop
:00405ECB 90                      nop
:00405ECC 90                      nop
:00405ECD 90                      nop
:00405ECE 90                      nop
:00405ECF 90                      nop
:00405ED0 8A0DA8D47A00            mov cl, byte ptr [007AD4A8]
:00405ED6 B001                    mov al, 01
:00405ED8 84C8                    test al, cl
:00405EDA 7508                    jne 00405EE4
:00405EDC 0AC8                    or cl, al
:00405EDE 880DA8D47A00            mov byte ptr [007AD4A8], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405EDA(C)
|
:00405EE4 E907000000              jmp 00405EF0
:00405EE9 90                      nop
:00405EEA 90                      nop
:00405EEB 90                      nop
:00405EEC 90                      nop
:00405EED 90                      nop
:00405EEE 90                      nop
:00405EEF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405EE4(U)
|
:00405EF0 6880104000              push 00401080
:00405EF5 E863852B00              call 006BE45D
:00405EFA 59                      pop ecx
:00405EFB C3                      ret


:00405EFC 90                      nop
:00405EFD 90                      nop
:00405EFE 90                      nop
:00405EFF 90                      nop
:00405F00 B001                    mov al, 01
:00405F02 C3                      ret


:00405F03 90                      nop
:00405F04 90                      nop
:00405F05 90                      nop
:00405F06 90                      nop
:00405F07 90                      nop
:00405F08 90                      nop
:00405F09 90                      nop
:00405F0A 90                      nop
:00405F0B 90                      nop
:00405F0C 90                      nop
:00405F0D 90                      nop
:00405F0E 90                      nop
:00405F0F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406D23(U)
|
:00405F10 56                      push esi
:00405F11 8BF1                    mov esi, ecx
:00405F13 E818000000              call 00405F30
:00405F18 F644240801              test [esp+08], 01
:00405F1D 7409                    je 00405F28
:00405F1F 56                      push esi
:00405F20 E8DBB31D00              call 005E1300
:00405F25 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405F1D(C)
|
:00405F28 8BC6                    mov eax, esi
:00405F2A 5E                      pop esi
:00405F2B C20400                  ret 0004


:00405F2E 90                      nop
:00405F2F 90                      nop

* Referenced by a CALL at Address:
|:00405F13   
|
:00405F30 6AFF                    push FFFFFFFF
:00405F32 682EF26C00              push 006CF22E
:00405F37 64A100000000            mov eax, dword ptr fs:[00000000]
:00405F3D 50                      push eax
:00405F3E 64892500000000          mov dword ptr fs:[00000000], esp
:00405F45 51                      push ecx
:00405F46 56                      push esi
:00405F47 8BF1                    mov esi, ecx
:00405F49 89742404                mov dword ptr [esp+04], esi
:00405F4D C70624897000            mov dword ptr [esi], 00708924
:00405F53 C746081C897000          mov [esi+08], 0070891C
:00405F5A 8B862C010000            mov eax, dword ptr [esi+0000012C]
:00405F60 C744241000000000        mov [esp+10], 00000000
:00405F68 83E80C                  sub eax, 0000000C
:00405F6B 8B08                    mov ecx, dword ptr [eax]
:00405F6D 49                      dec ecx
:00405F6E 8908                    mov dword ptr [eax], ecx
:00405F70 7509                    jne 00405F7B
:00405F72 50                      push eax
:00405F73 E888B31D00              call 005E1300
:00405F78 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405F70(C)
|
:00405F7B 8B8E18010000            mov ecx, dword ptr [esi+00000118]
:00405F81 8D8618010000            lea eax, dword ptr [esi+00000118]
:00405F87 85C9                    test ecx, ecx
:00405F89 C744241002000000        mov [esp+10], 00000002
:00405F91 7406                    je 00405F99
:00405F93 50                      push eax
:00405F94 E887831F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405F91(C)
|
:00405F99 8B8E04010000            mov ecx, dword ptr [esi+00000104]
:00405F9F 8D8604010000            lea eax, dword ptr [esi+00000104]
:00405FA5 85C9                    test ecx, ecx
:00405FA7 C644241001              mov [esp+10], 01
:00405FAC 7406                    je 00405FB4
:00405FAE 50                      push eax
:00405FAF E86C831F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405FAC(C)
|
:00405FB4 8BCE                    mov ecx, esi
:00405FB6 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00405FBE E81D6A1F00              call 005FC9E0
:00405FC3 8B4C2408                mov ecx, dword ptr [esp+08]
:00405FC7 5E                      pop esi
:00405FC8 64890D00000000          mov dword ptr fs:[00000000], ecx
:00405FCF 83C410                  add esp, 00000010
:00405FD2 C3                      ret


:00405FD3 90                      nop
:00405FD4 90                      nop
:00405FD5 90                      nop
:00405FD6 90                      nop
:00405FD7 90                      nop
:00405FD8 90                      nop
:00405FD9 90                      nop
:00405FDA 90                      nop
:00405FDB 90                      nop
:00405FDC 90                      nop
:00405FDD 90                      nop
:00405FDE 90                      nop
:00405FDF 90                      nop

* Referenced by a CALL at Address:
|:00602643   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CF213(U), :006D1183(U), :006D11C3(U), :006D17F3(U), :006D4A10(U)
|:006D5613(U), :006D5703(U), :006D5863(U), :006D5903(U), :006D5CBB(U)
|:006D7B78(U), :006D7C33(U), :006DB8DF(U), :006DBA33(U), :006EFD7A(U)
|:006EFDAA(U), :006EFDFE(U), :006EFE93(U), :006EFEC3(U), :006EFF13(U)
|:006F23D3(U), :006FF039(U), :006FF067(U), :00701783(U), :007017BF(U)
|:007017FB(U), :00701859(U), :00701C33(U)
|
:00405FE0 6AFF                    push FFFFFFFF
:00405FE2 6856F26C00              push 006CF256
:00405FE7 64A100000000            mov eax, dword ptr fs:[00000000]
:00405FED 50                      push eax
:00405FEE 64892500000000          mov dword ptr fs:[00000000], esp
:00405FF5 51                      push ecx
:00405FF6 56                      push esi
:00405FF7 8BF1                    mov esi, ecx
:00405FF9 89742404                mov dword ptr [esp+04], esi
:00405FFD 8B8E18010000            mov ecx, dword ptr [esi+00000118]
:00406003 8D8618010000            lea eax, dword ptr [esi+00000118]
:00406009 85C9                    test ecx, ecx
:0040600B C744241001000000        mov [esp+10], 00000001
:00406013 7406                    je 0040601B
:00406015 50                      push eax
:00406016 E805831F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406013(C)
|
:0040601B 8B8E04010000            mov ecx, dword ptr [esi+00000104]
:00406021 8D8604010000            lea eax, dword ptr [esi+00000104]
:00406027 85C9                    test ecx, ecx
:00406029 C644241000              mov [esp+10], 00
:0040602E 7406                    je 00406036
:00406030 50                      push eax
:00406031 E8EA821F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040602E(C)
|
:00406036 8BCE                    mov ecx, esi
:00406038 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00406040 E89B691F00              call 005FC9E0
:00406045 8B4C2408                mov ecx, dword ptr [esp+08]
:00406049 5E                      pop esi
:0040604A 64890D00000000          mov dword ptr fs:[00000000], ecx
:00406051 83C410                  add esp, 00000010
:00406054 C3                      ret


:00406055 90                      nop
:00406056 90                      nop
:00406057 90                      nop
:00406058 90                      nop
:00406059 90                      nop
:0040605A 90                      nop
:0040605B 90                      nop
:0040605C 90                      nop
:0040605D 90                      nop
:0040605E 90                      nop
:0040605F 90                      nop

* Referenced by a CALL at Addresses:
|:00405106   , :0040537F   , :00405C95   , :00405CB8   
|
:00406060 51                      push ecx
:00406061 8B44240C                mov eax, dword ptr [esp+0C]
:00406065 53                      push ebx
:00406066 56                      push esi
:00406067 57                      push edi
:00406068 83EC10                  sub esp, 00000010
:0040606B 33D2                    xor edx, edx
:0040606D 8BDC                    mov ebx, esp
:0040606F 33F6                    xor esi, esi
:00406071 33FF                    xor edi, edi
:00406073 8903                    mov dword ptr [ebx], eax
:00406075 897C241C                mov dword ptr [esp+1C], edi
:00406079 895304                  mov dword ptr [ebx+04], edx
:0040607C 897308                  mov dword ptr [ebx+08], esi
:0040607F 8B742424                mov esi, dword ptr [esp+24]
:00406083 56                      push esi
:00406084 897B0C                  mov dword ptr [ebx+0C], edi
:00406087 E8D4D5FFFF              call 00403660
:0040608C 8BC6                    mov eax, esi
:0040608E 5F                      pop edi
:0040608F 5E                      pop esi
:00406090 5B                      pop ebx
:00406091 59                      pop ecx
:00406092 C20C00                  ret 000C


:00406095 90                      nop
:00406096 90                      nop
:00406097 90                      nop
:00406098 90                      nop
:00406099 90                      nop
:0040609A 90                      nop
:0040609B 90                      nop
:0040609C 90                      nop
:0040609D 90                      nop
:0040609E 90                      nop
:0040609F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406D33(U)
|
:004060A0 56                      push esi
:004060A1 8BF1                    mov esi, ecx
:004060A3 E8D8F3FFFF              call 00405480
:004060A8 F644240801              test [esp+08], 01
:004060AD 7409                    je 004060B8
:004060AF 56                      push esi
:004060B0 E84BB21D00              call 005E1300
:004060B5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004060AD(C)
|
:004060B8 8BC6                    mov eax, esi
:004060BA 5E                      pop esi
:004060BB C20400                  ret 0004


:004060BE 90                      nop
:004060BF 90                      nop

* Referenced by a CALL at Address:
|:00406457   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CF3AC(U), :006CF523(U), :006DEEB3(U), :006DEEBB(U)
|
:004060C0 8B01                    mov eax, dword ptr [ecx]
:004060C2 8B48F4                  mov ecx, dword ptr [eax-0C]
:004060C5 83E80C                  sub eax, 0000000C
:004060C8 49                      dec ecx
:004060C9 8908                    mov dword ptr [eax], ecx
:004060CB 7507                    jne 004060D4
:004060CD 50                      push eax
:004060CE E82DB21D00              call 005E1300
:004060D3 59                      pop ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004060CB(C)
|
:004060D4 C3                      ret
:004060D5 90                      nop
:004060D6 90                      nop
:004060D7 90                      nop
:004060D8 90                      nop
:004060D9 90                      nop
:004060DA 90                      nop
:004060DB 90                      nop
:004060DC 90                      nop
:004060DD 90                      nop
:004060DE 90                      nop
:004060DF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CF3BC(U), :006D0B10(U), :006D0CCA(U), :006D0E84(U), :006D10B1(U)
|:006D10E1(U), :006D4502(U), :006D5D75(U), :006D5F01(U), :006D77B6(U)
|:006D85E7(U), :006D8A65(U), :006D8DE2(U), :006D95EE(U), :006D9A57(U)
|:006DB89E(U), :006EF333(U), :006EFCED(U), :006F1CC9(U), :006F3351(U)
|:006F37CF(U), :006F3B7C(U), :006F4200(U), :006F49AC(U), :006F8FCF(U)
|:006F90AF(U), :006F9212(U), :006F92B6(U), :006F9604(U), :006FF12F(U)
|:00701B95(U), :00703C13(U), :00705291(U)
|
:004060E0 6AFF                    push FFFFFFFF
:004060E2 682BF46C00              push 006CF42B
:004060E7 64A100000000            mov eax, dword ptr fs:[00000000]
:004060ED 50                      push eax
:004060EE 64892500000000          mov dword ptr fs:[00000000], esp
:004060F5 83EC08                  sub esp, 00000008
:004060F8 8B11                    mov edx, dword ptr [ecx]
:004060FA 894C2400                mov dword ptr [esp], ecx
:004060FE 89542404                mov dword ptr [esp+04], edx
:00406102 85D2                    test edx, edx
:00406104 C744241000000000        mov [esp+10], 00000000
:0040610C 7440                    je 0040614E
:0040610E 8B4108                  mov eax, dword ptr [ecx+08]
:00406111 2BC2                    sub eax, edx
:00406113 C1F802                  sar eax, 02
:00406116 C1E002                  shl eax, 02
:00406119 3D80000000              cmp eax, 00000080
:0040611E 7618                    jbe 00406138
:00406120 52                      push edx
:00406121 E8DAB11D00              call 005E1300
:00406126 83C404                  add esp, 00000004
:00406129 8B4C2408                mov ecx, dword ptr [esp+08]
:0040612D 64890D00000000          mov dword ptr fs:[00000000], ecx
:00406134 83C414                  add esp, 00000014
:00406137 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040611E(C)
|
:00406138 48                      dec eax
:00406139 C1E803                  shr eax, 03
:0040613C 8B0C85FC977A00          mov ecx, dword ptr [4*eax+007A97FC]
:00406143 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:0040614A 890A                    mov dword ptr [edx], ecx
:0040614C 8910                    mov dword ptr [eax], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040610C(C)
|
:0040614E 8B4C2408                mov ecx, dword ptr [esp+08]
:00406152 64890D00000000          mov dword ptr fs:[00000000], ecx
:00406159 83C414                  add esp, 00000014
:0040615C C3                      ret


:0040615D 90                      nop
:0040615E 90                      nop
:0040615F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CF3B4(U), :006D0B08(U), :006D0CC2(U), :006D0E7C(U), :006D44FA(U)
|:006D5D6D(U), :006D85DF(U), :006D8A5D(U), :006D8DD2(U), :006D95E6(U)
|:006D9A4F(U), :006DB896(U), :006EF32B(U), :006EFCE5(U), :006F1CC1(U)
|:006F3349(U), :006F3B74(U), :006F41F5(U), :006F49A4(U), :006F8FC7(U)
|:006F90A7(U), :006F920A(U), :006F92AE(U), :006F95FC(U), :006FF121(U)
|:00701B8D(U), :00703C08(U), :00705289(U)
|
:00406160 C3                      ret
:00406161 90                      nop
:00406162 90                      nop
:00406163 90                      nop
:00406164 90                      nop
:00406165 90                      nop
:00406166 90                      nop
:00406167 90                      nop
:00406168 90                      nop
:00406169 90                      nop
:0040616A 90                      nop
:0040616B 90                      nop
:0040616C 90                      nop
:0040616D 90                      nop
:0040616E 90                      nop
:0040616F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:006CF2BF(U)
|
:00406170 6AFF                    push FFFFFFFF
:00406172 6853F46C00              push 006CF453
:00406177 64A100000000            mov eax, dword ptr fs:[00000000]
:0040617D 50                      push eax
:0040617E 64892500000000          mov dword ptr fs:[00000000], esp
:00406185 51                      push ecx
:00406186 53                      push ebx
:00406187 56                      push esi
:00406188 57                      push edi
:00406189 8BF9                    mov edi, ecx
:0040618B 897C240C                mov dword ptr [esp+0C], edi
:0040618F 8B5F04                  mov ebx, dword ptr [edi+04]
:00406192 8B37                    mov esi, dword ptr [edi]
:00406194 3BF3                    cmp esi, ebx
:00406196 C744241800000000        mov [esp+18], 00000000
:0040619E 741C                    je 004061BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004061BA(C)
|
:004061A0 8B06                    mov eax, dword ptr [esi]
:004061A2 83E80C                  sub eax, 0000000C
:004061A5 8B08                    mov ecx, dword ptr [eax]
:004061A7 49                      dec ecx
:004061A8 8908                    mov dword ptr [eax], ecx
:004061AA 7509                    jne 004061B5
:004061AC 50                      push eax
:004061AD E84EB11D00              call 005E1300
:004061B2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004061AA(C)
|
:004061B5 83C608                  add esi, 00000008
:004061B8 3BF3                    cmp esi, ebx
:004061BA 75E4                    jne 004061A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040619E(C)
|
:004061BC 8B0F                    mov ecx, dword ptr [edi]
:004061BE C744241801000000        mov [esp+18], 00000001
:004061C6 85C9                    test ecx, ecx
:004061C8 7443                    je 0040620D
:004061CA 8B4708                  mov eax, dword ptr [edi+08]
:004061CD 2BC1                    sub eax, ecx
:004061CF C1F803                  sar eax, 03
:004061D2 C1E003                  shl eax, 03
:004061D5 3D80000000              cmp eax, 00000080
:004061DA 761B                    jbe 004061F7
:004061DC 51                      push ecx
:004061DD E81EB11D00              call 005E1300
:004061E2 83C404                  add esp, 00000004
:004061E5 5F                      pop edi
:004061E6 5E                      pop esi
:004061E7 5B                      pop ebx
:004061E8 8B4C2404                mov ecx, dword ptr [esp+04]
:004061EC 64890D00000000          mov dword ptr fs:[00000000], ecx
:004061F3 83C410                  add esp, 00000010
:004061F6 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004061DA(C)
|
:004061F7 48                      dec eax
:004061F8 C1E803                  shr eax, 03
:004061FB 8B1485FC977A00          mov edx, dword ptr [4*eax+007A97FC]
:00406202 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:00406209 8911                    mov dword ptr [ecx], edx
:0040620B 8908                    mov dword ptr [eax], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004061C8(C)
|
:0040620D 8B4C2410                mov ecx, dword ptr [esp+10]
:00406211 5F                      pop edi
:00406212 5E                      pop esi
:00406213 5B                      pop ebx
:00406214 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040621B 83C410                  add esp, 00000010
:0040621E C3                      ret


:0040621F 90                      nop

* Referenced by a CALL at Addresses:
|:00405735   , :004195CF   , :00419912   , :00420453   , :0042B08B   
|:0042B1D3   , :004383B3   , :00443A7C   , :00443A8D   , :0044533B   
|:0044D0AD   , :0045CC55   , :0045CCC0   , :0046A71C   , :004E70D5   
|:004E73E8   , :004E73FE   , :004E763C   , :004E7651   , :004E77D6   
|:004E77EB   , :004E7801   , :004E795B   , :004E796C   , :004E7982   
|:004E7A8C   , :004E7AB7   , :004E7BC1   , :004E7BD2   , :004E7BE8   
|:004E80CB   , :004E8250   , :004E8266   , :004E84C9   , :004E84DF   
|:004E85AD   , :004E85C3   , :0050A673   , :0050A69E   , :0050A7E5   
|:0050A810   , :0050A903   , :0050A9E7   , :0050AABB   , :0050AB90   
|:0050AC64   , :0050CC07   , :0050CE03   , :0050CE2E   , :0050CF75   
|:0050CFA0   , :0050D0E5   , :0050D110   , :0050D277   , :0050D343   
|:0050D481   , :0050D54D   , :0050D68B   , :0050D7C8   , :0050D894   
|:00535C9F   , :00535CB4   , :00535CC9   , :005394C4   , :00539529   
|:0056710A   , :005671D5   , :005695B4   , :005695DA   , :0056C7CC   
|:0056C7E2   , :0056C7F7   , :0056C8DC   , :0056C8F2   , :0056C907   
|:0056C9BA   , :0056C9CF   , :0056CA85   , :0056CA9A   , :0056CB38   
|:0056CB4E   , :0056CB63   , :0056CC1A   , :0056CC30   , :0056CC45   
|:0056CD60   , :0056CD8B   , :0056CE3E   , :0056CE53   , :0056CEED   
|:0056CF02   , :0056CF3C   , :0056CF51   , :0056D048   , :0056D073   
|:0056D0C2   , :0056D0D7   , :0056D18C   , :0056D1A1   , :0056D258   
|:0056D26E   , :0056D283   , :0056D33A   , :0056D350   , :0056D365   
|:0056D41C   , :0056D432   , :0056D447   , :0056D513   , :0056D5C6   
|:0056D679   , :0056D730   , :0056D75B   , :0056D85B   , :0056D870   
|:0056D907   , :0056D91C   , :0056D9B6   , :0056D9CB   , :0056DA69   
|:0056DA7F   , :0056DA94   , :0056DB4B   , :0056DB61   , :0056DB76   
|:0056DC47   , :0056DC5C   , :0056DD0F   , :0056DD24   , :0056DDBE   
|:0056DDD3   , :0056DEAD   , :0056DEC2   , :0056DF59   , :0056DF6E   
|:0056E021   , :0056E0D4   , :0056E187   , :0056E221   , :0056E236   
|:0056E2E9   , :0056E39C   , :0056E44F   , :0056E502   , :0056E59C   
|:0056E5B1   , :0056E6A4   , :0056E754   , :0056E807   , :0056E8BA   
|:0056E96D   , :0056EA20   , :0056EAD3   , :0056EB8A   , :00570757   
|:00580866   , :0058092D   , :00581628   , :00581669   , :005A1092   
|:005A10AC   , :005A1152   , :005A116C   , :005DB53E   , :005DB57F   
|:005E046E   , :005F6CDB   , :005F8AA7   , :005F8AC0   , :0065A619   
|:0065AF92   , :0069FD95   , :0069FDBF   
|
:00406220 6AFF                    push FFFFFFFF
:00406222 687FF46C00              push 006CF47F
:00406227 64A100000000            mov eax, dword ptr fs:[00000000]
:0040622D 50                      push eax
:0040622E 64892500000000          mov dword ptr fs:[00000000], esp
:00406235 51                      push ecx
:00406236 8B442418                mov eax, dword ptr [esp+18]
:0040623A 56                      push esi
:0040623B C744240400000000        mov [esp+04], 00000000
:00406243 8B00                    mov eax, dword ptr [eax]
:00406245 8944241C                mov dword ptr [esp+1C], eax
:00406249 FF40F4                  inc [eax-0C]
:0040624C 8B442420                mov eax, dword ptr [esp+20]
:00406250 C744241001000000        mov [esp+10], 00000001
:00406258 8B08                    mov ecx, dword ptr [eax]
:0040625A 8B49FC                  mov ecx, dword ptr [ecx-04]
:0040625D 51                      push ecx
:0040625E 6A00                    push 00000000
:00406260 50                      push eax
:00406261 8D4C2428                lea ecx, dword ptr [esp+28]
:00406265 E806501E00              call 005EB270
:0040626A 8B742418                mov esi, dword ptr [esp+18]
:0040626E 8B00                    mov eax, dword ptr [eax]
:00406270 C744240401000000        mov [esp+04], 00000001
:00406278 8906                    mov dword ptr [esi], eax
:0040627A 8B50F4                  mov edx, dword ptr [eax-0C]
:0040627D 42                      inc edx
:0040627E 8950F4                  mov dword ptr [eax-0C], edx
:00406281 8B54241C                mov edx, dword ptr [esp+1C]
:00406285 C644241000              mov [esp+10], 00
:0040628A 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040628D 8D42F4                  lea eax, dword ptr [edx-0C]
:00406290 49                      dec ecx
:00406291 8908                    mov dword ptr [eax], ecx
:00406293 7509                    jne 0040629E
:00406295 50                      push eax
:00406296 E865B01D00              call 005E1300
:0040629B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406293(C)
|
:0040629E 8B4C2408                mov ecx, dword ptr [esp+08]
:004062A2 8BC6                    mov eax, esi
:004062A4 5E                      pop esi
:004062A5 64890D00000000          mov dword ptr fs:[00000000], ecx
:004062AC 83C410                  add esp, 00000010
:004062AF C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:006CF2B1(U)
|
:004062B0 C3                      ret
:004062B1 90                      nop
:004062B2 90                      nop
:004062B3 90                      nop
:004062B4 90                      nop
:004062B5 90                      nop
:004062B6 90                      nop
:004062B7 90                      nop
:004062B8 90                      nop
:004062B9 90                      nop
:004062BA 90                      nop
:004062BB 90                      nop
:004062BC 90                      nop
:004062BD 90                      nop
:004062BE 90                      nop
:004062BF 90                      nop

* Referenced by a CALL at Addresses:
|:00405726   , :00405748   , :004161BF   , :00416FB3   , :00416FC7   
|:004195B6   , :00419979   , :0041F2E3   , :0042043A   , :00432BA4   
|:00432C22   , :00443691   , :00444D39   , :00445328   , :0045E9ED   
|:00472E24   , :004D1336   , :004D1467   , :004E7370   , :004E753E   
|:004E7AA1   , :004E80B5   , :004F5BE7   , :004F5C2E   , :004F9505   
|:004FE515   , :0050A688   , :0050A7FA   , :0050A8ED   , :0050A9D1   
|:0050AAA5   , :0050AB7A   , :0050AC4E   , :0050CE18   , :0050CF8A   
|:0050D0FA   , :0050D261   , :0050D32D   , :0050D46B   , :0050D537   
|:0050D675   , :0050D7B2   , :0050D87E   , :0051C799   , :0051C7FC   
|:0051C84C   , :00527CEC   , :00527D36   , :0053823B   , :0053828D   
|:005394AD   , :005394D9   , :00557BE4   , :0055AA4E   , :0055AA93   
|:00566F48   , :0056872C   , :005687AE   , :0056882F   , :005688B1   
|:00568932   , :005689B4   , :00568A36   , :00568C83   , :00568D63   
|:00568E41   , :00568F22   , :00569003   , :005690E2   , :005691C1   
|:005692A0   , :0056938A   , :00569474   , :005695C9   , :0056CD76   
|:0056D05E   , :0056D176   , :0056D4FE   , :0056D5B1   , :0056D664   
|:0056D71B   , :0056D746   , :0056DC31   , :0056E00C   , :0056E0BF   
|:0056E172   , :0056E2D4   , :0056E387   , :0056E43A   , :0056E4ED   
|:0056E68F   , :0056E73F   , :0056E7F2   , :0056E8A5   , :0056E958   
|:0056EA0B   , :0056EABE   , :0056EB75   , :0056FD71   , :0056FF0A   
|:00570769   , :0058084F   , :00580915   , :00581655   , :005821E4   
|:00592AC8   , :005A121F   , :005A1EB4   , :005A20DC   , :005A2300   
|:005A2524   , :005A274A   , :005A4369   , :005A440D   , :005D9DE8   
|:005DB521   , :005DB55E   , :005E082F   , :005E9F22   , :005E9F6C   
|:005F6CF3   , :0063EC8D   , :006532ED   , :0069FD80   , :0069FDAA   
|
:004062C0 6AFF                    push FFFFFFFF
:004062C2 68B7F46C00              push 006CF4B7
:004062C7 64A100000000            mov eax, dword ptr fs:[00000000]
:004062CD 50                      push eax
:004062CE 64892500000000          mov dword ptr fs:[00000000], esp
:004062D5 83EC08                  sub esp, 00000008
:004062D8 A128FE7200              mov eax, dword ptr [0072FE28]
:004062DD 8B4C2420                mov ecx, dword ptr [esp+20]
:004062E1 56                      push esi
:004062E2 50                      push eax
:004062E3 51                      push ecx
:004062E4 8D4C2410                lea ecx, dword ptr [esp+10]
:004062E8 C744240C00000000        mov [esp+0C], 00000000
:004062F0 E8BB4D1E00              call 005EB0B0
:004062F5 8B542420                mov edx, dword ptr [esp+20]
:004062F9 C744241401000000        mov [esp+14], 00000001
:00406301 8B0A                    mov ecx, dword ptr [edx]
:00406303 894C2424                mov dword ptr [esp+24], ecx
:00406307 FF41F4                  inc [ecx-0C]
:0040630A 8B08                    mov ecx, dword ptr [eax]
:0040630C C644241402              mov [esp+14], 02
:00406311 8B49FC                  mov ecx, dword ptr [ecx-04]
:00406314 51                      push ecx
:00406315 6A00                    push 00000000
:00406317 50                      push eax
:00406318 8D4C2430                lea ecx, dword ptr [esp+30]
:0040631C E84F4F1E00              call 005EB270
:00406321 8B74241C                mov esi, dword ptr [esp+1C]
:00406325 8B00                    mov eax, dword ptr [eax]
:00406327 C744240401000000        mov [esp+04], 00000001
:0040632F 8906                    mov dword ptr [esi], eax
:00406331 8B50F4                  mov edx, dword ptr [eax-0C]
:00406334 42                      inc edx
:00406335 8950F4                  mov dword ptr [eax-0C], edx
:00406338 8B542424                mov edx, dword ptr [esp+24]
:0040633C C644241401              mov [esp+14], 01
:00406341 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00406344 8D42F4                  lea eax, dword ptr [edx-0C]
:00406347 49                      dec ecx
:00406348 8908                    mov dword ptr [eax], ecx
:0040634A 7509                    jne 00406355
:0040634C 50                      push eax
:0040634D E8AEAF1D00              call 005E1300
:00406352 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040634A(C)
|
:00406355 8B442408                mov eax, dword ptr [esp+08]
:00406359 C644241400              mov [esp+14], 00
:0040635E 83C0F4                  add eax, FFFFFFF4
:00406361 8B08                    mov ecx, dword ptr [eax]
:00406363 49                      dec ecx
:00406364 8908                    mov dword ptr [eax], ecx
:00406366 7509                    jne 00406371
:00406368 50                      push eax
:00406369 E892AF1D00              call 005E1300
:0040636E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406366(C)
|
:00406371 8B4C240C                mov ecx, dword ptr [esp+0C]
:00406375 8BC6                    mov eax, esi
:00406377 5E                      pop esi
:00406378 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040637F 83C414                  add esp, 00000014
:00406382 C3                      ret


:00406383 90                      nop
:00406384 90                      nop
:00406385 90                      nop
:00406386 90                      nop
:00406387 90                      nop
:00406388 90                      nop
:00406389 90                      nop
:0040638A 90                      nop
:0040638B 90                      nop
:0040638C 90                      nop
:0040638D 90                      nop
:0040638E 90                      nop
:0040638F 90                      nop

* Referenced by a CALL at Addresses:
|:0040512D   , :0041CB77   , :0041CBD3   , :0041CC2D   , :00426E80   
|:0044BCE5   , :00466D69   , :0057E427   , :0058A208   , :005D7192   
|:005D7D9C   , :005DB89F   , :005DB8F2   , :005DCBEA   , :005DCC46   
|:005DED85   , :005DEDD4   , :005DF02E   , :005DF07D   , :005FE206   
|:006228A6   
|
:00406390 8B442404                mov eax, dword ptr [esp+04]
:00406394 56                      push esi
:00406395 8BF1                    mov esi, ecx
:00406397 8B08                    mov ecx, dword ptr [eax]
:00406399 83C004                  add eax, 00000004
:0040639C 890E                    mov dword ptr [esi], ecx
:0040639E 8D5604                  lea edx, dword ptr [esi+04]
:004063A1 8B08                    mov ecx, dword ptr [eax]
:004063A3 890A                    mov dword ptr [edx], ecx
:004063A5 8B4804                  mov ecx, dword ptr [eax+04]
:004063A8 894A04                  mov dword ptr [edx+04], ecx
:004063AB 8B4808                  mov ecx, dword ptr [eax+08]
:004063AE 894A08                  mov dword ptr [edx+08], ecx
:004063B1 8B0E                    mov ecx, dword ptr [esi]
:004063B3 8B400C                  mov eax, dword ptr [eax+0C]
:004063B6 85C9                    test ecx, ecx
:004063B8 89420C                  mov dword ptr [edx+0C], eax
:004063BB 7406                    je 004063C3
:004063BD 56                      push esi
:004063BE E82D7F1F00              call 005FE2F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004063BB(C)
|
:004063C3 8BC6                    mov eax, esi
:004063C5 5E                      pop esi
:004063C6 C20400                  ret 0004


:004063C9 90                      nop
:004063CA 90                      nop
:004063CB 90                      nop
:004063CC 90                      nop
:004063CD 90                      nop
:004063CE 90                      nop
:004063CF 90                      nop

* Referenced by a CALL at Addresses:
|:0040544D   , :0041D15B   , :0041D1A8   , :0041D2EF   , :0042059E   
|:00421E7A   , :0042912A   , :00440F70   , :0044CB6F   , :0045CACE   
|:0045CB38   , :004622E0   , :00462330   , :00462416   , :00462466   
|:00465C06   , :00467118   , :00572B37   , :0057ECC0   , :0058A8DD   
|:0058B817   , :0058EAAE   , :005B87DD   , :005D7631   , :005D91B6   
|:005D92D7   , :005DA4AD   , :005DBD58   , :005DF89A   , :005DF90A   
|:005DF97A   , :005FFD7B   , :005FFEC4   , :0060002D   , :0060AE06   
|:0063F99C   , :0063FA4E   
|
:004063D0 8B442404                mov eax, dword ptr [esp+04]
:004063D4 8B09                    mov ecx, dword ptr [ecx]
:004063D6 8908                    mov dword ptr [eax], ecx
:004063D8 C20400                  ret 0004


:004063DB 90                      nop
:004063DC 90                      nop
:004063DD 90                      nop
:004063DE 90                      nop
:004063DF 90                      nop

* Referenced by a CALL at Addresses:
|:0040545C   , :0041D16A   , :0041D1B7   , :0041D2FE   , :004205AD   
|:00421E89   , :0042913C   , :00440F7F   , :0044CB7E   , :0045CADD   
|:0045CB47   , :004622EF   , :0046233F   , :00462425   , :00462475   
|:00465C15   , :00467127   , :00572B46   , :0057ECCF   , :0058A8EC   
|:0058B826   , :0058EABD   , :005B87EC   , :005D7640   , :005D91C5   
|:005D92E6   , :005DA4BC   , :005DBD67   , :005DF8A9   , :005DF919   
|:005DF989   , :005FFD8A   , :005FFED3   , :0060003C   , :0060AE15   
|:0063F9AB   , :0063FA5D   
|
:004063E0 8B44240C                mov eax, dword ptr [esp+0C]
:004063E4 50                      push eax
:004063E5 E856010000              call 00406540
:004063EA 8B4C2408                mov ecx, dword ptr [esp+08]
:004063EE 8B5104                  mov edx, dword ptr [ecx+04]
:004063F1 8908                    mov dword ptr [eax], ecx
:004063F3 895004                  mov dword ptr [eax+04], edx
:004063F6 8902                    mov dword ptr [edx], eax
:004063F8 894104                  mov dword ptr [ecx+04], eax
:004063FB 8B4C2404                mov ecx, dword ptr [esp+04]
:004063FF 8901                    mov dword ptr [ecx], eax
:00406401 8BC1                    mov eax, ecx
:00406403 C20C00                  ret 000C


:00406406 90                      nop
:00406407 90                      nop
:00406408 90                      nop
:00406409 90                      nop
:0040640A 90                      nop
:0040640B 90                      nop
:0040640C 90                      nop
:0040640D 90                      nop
:0040640E 90                      nop
:0040640F 90                      nop

* Referenced by a CALL at Addresses:
|:004057F1   , :0049FED4   
|
:00406410 55                      push ebp
:00406411 8BE9                    mov ebp, ecx
:00406413 8B542408                mov edx, dword ptr [esp+08]
:00406417 56                      push esi
:00406418 8B4504                  mov eax, dword ptr [ebp+04]
:0040641B 8B7500                  mov esi, dword ptr [ebp+00]
:0040641E 8BC8                    mov ecx, eax
:00406420 2BCE                    sub ecx, esi
:00406422 C1F903                  sar ecx, 03
:00406425 3BD1                    cmp edx, ecx
:00406427 7344                    jnb 0040646D
:00406429 53                      push ebx
:0040642A 57                      push edi
:0040642B 8D3CD6                  lea edi, dword ptr [esi+8*edx]
:0040642E 8BF0                    mov esi, eax
:00406430 2BC6                    sub eax, esi
:00406432 C1F803                  sar eax, 03
:00406435 85C0                    test eax, eax
:00406437 7E13                    jle 0040644C
:00406439 8BD8                    mov ebx, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040644A(C)
|
:0040643B 56                      push esi
:0040643C 8BCF                    mov ecx, edi
:0040643E E8DD070000              call 00406C20
:00406443 83C608                  add esi, 00000008
:00406446 83C708                  add edi, 00000008
:00406449 4B                      dec ebx
:0040644A 75EF                    jne 0040643B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406437(C)
|
:0040644C 8B5D04                  mov ebx, dword ptr [ebp+04]
:0040644F 8BF7                    mov esi, edi
:00406451 3BFB                    cmp edi, ebx
:00406453 740E                    je 00406463

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406461(C)
|
:00406455 8BCE                    mov ecx, esi
:00406457 E864FCFFFF              call 004060C0
:0040645C 83C608                  add esi, 00000008
:0040645F 3BF3                    cmp esi, ebx
:00406461 75F2                    jne 00406455

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406453(C)
|
:00406463 897D04                  mov dword ptr [ebp+04], edi
:00406466 5F                      pop edi
:00406467 5B                      pop ebx
:00406468 5E                      pop esi
:00406469 5D                      pop ebp
:0040646A C20800                  ret 0008



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406427(C)
|
:0040646D 8B742410                mov esi, dword ptr [esp+10]
:00406471 2BD1                    sub edx, ecx
:00406473 56                      push esi
:00406474 52                      push edx
:00406475 50                      push eax
:00406476 8BCD                    mov ecx, ebp
:00406478 E883030000              call 00406800
:0040647D 5E                      pop esi
:0040647E 5D                      pop ebp
:0040647F C20800                  ret 0008


:00406482 90                      nop
:00406483 90                      nop
:00406484 90                      nop
:00406485 90                      nop
:00406486 90                      nop
:00406487 90                      nop
:00406488 90                      nop
:00406489 90                      nop
:0040648A 90                      nop
:0040648B 90                      nop
:0040648C 90                      nop
:0040648D 90                      nop
:0040648E 90                      nop
:0040648F 90                      nop

* Referenced by a CALL at Address:
|:0040515D   
|
:00406490 8BC1                    mov eax, ecx
:00406492 33C9                    xor ecx, ecx
:00406494 8908                    mov dword ptr [eax], ecx
:00406496 894804                  mov dword ptr [eax+04], ecx
:00406499 894808                  mov dword ptr [eax+08], ecx
:0040649C C20400                  ret 0004


:0040649F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CF364(U), :006CF443(U)
|
:004064A0 6AFF                    push FFFFFFFF
:004064A2 68DBF46C00              push 006CF4DB
:004064A7 64A100000000            mov eax, dword ptr fs:[00000000]
:004064AD 50                      push eax
:004064AE 64892500000000          mov dword ptr fs:[00000000], esp
:004064B5 51                      push ecx
:004064B6 894C2400                mov dword ptr [esp], ecx
:004064BA 8B11                    mov edx, dword ptr [ecx]
:004064BC C744240C00000000        mov [esp+0C], 00000000
:004064C4 85D2                    test edx, edx
:004064C6 7440                    je 00406508
:004064C8 8B4108                  mov eax, dword ptr [ecx+08]
:004064CB 2BC2                    sub eax, edx
:004064CD C1F803                  sar eax, 03
:004064D0 C1E003                  shl eax, 03
:004064D3 3D80000000              cmp eax, 00000080
:004064D8 7618                    jbe 004064F2
:004064DA 52                      push edx
:004064DB E820AE1D00              call 005E1300
:004064E0 83C404                  add esp, 00000004
:004064E3 8B4C2404                mov ecx, dword ptr [esp+04]
:004064E7 64890D00000000          mov dword ptr fs:[00000000], ecx
:004064EE 83C410                  add esp, 00000010
:004064F1 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004064D8(C)
|
:004064F2 48                      dec eax
:004064F3 C1E803                  shr eax, 03
:004064F6 8B0C85FC977A00          mov ecx, dword ptr [4*eax+007A97FC]
:004064FD 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:00406504 890A                    mov dword ptr [edx], ecx
:00406506 8910                    mov dword ptr [eax], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004064C6(C)
|
:00406508 8B4C2404                mov ecx, dword ptr [esp+04]
:0040650C 64890D00000000          mov dword ptr fs:[00000000], ecx
:00406513 83C410                  add esp, 00000010
:00406516 C3                      ret


:00406517 90                      nop
:00406518 90                      nop
:00406519 90                      nop
:0040651A 90                      nop
:0040651B 90                      nop
:0040651C 90                      nop
:0040651D 90                      nop
:0040651E 90                      nop
:0040651F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CF406(U), :006CF426(U), :006D0CB0(U), :006D0E6A(U), :006D0EEE(U)
|:006D10BC(U), :006D10EC(U), :006D452C(U), :006D5DA0(U), :006D5F0C(U)
|:006D77F7(U), :006D899F(U), :006D8D74(U), :006D8DEA(U), :006D8DF2(U)
|:006D9356(U), :006D9376(U), :006D965D(U), :006D9A98(U), :006DB905(U)
|:006EF3D2(U), :006EFD58(U), :006F1D8A(U), :006F3392(U), :006F381A(U)
|:006F3BC3(U), :006F42A4(U), :006F49ED(U), :006F9037(U), :006F9110(U)
|:006F929C(U), :006F92FF(U), :006F96C5(U), :00701BD6(U), :00703CF3(U)
|:007053D0(U)
|
:00406520 C3                      ret
:00406521 90                      nop
:00406522 90                      nop
:00406523 90                      nop
:00406524 90                      nop
:00406525 90                      nop
:00406526 90                      nop
:00406527 90                      nop
:00406528 90                      nop
:00406529 90                      nop
:0040652A 90                      nop
:0040652B 90                      nop
:0040652C 90                      nop
:0040652D 90                      nop
:0040652E 90                      nop
:0040652F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CF36F(U), :006CF44E(U), :006CF4D6(U)
|
:00406530 C3                      ret
:00406531 90                      nop
:00406532 90                      nop
:00406533 90                      nop
:00406534 90                      nop
:00406535 90                      nop
:00406536 90                      nop
:00406537 90                      nop
:00406538 90                      nop
:00406539 90                      nop
:0040653A 90                      nop
:0040653B 90                      nop
:0040653C 90                      nop
:0040653D 90                      nop
:0040653E 90                      nop
:0040653F 90                      nop

* Referenced by a CALL at Address:
|:004063E5   
|
:00406540 51                      push ecx
:00406541 A100987A00              mov eax, dword ptr [007A9800]
:00406546 57                      push edi
:00406547 85C0                    test eax, eax
:00406549 740A                    je 00406555
:0040654B 8B08                    mov ecx, dword ptr [eax]
:0040654D 890D00987A00            mov dword ptr [007A9800], ecx
:00406553 EB51                    jmp 004065A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406549(C)
|
:00406555 8D542404                lea edx, dword ptr [esp+04]
:00406559 C744240414000000        mov [esp+04], 00000014
:00406561 52                      push edx
:00406562 6A10                    push 00000010
:00406564 E807DEFFFF              call 00404370
:00406569 8B7C240C                mov edi, dword ptr [esp+0C]
:0040656D 83C408                  add esp, 00000008
:00406570 83FF01                  cmp edi, 00000001
:00406573 7431                    je 004065A6
:00406575 8D4810                  lea ecx, dword ptr [eax+10]
:00406578 56                      push esi
:00406579 890D00987A00            mov dword ptr [007A9800], ecx
:0040657F 8BD1                    mov edx, ecx
:00406581 83C110                  add ecx, 00000010
:00406584 BE01000000              mov esi, 00000001
:00406589 4F                      dec edi
:0040658A 3BFE                    cmp edi, esi
:0040658C 7411                    je 0040659F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040659D(C)
|
:0040658E 890A                    mov dword ptr [edx], ecx
:00406590 8B7C2408                mov edi, dword ptr [esp+08]
:00406594 8BD1                    mov edx, ecx
:00406596 46                      inc esi
:00406597 83C110                  add ecx, 00000010
:0040659A 4F                      dec edi
:0040659B 3BFE                    cmp edi, esi
:0040659D 75EF                    jne 0040658E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040658C(C)
|
:0040659F C70200000000            mov dword ptr [edx], 00000000
:004065A5 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406553(U), :00406573(C)
|
:004065A6 8D4808                  lea ecx, dword ptr [eax+08]
:004065A9 5F                      pop edi
:004065AA 85C9                    test ecx, ecx
:004065AC 7408                    je 004065B6
:004065AE 8B542408                mov edx, dword ptr [esp+08]
:004065B2 8B12                    mov edx, dword ptr [edx]
:004065B4 8911                    mov dword ptr [ecx], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004065AC(C)
|
:004065B6 59                      pop ecx
:004065B7 C20400                  ret 0004


:004065BA 90                      nop
:004065BB 90                      nop
:004065BC 90                      nop
:004065BD 90                      nop
:004065BE 90                      nop
:004065BF 90                      nop

* Referenced by a CALL at Addresses:
|:004058C6   , :0045B39B   , :00578C1D   , :0059B1AE   , :0059E565   
|:005A3B2C   , :006019BB   , :0061FB08   , :0064262A   
|
:004065C0 8BC1                    mov eax, ecx
:004065C2 8B4C2408                mov ecx, dword ptr [esp+08]
:004065C6 8908                    mov dword ptr [eax], ecx
:004065C8 C20800                  ret 0008


:004065CB 90                      nop
:004065CC 90                      nop
:004065CD 90                      nop
:004065CE 90                      nop
:004065CF 90                      nop

* Referenced by a CALL at Addresses:
|:00405D1D   , :0041226E   , :00412474   , :004125F8   , :00412871   
|:00412A97   , :00412D99   , :00412F97   , :004130FB   , :0041336B   
|:0041357F   , :0041388F   , :0042FC30   , :0043BDD0   , :0044D991   
|:004533F0   , :00454A2F   , :0045918F   , :0045B49E   , :004683CD   
|:00578EA5   , :00579039   , :0057EF31   , :0057F1FF   , :0057F379   
|:00592E77   , :0059B2B1   , :0059CE2C   , :0059E671   , :005A1549   
|:005A1791   , :005A3C2C   , :005C577D   , :005C5DA3   , :005C669C   
|:005C6851   , :005C6AF5   , :005C7F3C   , :005C80F0   , :006025D1   
|:0061FC06   , :00642786   , :00642940   , :00642AEC   , :00653D4B   
|:00653FC9   
|
:004065D0 55                      push ebp
:004065D1 8BEC                    mov ebp, esp
:004065D3 6AFF                    push FFFFFFFF
:004065D5 68F0F46C00              push 006CF4F0
:004065DA 64A100000000            mov eax, dword ptr fs:[00000000]
:004065E0 50                      push eax
:004065E1 64892500000000          mov dword ptr fs:[00000000], esp
:004065E8 83EC10                  sub esp, 00000010
:004065EB 53                      push ebx
:004065EC 56                      push esi
:004065ED 8BF1                    mov esi, ecx
:004065EF 57                      push edi
:004065F0 8B4D10                  mov ecx, dword ptr [ebp+10]
:004065F3 8965F0                  mov dword ptr [ebp-10], esp
:004065F6 8B4604                  mov eax, dword ptr [esi+04]
:004065F9 8B3E                    mov edi, dword ptr [esi]
:004065FB 2BC7                    sub eax, edi
:004065FD C1F802                  sar eax, 02
:00406600 3BC1                    cmp eax, ecx
:00406602 8945E8                  mov dword ptr [ebp-18], eax
:00406605 8D4D10                  lea ecx, dword ptr [ebp+10]
:00406608 7203                    jb 0040660D
:0040660A 8D4DE8                  lea ecx, dword ptr [ebp-18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406608(C)
|
:0040660D 8B09                    mov ecx, dword ptr [ecx]
:0040660F 03C8                    add ecx, eax
:00406611 894DE8                  mov dword ptr [ebp-18], ecx
:00406614 7445                    je 0040665B
:00406616 C1E102                  shl ecx, 02
:00406619 81F980000000            cmp ecx, 00000080
:0040661F 760D                    jbe 0040662E
:00406621 51                      push ecx
:00406622 E859AC1D00              call 005E1280
:00406627 83C404                  add esp, 00000004
:0040662A 8BF8                    mov edi, eax
:0040662C EB2F                    jmp 0040665D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040661F(C)
|
:0040662E 8D41FF                  lea eax, dword ptr [ecx-01]
:00406631 C1E803                  shr eax, 03
:00406634 8D1485FC977A00          lea edx, dword ptr [4*eax+007A97FC]
:0040663B 8B0485FC977A00          mov eax, dword ptr [4*eax+007A97FC]
:00406642 85C0                    test eax, eax
:00406644 7408                    je 0040664E
:00406646 8B08                    mov ecx, dword ptr [eax]
:00406648 8BF8                    mov edi, eax
:0040664A 890A                    mov dword ptr [edx], ecx
:0040664C EB0F                    jmp 0040665D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406644(C)
|
:0040664E 51                      push ecx
:0040664F E82CDBFFFF              call 00404180
:00406654 83C404                  add esp, 00000004
:00406657 8BF8                    mov edi, eax
:00406659 EB02                    jmp 0040665D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406614(C)
|
:0040665B 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040662C(U), :0040664C(U), :00406659(U)
|
:0040665D 8B5510                  mov edx, dword ptr [ebp+10]
:00406660 8B5D08                  mov ebx, dword ptr [ebp+08]
:00406663 8B06                    mov eax, dword ptr [esi]
:00406665 52                      push edx
:00406666 57                      push edi
:00406667 53                      push ebx
:00406668 50                      push eax
:00406669 897DEC                  mov dword ptr [ebp-14], edi
:0040666C 897DE4                  mov dword ptr [ebp-1C], edi
:0040666F C745FC00000000          mov [ebp-04], 00000000
:00406676 E8C5050000              call 00406C40
:0040667B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0040667E 83C410                  add esp, 00000010
:00406681 83F901                  cmp ecx, 00000001
:00406684 7510                    jne 00406696
:00406686 85C0                    test eax, eax
:00406688 7407                    je 00406691
:0040668A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040668D 8B11                    mov edx, dword ptr [ecx]
:0040668F 8910                    mov dword ptr [eax], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406688(C)
|
:00406691 83C004                  add eax, 00000004
:00406694 EB12                    jmp 004066A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406684(C)
|
:00406696 8B5510                  mov edx, dword ptr [ebp+10]
:00406699 52                      push edx
:0040669A 8B550C                  mov edx, dword ptr [ebp+0C]
:0040669D 52                      push edx
:0040669E 51                      push ecx
:0040669F 50                      push eax
:004066A0 E8CB050000              call 00406C70
:004066A5 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406694(U)
|
:004066A8 8B5510                  mov edx, dword ptr [ebp+10]
:004066AB 8B4E04                  mov ecx, dword ptr [esi+04]
:004066AE 52                      push edx
:004066AF 50                      push eax
:004066B0 51                      push ecx
:004066B1 53                      push ebx
:004066B2 E889050000              call 00406C40
:004066B7 8B4E04                  mov ecx, dword ptr [esi+04]
:004066BA 8BD8                    mov ebx, eax
:004066BC 8B06                    mov eax, dword ptr [esi]
:004066BE 83C410                  add esp, 00000010
:004066C1 3BC1                    cmp eax, ecx
:004066C3 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004066CA 7407                    je 004066D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004066D1(C)
|
:004066CC 83C004                  add eax, 00000004
:004066CF 3BC1                    cmp eax, ecx
:004066D1 75F9                    jne 004066CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004066CA(C)
|
:004066D3 8B0E                    mov ecx, dword ptr [esi]
:004066D5 85C9                    test ecx, ecx
:004066D7 7433                    je 0040670C
:004066D9 8B4608                  mov eax, dword ptr [esi+08]
:004066DC 2BC1                    sub eax, ecx
:004066DE C1F802                  sar eax, 02
:004066E1 C1E002                  shl eax, 02
:004066E4 3D80000000              cmp eax, 00000080
:004066E9 760B                    jbe 004066F6
:004066EB 51                      push ecx
:004066EC E80FAC1D00              call 005E1300
:004066F1 83C404                  add esp, 00000004
:004066F4 EB16                    jmp 0040670C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004066E9(C)
|
:004066F6 48                      dec eax
:004066F7 C1E803                  shr eax, 03
:004066FA 8B1485FC977A00          mov edx, dword ptr [4*eax+007A97FC]
:00406701 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:00406708 8911                    mov dword ptr [ecx], edx
:0040670A 8908                    mov dword ptr [eax], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004066D7(C), :004066F4(U)
|
:0040670C 8B45E8                  mov eax, dword ptr [ebp-18]
:0040670F 893E                    mov dword ptr [esi], edi
:00406711 895E04                  mov dword ptr [esi+04], ebx
:00406714 8D0C87                  lea ecx, dword ptr [edi+4*eax]
:00406717 5F                      pop edi
:00406718 894E08                  mov dword ptr [esi+08], ecx
:0040671B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040671E 5E                      pop esi
:0040671F 64890D00000000          mov dword ptr fs:[00000000], ecx
:00406726 5B                      pop ebx
:00406727 8BE5                    mov esp, ebp
:00406729 5D                      pop ebp
:0040672A C20C00                  ret 000C


:0040672D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00406730 85C9                    test ecx, ecx
:00406732 7432                    je 00406766
:00406734 8B55E8                  mov edx, dword ptr [ebp-18]
:00406737 8D049500000000          lea eax, dword ptr [4*edx+00000000]
:0040673E 3D80000000              cmp eax, 00000080
:00406743 760B                    jbe 00406750
:00406745 51                      push ecx
:00406746 E8B5AB1D00              call 005E1300
:0040674B 83C404                  add esp, 00000004
:0040674E EB16                    jmp 00406766

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406743(C)
|
:00406750 48                      dec eax
:00406751 C1E803                  shr eax, 03
:00406754 8B1485FC977A00          mov edx, dword ptr [4*eax+007A97FC]
:0040675B 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:00406762 8911                    mov dword ptr [ecx], edx
:00406764 8908                    mov dword ptr [eax], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406732(C), :0040674E(U)
|
:00406766 6A00                    push 00000000
:00406768 6A00                    push 00000000
:0040676A E848822B00              call 006BE9B7
:0040676F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CF2A9(U), :006CF35C(U), :006D209D(U), :006D20B3(U), :006D20C9(U)
|:006D2137(U), :006D214D(U), :006D21DC(U), :006D21EA(U), :006D21F8(U)
|:006D223E(U), :006D224C(U), :006D2C66(U), :006D355A(U), :006D618D(U)
|:006D63D1(U), :006D6450(U), :006D72B1(U), :006D7638(U), :006D97E3(U)
|:006D99FE(U), :006D9D5D(U), :006D9D73(U), :006D9DBA(U), :006D9DC8(U)
|:006DABAD(U), :006DABC3(U), :006DABD9(U), :006DACA9(U), :006DACB7(U)
|:006DACC5(U), :006DB574(U), :006EEB76(U), :006EEC93(U), :006EFAD1(U)
|:006F1255(U), :006F126B(U), :006F1569(U), :006FB10D(U), :006FB1E5(U)
|:006FB295(U), :006FB337(U), :006FB3A7(U), :006FB781(U), :006FB797(U)
|:006FB86F(U), :006FBBD8(U), :006FBBEE(U), :006FC3CC(U), :006FC3E2(U)
|:006FC4AC(U), :006FC4C2(U), :006FC5A2(U), :006FC61F(U), :006FEC57(U)
|:006FEC6D(U), :006FECA9(U), :006FFF77(U), :0070243B(U), :00702451(U)
|:0070247F(U), :007038A1(U), :007038B7(U), :0070414D(U), :0070415B(U)
|
:00406770 6AFF                    push FFFFFFFF
:00406772 680BF56C00              push 006CF50B
:00406777 64A100000000            mov eax, dword ptr fs:[00000000]
:0040677D 50                      push eax
:0040677E 64892500000000          mov dword ptr fs:[00000000], esp
:00406785 83EC08                  sub esp, 00000008
:00406788 53                      push ebx
:00406789 8BD9                    mov ebx, ecx
:0040678B 56                      push esi
:0040678C 57                      push edi
:0040678D 895C240C                mov dword ptr [esp+0C], ebx
:00406791 8B0DADB67A00            mov ecx, dword ptr [007AB6AD]
:00406797 C744241C00000000        mov [esp+1C], 00000000
:0040679F 8BF9                    mov edi, ecx
:004067A1 8B01                    mov eax, dword ptr [ecx]
:004067A3 3BC7                    cmp eax, edi
:004067A5 7423                    je 004067CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004067C8(C)
|
:004067A7 8B4808                  mov ecx, dword ptr [eax+08]
:004067AA 8B30                    mov esi, dword ptr [eax]
:004067AC 3BCB                    cmp ecx, ebx
:004067AE 7514                    jne 004067C4
:004067B0 51                      push ecx
:004067B1 8BCC                    mov ecx, esp
:004067B3 8901                    mov dword ptr [ecx], eax
:004067B5 8D442414                lea eax, dword ptr [esp+14]
:004067B9 50                      push eax
:004067BA B9ADB67A00              mov ecx, 007AB6AD
:004067BF E82C020000              call 004069F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004067AE(C)
|
:004067C4 3BF7                    cmp esi, edi
:004067C6 8BC6                    mov eax, esi
:004067C8 75DD                    jne 004067A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004067A5(C)
|
:004067CA 8B4B0D                  mov ecx, dword ptr [ebx+0D]
:004067CD 8D430D                  lea eax, dword ptr [ebx+0D]
:004067D0 85C9                    test ecx, ecx
:004067D2 C744241CFFFFFFFF        mov [esp+1C], FFFFFFFF
:004067DA 7406                    je 004067E2
:004067DC 50                      push eax
:004067DD E83E7B1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004067DA(C)
|
:004067E2 8B4C2414                mov ecx, dword ptr [esp+14]
:004067E6 5F                      pop edi
:004067E7 5E                      pop esi
:004067E8 64890D00000000          mov dword ptr fs:[00000000], ecx
:004067EF 5B                      pop ebx
:004067F0 83C414                  add esp, 00000014
:004067F3 C3                      ret


:004067F4 90                      nop
:004067F5 90                      nop
:004067F6 90                      nop
:004067F7 90                      nop
:004067F8 90                      nop
:004067F9 90                      nop
:004067FA 90                      nop
:004067FB 90                      nop
:004067FC 90                      nop
:004067FD 90                      nop
:004067FE 90                      nop
:004067FF 90                      nop

* Referenced by a CALL at Address:
|:00406478   
|
:00406800 64A100000000            mov eax, dword ptr fs:[00000000]
:00406806 6AFF                    push FFFFFFFF
:00406808 6828F56C00              push 006CF528
:0040680D 50                      push eax
:0040680E 8B442414                mov eax, dword ptr [esp+14]
:00406812 64892500000000          mov dword ptr fs:[00000000], esp
:00406819 83EC08                  sub esp, 00000008
:0040681C 85C0                    test eax, eax
:0040681E 53                      push ebx
:0040681F 56                      push esi
:00406820 8BF1                    mov esi, ecx
:00406822 0F846D010000            je 00406995
:00406828 8B4E08                  mov ecx, dword ptr [esi+08]
:0040682B 8B5E04                  mov ebx, dword ptr [esi+04]
:0040682E 2BCB                    sub ecx, ebx
:00406830 C1F903                  sar ecx, 03
:00406833 3BC8                    cmp ecx, eax
:00406835 0F8248010000            jb 00406983
:0040683B 8B542428                mov edx, dword ptr [esp+28]
:0040683F 55                      push ebp
:00406840 57                      push edi
:00406841 8B0A                    mov ecx, dword ptr [edx]
:00406843 894C2410                mov dword ptr [esp+10], ecx
:00406847 8B59F4                  mov ebx, dword ptr [ecx-0C]
:0040684A 43                      inc ebx
:0040684B 8959F4                  mov dword ptr [ecx-0C], ebx
:0040684E 8B5204                  mov edx, dword ptr [edx+04]
:00406851 89542414                mov dword ptr [esp+14], edx
:00406855 8B5E04                  mov ebx, dword ptr [esi+04]
:00406858 8B6C2428                mov ebp, dword ptr [esp+28]
:0040685C 8B7E04                  mov edi, dword ptr [esi+04]
:0040685F 2BDD                    sub ebx, ebp
:00406861 C1FB03                  sar ebx, 03
:00406864 3BD8                    cmp ebx, eax
:00406866 C744242000000000        mov [esp+20], 00000000
:0040686E 7676                    jbe 004068E6
:00406870 C1E003                  shl eax, 03
:00406873 8BDF                    mov ebx, edi
:00406875 89442430                mov dword ptr [esp+30], eax
:00406879 2BD8                    sub ebx, eax
:0040687B 8B442430                mov eax, dword ptr [esp+30]
:0040687F 50                      push eax
:00406880 57                      push edi
:00406881 57                      push edi
:00406882 53                      push ebx
:00406883 E818040000              call 00406CA0
:00406888 8B4C2440                mov ecx, dword ptr [esp+40]
:0040688C 8B4604                  mov eax, dword ptr [esi+04]
:0040688F 03C1                    add eax, ecx
:00406891 83C410                  add esp, 00000010
:00406894 894604                  mov dword ptr [esi+04], eax
:00406897 8BC3                    mov eax, ebx
:00406899 2BC5                    sub eax, ebp
:0040689B C1F803                  sar eax, 03
:0040689E 85C0                    test eax, eax
:004068A0 7E19                    jle 004068BB
:004068A2 8BF0                    mov esi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004068B9(C)
|
:004068A4 83EF08                  sub edi, 00000008
:004068A7 83EB08                  sub ebx, 00000008
:004068AA 53                      push ebx
:004068AB 8BCF                    mov ecx, edi
:004068AD E86E4A1E00              call 005EB320
:004068B2 8B5304                  mov edx, dword ptr [ebx+04]
:004068B5 4E                      dec esi
:004068B6 895704                  mov dword ptr [edi+04], edx
:004068B9 75E9                    jne 004068A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004068A0(C)
|
:004068BB 8B442430                mov eax, dword ptr [esp+30]
:004068BF 8D3428                  lea esi, dword ptr [eax+ebp]
:004068C2 3BEE                    cmp ebp, esi
:004068C4 0F8485000000            je 0040694F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004068E2(C)
|
:004068CA 8D4C2410                lea ecx, dword ptr [esp+10]
:004068CE 51                      push ecx
:004068CF 8BCD                    mov ecx, ebp
:004068D1 E84A4A1E00              call 005EB320
:004068D6 8B542414                mov edx, dword ptr [esp+14]
:004068DA 895504                  mov dword ptr [ebp+04], edx
:004068DD 83C508                  add ebp, 00000008
:004068E0 3BEE                    cmp ebp, esi
:004068E2 75E6                    jne 004068CA
:004068E4 EB69                    jmp 0040694F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040686E(C)
|
:004068E6 2BC3                    sub eax, ebx
:004068E8 8D542410                lea edx, dword ptr [esp+10]
:004068EC 89442430                mov dword ptr [esp+30], eax
:004068F0 8B4C2430                mov ecx, dword ptr [esp+30]
:004068F4 51                      push ecx
:004068F5 52                      push edx
:004068F6 50                      push eax
:004068F7 57                      push edi
:004068F8 E8E3030000              call 00406CE0
:004068FD 8B442440                mov eax, dword ptr [esp+40]
:00406901 8B5604                  mov edx, dword ptr [esi+04]
:00406904 8D0CC500000000          lea ecx, dword ptr [8*eax+00000000]
:0040690B 03D1                    add edx, ecx
:0040690D 895604                  mov dword ptr [esi+04], edx
:00406910 8BC2                    mov eax, edx
:00406912 8B542440                mov edx, dword ptr [esp+40]
:00406916 52                      push edx
:00406917 50                      push eax
:00406918 57                      push edi
:00406919 55                      push ebp
:0040691A E881030000              call 00406CA0
:0040691F 8B4E04                  mov ecx, dword ptr [esi+04]
:00406922 8D04DD00000000          lea eax, dword ptr [8*ebx+00000000]
:00406929 83C420                  add esp, 00000020
:0040692C 03C8                    add ecx, eax
:0040692E 3BEF                    cmp ebp, edi
:00406930 894E04                  mov dword ptr [esi+04], ecx
:00406933 741A                    je 0040694F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040694D(C)
|
:00406935 8D4C2410                lea ecx, dword ptr [esp+10]
:00406939 51                      push ecx
:0040693A 8BCD                    mov ecx, ebp
:0040693C E8DF491E00              call 005EB320
:00406941 8B542414                mov edx, dword ptr [esp+14]
:00406945 895504                  mov dword ptr [ebp+04], edx
:00406948 83C508                  add ebp, 00000008
:0040694B 3BEF                    cmp ebp, edi
:0040694D 75E6                    jne 00406935

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004068C4(C), :004068E4(U), :00406933(C)
|
:0040694F 8B442410                mov eax, dword ptr [esp+10]
:00406953 5F                      pop edi
:00406954 83C0F4                  add eax, FFFFFFF4
:00406957 C744241CFFFFFFFF        mov [esp+1C], FFFFFFFF
:0040695F 5D                      pop ebp
:00406960 8B08                    mov ecx, dword ptr [eax]
:00406962 49                      dec ecx
:00406963 8908                    mov dword ptr [eax], ecx
:00406965 752E                    jne 00406995
:00406967 50                      push eax
:00406968 E893A91D00              call 005E1300
:0040696D 83C404                  add esp, 00000004
:00406970 5E                      pop esi
:00406971 5B                      pop ebx
:00406972 8B4C2408                mov ecx, dword ptr [esp+08]
:00406976 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040697D 83C414                  add esp, 00000014
:00406980 C20C00                  ret 000C



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406835(C)
|
:00406983 8B4C2428                mov ecx, dword ptr [esp+28]
:00406987 8B542420                mov edx, dword ptr [esp+20]
:0040698B 50                      push eax
:0040698C 51                      push ecx
:0040698D 52                      push edx
:0040698E 8BCE                    mov ecx, esi
:00406990 E88B000000              call 00406A20

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406822(C), :00406965(C)
|
:00406995 8B4C2410                mov ecx, dword ptr [esp+10]
:00406999 5E                      pop esi
:0040699A 5B                      pop ebx
:0040699B 64890D00000000          mov dword ptr fs:[00000000], ecx
:004069A2 83C414                  add esp, 00000014
:004069A5 C20C00                  ret 000C


:004069A8 90                      nop
:004069A9 90                      nop
:004069AA 90                      nop
:004069AB 90                      nop
:004069AC 90                      nop
:004069AD 90                      nop
:004069AE 90                      nop
:004069AF 90                      nop

* Referenced by a CALL at Addresses:
|:00405503   , :00408AD5   , :00408AF9   , :00408B1E   , :00409047   
|:0040906B   , :00409090   , :0040A516   , :0040A537   , :00412B52   
|:00413947   , :00413970   , :00423A08   , :00447AFC   , :00447B1A   
|:00447B5A   , :004560D1   , :00459215   , :0045F8B7   , :004613EC   
|:00467DFD   , :00467E1B   , :004684AA   , :0046B729   , :0046B76B   
|:0046B7AD   , :0046B807   , :0047836F   , :0047A3F4   , :0047BE50   
|:0047DDD0   , :004921A8   , :004921D3   , :00493002   , :0049344C   
|:004958F5   , :0049B13D   , :0049B173   , :004A9AEF   , :004A9C61   
|:004AADB6   , :004AC326   , :004AE9A3   , :004B4244   , :004B42B6   
|:004B87EB   , :004B92CF   , :004B9334   , :004BCDEF   , :004BDD21   
|:004BE93A   , :004C44E1   , :004C860D   , :004C885E   , :004D4A3E   
|:004E522E   , :004E528F   , :004E52B3   , :004F29D3   , :004F2A37   
|:004F5980   , :004F6321   , :004F6379   , :004FB18A   , :00502D39   
|:00503ADB   , :005109F2   , :0051162B   , :00511649   , :00515BB7   
|:00527753   , :0052BE99   , :0053012E   , :005301D8   , :00530234   
|:00530290   , :00539FE2   , :0053BDE5   , :0053DD39   , :005418CF   
|:00541ADB   , :00542193   , :00542703   , :0056361C   , :00564E9E   
|:0056643B   , :00566559   , :00573A51   , :0057654D   , :005781A1   
|:0057B4AA   , :0057B4D1   , :0057CAFB   , :0057CB1F   , :0057E2D0   
|:0057E2EF   , :00591EF0   , :00592F74   , :005A7127   , :005ABFC1   
|:005B2EC6   , :005B8350   , :005BE388   , :005BE8B8   , :005C2C02   
|:005C5881   , :005C5E95   , :005C81F6   , :005D03F5   , :005D04E6   
|:005D09D2   , :005D2DDB   , :005DBFA2   , :005E0097   , :005E1969   
|:005E7126   , :005E7802   , :005E9430   , :005E944E   , :005E96DB   
|:005EE150   , :005EE681   , :005EF3E2   , :005EF87D   , :005F4F78   
|:005F758B   , :005F75FD   , :005F7621   , :005F8196   , :005F8D26   
|:005F90F7   , :005F9115   , :005FE115   , :00601E92   , :006046A2   
|:0060E401   , :00610EC6   , :006124E3   , :0061250D   , :0061391E   
|:00613948   , :00613E1F   , :006140D6   , :00614618   , :00614951   
|:0061567D   , :0061585C   , :00615880   , :006158BB   , :0061627F   
|:0061797D   , :006179D5   , :006183B9   , :006183E4   , :0061843D   
|:006221BE   , :006221DC   , :00622254   , :006233CB   , :00623F14   
|:00623F6E   , :0062C76D   , :0062CD4E   , :0062D7D2   , :0063123F   
|:0063146F   , :006337E5   , :0063384C   , :00634112   , :00648878   
|:006492CF   , :0064B0E6   , :006540C3   , :006546AF   , :006558EF   
|:0065621E   , :0066D228   , :0066D616   , :0066E027   , :0066F2EE   
|:00672058   , :0067229B   , :0067295A   , :0067298C   , :00685EF3   
|:00685F23   , :00685F8A   , :006864B2   , :00687AA2   , :00691A80   
|:0069273A   , :00693BFA   , :00693F8B   , :00693FAF   , :006AA1A2   
|:006CE30E   
|
:004069B0 8B442408                mov eax, dword ptr [esp+08]
:004069B4 3D80000000              cmp eax, 00000080
:004069B9 760E                    jbe 004069C9
:004069BB 8B442404                mov eax, dword ptr [esp+04]
:004069BF 50                      push eax
:004069C0 E83BA91D00              call 005E1300
:004069C5 83C404                  add esp, 00000004
:004069C8 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004069B9(C)
|
:004069C9 8B4C2404                mov ecx, dword ptr [esp+04]
:004069CD 48                      dec eax
:004069CE C1E803                  shr eax, 03
:004069D1 8B1485FC977A00          mov edx, dword ptr [4*eax+007A97FC]
:004069D8 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:004069DF 8911                    mov dword ptr [ecx], edx
:004069E1 8908                    mov dword ptr [eax], ecx
:004069E3 C3                      ret


:004069E4 90                      nop
:004069E5 90                      nop
:004069E6 90                      nop
:004069E7 90                      nop
:004069E8 90                      nop
:004069E9 90                      nop
:004069EA 90                      nop
:004069EB 90                      nop
:004069EC 90                      nop
:004069ED 90                      nop
:004069EE 90                      nop
:004069EF 90                      nop

* Referenced by a CALL at Addresses:
|:00405540   , :004067BF   , :0041571A   , :00429CB5   , :004460AD   
|:00446100   , :004462BA   , :0044CDF3   , :0045C9E2   , :0045CA35   
|:00468DFF   , :00468E9F   , :0046909F   , :0057ED5C   , :005D7720   
|:005D843B   , :005DFA8E   , :005DFAE5   , :005DFBFF   , :005DFE1F   
|:005FFC42   , :00602F40   , :0062A75C   , :0062A7B3   , :00644B4B   
|
:004069F0 8B442408                mov eax, dword ptr [esp+08]
:004069F4 85C0                    test eax, eax
:004069F6 8B5004                  mov edx, dword ptr [eax+04]
:004069F9 8B08                    mov ecx, dword ptr [eax]
:004069FB 890A                    mov dword ptr [edx], ecx
:004069FD 895104                  mov dword ptr [ecx+04], edx
:00406A00 740D                    je 00406A0F
:00406A02 8B1500987A00            mov edx, dword ptr [007A9800]
:00406A08 8910                    mov dword ptr [eax], edx
:00406A0A A300987A00              mov dword ptr [007A9800], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406A00(C)
|
:00406A0F 8B442404                mov eax, dword ptr [esp+04]
:00406A13 8908                    mov dword ptr [eax], ecx
:00406A15 C20800                  ret 0008


:00406A18 90                      nop
:00406A19 90                      nop
:00406A1A 90                      nop
:00406A1B 90                      nop
:00406A1C 90                      nop
:00406A1D 90                      nop
:00406A1E 90                      nop
:00406A1F 90                      nop

* Referenced by a CALL at Addresses:
|:00406990   , :0049FF84   
|
:00406A20 55                      push ebp
:00406A21 8BEC                    mov ebp, esp
:00406A23 6AFF                    push FFFFFFFF
:00406A25 6840F56C00              push 006CF540
:00406A2A 64A100000000            mov eax, dword ptr fs:[00000000]
:00406A30 50                      push eax
:00406A31 64892500000000          mov dword ptr fs:[00000000], esp
:00406A38 83EC0C                  sub esp, 0000000C
:00406A3B 53                      push ebx
:00406A3C 56                      push esi
:00406A3D 57                      push edi
:00406A3E 8B5D10                  mov ebx, dword ptr [ebp+10]
:00406A41 8BF9                    mov edi, ecx
:00406A43 8965F0                  mov dword ptr [ebp-10], esp
:00406A46 8D4D10                  lea ecx, dword ptr [ebp+10]
:00406A49 8B4704                  mov eax, dword ptr [edi+04]
:00406A4C 8B37                    mov esi, dword ptr [edi]
:00406A4E 2BC6                    sub eax, esi
:00406A50 C1F803                  sar eax, 03
:00406A53 3BC3                    cmp eax, ebx
:00406A55 8945E8                  mov dword ptr [ebp-18], eax
:00406A58 7203                    jb 00406A5D
:00406A5A 8D4DE8                  lea ecx, dword ptr [ebp-18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406A58(C)
|
:00406A5D 8B09                    mov ecx, dword ptr [ecx]
:00406A5F 03C8                    add ecx, eax
:00406A61 894DE8                  mov dword ptr [ebp-18], ecx
:00406A64 744E                    je 00406AB4
:00406A66 C1E103                  shl ecx, 03
:00406A69 81F980000000            cmp ecx, 00000080
:00406A6F 7610                    jbe 00406A81
:00406A71 51                      push ecx
:00406A72 E809A81D00              call 005E1280
:00406A77 8BC8                    mov ecx, eax
:00406A79 83C404                  add esp, 00000004
:00406A7C 894D10                  mov dword ptr [ebp+10], ecx
:00406A7F EB3D                    jmp 00406ABE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406A6F(C)
|
:00406A81 8D41FF                  lea eax, dword ptr [ecx-01]
:00406A84 C1E803                  shr eax, 03
:00406A87 8D1485FC977A00          lea edx, dword ptr [4*eax+007A97FC]
:00406A8E 8B0485FC977A00          mov eax, dword ptr [4*eax+007A97FC]
:00406A95 85C0                    test eax, eax
:00406A97 740B                    je 00406AA4
:00406A99 8B08                    mov ecx, dword ptr [eax]
:00406A9B 890A                    mov dword ptr [edx], ecx
:00406A9D 8BC8                    mov ecx, eax
:00406A9F 894D10                  mov dword ptr [ebp+10], ecx
:00406AA2 EB1A                    jmp 00406ABE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406A97(C)
|
:00406AA4 51                      push ecx
:00406AA5 E8D6D6FFFF              call 00404180
:00406AAA 8BC8                    mov ecx, eax
:00406AAC 83C404                  add esp, 00000004
:00406AAF 894D10                  mov dword ptr [ebp+10], ecx
:00406AB2 EB0A                    jmp 00406ABE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406A64(C)
|
:00406AB4 C7451000000000          mov [ebp+10], 00000000
:00406ABB 8B4D10                  mov ecx, dword ptr [ebp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406A7F(U), :00406AA2(U), :00406AB2(U)
|
:00406ABE 8B5510                  mov edx, dword ptr [ebp+10]
:00406AC1 8B7508                  mov esi, dword ptr [ebp+08]
:00406AC4 8B07                    mov eax, dword ptr [edi]
:00406AC6 52                      push edx
:00406AC7 51                      push ecx
:00406AC8 56                      push esi
:00406AC9 50                      push eax
:00406ACA 894DEC                  mov dword ptr [ebp-14], ecx
:00406ACD C745FC00000000          mov [ebp-04], 00000000
:00406AD4 E8C7010000              call 00406CA0
:00406AD9 83C410                  add esp, 00000010
:00406ADC 83FB01                  cmp ebx, 00000001
:00406ADF 8945EC                  mov dword ptr [ebp-14], eax
:00406AE2 751D                    jne 00406B01
:00406AE4 85C0                    test eax, eax
:00406AE6 7414                    je 00406AFC
:00406AE8 8B550C                  mov edx, dword ptr [ebp+0C]
:00406AEB 8B0A                    mov ecx, dword ptr [edx]
:00406AED 8908                    mov dword ptr [eax], ecx
:00406AEF 8B59F4                  mov ebx, dword ptr [ecx-0C]
:00406AF2 43                      inc ebx
:00406AF3 8959F4                  mov dword ptr [ecx-0C], ebx
:00406AF6 8B4A04                  mov ecx, dword ptr [edx+04]
:00406AF9 894804                  mov dword ptr [eax+04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406AE6(C)
|
:00406AFC 83C008                  add eax, 00000008
:00406AFF EB12                    jmp 00406B13

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406AE2(C)
|
:00406B01 8B5510                  mov edx, dword ptr [ebp+10]
:00406B04 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00406B07 52                      push edx
:00406B08 51                      push ecx
:00406B09 53                      push ebx
:00406B0A 50                      push eax
:00406B0B E8D0010000              call 00406CE0
:00406B10 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406AFF(U)
|
:00406B13 8B5510                  mov edx, dword ptr [ebp+10]
:00406B16 8B4F04                  mov ecx, dword ptr [edi+04]
:00406B19 52                      push edx
:00406B1A 50                      push eax
:00406B1B 51                      push ecx
:00406B1C 56                      push esi
:00406B1D 8945EC                  mov dword ptr [ebp-14], eax
:00406B20 E87B010000              call 00406CA0
:00406B25 8B5F04                  mov ebx, dword ptr [edi+04]
:00406B28 8B37                    mov esi, dword ptr [edi]
:00406B2A 83C410                  add esp, 00000010
:00406B2D 3BF3                    cmp esi, ebx
:00406B2F 89450C                  mov dword ptr [ebp+0C], eax
:00406B32 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00406B39 741C                    je 00406B57

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406B55(C)
|
:00406B3B 8B06                    mov eax, dword ptr [esi]
:00406B3D 83E80C                  sub eax, 0000000C
:00406B40 8B08                    mov ecx, dword ptr [eax]
:00406B42 49                      dec ecx
:00406B43 8908                    mov dword ptr [eax], ecx
:00406B45 7509                    jne 00406B50
:00406B47 50                      push eax
:00406B48 E8B3A71D00              call 005E1300
:00406B4D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406B45(C)
|
:00406B50 83C608                  add esi, 00000008
:00406B53 3BF3                    cmp esi, ebx
:00406B55 75E4                    jne 00406B3B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406B39(C)
|
:00406B57 8B0F                    mov ecx, dword ptr [edi]
:00406B59 85C9                    test ecx, ecx
:00406B5B 7433                    je 00406B90
:00406B5D 8B4708                  mov eax, dword ptr [edi+08]
:00406B60 2BC1                    sub eax, ecx
:00406B62 C1F803                  sar eax, 03
:00406B65 C1E003                  shl eax, 03
:00406B68 3D80000000              cmp eax, 00000080
:00406B6D 760B                    jbe 00406B7A
:00406B6F 51                      push ecx
:00406B70 E88BA71D00              call 005E1300
:00406B75 83C404                  add esp, 00000004
:00406B78 EB16                    jmp 00406B90

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406B6D(C)
|
:00406B7A 48                      dec eax
:00406B7B C1E803                  shr eax, 03
:00406B7E 8B1485FC977A00          mov edx, dword ptr [4*eax+007A97FC]
:00406B85 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:00406B8C 8911                    mov dword ptr [ecx], edx
:00406B8E 8908                    mov dword ptr [eax], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406B5B(C), :00406B78(U)
|
:00406B90 8B4510                  mov eax, dword ptr [ebp+10]
:00406B93 8B55E8                  mov edx, dword ptr [ebp-18]
:00406B96 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00406B99 8907                    mov dword ptr [edi], eax
:00406B9B 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00406B9E 894F04                  mov dword ptr [edi+04], ecx
:00406BA1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00406BA4 894708                  mov dword ptr [edi+08], eax
:00406BA7 5F                      pop edi
:00406BA8 5E                      pop esi
:00406BA9 64890D00000000          mov dword ptr fs:[00000000], ecx
:00406BB0 5B                      pop ebx
:00406BB1 8BE5                    mov esp, ebp
:00406BB3 5D                      pop ebp
:00406BB4 C20C00                  ret 000C


:00406BB7 8B7D10                  mov edi, dword ptr [ebp+10]
:00406BBA 8B5DEC                  mov ebx, dword ptr [ebp-14]
:00406BBD 3BFB                    cmp edi, ebx
:00406BBF 8BF7                    mov esi, edi
:00406BC1 741C                    je 00406BDF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406BDD(C)
|
:00406BC3 8B06                    mov eax, dword ptr [esi]
:00406BC5 83E80C                  sub eax, 0000000C
:00406BC8 8B08                    mov ecx, dword ptr [eax]
:00406BCA 49                      dec ecx
:00406BCB 8908                    mov dword ptr [eax], ecx
:00406BCD 7509                    jne 00406BD8
:00406BCF 50                      push eax
:00406BD0 E82BA71D00              call 005E1300
:00406BD5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406BCD(C)
|
:00406BD8 83C608                  add esi, 00000008
:00406BDB 3BF3                    cmp esi, ebx
:00406BDD 75E4                    jne 00406BC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406BC1(C)
|
:00406BDF 85FF                    test edi, edi
:00406BE1 7432                    je 00406C15
:00406BE3 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00406BE6 8D04CD00000000          lea eax, dword ptr [8*ecx+00000000]
:00406BED 3D80000000              cmp eax, 00000080
:00406BF2 760B                    jbe 00406BFF
:00406BF4 57                      push edi
:00406BF5 E806A71D00              call 005E1300
:00406BFA 83C404                  add esp, 00000004
:00406BFD EB16                    jmp 00406C15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406BF2(C)
|
:00406BFF 48                      dec eax
:00406C00 C1E803                  shr eax, 03
:00406C03 8B1485FC977A00          mov edx, dword ptr [4*eax+007A97FC]
:00406C0A 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:00406C11 8917                    mov dword ptr [edi], edx
:00406C13 8938                    mov dword ptr [eax], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406BE1(C), :00406BFD(U)
|
:00406C15 6A00                    push 00000000
:00406C17 6A00                    push 00000000
:00406C19 E8997D2B00              call 006BE9B7
:00406C1E 90                      nop
:00406C1F 90                      nop

* Referenced by a CALL at Address:
|:0040643E   
|
:00406C20 56                      push esi
:00406C21 57                      push edi
:00406C22 8B7C240C                mov edi, dword ptr [esp+0C]
:00406C26 8BF1                    mov esi, ecx
:00406C28 57                      push edi
:00406C29 E8F2461E00              call 005EB320
:00406C2E 8B4704                  mov eax, dword ptr [edi+04]
:00406C31 5F                      pop edi
:00406C32 894604                  mov dword ptr [esi+04], eax
:00406C35 8BC6                    mov eax, esi
:00406C37 5E                      pop esi
:00406C38 C20400                  ret 0004


:00406C3B 90                      nop
:00406C3C 90                      nop
:00406C3D 90                      nop
:00406C3E 90                      nop
:00406C3F 90                      nop

* Referenced by a CALL at Addresses:
|:00406676   , :004066B2   , :00602513   , :00602591   
|
:00406C40 8B4C2404                mov ecx, dword ptr [esp+04]
:00406C44 8B542408                mov edx, dword ptr [esp+08]
:00406C48 8B44240C                mov eax, dword ptr [esp+0C]
:00406C4C 3BCA                    cmp ecx, edx
:00406C4E 7414                    je 00406C64
:00406C50 56                      push esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406C61(C)
|
:00406C51 85C0                    test eax, eax
:00406C53 7404                    je 00406C59
:00406C55 8B31                    mov esi, dword ptr [ecx]
:00406C57 8930                    mov dword ptr [eax], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406C53(C)
|
:00406C59 83C104                  add ecx, 00000004
:00406C5C 83C004                  add eax, 00000004
:00406C5F 3BCA                    cmp ecx, edx
:00406C61 75EE                    jne 00406C51
:00406C63 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406C4E(C)
|
:00406C64 C3                      ret
:00406C65 90                      nop
:00406C66 90                      nop
:00406C67 90                      nop
:00406C68 90                      nop
:00406C69 90                      nop
:00406C6A 90                      nop
:00406C6B 90                      nop
:00406C6C 90                      nop
:00406C6D 90                      nop
:00406C6E 90                      nop
:00406C6F 90                      nop

* Referenced by a CALL at Addresses:
|:004066A0   , :00602573   
|
:00406C70 8B4C2408                mov ecx, dword ptr [esp+08]
:00406C74 8B442404                mov eax, dword ptr [esp+04]
:00406C78 85C9                    test ecx, ecx
:00406C7A 7614                    jbe 00406C90
:00406C7C 8B54240C                mov edx, dword ptr [esp+0C]
:00406C80 56                      push esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406C8D(C)
|
:00406C81 85C0                    test eax, eax
:00406C83 7404                    je 00406C89
:00406C85 8B32                    mov esi, dword ptr [edx]
:00406C87 8930                    mov dword ptr [eax], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406C83(C)
|
:00406C89 83C004                  add eax, 00000004
:00406C8C 49                      dec ecx
:00406C8D 75F2                    jne 00406C81
:00406C8F 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406C7A(C)
|
:00406C90 C3                      ret
:00406C91 90                      nop
:00406C92 90                      nop
:00406C93 90                      nop
:00406C94 90                      nop
:00406C95 90                      nop
:00406C96 90                      nop
:00406C97 90                      nop
:00406C98 90                      nop
:00406C99 90                      nop
:00406C9A 90                      nop
:00406C9B 90                      nop
:00406C9C 90                      nop
:00406C9D 90                      nop
:00406C9E 90                      nop
:00406C9F 90                      nop

* Referenced by a CALL at Addresses:
|:00406883   , :0040691A   , :00406AD4   , :00406B20   
|
:00406CA0 8B4C2404                mov ecx, dword ptr [esp+04]
:00406CA4 8B44240C                mov eax, dword ptr [esp+0C]
:00406CA8 56                      push esi
:00406CA9 8B74240C                mov esi, dword ptr [esp+0C]
:00406CAD 3BCE                    cmp ecx, esi
:00406CAF 7421                    je 00406CD2
:00406CB1 57                      push edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406CCF(C)
|
:00406CB2 85C0                    test eax, eax
:00406CB4 7411                    je 00406CC7
:00406CB6 8B11                    mov edx, dword ptr [ecx]
:00406CB8 8910                    mov dword ptr [eax], edx
:00406CBA 8B7AF4                  mov edi, dword ptr [edx-0C]
:00406CBD 47                      inc edi
:00406CBE 897AF4                  mov dword ptr [edx-0C], edi
:00406CC1 8B5104                  mov edx, dword ptr [ecx+04]
:00406CC4 895004                  mov dword ptr [eax+04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406CB4(C)
|
:00406CC7 83C108                  add ecx, 00000008
:00406CCA 83C008                  add eax, 00000008
:00406CCD 3BCE                    cmp ecx, esi
:00406CCF 75E1                    jne 00406CB2
:00406CD1 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406CAF(C)
|
:00406CD2 5E                      pop esi
:00406CD3 C3                      ret


:00406CD4 90                      nop
:00406CD5 90                      nop
:00406CD6 90                      nop
:00406CD7 90                      nop
:00406CD8 90                      nop
:00406CD9 90                      nop
:00406CDA 90                      nop
:00406CDB 90                      nop
:00406CDC 90                      nop
:00406CDD 90                      nop
:00406CDE 90                      nop
:00406CDF 90                      nop

* Referenced by a CALL at Addresses:
|:004068F8   , :00406B0B   
|
:00406CE0 8B4C2408                mov ecx, dword ptr [esp+08]
:00406CE4 8B442404                mov eax, dword ptr [esp+04]
:00406CE8 85C9                    test ecx, ecx
:00406CEA 7625                    jbe 00406D11
:00406CEC 8B54240C                mov edx, dword ptr [esp+0C]
:00406CF0 56                      push esi
:00406CF1 57                      push edi
:00406CF2 8BF1                    mov esi, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406D0D(C)
|
:00406CF4 85C0                    test eax, eax
:00406CF6 7411                    je 00406D09
:00406CF8 8B0A                    mov ecx, dword ptr [edx]
:00406CFA 8908                    mov dword ptr [eax], ecx
:00406CFC 8B79F4                  mov edi, dword ptr [ecx-0C]
:00406CFF 47                      inc edi
:00406D00 8979F4                  mov dword ptr [ecx-0C], edi
:00406D03 8B4A04                  mov ecx, dword ptr [edx+04]
:00406D06 894804                  mov dword ptr [eax+04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406CF6(C)
|
:00406D09 83C008                  add eax, 00000008
:00406D0C 4E                      dec esi
:00406D0D 75E5                    jne 00406CF4
:00406D0F 5F                      pop edi
:00406D10 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406CEA(C)
|
:00406D11 C3                      ret
:00406D12 90                      nop
:00406D13 90                      nop
:00406D14 90                      nop
:00406D15 90                      nop
:00406D16 90                      nop
:00406D17 90                      nop
:00406D18 90                      nop
:00406D19 90                      nop
:00406D1A 90                      nop
:00406D1B 90                      nop
:00406D1C 90                      nop
:00406D1D 90                      nop
:00406D1E 90                      nop
:00406D1F 90                      nop
:00406D20 83E908                  sub ecx, 00000008
:00406D23 E9E8F1FFFF              jmp 00405F10
:00406D28 CC                      int 03
:00406D29 CC                      int 03
:00406D2A CC                      int 03
:00406D2B CC                      int 03
:00406D2C CC                      int 03
:00406D2D CC                      int 03
:00406D2E CC                      int 03
:00406D2F CC                      int 03
:00406D30 83E908                  sub ecx, 00000008
:00406D33 E968F3FFFF              jmp 004060A0
:00406D38 CC                      int 03
:00406D39 CC                      int 03
:00406D3A CC                      int 03
:00406D3B CC                      int 03
:00406D3C CC                      int 03
:00406D3D CC                      int 03
:00406D3E CC                      int 03
:00406D3F CC                      int 03
:00406D40 E90B000000              jmp 00406D50
:00406D45 90                      nop
:00406D46 90                      nop
:00406D47 90                      nop
:00406D48 90                      nop
:00406D49 90                      nop
:00406D4A 90                      nop
:00406D4B 90                      nop
:00406D4C 90                      nop
:00406D4D 90                      nop
:00406D4E 90                      nop
:00406D4F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406D40(U)
|
:00406D50 33C0                    xor eax, eax
:00406D52 66A354987A00            mov word ptr [007A9854], ax
:00406D58 66A356987A00            mov word ptr [007A9856], ax
:00406D5E C3                      ret


:00406D5F 90                      nop
:00406D60 E90B000000              jmp 00406D70
:00406D65 90                      nop
:00406D66 90                      nop
:00406D67 90                      nop
:00406D68 90                      nop
:00406D69 90                      nop
:00406D6A 90                      nop
:00406D6B 90                      nop
:00406D6C 90                      nop
:00406D6D 90                      nop
:00406D6E 90                      nop
:00406D6F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406D60(U)
|
:00406D70 33C0                    xor eax, eax
:00406D72 66A364987A00            mov word ptr [007A9864], ax
:00406D78 66A366987A00            mov word ptr [007A9866], ax
:00406D7E C3                      ret


:00406D7F 90                      nop

* Referenced by a CALL at Address:
|:0041DD52   
|
:00406D80 6AFF                    push FFFFFFFF
:00406D82 68A4F56C00              push 006CF5A4
:00406D87 64A100000000            mov eax, dword ptr fs:[00000000]
:00406D8D 50                      push eax
:00406D8E 64892500000000          mov dword ptr fs:[00000000], esp
:00406D95 83EC4C                  sub esp, 0000004C
:00406D98 A128FE7200              mov eax, dword ptr [0072FE28]
:00406D9D 53                      push ebx
:00406D9E 55                      push ebp
:00406D9F 56                      push esi
:00406DA0 8BF1                    mov esi, ecx
:00406DA2 33DB                    xor ebx, ebx
:00406DA4 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/back/rloot"
                                  |
:00406DA5 6808B37800              push 0078B308
:00406DAA 8D4C2418                lea ecx, dword ptr [esp+18]
:00406DAE 8974241C                mov dword ptr [esp+1C], esi
:00406DB2 33ED                    xor ebp, ebp
:00406DB4 895C2414                mov dword ptr [esp+14], ebx
:00406DB8 E8F3421E00              call 005EB0B0
:00406DBD 8B442468                mov eax, dword ptr [esp+68]
:00406DC1 8D4C2410                lea ecx, dword ptr [esp+10]
:00406DC5 8D542418                lea edx, dword ptr [esp+18]
:00406DC9 51                      push ecx
:00406DCA 52                      push edx
:00406DCB 50                      push eax
:00406DCC 8BCE                    mov ecx, esi
:00406DCE 896C246C                mov dword ptr [esp+6C], ebp
:00406DD2 896C2424                mov dword ptr [esp+24], ebp
:00406DD6 896C2428                mov dword ptr [esp+28], ebp
:00406DDA E851971F00              call 00600530
:00406DDF 8B4C2410                mov ecx, dword ptr [esp+10]
:00406DE3 C644246002              mov [esp+60], 02
:00406DE8 8D41F4                  lea eax, dword ptr [ecx-0C]
:00406DEB 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00406DEE 49                      dec ecx
:00406DEF 8908                    mov dword ptr [eax], ecx
:00406DF1 7509                    jne 00406DFC
:00406DF3 50                      push eax
:00406DF4 E807A51D00              call 005E1300
:00406DF9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406DF1(C)
|
:00406DFC 8B542470                mov edx, dword ptr [esp+70]
:00406E00 8B44246C                mov eax, dword ptr [esp+6C]
:00406E04 6689AEF6000000          mov word ptr [esi+000000F6], bp
:00406E0B 6689AEF8000000          mov word ptr [esi+000000F8], bp
:00406E12 8996FE000000            mov dword ptr [esi+000000FE], edx
:00406E18 898606010000            mov dword ptr [esi+00000106], eax
:00406E1E C706208C7000            mov dword ptr [esi], 00708C20
:00406E24 C74608188C7000          mov [esi+08], 00708C18
:00406E2B 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00406E31 3BCD                    cmp ecx, ebp
:00406E33 7407                    je 00406E3C
:00406E35 6A01                    push 00000001
:00406E37 E844EF0700              call 00485D80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406E33(C)
|
:00406E3C 684B010000              push 0000014B
:00406E41 E83AA41D00              call 005E1280
:00406E46 83C404                  add esp, 00000004
:00406E49 89442468                mov dword ptr [esp+68], eax
:00406E4D 3BC5                    cmp eax, ebp
:00406E4F C644246003              mov [esp+60], 03
:00406E54 747F                    je 00406ED5
:00406E56 33C9                    xor ecx, ecx
:00406E58 57                      push edi
:00406E59 B8B0714000              mov eax, 004071B0
:00406E5E 51                      push ecx
:00406E5F 8D4C244C                lea ecx, dword ptr [esp+4C]
:00406E63 50                      push eax
:00406E64 51                      push ecx
:00406E65 8BCE                    mov ecx, esi
:00406E67 BFC0704000              mov edi, 004070C0
:00406E6C E8DF260000              call 00409550
:00406E71 8BD8                    mov ebx, eax
:00406E73 55                      push ebp
:00406E74 8D542438                lea edx, dword ptr [esp+38]
:00406E78 57                      push edi
:00406E79 52                      push edx
:00406E7A 8BCE                    mov ecx, esi
:00406E7C C644247004              mov [esp+70], 04
:00406E81 C744241C03000000        mov [esp+1C], 00000003
:00406E89 E8C2260000              call 00409550
:00406E8E 8B4C246C                mov ecx, dword ptr [esp+6C]
:00406E92 53                      push ebx
:00406E93 50                      push eax
:00406E94 8D44242C                lea eax, dword ptr [esp+2C]
:00406E98 6A03                    push 00000003
:00406E9A 50                      push eax
:00406E9B 6854987A00              push 007A9854
:00406EA0 56                      push esi
:00406EA1 C744247C05000000        mov [esp+7C], 00000005
:00406EA9 C744243CD3000000        mov [esp+3C], 000000D3
:00406EB1 C74424400E000000        mov [esp+40], 0000000E
:00406EB9 C744244487010000        mov [esp+44], 00000187
:00406EC1 C7442448CA010000        mov [esp+48], 000001CA
:00406EC9 E852490300              call 0043B820
:00406ECE 8B5C2410                mov ebx, dword ptr [esp+10]
:00406ED2 5F                      pop edi
:00406ED3 EB02                    jmp 00406ED7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406E54(C)
|
:00406ED5 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406ED3(U)
|
:00406ED7 F6C302                  test bl, 02
:00406EDA 8986FA000000            mov dword ptr [esi+000000FA], eax
:00406EE0 C744246006000000        mov [esp+60], 00000006
:00406EE8 7419                    je 00406F03
:00406EEA 8B4C2430                mov ecx, dword ptr [esp+30]
:00406EEE 83E3FD                  and ebx, FFFFFFFD
:00406EF1 3BCD                    cmp ecx, ebp
:00406EF3 895C240C                mov dword ptr [esp+0C], ebx
:00406EF7 740A                    je 00406F03
:00406EF9 8D542430                lea edx, dword ptr [esp+30]
:00406EFD 52                      push edx
:00406EFE E81D741F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406EE8(C), :00406EF7(C)
|
:00406F03 F6C301                  test bl, 01
:00406F06 C744246002000000        mov [esp+60], 00000002
:00406F0E 7412                    je 00406F22
:00406F10 8B4C2444                mov ecx, dword ptr [esp+44]
:00406F14 3BCD                    cmp ecx, ebp
:00406F16 740A                    je 00406F22
:00406F18 8D442444                lea eax, dword ptr [esp+44]
:00406F1C 50                      push eax
:00406F1D E8FE731F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406F0E(C), :00406F16(C)
|
:00406F22 6803010000              push 00000103
:00406F27 E854A31D00              call 005E1280
:00406F2C 83C404                  add esp, 00000004
:00406F2F 89442468                mov dword ptr [esp+68], eax
:00406F33 3BC5                    cmp eax, ebp
:00406F35 C644246008              mov [esp+60], 08
:00406F3A 7437                    je 00406F73
:00406F3C 8D4C2420                lea ecx, dword ptr [esp+20]
:00406F40 6A01                    push 00000001
:00406F42 51                      push ecx
:00406F43 56                      push esi
:00406F44 8BC8                    mov ecx, eax
:00406F46 C744242C20000000        mov [esp+2C], 00000020
:00406F4E C744243024000000        mov [esp+30], 00000024
:00406F56 C7442434AA000000        mov [esp+34], 000000AA
:00406F5E C7442438A4000000        mov [esp+38], 000000A4
:00406F66 E805070100              call 00417670
:00406F6B 898602010000            mov dword ptr [esi+00000102], eax
:00406F71 EB06                    jmp 00406F79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406F3A(C)
|
:00406F73 89AE02010000            mov dword ptr [esi+00000102], ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406F71(U)
|
:00406F79 8B4C2458                mov ecx, dword ptr [esp+58]
:00406F7D 8BC6                    mov eax, esi
:00406F7F 5E                      pop esi
:00406F80 5D                      pop ebp
:00406F81 5B                      pop ebx
:00406F82 64890D00000000          mov dword ptr fs:[00000000], ecx
:00406F89 83C458                  add esp, 00000058
:00406F8C C20C00                  ret 000C


:00406F8F 90                      nop

* Referenced by a CALL at Address:
|:00409593   
|
:00406F90 6AFF                    push FFFFFFFF
:00406F92 68BEF56C00              push 006CF5BE
:00406F97 64A100000000            mov eax, dword ptr fs:[00000000]
:00406F9D 50                      push eax
:00406F9E 64892500000000          mov dword ptr fs:[00000000], esp
:00406FA5 51                      push ecx
:00406FA6 56                      push esi
:00406FA7 8BF1                    mov esi, ecx
:00406FA9 57                      push edi
:00406FAA 89742408                mov dword ptr [esp+08], esi
:00406FAE C706208C7000            mov dword ptr [esi], 00708C20
:00406FB4 C74608188C7000          mov [esi+08], 00708C18
:00406FBB 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00406FC1 33FF                    xor edi, edi
:00406FC3 3BCF                    cmp ecx, edi
:00406FC5 897C2414                mov dword ptr [esp+14], edi
:00406FC9 7406                    je 00406FD1
:00406FCB 57                      push edi
:00406FCC E8AFED0700              call 00485D80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406FC9(C)
|
:00406FD1 66893D64987A00          mov word ptr [007A9864], di
:00406FD8 66893D66987A00          mov word ptr [007A9866], di
:00406FDF 66893D54987A00          mov word ptr [007A9854], di
:00406FE6 66893D56987A00          mov word ptr [007A9856], di
:00406FED 8B8EF2000000            mov ecx, dword ptr [esi+000000F2]
:00406FF3 C744241401000000        mov [esp+14], 00000001
:00406FFB 3BCF                    cmp ecx, edi
:00406FFD 7405                    je 00407004
:00406FFF 8B01                    mov eax, dword ptr [ecx]
:00407001 FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406FFD(C)
|
:00407004 8BCE                    mov ecx, esi
:00407006 C7442414FFFFFFFF        mov [esp+14], FFFFFFFF
:0040700E E8CD591F00              call 005FC9E0
:00407013 8B4C240C                mov ecx, dword ptr [esp+0C]
:00407017 5F                      pop edi
:00407018 5E                      pop esi
:00407019 64890D00000000          mov dword ptr fs:[00000000], ecx
:00407020 83C410                  add esp, 00000010
:00407023 C3                      ret


:00407024 90                      nop
:00407025 90                      nop
:00407026 90                      nop
:00407027 90                      nop
:00407028 90                      nop
:00407029 90                      nop
:0040702A 90                      nop
:0040702B 90                      nop
:0040702C 90                      nop
:0040702D 90                      nop
:0040702E 90                      nop
:0040702F 90                      nop
:00407030 56                      push esi
:00407031 8BF1                    mov esi, ecx
:00407033 8B86FA000000            mov eax, dword ptr [esi+000000FA]
:00407039 668B8EF6000000          mov cx, word ptr [esi+000000F6]
:00407040 053A010000              add eax, 0000013A
:00407045 668908                  mov word ptr [eax], cx
:00407048 668B96F8000000          mov dx, word ptr [esi+000000F8]
:0040704F 66895002                mov word ptr [eax+02], dx
:00407053 668B86F8000000          mov ax, word ptr [esi+000000F8]
:0040705A 8B15089C7A00            mov edx, dword ptr [007A9C08]
:00407060 8BC8                    mov ecx, eax
:00407062 81E1FFFF0000            and ecx, 0000FFFF
:00407068 8B92CD050000            mov edx, dword ptr [edx+000005CD]
:0040706E 668B4CCA06              mov cx, word ptr [edx+8*ecx+06]
:00407073 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040707A 7505                    jne 00407081
:0040707C 6685C0                  test ax, ax
:0040707F 7511                    jne 00407092

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040707A(C)
|
:00407081 8B0DCC997A00            mov ecx, dword ptr [007A99CC]
:00407087 85C9                    test ecx, ecx
:00407089 7407                    je 00407092
:0040708B 6A00                    push 00000000
:0040708D E80E670100              call 0041D7A0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040707F(C), :00407089(C)
|
:00407092 8B86FA000000            mov eax, dword ptr [esi+000000FA]
:00407098 8BB602010000            mov esi, dword ptr [esi+00000102]
:0040709E 053A010000              add eax, 0000013A
:004070A3 81C6F2000000            add esi, 000000F2
:004070A9 668B10                  mov dx, word ptr [eax]
:004070AC 668916                  mov word ptr [esi], dx
:004070AF 668B4002                mov ax, word ptr [eax+02]
:004070B3 66894602                mov word ptr [esi+02], ax
:004070B7 5E                      pop esi
:004070B8 C3                      ret


:004070B9 90                      nop
:004070BA 90                      nop
:004070BB 90                      nop
:004070BC 90                      nop
:004070BD 90                      nop
:004070BE 90                      nop
:004070BF 90                      nop
:004070C0 83EC10                  sub esp, 00000010
:004070C3 53                      push ebx
:004070C4 55                      push ebp
:004070C5 8B6C241C                mov ebp, dword ptr [esp+1C]
:004070C9 56                      push esi
:004070CA 57                      push edi
:004070CB 8BF9                    mov edi, ecx
:004070CD 8B4504                  mov eax, dword ptr [ebp+04]
:004070D0 8B15089C7A00            mov edx, dword ptr [007A9C08]
:004070D6 8B8FFA000000            mov ecx, dword ptr [edi+000000FA]
:004070DC 053B010000              add eax, 0000013B
:004070E1 81C13A010000            add ecx, 0000013A
:004070E7 668B18                  mov bx, word ptr [eax]
:004070EA 66895C2410              mov word ptr [esp+10], bx
:004070EF 668B4002                mov ax, word ptr [eax+02]
:004070F3 6689442412              mov word ptr [esp+12], ax
:004070F8 668B31                  mov si, word ptr [ecx]
:004070FB 668B4902                mov cx, word ptr [ecx+02]
:004070FF 8B92CD050000            mov edx, dword ptr [edx+000005CD]
:00407105 66894C241A              mov word ptr [esp+1A], cx
:0040710A 8B44241A                mov eax, dword ptr [esp+1A]
:0040710E 25FFFF0000              and eax, 0000FFFF
:00407113 663974C206              cmp word ptr [edx+8*eax+06], si
:00407118 0F8581000000            jne 0040719F
:0040711E 33C0                    xor eax, eax
:00407120 663BC8                  cmp cx, ax
:00407123 747A                    je 0040719F
:00407125 8B4C2412                mov ecx, dword ptr [esp+12]
:00407129 81E1FFFF0000            and ecx, 0000FFFF
:0040712F 66395CCA06              cmp word ptr [edx+8*ecx+06], bx
:00407134 8D0CCA                  lea ecx, dword ptr [edx+8*ecx]
:00407137 7566                    jne 0040719F
:00407139 6639442412              cmp word ptr [esp+12], ax
:0040713E 745F                    je 0040719F
:00407140 807D0802                cmp byte ptr [ebp+08], 02
:00407144 7559                    jne 0040719F
:00407146 384509                  cmp byte ptr [ebp+09], al
:00407149 7554                    jne 0040719F
:0040714B 66395906                cmp word ptr [ecx+06], bx
:0040714F 741A                    je 0040716B
:00407151 8B15089C7A00            mov edx, dword ptr [007A9C08]
:00407157 6689442410              mov word ptr [esp+10], ax
:0040715C 6689442412              mov word ptr [esp+12], ax
:00407161 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:00407167 8B08                    mov ecx, dword ptr [eax]
:00407169 EB02                    jmp 0040716D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040714F(C)
|
:0040716B 8B09                    mov ecx, dword ptr [ecx]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407169(U)
|
:0040716D 8B11                    mov edx, dword ptr [ecx]
:0040716F FF9254010000            call dword ptr [edx+00000154]
:00407175 50                      push eax
:00407176 51                      push ecx
:00407177 8D442418                lea eax, dword ptr [esp+18]
:0040717B 8BCC                    mov ecx, esp
:0040717D 50                      push eax
:0040717E E8AD260000              call 00409830
:00407183 51                      push ecx
:00407184 8BCC                    mov ecx, esp
:00407186 6858987A00              push 007A9858
:0040718B E8A0260000              call 00409830
:00407190 8B8FB4000000            mov ecx, dword ptr [edi+000000B4]
:00407196 51                      push ecx
:00407197 E8441F0000              call 004090E0
:0040719C 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407118(C), :00407123(C), :00407137(C), :0040713E(C), :00407144(C)
|:00407149(C)
|
:0040719F 5F                      pop edi
:004071A0 5E                      pop esi
:004071A1 5D                      pop ebp
:004071A2 5B                      pop ebx
:004071A3 83C410                  add esp, 00000010
:004071A6 C20400                  ret 0004


:004071A9 90                      nop
:004071AA 90                      nop
:004071AB 90                      nop
:004071AC 90                      nop
:004071AD 90                      nop
:004071AE 90                      nop
:004071AF 90                      nop
:004071B0 8B542404                mov edx, dword ptr [esp+04]
:004071B4 56                      push esi
:004071B5 8BF1                    mov esi, ecx
:004071B7 8B4204                  mov eax, dword ptr [edx+04]
:004071BA 053B010000              add eax, 0000013B
:004071BF 668B08                  mov cx, word ptr [eax]
:004071C2 66894C2408              mov word ptr [esp+08], cx
:004071C7 668B4002                mov ax, word ptr [eax+02]
:004071CB B990984000              mov ecx, 00409890
:004071D0 668944240A              mov word ptr [esp+0A], ax
:004071D5 85C9                    test ecx, ecx
:004071D7 744B                    je 00407224
:004071D9 A1CC997A00              mov eax, dword ptr [007A99CC]
:004071DE 85C0                    test eax, eax
:004071E0 7442                    je 00407224
:004071E2 8B8816010000            mov ecx, dword ptr [eax+00000116]
:004071E8 85C9                    test ecx, ecx
:004071EA 7438                    je 00407224
:004071EC 8B5208                  mov edx, dword ptr [edx+08]
:004071EF 52                      push edx
:004071F0 E86B661F00              call 005FD860
:004071F5 84C0                    test al, al
:004071F7 742B                    je 00407224
:004071F9 6AFF                    push FFFFFFFF
:004071FB 51                      push ecx
:004071FC 8D442410                lea eax, dword ptr [esp+10]
:00407200 8BCC                    mov ecx, esp
:00407202 50                      push eax
:00407203 E828260000              call 00409830
:00407208 51                      push ecx
:00407209 8BCC                    mov ecx, esp
:0040720B 6858987A00              push 007A9858
:00407210 E81B260000              call 00409830
:00407215 8B8EB4000000            mov ecx, dword ptr [esi+000000B4]
:0040721B 51                      push ecx
:0040721C E8BF1E0000              call 004090E0
:00407221 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004071D7(C), :004071E0(C), :004071EA(C), :004071F7(C)
|
:00407224 5E                      pop esi
:00407225 C20400                  ret 0004


:00407228 90                      nop
:00407229 90                      nop
:0040722A 90                      nop
:0040722B 90                      nop
:0040722C 90                      nop
:0040722D 90                      nop
:0040722E 90                      nop
:0040722F 90                      nop
:00407230 E90B000000              jmp 00407240
:00407235 90                      nop
:00407236 90                      nop
:00407237 90                      nop
:00407238 90                      nop
:00407239 90                      nop
:0040723A 90                      nop
:0040723B 90                      nop
:0040723C 90                      nop
:0040723D 90                      nop
:0040723E 90                      nop
:0040723F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407230(U)
|
:00407240 33C0                    xor eax, eax
:00407242 66A358987A00            mov word ptr [007A9858], ax
:00407248 66A35A987A00            mov word ptr [007A985A], ax
:0040724E C3                      ret


:0040724F 90                      nop
:00407250 E90B000000              jmp 00407260
:00407255 90                      nop
:00407256 90                      nop
:00407257 90                      nop
:00407258 90                      nop
:00407259 90                      nop
:0040725A 90                      nop
:0040725B 90                      nop
:0040725C 90                      nop
:0040725D 90                      nop
:0040725E 90                      nop
:0040725F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407250(U)
|
:00407260 33C0                    xor eax, eax
:00407262 66A35C987A00            mov word ptr [007A985C], ax
:00407268 66A35E987A00            mov word ptr [007A985E], ax
:0040726E C3                      ret


:0040726F 90                      nop
:00407270 E90B000000              jmp 00407280
:00407275 90                      nop
:00407276 90                      nop
:00407277 90                      nop
:00407278 90                      nop
:00407279 90                      nop
:0040727A 90                      nop
:0040727B 90                      nop
:0040727C 90                      nop
:0040727D 90                      nop
:0040727E 90                      nop
:0040727F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407270(U)
|
:00407280 33C0                    xor eax, eax
:00407282 66A350987A00            mov word ptr [007A9850], ax
:00407288 66A352987A00            mov word ptr [007A9852], ax
:0040728E C3                      ret


:0040728F 90                      nop

* Referenced by a CALL at Address:
|:0041DDBD   
|
:00407290 6AFF                    push FFFFFFFF
:00407292 68F8F66C00              push 006CF6F8
:00407297 64A100000000            mov eax, dword ptr fs:[00000000]
:0040729D 50                      push eax
:0040729E 64892500000000          mov dword ptr fs:[00000000], esp
:004072A5 83EC70                  sub esp, 00000070
:004072A8 A128FE7200              mov eax, dword ptr [0072FE28]
:004072AD 53                      push ebx
:004072AE 55                      push ebp
:004072AF 56                      push esi
:004072B0 57                      push edi
:004072B1 8BF1                    mov esi, ecx
:004072B3 33DB                    xor ebx, ebx
:004072B5 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/back/barter"
                                  |
:004072B6 6858B37800              push 0078B358
:004072BB 8D4C241C                lea ecx, dword ptr [esp+1C]
:004072BF 8974242C                mov dword ptr [esp+2C], esi
:004072C3 33ED                    xor ebp, ebp
:004072C5 895C2418                mov dword ptr [esp+18], ebx
:004072C9 E8E23D1E00              call 005EB0B0
:004072CE 8B842490000000          mov eax, dword ptr [esp+00000090]
:004072D5 8D4C2414                lea ecx, dword ptr [esp+14]
:004072D9 8D542438                lea edx, dword ptr [esp+38]
:004072DD 51                      push ecx
:004072DE 52                      push edx
:004072DF 50                      push eax
:004072E0 8BCE                    mov ecx, esi
:004072E2 89AC2494000000          mov dword ptr [esp+00000094], ebp
:004072E9 896C2444                mov dword ptr [esp+44], ebp
:004072ED 896C2448                mov dword ptr [esp+48], ebp
:004072F1 E83A921F00              call 00600530
:004072F6 8B4C2414                mov ecx, dword ptr [esp+14]
:004072FA C684248800000002        mov byte ptr [esp+00000088], 02
:00407302 8D41F4                  lea eax, dword ptr [ecx-0C]
:00407305 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00407308 49                      dec ecx
:00407309 8908                    mov dword ptr [eax], ecx
:0040730B 7509                    jne 00407316
:0040730D 50                      push eax
:0040730E E8ED9F1D00              call 005E1300
:00407313 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040730B(C)
|
:00407316 8B942494000000          mov edx, dword ptr [esp+00000094]
:0040731D 6689AEF6000000          mov word ptr [esi+000000F6], bp
:00407324 6689AEF8000000          mov word ptr [esi+000000F8], bp
:0040732B 89960E010000            mov dword ptr [esi+0000010E], edx
:00407331 C706948D7000            mov dword ptr [esi], 00708D94
:00407337 C746088C8D7000          mov [esi+08], 00708D8C
:0040733E 66A164987A00            mov ax, word ptr [007A9864]
:00407344 668B0D66987A00          mov cx, word ptr [007A9866]
:0040734B 668B1554987A00          mov dx, word ptr [007A9854]
:00407352 66A35C987A00            mov word ptr [007A985C], ax
:00407358 66A156987A00            mov ax, word ptr [007A9856]
:0040735E 66890D5E987A00          mov word ptr [007A985E], cx
:00407365 66891558987A00          mov word ptr [007A9858], dx
:0040736C 66A35A987A00            mov word ptr [007A985A], ax
:00407372 E8E9851000              call 0050F960
:00407377 51                      push ecx
:00407378 3BC5                    cmp eax, ebp
:0040737A 89A42494000000          mov dword ptr [esp+00000094], esp
:00407381 8BCC                    mov ecx, esp
:00407383 7423                    je 004073A8
:00407385 668B4004                mov ax, word ptr [eax+04]
:00407389 66894102                mov word ptr [ecx+02], ax
:0040738D 8B15089C7A00            mov edx, dword ptr [007A9C08]
:00407393 25FFFF0000              and eax, 0000FFFF
:00407398 8B92CD050000            mov edx, dword ptr [edx+000005CD]
:0040739E 668B44C206              mov ax, word ptr [edx+8*eax+06]
:004073A3 668901                  mov word ptr [ecx], ax
:004073A6 EB07                    jmp 004073AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407383(C)
|
:004073A8 668929                  mov word ptr [ecx], bp
:004073AB 66896902                mov word ptr [ecx+02], bp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004073A6(U)
|
:004073AF B95C987A00              mov ecx, 007A985C
:004073B4 E897240000              call 00409850
:004073B9 8B10                    mov edx, dword ptr [eax]
:004073BB 8BC8                    mov ecx, eax
:004073BD FF9280050000            call dword ptr [edx+00000580]
:004073C3 E898851000              call 0050F960
:004073C8 51                      push ecx
:004073C9 3BC5                    cmp eax, ebp
:004073CB 89A42494000000          mov dword ptr [esp+00000094], esp
:004073D2 8BCC                    mov ecx, esp
:004073D4 7423                    je 004073F9
:004073D6 668B4004                mov ax, word ptr [eax+04]
:004073DA 66894102                mov word ptr [ecx+02], ax
:004073DE 8B15089C7A00            mov edx, dword ptr [007A9C08]
:004073E4 25FFFF0000              and eax, 0000FFFF
:004073E9 8B92CD050000            mov edx, dword ptr [edx+000005CD]
:004073EF 668B44C206              mov ax, word ptr [edx+8*eax+06]
:004073F4 668901                  mov word ptr [ecx], ax
:004073F7 EB07                    jmp 00407400

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004073D4(C)
|
:004073F9 668929                  mov word ptr [ecx], bp
:004073FC 66896902                mov word ptr [ecx+02], bp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004073F7(U)
|
:00407400 B958987A00              mov ecx, 007A9858
:00407405 E846240000              call 00409850
:0040740A 8B10                    mov edx, dword ptr [eax]
:0040740C 8BC8                    mov ecx, eax
:0040740E FF9280050000            call dword ptr [edx+00000580]
:00407414 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040741A 33D2                    xor edx, edx
:0040741C 668B155A987A00          mov dx, word ptr [007A985A]
:00407423 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00407429 8D04D0                  lea eax, dword ptr [eax+8*edx]
:0040742C 668B5006                mov dx, word ptr [eax+06]
:00407430 663B1558987A00          cmp dx, word ptr [007A9858]
:00407437 7418                    je 00407451
:00407439 66892D58987A00          mov word ptr [007A9858], bp
:00407440 66892D5A987A00          mov word ptr [007A985A], bp
:00407447 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:0040744D 8B09                    mov ecx, dword ptr [ecx]
:0040744F EB02                    jmp 00407453

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407437(C)
|
:00407451 8B08                    mov ecx, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040744F(U)
|
:00407453 8B01                    mov eax, dword ptr [ecx]
:00407455 FF9050030000            call dword ptr [eax+00000350]
:0040745B 84C0                    test al, al
:0040745D 0F8438020000            je 0040769B
:00407463 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00407469 33D2                    xor edx, edx
:0040746B 668B155A987A00          mov dx, word ptr [007A985A]
:00407472 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00407478 8D04D0                  lea eax, dword ptr [eax+8*edx]
:0040747B 668B5006                mov dx, word ptr [eax+06]
:0040747F 663B1558987A00          cmp dx, word ptr [007A9858]
:00407486 7414                    je 0040749C
:00407488 66892D58987A00          mov word ptr [007A9858], bp
:0040748F 66892D5A987A00          mov word ptr [007A985A], bp
:00407496 8B81CD050000            mov eax, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407486(C)
|
:0040749C 8B08                    mov ecx, dword ptr [eax]
:0040749E 8D942490000000          lea edx, dword ptr [esp+00000090]
:004074A5 52                      push edx
:004074A6 8B01                    mov eax, dword ptr [ecx]
:004074A8 FF9074050000            call dword ptr [eax+00000574]
:004074AE 668B08                  mov cx, word ptr [eax]
:004074B1 66898EF6000000          mov word ptr [esi+000000F6], cx
:004074B8 668B5002                mov dx, word ptr [eax+02]
:004074BC 668996F8000000          mov word ptr [esi+000000F8], dx
:004074C3 E898841000              call 0050F960
:004074C8 3BC5                    cmp eax, ebp
:004074CA 742B                    je 004074F7
:004074CC 668B4004                mov ax, word ptr [eax+04]
:004074D0 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:004074D6 668944242A              mov word ptr [esp+2A], ax
:004074DB 8B54242A                mov edx, dword ptr [esp+2A]
:004074DF 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:004074E5 81E2FFFF0000            and edx, 0000FFFF
:004074EB 668B44D006              mov ax, word ptr [eax+8*edx+06]
:004074F0 6689442428              mov word ptr [esp+28], ax
:004074F5 EB0A                    jmp 00407501

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004074CA(C)
|
:004074F7 66896C2428              mov word ptr [esp+28], bp
:004074FC 66896C242A              mov word ptr [esp+2A], bp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004074F5(U)
|
:00407501 A154B37A00              mov eax, dword ptr [007AB354]
:00407506 33C9                    xor ecx, ecx
:00407508 898C2490000000          mov dword ptr [esp+00000090], ecx
:0040750F 8B505D                  mov edx, dword ptr [eax+5D]
:00407512 8B7859                  mov edi, dword ptr [eax+59]
:00407515 2BD7                    sub edx, edi
:00407517 C1FA02                  sar edx, 02
:0040751A 0F844C010000            je 0040766C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407664(C)
|
:00407520 8B5065                  mov edx, dword ptr [eax+65]
:00407523 33FF                    xor edi, edi
:00407525 8B2C8A                  mov ebp, dword ptr [edx+4*ecx]
:00407528 3BEF                    cmp ebp, edi
:0040752A 0F8E1F010000            jle 0040764F
:00407530 8B4059                  mov eax, dword ptr [eax+59]
:00407533 8D0488                  lea eax, dword ptr [eax+4*ecx]
:00407536 8D4C2418                lea ecx, dword ptr [esp+18]
:0040753A 50                      push eax
:0040753B 51                      push ecx
:0040753C E8EF461300              call 0053BC30
:00407541 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00407547 8B542422                mov edx, dword ptr [esp+22]
:0040754B 81E2FFFF0000            and edx, 0000FFFF
:00407551 83C408                  add esp, 00000008
:00407554 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:0040755A 8D04D0                  lea eax, dword ptr [eax+8*edx]
:0040755D 668B5006                mov dx, word ptr [eax+06]
:00407561 663B542418              cmp dx, word ptr [esp+18]
:00407566 7414                    je 0040757C
:00407568 66897C2418              mov word ptr [esp+18], di
:0040756D 66897C241A              mov word ptr [esp+1A], di
:00407572 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:00407578 8B09                    mov ecx, dword ptr [ecx]
:0040757A EB02                    jmp 0040757E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407566(C)
|
:0040757C 8B08                    mov ecx, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040757A(U)
|
:0040757E 8B01                    mov eax, dword ptr [ecx]
:00407580 55                      push ebp
:00407581 FF9070010000            call dword ptr [eax+00000170]
:00407587 8D4C2428                lea ecx, dword ptr [esp+28]
:0040758B 6689BC2494000000        mov word ptr [esp+00000094], di
:00407593 6689BC2496000000        mov word ptr [esp+00000096], di
:0040759B E8B0220000              call 00409850
:004075A0 6A01                    push 00000001
:004075A2 8D8C2498000000          lea ecx, dword ptr [esp+00000098]
:004075A9 55                      push ebp
:004075AA 8BF8                    mov edi, eax
:004075AC 51                      push ecx
:004075AD 51                      push ecx
:004075AE 8B17                    mov edx, dword ptr [edi]
:004075B0 8D442428                lea eax, dword ptr [esp+28]
:004075B4 8BCC                    mov ecx, esp
:004075B6 89642430                mov dword ptr [esp+30], esp
:004075BA 50                      push eax
:004075BB 89542424                mov dword ptr [esp+24], edx
:004075BF E86C220000              call 00409830
:004075C4 8B542420                mov edx, dword ptr [esp+20]
:004075C8 8D4C2474                lea ecx, dword ptr [esp+74]
:004075CC 51                      push ecx
:004075CD 8BCF                    mov ecx, edi
:004075CF FF923C040000            call dword ptr [edx+0000043C]
:004075D5 8B442464                mov eax, dword ptr [esp+64]
:004075D9 33D2                    xor edx, edx
:004075DB 3BC2                    cmp eax, edx
:004075DD C684248800000003        mov byte ptr [esp+00000088], 03
:004075E5 743D                    je 00407624
:004075E7 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:004075ED 8B7C241A                mov edi, dword ptr [esp+1A]
:004075F1 81E7FFFF0000            and edi, 0000FFFF
:004075F7 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:004075FD 8D04F8                  lea eax, dword ptr [eax+8*edi]
:00407600 668B7806                mov di, word ptr [eax+06]
:00407604 663B7C2418              cmp di, word ptr [esp+18]
:00407609 7410                    je 0040761B
:0040760B 6689542418              mov word ptr [esp+18], dx
:00407610 668954241A              mov word ptr [esp+1A], dx
:00407615 8B81CD050000            mov eax, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407609(C)
|
:0040761B 8B00                    mov eax, dword ptr [eax]
:0040761D 8BC8                    mov ecx, eax
:0040761F 8B10                    mov edx, dword ptr [eax]
:00407621 FF5228                  call [edx+28]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004075E5(C)
|
:00407624 8B442474                mov eax, dword ptr [esp+74]
:00407628 C684248800000002        mov byte ptr [esp+00000088], 02
:00407630 83C0F4                  add eax, FFFFFFF4
:00407633 8B08                    mov ecx, dword ptr [eax]
:00407635 49                      dec ecx
:00407636 8908                    mov dword ptr [eax], ecx
:00407638 7509                    jne 00407643
:0040763A 50                      push eax
:0040763B E8C09C1D00              call 005E1300
:00407640 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407638(C)
|
:00407643 A154B37A00              mov eax, dword ptr [007AB354]
:00407648 8B8C2490000000          mov ecx, dword ptr [esp+00000090]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040752A(C)
|
:0040764F 8B505D                  mov edx, dword ptr [eax+5D]
:00407652 8B7859                  mov edi, dword ptr [eax+59]
:00407655 2BD7                    sub edx, edi
:00407657 41                      inc ecx
:00407658 C1FA02                  sar edx, 02
:0040765B 3BCA                    cmp ecx, edx
:0040765D 898C2490000000          mov dword ptr [esp+00000090], ecx
:00407664 0F82B6FEFFFF            jb 00407520
:0040766A 33ED                    xor ebp, ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040751A(C)
|
:0040766C 51                      push ecx
:0040766D 668B4C242C              mov cx, word ptr [esp+2C]
:00407672 8BC4                    mov eax, esp
:00407674 89A42494000000          mov dword ptr [esp+00000094], esp
:0040767B 668908                  mov word ptr [eax], cx
:0040767E 668B54242E              mov dx, word ptr [esp+2E]
:00407683 B958987A00              mov ecx, 007A9858
:00407688 66895002                mov word ptr [eax+02], dx
:0040768C E8BF210000              call 00409850
:00407691 8B10                    mov edx, dword ptr [eax]
:00407693 8BC8                    mov ecx, eax
:00407695 FF9278050000            call dword ptr [edx+00000578]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040745D(C)
|
:0040769B 684B010000              push 0000014B
:004076A0 E8DB9B1D00              call 005E1280
:004076A5 83C404                  add esp, 00000004
:004076A8 89842494000000          mov dword ptr [esp+00000094], eax
:004076AF 3BC5                    cmp eax, ebp
:004076B1 C684248800000004        mov byte ptr [esp+00000088], 04
:004076B9 0F848E000000            je 0040774D
:004076BF 33C9                    xor ecx, ecx
:004076C1 B850834000              mov eax, 00408350
:004076C6 51                      push ecx
:004076C7 50                      push eax
:004076C8 8D44246C                lea eax, dword ptr [esp+6C]
:004076CC 8BCE                    mov ecx, esi
:004076CE 50                      push eax
:004076CF BF60824000              mov edi, 00408260
:004076D4 E8E71E0000              call 004095C0
:004076D9 89842490000000          mov dword ptr [esp+00000090], eax
:004076E0 55                      push ebp
:004076E1 8D4C2454                lea ecx, dword ptr [esp+54]
:004076E5 57                      push edi
:004076E6 BB03000000              mov ebx, 00000003
:004076EB 51                      push ecx
:004076EC 8BCE                    mov ecx, esi
:004076EE C684249400000005        mov byte ptr [esp+00000094], 05
:004076F6 895C241C                mov dword ptr [esp+1C], ebx
:004076FA E8C11E0000              call 004095C0
:004076FF 8B942490000000          mov edx, dword ptr [esp+00000090]
:00407706 8B8C2494000000          mov ecx, dword ptr [esp+00000094]
:0040770D 52                      push edx
:0040770E 50                      push eax
:0040770F 8D442430                lea eax, dword ptr [esp+30]
:00407713 53                      push ebx
:00407714 50                      push eax
:00407715 685C987A00              push 007A985C
:0040771A 56                      push esi
:0040771B C78424A000000006000000  mov dword ptr [esp+000000A0], 00000006
:00407726 C744244014000000        mov [esp+40], 00000014
:0040772E C74424441E000000        mov [esp+44], 0000001E
:00407736 C744244887000000        mov [esp+48], 00000087
:0040773E C744244CD7000000        mov [esp+4C], 000000D7
:00407746 E8D5400300              call 0043B820
:0040774B EB02                    jmp 0040774F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004076B9(C)
|
:0040774D 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040774B(U)
|
:0040774F F6C302                  test bl, 02
:00407752 8986FA000000            mov dword ptr [esi+000000FA], eax
:00407758 C784248800000007000000  mov dword ptr [esp+00000088], 00000007
:00407763 7419                    je 0040777E
:00407765 8B4C2450                mov ecx, dword ptr [esp+50]
:00407769 83E3FD                  and ebx, FFFFFFFD
:0040776C 3BCD                    cmp ecx, ebp
:0040776E 895C2410                mov dword ptr [esp+10], ebx
:00407772 740A                    je 0040777E
:00407774 8D542450                lea edx, dword ptr [esp+50]
:00407778 52                      push edx
:00407779 E8A26B1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407763(C), :00407772(C)
|
:0040777E F6C301                  test bl, 01
:00407781 C784248800000002000000  mov dword ptr [esp+00000088], 00000002
:0040778C 7415                    je 004077A3
:0040778E 8B4C2464                mov ecx, dword ptr [esp+64]
:00407792 83E3FE                  and ebx, FFFFFFFE
:00407795 3BCD                    cmp ecx, ebp
:00407797 740A                    je 004077A3
:00407799 8D442464                lea eax, dword ptr [esp+64]
:0040779D 50                      push eax
:0040779E E87D6B1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040778C(C), :00407797(C)
|
:004077A3 8B8EFA000000            mov ecx, dword ptr [esi+000000FA]
:004077A9 8B892E010000            mov ecx, dword ptr [ecx+0000012E]
:004077AF 8B11                    mov edx, dword ptr [ecx]
:004077B1 FF5220                  call [edx+20]
:004077B4 8B86FA000000            mov eax, dword ptr [esi+000000FA]
:004077BA 8B88CC000000            mov ecx, dword ptr [eax+000000CC]
:004077C0 8B90C4000000            mov edx, dword ptr [eax+000000C4]
:004077C6 8BB8C0000000            mov edi, dword ptr [eax+000000C0]
:004077CC 2BCA                    sub ecx, edx
:004077CE 8B90C8000000            mov edx, dword ptr [eax+000000C8]
:004077D4 83C1EE                  add ecx, FFFFFFEE
:004077D7 2BD7                    sub edx, edi
:004077D9 896C2440                mov dword ptr [esp+40], ebp
:004077DD 896C2444                mov dword ptr [esp+44], ebp
:004077E1 89542448                mov dword ptr [esp+48], edx
:004077E5 894C244C                mov dword ptr [esp+4C], ecx
:004077E9 8B80F2000000            mov eax, dword ptr [eax+000000F2]
:004077EF 8D4C2440                lea ecx, dword ptr [esp+40]
:004077F3 8B10                    mov edx, dword ptr [eax]
:004077F5 51                      push ecx
:004077F6 8BC8                    mov ecx, eax
:004077F8 FF5264                  call [edx+64]
:004077FB 8B96FA000000            mov edx, dword ptr [esi+000000FA]
:00407801 C6823E01000001          mov byte ptr [edx+0000013E], 01
:00407808 8B44244C                mov eax, dword ptr [esp+4C]
:0040780C 89442444                mov dword ptr [esp+44], eax
:00407810 83C012                  add eax, 00000012
:00407813 8944244C                mov dword ptr [esp+4C], eax
:00407817 8B86FA000000            mov eax, dword ptr [esi+000000FA]
:0040781D 8B8832010000            mov ecx, dword ptr [eax+00000132]
:00407823 8D442440                lea eax, dword ptr [esp+40]
:00407827 50                      push eax
:00407828 8B11                    mov edx, dword ptr [ecx]
:0040782A FF5264                  call [edx+64]
:0040782D 8B8EFA000000            mov ecx, dword ptr [esi+000000FA]
:00407833 8B11                    mov edx, dword ptr [ecx]
:00407835 FF9268010000            call dword ptr [edx+00000168]
:0040783B 684B010000              push 0000014B
:00407840 E83B9A1D00              call 005E1280
:00407845 8BF8                    mov edi, eax
:00407847 83C404                  add esp, 00000004
:0040784A 89BC2494000000          mov dword ptr [esp+00000094], edi
:00407851 3BFD                    cmp edi, ebp
:00407853 C684248800000009        mov byte ptr [esp+00000088], 09
:0040785B 0F848F000000            je 004078F0
:00407861 33C9                    xor ecx, ecx
:00407863 B8C0844000              mov eax, 004084C0
:00407868 51                      push ecx
:00407869 50                      push eax
:0040786A 8D442458                lea eax, dword ptr [esp+58]
:0040786E 8BCE                    mov ecx, esi
:00407870 50                      push eax
:00407871 BDD0834000              mov ebp, 004083D0
:00407876 E8451D0000              call 004095C0
:0040787B 89842490000000          mov dword ptr [esp+00000090], eax
:00407882 83CB04                  or ebx, 00000004
:00407885 33C0                    xor eax, eax
:00407887 8D4C2464                lea ecx, dword ptr [esp+64]
:0040788B 50                      push eax
:0040788C 55                      push ebp
:0040788D 83CB08                  or ebx, 00000008
:00407890 51                      push ecx
:00407891 8BCE                    mov ecx, esi
:00407893 C68424940000000A        mov byte ptr [esp+00000094], 0A
:0040789B 895C241C                mov dword ptr [esp+1C], ebx
:0040789F E81C1D0000              call 004095C0
:004078A4 8B942490000000          mov edx, dword ptr [esp+00000090]
:004078AB 8BCF                    mov ecx, edi
:004078AD 52                      push edx
:004078AE 50                      push eax
:004078AF 8D442430                lea eax, dword ptr [esp+30]
:004078B3 6A03                    push 00000003
:004078B5 50                      push eax
:004078B6 6858987A00              push 007A9858
:004078BB 56                      push esi
:004078BC C78424A00000000B000000  mov dword ptr [esp+000000A0], 0000000B
:004078C7 C74424402C010000        mov [esp+40], 0000012C
:004078CF C74424441E000000        mov [esp+44], 0000001E
:004078D7 C74424489F010000        mov [esp+48], 0000019F
:004078DF C744244CD7000000        mov [esp+4C], 000000D7
:004078E7 E8343F0300              call 0043B820
:004078EC 33ED                    xor ebp, ebp
:004078EE EB02                    jmp 004078F2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040785B(C)
|
:004078F0 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004078EE(U)
|
:004078F2 F6C308                  test bl, 08
:004078F5 8986FE000000            mov dword ptr [esi+000000FE], eax
:004078FB C78424880000000C000000  mov dword ptr [esp+00000088], 0000000C
:00407906 7419                    je 00407921
:00407908 8B4C2464                mov ecx, dword ptr [esp+64]
:0040790C 83E3F7                  and ebx, FFFFFFF7
:0040790F 3BCD                    cmp ecx, ebp
:00407911 895C2410                mov dword ptr [esp+10], ebx
:00407915 740A                    je 00407921
:00407917 8D542464                lea edx, dword ptr [esp+64]
:0040791B 52                      push edx
:0040791C E8FF691F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407906(C), :00407915(C)
|
:00407921 F6C304                  test bl, 04
:00407924 C784248800000002000000  mov dword ptr [esp+00000088], 00000002
:0040792F 7415                    je 00407946
:00407931 8B4C2450                mov ecx, dword ptr [esp+50]
:00407935 83E3FB                  and ebx, FFFFFFFB
:00407938 3BCD                    cmp ecx, ebp
:0040793A 740A                    je 00407946
:0040793C 8D442450                lea eax, dword ptr [esp+50]
:00407940 50                      push eax
:00407941 E8DA691F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040792F(C), :0040793A(C)
|
:00407946 8B8EFE000000            mov ecx, dword ptr [esi+000000FE]
:0040794C 8B892E010000            mov ecx, dword ptr [ecx+0000012E]
:00407952 8B11                    mov edx, dword ptr [ecx]
:00407954 FF5220                  call [edx+20]
:00407957 8B86FA000000            mov eax, dword ptr [esi+000000FA]
:0040795D 8B88CC000000            mov ecx, dword ptr [eax+000000CC]
:00407963 8B90C4000000            mov edx, dword ptr [eax+000000C4]
:00407969 8BB8C0000000            mov edi, dword ptr [eax+000000C0]
:0040796F 2BCA                    sub ecx, edx
:00407971 8B90C8000000            mov edx, dword ptr [eax+000000C8]
:00407977 33C0                    xor eax, eax
:00407979 2BD7                    sub edx, edi
:0040797B 89442440                mov dword ptr [esp+40], eax
:0040797F 8B86FE000000            mov eax, dword ptr [esi+000000FE]
:00407985 894C244C                mov dword ptr [esp+4C], ecx
:00407989 33FF                    xor edi, edi
:0040798B 83C1EE                  add ecx, FFFFFFEE
:0040798E 897C2444                mov dword ptr [esp+44], edi
:00407992 89542448                mov dword ptr [esp+48], edx
:00407996 894C244C                mov dword ptr [esp+4C], ecx
:0040799A 8B88F2000000            mov ecx, dword ptr [eax+000000F2]
:004079A0 8D442440                lea eax, dword ptr [esp+40]
:004079A4 8B11                    mov edx, dword ptr [ecx]
:004079A6 50                      push eax
:004079A7 FF5264                  call [edx+64]
:004079AA 8B8EFE000000            mov ecx, dword ptr [esi+000000FE]
:004079B0 C6813E01000001          mov byte ptr [ecx+0000013E], 01
:004079B7 8B44244C                mov eax, dword ptr [esp+4C]
:004079BB 8B96FE000000            mov edx, dword ptr [esi+000000FE]
:004079C1 89442444                mov dword ptr [esp+44], eax
:004079C5 83C012                  add eax, 00000012
:004079C8 8944244C                mov dword ptr [esp+4C], eax
:004079CC 8B8A32010000            mov ecx, dword ptr [edx+00000132]
:004079D2 8D542440                lea edx, dword ptr [esp+40]
:004079D6 8B01                    mov eax, dword ptr [ecx]
:004079D8 52                      push edx
:004079D9 FF5064                  call [eax+64]
:004079DC 8B8EFE000000            mov ecx, dword ptr [esi+000000FE]
:004079E2 8B01                    mov eax, dword ptr [ecx]
:004079E4 FF9068010000            call dword ptr [eax+00000168]
:004079EA 684F010000              push 0000014F
:004079EF E88C981D00              call 005E1280
:004079F4 8BF8                    mov edi, eax
:004079F6 83C404                  add esp, 00000004
:004079F9 897C2420                mov dword ptr [esp+20], edi
:004079FD 3BFD                    cmp edi, ebp
:004079FF C68424880000000E        mov byte ptr [esp+00000088], 0E
:00407A07 0F84A6000000            je 00407AB3
:00407A0D 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:00407A13 51                      push ecx

* Possible StringData Ref from Data Obj ->"barterGUI_offer"
                                  |
:00407A14 6848B37800              push 0078B348
:00407A19 8D8C2498000000          lea ecx, dword ptr [esp+00000098]
:00407A20 E88B361E00              call 005EB0B0
:00407A25 83CB10                  or ebx, 00000010
:00407A28 8D942490000000          lea edx, dword ptr [esp+00000090]
:00407A2F 8D442418                lea eax, dword ptr [esp+18]
:00407A33 83CB20                  or ebx, 00000020
:00407A36 52                      push edx
:00407A37 50                      push eax
:00407A38 B9B0AF7A00              mov ecx, 007AAFB0
:00407A3D C68424900000000F        mov byte ptr [esp+00000090], 0F
:00407A45 BD60854000              mov ebp, 00408560
:00407A4A 895C2418                mov dword ptr [esp+18], ebx
:00407A4E E84D1D0000              call 004097A0
:00407A53 89842494000000          mov dword ptr [esp+00000094], eax
:00407A5A 33C0                    xor eax, eax
:00407A5C 8D4C2464                lea ecx, dword ptr [esp+64]
:00407A60 50                      push eax
:00407A61 55                      push ebp
:00407A62 83CB40                  or ebx, 00000040
:00407A65 51                      push ecx
:00407A66 8BCE                    mov ecx, esi
:00407A68 C784249400000010000000  mov dword ptr [esp+00000094], 00000010
:00407A73 895C241C                mov dword ptr [esp+1C], ebx
:00407A77 E8441B0000              call 004095C0
:00407A7C 8B942494000000          mov edx, dword ptr [esp+00000094]
:00407A83 6A01                    push 00000001
:00407A85 52                      push edx
:00407A86 50                      push eax
:00407A87 8D442434                lea eax, dword ptr [esp+34]
:00407A8B 8BCF                    mov ecx, edi
:00407A8D 50                      push eax
:00407A8E 56                      push esi
:00407A8F C784249C00000011000000  mov dword ptr [esp+0000009C], 00000011
:00407A9A C744243C0C000000        mov [esp+3C], 0000000C
:00407AA2 C7442440FF000000        mov [esp+40], 000000FF
:00407AAA E8814C1800              call 0058C730
:00407AAF 33ED                    xor ebp, ebp
:00407AB1 EB02                    jmp 00407AB5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407A07(C)
|
:00407AB3 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407AB1(U)
|
:00407AB5 F6C340                  test bl, 40
:00407AB8 898606010000            mov dword ptr [esi+00000106], eax
:00407ABE C784248800000013000000  mov dword ptr [esp+00000088], 00000013
:00407AC9 7419                    je 00407AE4
:00407ACB 8B4C2464                mov ecx, dword ptr [esp+64]
:00407ACF 83E3BF                  and ebx, FFFFFFBF
:00407AD2 3BCD                    cmp ecx, ebp
:00407AD4 895C2410                mov dword ptr [esp+10], ebx
:00407AD8 740A                    je 00407AE4
:00407ADA 8D542464                lea edx, dword ptr [esp+64]
:00407ADE 52                      push edx
:00407ADF E83C681F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407AC9(C), :00407AD8(C)
|
:00407AE4 F6C320                  test bl, 20
:00407AE7 C784248800000012000000  mov dword ptr [esp+00000088], 00000012
:00407AF2 741E                    je 00407B12
:00407AF4 8B442418                mov eax, dword ptr [esp+18]
:00407AF8 83E3DF                  and ebx, FFFFFFDF
:00407AFB 83C0F4                  add eax, FFFFFFF4
:00407AFE 895C2410                mov dword ptr [esp+10], ebx
:00407B02 8B08                    mov ecx, dword ptr [eax]
:00407B04 49                      dec ecx
:00407B05 8908                    mov dword ptr [eax], ecx
:00407B07 7509                    jne 00407B12
:00407B09 50                      push eax
:00407B0A E8F1971D00              call 005E1300
:00407B0F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407AF2(C), :00407B07(C)
|
:00407B12 F6C310                  test bl, 10
:00407B15 C784248800000002000000  mov dword ptr [esp+00000088], 00000002
:00407B20 741E                    je 00407B40
:00407B22 8B8C2490000000          mov ecx, dword ptr [esp+00000090]
:00407B29 83E3EF                  and ebx, FFFFFFEF
:00407B2C 8D41F4                  lea eax, dword ptr [ecx-0C]
:00407B2F 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00407B32 49                      dec ecx
:00407B33 8908                    mov dword ptr [eax], ecx
:00407B35 7509                    jne 00407B40
:00407B37 50                      push eax
:00407B38 E8C3971D00              call 005E1300
:00407B3D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407B20(C), :00407B35(C)
|
:00407B40 684F010000              push 0000014F
:00407B45 E836971D00              call 005E1280
:00407B4A 83C404                  add esp, 00000004
:00407B4D 89442418                mov dword ptr [esp+18], eax
:00407B51 3BC5                    cmp eax, ebp
:00407B53 C684248800000015        mov byte ptr [esp+00000088], 15
:00407B5B 0F84A6000000            je 00407C07
:00407B61 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00407B67 8D8C2490000000          lea ecx, dword ptr [esp+00000090]
:00407B6E 52                      push edx

* Possible StringData Ref from Data Obj ->"genericGui_cancel"
                                  |
:00407B6F 6834B37800              push 0078B334
:00407B74 E837351E00              call 005EB0B0
:00407B79 80CB80                  or bl, 80
:00407B7C 8D842490000000          lea eax, dword ptr [esp+00000090]
:00407B83 8D4C2420                lea ecx, dword ptr [esp+20]
:00407B87 50                      push eax
:00407B88 80CF01                  or bh, 01
:00407B8B 51                      push ecx
:00407B8C B9B0AF7A00              mov ecx, 007AAFB0
:00407B91 C684249000000016        mov byte ptr [esp+00000090], 16
:00407B99 BF80854000              mov edi, 00408580
:00407B9E 895C2418                mov dword ptr [esp+18], ebx
:00407BA2 E8F91B0000              call 004097A0
:00407BA7 89842494000000          mov dword ptr [esp+00000094], eax
:00407BAE 55                      push ebp
:00407BAF 8D542468                lea edx, dword ptr [esp+68]
:00407BB3 80CF02                  or bh, 02
:00407BB6 57                      push edi
:00407BB7 52                      push edx
:00407BB8 8BCE                    mov ecx, esi
:00407BBA C784249400000017000000  mov dword ptr [esp+00000094], 00000017
:00407BC5 895C241C                mov dword ptr [esp+1C], ebx
:00407BC9 E8F2190000              call 004095C0
:00407BCE 8B8C2494000000          mov ecx, dword ptr [esp+00000094]
:00407BD5 6A01                    push 00000001
:00407BD7 51                      push ecx
:00407BD8 8B4C2420                mov ecx, dword ptr [esp+20]
:00407BDC 8D542430                lea edx, dword ptr [esp+30]
:00407BE0 50                      push eax
:00407BE1 52                      push edx
:00407BE2 56                      push esi
:00407BE3 C784249C00000018000000  mov dword ptr [esp+0000009C], 00000018
:00407BEE C744243CFA000000        mov [esp+3C], 000000FA
:00407BF6 C7442440FF000000        mov [esp+40], 000000FF
:00407BFE E82D4B1800              call 0058C730
:00407C03 33ED                    xor ebp, ebp
:00407C05 EB02                    jmp 00407C09

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407B5B(C)
|
:00407C07 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407C05(U)
|
:00407C09 F6C702                  test bh, 02
:00407C0C 89860A010000            mov dword ptr [esi+0000010A], eax
:00407C12 C78424880000001A000000  mov dword ptr [esp+00000088], 0000001A
:00407C1D 7419                    je 00407C38
:00407C1F 8B4C2464                mov ecx, dword ptr [esp+64]
:00407C23 80E7FD                  and bh, FD
:00407C26 3BCD                    cmp ecx, ebp
:00407C28 895C2410                mov dword ptr [esp+10], ebx
:00407C2C 740A                    je 00407C38
:00407C2E 8D442464                lea eax, dword ptr [esp+64]
:00407C32 50                      push eax
:00407C33 E8E8661F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407C1D(C), :00407C2C(C)
|
:00407C38 F6C701                  test bh, 01
:00407C3B C784248800000019000000  mov dword ptr [esp+00000088], 00000019
:00407C46 741F                    je 00407C67
:00407C48 8B4C2420                mov ecx, dword ptr [esp+20]
:00407C4C 80E7FE                  and bh, FE
:00407C4F 895C2410                mov dword ptr [esp+10], ebx
:00407C53 8D41F4                  lea eax, dword ptr [ecx-0C]
:00407C56 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00407C59 49                      dec ecx
:00407C5A 8908                    mov dword ptr [eax], ecx
:00407C5C 7509                    jne 00407C67
:00407C5E 50                      push eax
:00407C5F E89C961D00              call 005E1300
:00407C64 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407C46(C), :00407C5C(C)
|
:00407C67 F6C380                  test bl, 80
:00407C6A C784248800000002000000  mov dword ptr [esp+00000088], 00000002
:00407C75 741B                    je 00407C92
:00407C77 8B942490000000          mov edx, dword ptr [esp+00000090]
:00407C7E 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00407C81 8D42F4                  lea eax, dword ptr [edx-0C]
:00407C84 49                      dec ecx
:00407C85 8908                    mov dword ptr [eax], ecx
:00407C87 7509                    jne 00407C92
:00407C89 50                      push eax
:00407C8A E871961D00              call 005E1300
:00407C8F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407C75(C), :00407C87(C)
|
:00407C92 8B8C2480000000          mov ecx, dword ptr [esp+00000080]
:00407C99 8BC6                    mov eax, esi
:00407C9B 5F                      pop edi
:00407C9C 5E                      pop esi
:00407C9D 5D                      pop ebp
:00407C9E 64890D00000000          mov dword ptr fs:[00000000], ecx
:00407CA5 5B                      pop ebx
:00407CA6 83C47C                  add esp, 0000007C
:00407CA9 C20800                  ret 0008


:00407CAC 90                      nop
:00407CAD 90                      nop
:00407CAE 90                      nop
:00407CAF 90                      nop

* Referenced by a CALL at Address:
|:00409603   
|
:00407CB0 6AFF                    push FFFFFFFF
:00407CB2 6822F76C00              push 006CF722
:00407CB7 64A100000000            mov eax, dword ptr fs:[00000000]
:00407CBD 50                      push eax
:00407CBE 64892500000000          mov dword ptr fs:[00000000], esp
:00407CC5 83EC0C                  sub esp, 0000000C
:00407CC8 53                      push ebx
:00407CC9 55                      push ebp
:00407CCA 8BE9                    mov ebp, ecx
:00407CCC 56                      push esi
:00407CCD 57                      push edi
:00407CCE 896C2414                mov dword ptr [esp+14], ebp
:00407CD2 C74500948D7000          mov [ebp+00], 00708D94
:00407CD9 C745088C8D7000          mov [ebp+08], 00708D8C
:00407CE0 33DB                    xor ebx, ebx
:00407CE2 895C2424                mov dword ptr [esp+24], ebx
:00407CE6 E8750E0000              call 00408B60
:00407CEB 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00407CF1 33D2                    xor edx, edx
:00407CF3 668B155A987A00          mov dx, word ptr [007A985A]
:00407CFA 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00407D00 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00407D03 668B5006                mov dx, word ptr [eax+06]
:00407D07 663B1558987A00          cmp dx, word ptr [007A9858]
:00407D0E 7418                    je 00407D28
:00407D10 66891D58987A00          mov word ptr [007A9858], bx
:00407D17 66891D5A987A00          mov word ptr [007A985A], bx
:00407D1E 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:00407D24 8B01                    mov eax, dword ptr [ecx]
:00407D26 EB02                    jmp 00407D2A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407D0E(C)
|
:00407D28 8B00                    mov eax, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407D26(U)
|
:00407D2A 8B10                    mov edx, dword ptr [eax]
:00407D2C 8BC8                    mov ecx, eax
:00407D2E FF9250030000            call dword ptr [edx+00000350]
:00407D34 84C0                    test al, al
:00407D36 0F84EA010000            je 00407F26
:00407D3C A154B37A00              mov eax, dword ptr [007AB354]
:00407D41 8B5059                  mov edx, dword ptr [eax+59]
:00407D44 8D4859                  lea ecx, dword ptr [eax+59]
:00407D47 8B405D                  mov eax, dword ptr [eax+5D]
:00407D4A 50                      push eax
:00407D4B 52                      push edx
:00407D4C E88F190000              call 004096E0
:00407D51 8B0D54B37A00            mov ecx, dword ptr [007AB354]
:00407D57 83C165                  add ecx, 00000065
:00407D5A 8B4104                  mov eax, dword ptr [ecx+04]
:00407D5D 8B11                    mov edx, dword ptr [ecx]
:00407D5F 50                      push eax
:00407D60 52                      push edx
:00407D61 E83A190000              call 004096A0
:00407D66 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00407D6C 33D2                    xor edx, edx
:00407D6E 668B155A987A00          mov dx, word ptr [007A985A]
:00407D75 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00407D7B 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00407D7E 668B5006                mov dx, word ptr [eax+06]
:00407D82 663B1558987A00          cmp dx, word ptr [007A9858]
:00407D89 7418                    je 00407DA3
:00407D8B 66891D58987A00          mov word ptr [007A9858], bx
:00407D92 66891D5A987A00          mov word ptr [007A985A], bx
:00407D99 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:00407D9F 8B01                    mov eax, dword ptr [ecx]
:00407DA1 EB02                    jmp 00407DA5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407D89(C)
|
:00407DA3 8B00                    mov eax, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407DA1(U)
|
:00407DA5 8B10                    mov edx, dword ptr [eax]
:00407DA7 8D4C2410                lea ecx, dword ptr [esp+10]
:00407DAB 51                      push ecx
:00407DAC 8BC8                    mov ecx, eax
:00407DAE FF9270050000            call dword ptr [edx+00000570]
:00407DB4 8B442410                mov eax, dword ptr [esp+10]
:00407DB8 C644242401              mov [esp+24], 01
:00407DBD 8B30                    mov esi, dword ptr [eax]
:00407DBF 3BF0                    cmp esi, eax
:00407DC1 0F848A000000            je 00407E51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407E4B(C)
|
:00407DC7 8B15089C7A00            mov edx, dword ptr [007A9C08]
:00407DCD 33C9                    xor ecx, ecx
:00407DCF 668B4E0A                mov cx, word ptr [esi+0A]
:00407DD3 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:00407DD9 668B54C806              mov dx, word ptr [eax+8*ecx+06]
:00407DDE 663B5608                cmp dx, word ptr [esi+08]
:00407DE2 8D0CC8                  lea ecx, dword ptr [eax+8*ecx]
:00407DE5 7417                    je 00407DFE
:00407DE7 66895E08                mov word ptr [esi+08], bx
:00407DEB 66895E0A                mov word ptr [esi+0A], bx
:00407DEF A1089C7A00              mov eax, dword ptr [007A9C08]
:00407DF4 8B80CD050000            mov eax, dword ptr [eax+000005CD]
:00407DFA 8B08                    mov ecx, dword ptr [eax]
:00407DFC EB02                    jmp 00407E00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407DE5(C)
|
:00407DFE 8B09                    mov ecx, dword ptr [ecx]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407DFC(U)
|
:00407E00 33D2                    xor edx, edx
:00407E02 668B560A                mov dx, word ptr [esi+0A]
:00407E06 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00407E09 668B5006                mov dx, word ptr [eax+06]
:00407E0D 663B5608                cmp dx, word ptr [esi+08]
:00407E11 7413                    je 00407E26
:00407E13 66895E08                mov word ptr [esi+08], bx
:00407E17 66895E0A                mov word ptr [esi+0A], bx
:00407E1B A1089C7A00              mov eax, dword ptr [007A9C08]
:00407E20 8B80CD050000            mov eax, dword ptr [eax+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407E11(C)
|
:00407E26 8B11                    mov edx, dword ptr [ecx]
:00407E28 8B38                    mov edi, dword ptr [eax]
:00407E2A FF9254010000            call dword ptr [edx+00000154]
:00407E30 8B0D54B37A00            mov ecx, dword ptr [007AB354]
:00407E36 81C786010000            add edi, 00000186
:00407E3C 50                      push eax
:00407E3D 57                      push edi
:00407E3E E80D5F1C00              call 005CDD50
:00407E43 8B36                    mov esi, dword ptr [esi]
:00407E45 8B442410                mov eax, dword ptr [esp+10]
:00407E49 3BF0                    cmp esi, eax
:00407E4B 0F8576FFFFFF            jne 00407DC7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407DC1(C)
|
:00407E51 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00407E57 33D2                    xor edx, edx
:00407E59 668B155A987A00          mov dx, word ptr [007A985A]
:00407E60 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00407E66 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00407E69 668B5006                mov dx, word ptr [eax+06]
:00407E6D 663B1558987A00          cmp dx, word ptr [007A9858]
:00407E74 7414                    je 00407E8A
:00407E76 66891D58987A00          mov word ptr [007A9858], bx
:00407E7D 66891D5A987A00          mov word ptr [007A985A], bx
:00407E84 8B81CD050000            mov eax, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407E74(C)
|
:00407E8A 8B08                    mov ecx, dword ptr [eax]
:00407E8C 8D542418                lea edx, dword ptr [esp+18]
:00407E90 52                      push edx
:00407E91 8B01                    mov eax, dword ptr [ecx]
:00407E93 FF9074050000            call dword ptr [eax+00000574]
:00407E99 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00407E9F 33D2                    xor edx, edx
:00407EA1 668B5002                mov dx, word ptr [eax+02]
:00407EA5 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:00407EAB 8D0CD1                  lea ecx, dword ptr [ecx+8*edx]
:00407EAE 668B5106                mov dx, word ptr [ecx+06]
:00407EB2 663B10                  cmp dx, word ptr [eax]
:00407EB5 7416                    je 00407ECD
:00407EB7 668918                  mov word ptr [eax], bx
:00407EBA 66895802                mov word ptr [eax+02], bx
:00407EBE A1089C7A00              mov eax, dword ptr [007A9C08]
:00407EC3 8B80CD050000            mov eax, dword ptr [eax+000005CD]
:00407EC9 8B08                    mov ecx, dword ptr [eax]
:00407ECB EB02                    jmp 00407ECF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407EB5(C)
|
:00407ECD 8B09                    mov ecx, dword ptr [ecx]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407ECB(U)
|
:00407ECF 8B11                    mov edx, dword ptr [ecx]
:00407ED1 FF5228                  call [edx+28]
:00407ED4 51                      push ecx
:00407ED5 668B8DF6000000          mov cx, word ptr [ebp+000000F6]
:00407EDC 8BC4                    mov eax, esp
:00407EDE 8964241C                mov dword ptr [esp+1C], esp
:00407EE2 668908                  mov word ptr [eax], cx
:00407EE5 668B95F8000000          mov dx, word ptr [ebp+000000F8]
:00407EEC B958987A00              mov ecx, 007A9858
:00407EF1 66895002                mov word ptr [eax+02], dx
:00407EF5 E856190000              call 00409850
:00407EFA 8B10                    mov edx, dword ptr [eax]
:00407EFC 8BC8                    mov ecx, eax
:00407EFE FF9278050000            call dword ptr [edx+00000578]
:00407F04 8D4C2410                lea ecx, dword ptr [esp+10]
:00407F08 C644242402              mov [esp+24], 02
:00407F0D E8AE180000              call 004097C0
:00407F12 8B442410                mov eax, dword ptr [esp+10]
:00407F16 6A01                    push 00000001
:00407F18 50                      push eax
:00407F19 8D4C2418                lea ecx, dword ptr [esp+18]
:00407F1D E83E180000              call 00409760
:00407F22 885C2424                mov byte ptr [esp+24], bl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407D36(C)
|
:00407F26 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00407F2C 33D2                    xor edx, edx
:00407F2E 668B155E987A00          mov dx, word ptr [007A985E]
:00407F35 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00407F3B 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00407F3E 668B5006                mov dx, word ptr [eax+06]
:00407F42 663B155C987A00          cmp dx, word ptr [007A985C]
:00407F49 7414                    je 00407F5F
:00407F4B 66891D5C987A00          mov word ptr [007A985C], bx
:00407F52 66891D5E987A00          mov word ptr [007A985E], bx
:00407F59 8B81CD050000            mov eax, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407F49(C)
|
:00407F5F 8B08                    mov ecx, dword ptr [eax]
:00407F61 8D542418                lea edx, dword ptr [esp+18]
:00407F65 52                      push edx
:00407F66 8B01                    mov eax, dword ptr [ecx]
:00407F68 FF907C050000            call dword ptr [eax+0000057C]
:00407F6E 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00407F74 33D2                    xor edx, edx
:00407F76 668B5002                mov dx, word ptr [eax+02]
:00407F7A 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:00407F80 8D0CD1                  lea ecx, dword ptr [ecx+8*edx]
:00407F83 668B5106                mov dx, word ptr [ecx+06]
:00407F87 663B10                  cmp dx, word ptr [eax]
:00407F8A 7416                    je 00407FA2
:00407F8C 668918                  mov word ptr [eax], bx
:00407F8F 66895802                mov word ptr [eax+02], bx
:00407F93 A1089C7A00              mov eax, dword ptr [007A9C08]
:00407F98 8B80CD050000            mov eax, dword ptr [eax+000005CD]
:00407F9E 8B08                    mov ecx, dword ptr [eax]
:00407FA0 EB02                    jmp 00407FA4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407F8A(C)
|
:00407FA2 8B09                    mov ecx, dword ptr [ecx]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407FA0(U)
|
:00407FA4 8B11                    mov edx, dword ptr [ecx]
:00407FA6 FF5228                  call [edx+28]
:00407FA9 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00407FAF 33D2                    xor edx, edx
:00407FB1 668B155A987A00          mov dx, word ptr [007A985A]
:00407FB8 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00407FBE 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00407FC1 668B5006                mov dx, word ptr [eax+06]
:00407FC5 663B1558987A00          cmp dx, word ptr [007A9858]
:00407FCC 7414                    je 00407FE2
:00407FCE 66891D58987A00          mov word ptr [007A9858], bx
:00407FD5 66891D5A987A00          mov word ptr [007A985A], bx
:00407FDC 8B81CD050000            mov eax, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407FCC(C)
|
:00407FE2 8B08                    mov ecx, dword ptr [eax]
:00407FE4 8D542418                lea edx, dword ptr [esp+18]
:00407FE8 52                      push edx
:00407FE9 8B01                    mov eax, dword ptr [ecx]
:00407FEB FF907C050000            call dword ptr [eax+0000057C]
:00407FF1 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00407FF7 33D2                    xor edx, edx
:00407FF9 668B5002                mov dx, word ptr [eax+02]
:00407FFD 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:00408003 8D0CD1                  lea ecx, dword ptr [ecx+8*edx]
:00408006 668B5106                mov dx, word ptr [ecx+06]
:0040800A 663B10                  cmp dx, word ptr [eax]
:0040800D 7416                    je 00408025
:0040800F 668918                  mov word ptr [eax], bx
:00408012 66895802                mov word ptr [eax+02], bx
:00408016 A1089C7A00              mov eax, dword ptr [007A9C08]
:0040801B 8B80CD050000            mov eax, dword ptr [eax+000005CD]
:00408021 8B08                    mov ecx, dword ptr [eax]
:00408023 EB02                    jmp 00408027

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040800D(C)
|
:00408025 8B09                    mov ecx, dword ptr [ecx]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408023(U)
|
:00408027 8B11                    mov edx, dword ptr [ecx]
:00408029 FF5228                  call [edx+28]
:0040802C 66891D5C987A00          mov word ptr [007A985C], bx
:00408033 66891D5E987A00          mov word ptr [007A985E], bx
:0040803A 66891D58987A00          mov word ptr [007A9858], bx
:00408041 66891D5A987A00          mov word ptr [007A985A], bx
:00408048 66891D50987A00          mov word ptr [007A9850], bx
:0040804F 66891D52987A00          mov word ptr [007A9852], bx
:00408056 8B8DF2000000            mov ecx, dword ptr [ebp+000000F2]
:0040805C C744242403000000        mov [esp+24], 00000003
:00408064 3BCB                    cmp ecx, ebx
:00408066 7405                    je 0040806D
:00408068 8B01                    mov eax, dword ptr [ecx]
:0040806A FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408066(C)
|
:0040806D 8BCD                    mov ecx, ebp
:0040806F C7442424FFFFFFFF        mov [esp+24], FFFFFFFF
:00408077 E864491F00              call 005FC9E0
:0040807C 8B4C241C                mov ecx, dword ptr [esp+1C]
:00408080 5F                      pop edi
:00408081 5E                      pop esi
:00408082 5D                      pop ebp
:00408083 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040808A 5B                      pop ebx
:0040808B 83C418                  add esp, 00000018
:0040808E C3                      ret


:0040808F 90                      nop
:00408090 51                      push ecx
:00408091 66A152987A00            mov ax, word ptr [007A9852]
:00408097 53                      push ebx
:00408098 8BD9                    mov ebx, ecx
:0040809A 55                      push ebp
:0040809B 33C9                    xor ecx, ecx
:0040809D 56                      push esi
:0040809E 668BC8                  mov cx, ax
:004080A1 57                      push edi
:004080A2 8BD1                    mov edx, ecx
:004080A4 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:004080AA 33FF                    xor edi, edi
:004080AC 8BB1CD050000            mov esi, dword ptr [ecx+000005CD]
:004080B2 668B54D606              mov dx, word ptr [esi+8*edx+06]
:004080B7 663B1550987A00          cmp dx, word ptr [007A9850]
:004080BE 7544                    jne 00408104
:004080C0 663BC7                  cmp ax, di
:004080C3 743F                    je 00408104
:004080C5 6AFF                    push FFFFFFFF
:004080C7 51                      push ecx
:004080C8 8BCC                    mov ecx, esp
:004080CA 6850987A00              push 007A9850
:004080CF E85C170000              call 00409830
:004080D4 51                      push ecx
:004080D5 8BCC                    mov ecx, esp
:004080D7 685C987A00              push 007A985C
:004080DC E84F170000              call 00409830
:004080E1 8B83B4000000            mov eax, dword ptr [ebx+000000B4]
:004080E7 50                      push eax
:004080E8 E8F30F0000              call 004090E0
:004080ED 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:004080F3 83C410                  add esp, 00000010
:004080F6 66893D50987A00          mov word ptr [007A9850], di
:004080FD 66893D52987A00          mov word ptr [007A9852], di

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004080BE(C), :004080C3(C)
|
:00408104 668B355E987A00          mov si, word ptr [007A985E]
:0040810B 8BA9CD050000            mov ebp, dword ptr [ecx+000005CD]
:00408111 668B155C987A00          mov dx, word ptr [007A985C]
:00408118 33C0                    xor eax, eax
:0040811A 668BC6                  mov ax, si
:0040811D C1E003                  shl eax, 03
:00408120 6639542806              cmp word ptr [eax+ebp+06], dx
:00408125 0F8516010000            jne 00408241
:0040812B 663BF7                  cmp si, di
:0040812E 0F840D010000            je 00408241
:00408134 03C5                    add eax, ebp
:00408136 66395006                cmp word ptr [eax+06], dx
:0040813A 7418                    je 00408154
:0040813C 66893D5C987A00          mov word ptr [007A985C], di
:00408143 66893D5E987A00          mov word ptr [007A985E], di
:0040814A 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:00408150 8B09                    mov ecx, dword ptr [ecx]
:00408152 EB02                    jmp 00408156

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040813A(C)
|
:00408154 8B08                    mov ecx, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408152(U)
|
:00408156 8B11                    mov edx, dword ptr [ecx]
:00408158 8D442410                lea eax, dword ptr [esp+10]
:0040815C 50                      push eax
:0040815D FF927C050000            call dword ptr [edx+0000057C]
:00408163 668B5002                mov dx, word ptr [eax+02]
:00408167 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040816D 8BF2                    mov esi, edx
:0040816F 8BA9CD050000            mov ebp, dword ptr [ecx+000005CD]
:00408175 81E6FFFF0000            and esi, 0000FFFF
:0040817B 668B74F506              mov si, word ptr [ebp+8*esi+06]
:00408180 663B30                  cmp si, word ptr [eax]
:00408183 0F85B8000000            jne 00408241
:00408189 663BD7                  cmp dx, di
:0040818C 0F84AF000000            je 00408241
:00408192 668B355A987A00          mov si, word ptr [007A985A]
:00408199 668B1558987A00          mov dx, word ptr [007A9858]
:004081A0 33C0                    xor eax, eax
:004081A2 668BC6                  mov ax, si
:004081A5 C1E003                  shl eax, 03
:004081A8 6639542806              cmp word ptr [eax+ebp+06], dx
:004081AD 0F858E000000            jne 00408241
:004081B3 663BF7                  cmp si, di
:004081B6 0F8485000000            je 00408241
:004081BC 03C5                    add eax, ebp
:004081BE 66395006                cmp word ptr [eax+06], dx
:004081C2 7418                    je 004081DC
:004081C4 66893D58987A00          mov word ptr [007A9858], di
:004081CB 66893D5A987A00          mov word ptr [007A985A], di
:004081D2 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:004081D8 8B09                    mov ecx, dword ptr [ecx]
:004081DA EB02                    jmp 004081DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004081C2(C)
|
:004081DC 8B08                    mov ecx, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004081DA(U)
|
:004081DE 8B11                    mov edx, dword ptr [ecx]
:004081E0 8D442410                lea eax, dword ptr [esp+10]
:004081E4 50                      push eax
:004081E5 FF927C050000            call dword ptr [edx+0000057C]
:004081EB 668B4802                mov cx, word ptr [eax+02]
:004081EF 8B35089C7A00            mov esi, dword ptr [007A9C08]
:004081F5 8BD1                    mov edx, ecx
:004081F7 8BB6CD050000            mov esi, dword ptr [esi+000005CD]
:004081FD 81E2FFFF0000            and edx, 0000FFFF
:00408203 668B54D606              mov dx, word ptr [esi+8*edx+06]
:00408208 663B10                  cmp dx, word ptr [eax]
:0040820B 7534                    jne 00408241
:0040820D 663BCF                  cmp cx, di
:00408210 742F                    je 00408241
:00408212 8B83FE000000            mov eax, dword ptr [ebx+000000FE]
:00408218 8B8BFA000000            mov ecx, dword ptr [ebx+000000FA]
:0040821E 8B913F010000            mov edx, dword ptr [ecx+0000013F]
:00408224 8BB03F010000            mov esi, dword ptr [eax+0000013F]
:0040822A 8B8B06010000            mov ecx, dword ptr [ebx+00000106]
:00408230 3BD6                    cmp edx, esi
:00408232 0F9DC0                  setnl al
:00408235 50                      push eax
:00408236 E8056C1F00              call 005FEE40
:0040823B 5F                      pop edi
:0040823C 5E                      pop esi
:0040823D 5D                      pop ebp
:0040823E 5B                      pop ebx
:0040823F 59                      pop ecx
:00408240 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408125(C), :0040812E(C), :00408183(C), :0040818C(C), :004081AD(C)
|:004081B6(C), :0040820B(C), :00408210(C)
|
:00408241 8B0DCC997A00            mov ecx, dword ptr [007A99CC]
:00408247 3BCF                    cmp ecx, edi
:00408249 7406                    je 00408251
:0040824B 57                      push edi
:0040824C E84F550100              call 0041D7A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408249(C)
|
:00408251 5F                      pop edi
:00408252 5E                      pop esi
:00408253 5D                      pop ebp
:00408254 5B                      pop ebx
:00408255 59                      pop ecx
:00408256 C3                      ret


:00408257 90                      nop
:00408258 90                      nop
:00408259 90                      nop
:0040825A 90                      nop
:0040825B 90                      nop
:0040825C 90                      nop
:0040825D 90                      nop
:0040825E 90                      nop
:0040825F 90                      nop
:00408260 83EC10                  sub esp, 00000010
:00408263 53                      push ebx
:00408264 55                      push ebp
:00408265 8B6C241C                mov ebp, dword ptr [esp+1C]
:00408269 56                      push esi
:0040826A 57                      push edi
:0040826B 8BF9                    mov edi, ecx
:0040826D 8B4504                  mov eax, dword ptr [ebp+04]
:00408270 8B15089C7A00            mov edx, dword ptr [007A9C08]
:00408276 8B8FFE000000            mov ecx, dword ptr [edi+000000FE]
:0040827C 053B010000              add eax, 0000013B
:00408281 81C13A010000            add ecx, 0000013A
:00408287 668B18                  mov bx, word ptr [eax]
:0040828A 66895C2410              mov word ptr [esp+10], bx
:0040828F 668B4002                mov ax, word ptr [eax+02]
:00408293 6689442412              mov word ptr [esp+12], ax
:00408298 668B31                  mov si, word ptr [ecx]
:0040829B 668B4902                mov cx, word ptr [ecx+02]
:0040829F 8B92CD050000            mov edx, dword ptr [edx+000005CD]
:004082A5 66894C241A              mov word ptr [esp+1A], cx
:004082AA 8B44241A                mov eax, dword ptr [esp+1A]
:004082AE 25FFFF0000              and eax, 0000FFFF
:004082B3 663974C206              cmp word ptr [edx+8*eax+06], si
:004082B8 0F8581000000            jne 0040833F
:004082BE 33C0                    xor eax, eax
:004082C0 663BC8                  cmp cx, ax
:004082C3 747A                    je 0040833F
:004082C5 8B4C2412                mov ecx, dword ptr [esp+12]
:004082C9 81E1FFFF0000            and ecx, 0000FFFF
:004082CF 66395CCA06              cmp word ptr [edx+8*ecx+06], bx
:004082D4 8D0CCA                  lea ecx, dword ptr [edx+8*ecx]
:004082D7 7566                    jne 0040833F
:004082D9 6639442412              cmp word ptr [esp+12], ax
:004082DE 745F                    je 0040833F
:004082E0 807D0802                cmp byte ptr [ebp+08], 02
:004082E4 7559                    jne 0040833F
:004082E6 384509                  cmp byte ptr [ebp+09], al
:004082E9 7554                    jne 0040833F
:004082EB 66395906                cmp word ptr [ecx+06], bx
:004082EF 741A                    je 0040830B
:004082F1 8B15089C7A00            mov edx, dword ptr [007A9C08]
:004082F7 6689442410              mov word ptr [esp+10], ax
:004082FC 6689442412              mov word ptr [esp+12], ax
:00408301 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:00408307 8B08                    mov ecx, dword ptr [eax]
:00408309 EB02                    jmp 0040830D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004082EF(C)
|
:0040830B 8B09                    mov ecx, dword ptr [ecx]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408309(U)
|
:0040830D 8B11                    mov edx, dword ptr [ecx]
:0040830F FF9254010000            call dword ptr [edx+00000154]
:00408315 50                      push eax
:00408316 51                      push ecx
:00408317 8D442418                lea eax, dword ptr [esp+18]
:0040831B 8BCC                    mov ecx, esp
:0040831D 50                      push eax
:0040831E E80D150000              call 00409830
:00408323 51                      push ecx
:00408324 8BCC                    mov ecx, esp
:00408326 685C987A00              push 007A985C
:0040832B E800150000              call 00409830
:00408330 8B8FB4000000            mov ecx, dword ptr [edi+000000B4]
:00408336 51                      push ecx
:00408337 E8940F0000              call 004092D0
:0040833C 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004082B8(C), :004082C3(C), :004082D7(C), :004082DE(C), :004082E4(C)
|:004082E9(C)
|
:0040833F 5F                      pop edi
:00408340 5E                      pop esi
:00408341 5D                      pop ebp
:00408342 5B                      pop ebx
:00408343 83C410                  add esp, 00000010
:00408346 C20400                  ret 0004


:00408349 90                      nop
:0040834A 90                      nop
:0040834B 90                      nop
:0040834C 90                      nop
:0040834D 90                      nop
:0040834E 90                      nop
:0040834F 90                      nop
:00408350 8B542404                mov edx, dword ptr [esp+04]
:00408354 56                      push esi
:00408355 8BF1                    mov esi, ecx
:00408357 8B4204                  mov eax, dword ptr [edx+04]
:0040835A 053B010000              add eax, 0000013B
:0040835F 668B08                  mov cx, word ptr [eax]
:00408362 66894C2408              mov word ptr [esp+08], cx
:00408367 668B4002                mov ax, word ptr [eax+02]
:0040836B B990984000              mov ecx, 00409890
:00408370 668944240A              mov word ptr [esp+0A], ax
:00408375 85C9                    test ecx, ecx
:00408377 744B                    je 004083C4
:00408379 A1CC997A00              mov eax, dword ptr [007A99CC]
:0040837E 85C0                    test eax, eax
:00408380 7442                    je 004083C4
:00408382 8B8806010000            mov ecx, dword ptr [eax+00000106]
:00408388 85C9                    test ecx, ecx
:0040838A 7438                    je 004083C4
:0040838C 8B5208                  mov edx, dword ptr [edx+08]
:0040838F 52                      push edx
:00408390 E8CB541F00              call 005FD860
:00408395 84C0                    test al, al
:00408397 742B                    je 004083C4
:00408399 6AFF                    push FFFFFFFF
:0040839B 51                      push ecx
:0040839C 8D442410                lea eax, dword ptr [esp+10]
:004083A0 8BCC                    mov ecx, esp
:004083A2 50                      push eax
:004083A3 E888140000              call 00409830
:004083A8 51                      push ecx
:004083A9 8BCC                    mov ecx, esp
:004083AB 685C987A00              push 007A985C
:004083B0 E87B140000              call 00409830
:004083B5 8B8EB4000000            mov ecx, dword ptr [esi+000000B4]
:004083BB 51                      push ecx
:004083BC E80F0F0000              call 004092D0
:004083C1 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408377(C), :00408380(C), :0040838A(C), :00408397(C)
|
:004083C4 5E                      pop esi
:004083C5 C20400                  ret 0004


:004083C8 90                      nop
:004083C9 90                      nop
:004083CA 90                      nop
:004083CB 90                      nop
:004083CC 90                      nop
:004083CD 90                      nop
:004083CE 90                      nop
:004083CF 90                      nop
:004083D0 83EC10                  sub esp, 00000010
:004083D3 53                      push ebx
:004083D4 55                      push ebp
:004083D5 8B6C241C                mov ebp, dword ptr [esp+1C]
:004083D9 56                      push esi
:004083DA 57                      push edi
:004083DB 8BF9                    mov edi, ecx
:004083DD 8B4504                  mov eax, dword ptr [ebp+04]
:004083E0 8B15089C7A00            mov edx, dword ptr [007A9C08]
:004083E6 8B8FFE000000            mov ecx, dword ptr [edi+000000FE]
:004083EC 053B010000              add eax, 0000013B
:004083F1 81C13A010000            add ecx, 0000013A
:004083F7 668B18                  mov bx, word ptr [eax]
:004083FA 66895C2410              mov word ptr [esp+10], bx
:004083FF 668B4002                mov ax, word ptr [eax+02]
:00408403 6689442412              mov word ptr [esp+12], ax
:00408408 668B31                  mov si, word ptr [ecx]
:0040840B 668B4902                mov cx, word ptr [ecx+02]
:0040840F 8B92CD050000            mov edx, dword ptr [edx+000005CD]
:00408415 66894C241A              mov word ptr [esp+1A], cx
:0040841A 8B44241A                mov eax, dword ptr [esp+1A]
:0040841E 25FFFF0000              and eax, 0000FFFF
:00408423 663974C206              cmp word ptr [edx+8*eax+06], si
:00408428 0F8581000000            jne 004084AF
:0040842E 33C0                    xor eax, eax
:00408430 663BC8                  cmp cx, ax
:00408433 747A                    je 004084AF
:00408435 8B4C2412                mov ecx, dword ptr [esp+12]
:00408439 81E1FFFF0000            and ecx, 0000FFFF
:0040843F 66395CCA06              cmp word ptr [edx+8*ecx+06], bx
:00408444 8D0CCA                  lea ecx, dword ptr [edx+8*ecx]
:00408447 7566                    jne 004084AF
:00408449 6639442412              cmp word ptr [esp+12], ax
:0040844E 745F                    je 004084AF
:00408450 807D0802                cmp byte ptr [ebp+08], 02
:00408454 7559                    jne 004084AF
:00408456 384509                  cmp byte ptr [ebp+09], al
:00408459 7554                    jne 004084AF
:0040845B 66395906                cmp word ptr [ecx+06], bx
:0040845F 741A                    je 0040847B
:00408461 8B15089C7A00            mov edx, dword ptr [007A9C08]
:00408467 6689442410              mov word ptr [esp+10], ax
:0040846C 6689442412              mov word ptr [esp+12], ax
:00408471 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:00408477 8B08                    mov ecx, dword ptr [eax]
:00408479 EB02                    jmp 0040847D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040845F(C)
|
:0040847B 8B09                    mov ecx, dword ptr [ecx]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408479(U)
|
:0040847D 8B11                    mov edx, dword ptr [ecx]
:0040847F FF9254010000            call dword ptr [edx+00000154]
:00408485 50                      push eax
:00408486 51                      push ecx
:00408487 8D442418                lea eax, dword ptr [esp+18]
:0040848B 8BCC                    mov ecx, esp
:0040848D 50                      push eax
:0040848E E89D130000              call 00409830
:00408493 51                      push ecx
:00408494 8BCC                    mov ecx, esp
:00408496 6858987A00              push 007A9858
:0040849B E890130000              call 00409830
:004084A0 8B8FB4000000            mov ecx, dword ptr [edi+000000B4]
:004084A6 51                      push ecx
:004084A7 E8240E0000              call 004092D0
:004084AC 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408428(C), :00408433(C), :00408447(C), :0040844E(C), :00408454(C)
|:00408459(C)
|
:004084AF 5F                      pop edi
:004084B0 5E                      pop esi
:004084B1 5D                      pop ebp
:004084B2 5B                      pop ebx
:004084B3 83C410                  add esp, 00000010
:004084B6 C20400                  ret 0004


:004084B9 90                      nop
:004084BA 90                      nop
:004084BB 90                      nop
:004084BC 90                      nop
:004084BD 90                      nop
:004084BE 90                      nop
:004084BF 90                      nop
:004084C0 8B542404                mov edx, dword ptr [esp+04]
:004084C4 56                      push esi
:004084C5 8BF1                    mov esi, ecx
:004084C7 8B4204                  mov eax, dword ptr [edx+04]
:004084CA 053B010000              add eax, 0000013B
:004084CF 668B08                  mov cx, word ptr [eax]
:004084D2 66894C2408              mov word ptr [esp+08], cx
:004084D7 668B4002                mov ax, word ptr [eax+02]
:004084DB B990984000              mov ecx, 00409890
:004084E0 668944240A              mov word ptr [esp+0A], ax
:004084E5 85C9                    test ecx, ecx
:004084E7 744B                    je 00408534
:004084E9 A1CC997A00              mov eax, dword ptr [007A99CC]
:004084EE 85C0                    test eax, eax
:004084F0 7442                    je 00408534
:004084F2 8B8812010000            mov ecx, dword ptr [eax+00000112]
:004084F8 85C9                    test ecx, ecx
:004084FA 7438                    je 00408534
:004084FC 8B5208                  mov edx, dword ptr [edx+08]
:004084FF 52                      push edx
:00408500 E85B531F00              call 005FD860
:00408505 84C0                    test al, al
:00408507 742B                    je 00408534
:00408509 6AFF                    push FFFFFFFF
:0040850B 51                      push ecx
:0040850C 8D442410                lea eax, dword ptr [esp+10]
:00408510 8BCC                    mov ecx, esp
:00408512 50                      push eax
:00408513 E818130000              call 00409830
:00408518 51                      push ecx
:00408519 8BCC                    mov ecx, esp
:0040851B 6858987A00              push 007A9858
:00408520 E80B130000              call 00409830
:00408525 8B8EB4000000            mov ecx, dword ptr [esi+000000B4]
:0040852B 51                      push ecx
:0040852C E89F0D0000              call 004092D0
:00408531 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004084E7(C), :004084F0(C), :004084FA(C), :00408507(C)
|
:00408534 5E                      pop esi
:00408535 C20400                  ret 0004


:00408538 90                      nop
:00408539 90                      nop
:0040853A 90                      nop
:0040853B 90                      nop
:0040853C 90                      nop
:0040853D 90                      nop
:0040853E 90                      nop
:0040853F 90                      nop
:00408540 8B0DCC997A00            mov ecx, dword ptr [007A99CC]
:00408546 85C9                    test ecx, ecx
:00408548 7407                    je 00408551
:0040854A 6A00                    push 00000000
:0040854C E84F520100              call 0041D7A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408548(C)
|
:00408551 C20400                  ret 0004
:00408554 90                      nop
:00408555 90                      nop
:00408556 90                      nop
:00408557 90                      nop
:00408558 90                      nop
:00408559 90                      nop
:0040855A 90                      nop
:0040855B 90                      nop
:0040855C 90                      nop
:0040855D 90                      nop
:0040855E 90                      nop
:0040855F 90                      nop
:00408560 E83B000000              call 004085A0
:00408565 8B0DCC997A00            mov ecx, dword ptr [007A99CC]
:0040856B 85C9                    test ecx, ecx
:0040856D 7407                    je 00408576
:0040856F 6A00                    push 00000000
:00408571 E82A520100              call 0041D7A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040856D(C)
|
:00408576 C20400                  ret 0004
:00408579 90                      nop
:0040857A 90                      nop
:0040857B 90                      nop
:0040857C 90                      nop
:0040857D 90                      nop
:0040857E 90                      nop
:0040857F 90                      nop
:00408580 8B0DCC997A00            mov ecx, dword ptr [007A99CC]
:00408586 85C9                    test ecx, ecx
:00408588 7407                    je 00408591
:0040858A 6A00                    push 00000000
:0040858C E80F520100              call 0041D7A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408588(C)
|
:00408591 C20400                  ret 0004
:00408594 90                      nop
:00408595 90                      nop
:00408596 90                      nop
:00408597 90                      nop
:00408598 90                      nop
:00408599 90                      nop
:0040859A 90                      nop
:0040859B 90                      nop
:0040859C 90                      nop
:0040859D 90                      nop
:0040859E 90                      nop
:0040859F 90                      nop

* Referenced by a CALL at Address:
|:00408560   
|
:004085A0 64A100000000            mov eax, dword ptr fs:[00000000]
:004085A6 6AFF                    push FFFFFFFF
:004085A8 686CF76C00              push 006CF76C
:004085AD 50                      push eax
:004085AE 64892500000000          mov dword ptr fs:[00000000], esp
:004085B5 8B15089C7A00            mov edx, dword ptr [007A9C08]
:004085BB 83EC60                  sub esp, 00000060
:004085BE 33C0                    xor eax, eax
:004085C0 8B8ACD050000            mov ecx, dword ptr [edx+000005CD]
:004085C6 53                      push ebx
:004085C7 55                      push ebp
:004085C8 56                      push esi
:004085C9 668B355E987A00          mov si, word ptr [007A985E]
:004085D0 668BC6                  mov ax, si
:004085D3 57                      push edi
:004085D4 668B3D5C987A00          mov di, word ptr [007A985C]
:004085DB C1E003                  shl eax, 03
:004085DE 66397C0806              cmp word ptr [eax+ecx+06], di
:004085E3 0F8563050000            jne 00408B4C
:004085E9 33ED                    xor ebp, ebp
:004085EB 663BF5                  cmp si, bp
:004085EE 0F8458050000            je 00408B4C
:004085F4 668B355A987A00          mov si, word ptr [007A985A]
:004085FB 33DB                    xor ebx, ebx
:004085FD 668BDE                  mov bx, si
:00408600 8D0CD9                  lea ecx, dword ptr [ecx+8*ebx]
:00408603 668B4906                mov cx, word ptr [ecx+06]
:00408607 663B0D58987A00          cmp cx, word ptr [007A9858]
:0040860E 0F8538050000            jne 00408B4C
:00408614 663BF5                  cmp si, bp
:00408617 0F842F050000            je 00408B4C
:0040861D 8B8ACD050000            mov ecx, dword ptr [edx+000005CD]
:00408623 66397C0806              cmp word ptr [eax+ecx+06], di
:00408628 7418                    je 00408642
:0040862A 66892D5C987A00          mov word ptr [007A985C], bp
:00408631 66892D5E987A00          mov word ptr [007A985E], bp
:00408638 8B92CD050000            mov edx, dword ptr [edx+000005CD]
:0040863E 8B02                    mov eax, dword ptr [edx]
:00408640 EB03                    jmp 00408645

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408628(C)
|
:00408642 8B0408                  mov eax, dword ptr [eax+ecx]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408640(U)
|
:00408645 8B10                    mov edx, dword ptr [eax]
:00408647 8D4C2428                lea ecx, dword ptr [esp+28]
:0040864B 51                      push ecx
:0040864C 8BC8                    mov ecx, eax
:0040864E FF927C050000            call dword ptr [edx+0000057C]
:00408654 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040865A 33D2                    xor edx, edx
:0040865C 668B155A987A00          mov dx, word ptr [007A985A]
:00408663 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00408669 8D04D0                  lea eax, dword ptr [eax+8*edx]
:0040866C 668B5006                mov dx, word ptr [eax+06]
:00408670 663B1558987A00          cmp dx, word ptr [007A9858]
:00408677 7414                    je 0040868D
:00408679 66892D58987A00          mov word ptr [007A9858], bp
:00408680 66892D5A987A00          mov word ptr [007A985A], bp
:00408687 8B81CD050000            mov eax, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408677(C)
|
:0040868D 8B08                    mov ecx, dword ptr [eax]
:0040868F 8D542430                lea edx, dword ptr [esp+30]
:00408693 52                      push edx
:00408694 8B01                    mov eax, dword ptr [ecx]
:00408696 FF907C050000            call dword ptr [eax+0000057C]
:0040869C 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:004086A2 8B54242A                mov edx, dword ptr [esp+2A]
:004086A6 81E2FFFF0000            and edx, 0000FFFF
:004086AC 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:004086B2 8D04D0                  lea eax, dword ptr [eax+8*edx]
:004086B5 668B5006                mov dx, word ptr [eax+06]
:004086B9 663B542428              cmp dx, word ptr [esp+28]
:004086BE 7414                    je 004086D4
:004086C0 66896C2428              mov word ptr [esp+28], bp
:004086C5 66896C242A              mov word ptr [esp+2A], bp
:004086CA 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:004086D0 8B09                    mov ecx, dword ptr [ecx]
:004086D2 EB02                    jmp 004086D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004086BE(C)
|
:004086D4 8B08                    mov ecx, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004086D2(U)
|
:004086D6 8B01                    mov eax, dword ptr [ecx]
:004086D8 8D542414                lea edx, dword ptr [esp+14]
:004086DC 52                      push edx
:004086DD FF9070050000            call dword ptr [eax+00000570]
:004086E3 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:004086E9 8B542432                mov edx, dword ptr [esp+32]
:004086ED 81E2FFFF0000            and edx, 0000FFFF
:004086F3 896C2478                mov dword ptr [esp+78], ebp
:004086F7 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:004086FD 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00408700 668B5006                mov dx, word ptr [eax+06]
:00408704 663B542430              cmp dx, word ptr [esp+30]
:00408709 7414                    je 0040871F
:0040870B 66896C2430              mov word ptr [esp+30], bp
:00408710 66896C2432              mov word ptr [esp+32], bp
:00408715 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:0040871B 8B09                    mov ecx, dword ptr [ecx]
:0040871D EB02                    jmp 00408721

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408709(C)
|
:0040871F 8B08                    mov ecx, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040871D(U)
|
:00408721 8B01                    mov eax, dword ptr [ecx]
:00408723 8D542418                lea edx, dword ptr [esp+18]
:00408727 52                      push edx
:00408728 FF9070050000            call dword ptr [eax+00000570]
:0040872E 8B4C2414                mov ecx, dword ptr [esp+14]
:00408732 C644247801              mov [esp+78], 01
:00408737 8B01                    mov eax, dword ptr [ecx]
:00408739 3BC1                    cmp eax, ecx
:0040873B 89442410                mov dword ptr [esp+10], eax
:0040873F 0F84B5010000            je 004088FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004088F4(C)
|
:00408745 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040874B 66896C2420              mov word ptr [esp+20], bp
:00408750 66896C2422              mov word ptr [esp+22], bp
:00408755 33F6                    xor esi, esi
:00408757 8B91CD050000            mov edx, dword ptr [ecx+000005CD]
:0040875D 668B700A                mov si, word ptr [eax+0A]
:00408761 8D480A                  lea ecx, dword ptr [eax+0A]
:00408764 8D14F2                  lea edx, dword ptr [edx+8*esi]
:00408767 668B7206                mov si, word ptr [edx+06]
:0040876B 663B7008                cmp si, word ptr [eax+08]
:0040876F 7417                    je 00408788
:00408771 66896808                mov word ptr [eax+08], bp
:00408775 668929                  mov word ptr [ecx], bp
:00408778 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040877E 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:00408784 8B08                    mov ecx, dword ptr [eax]
:00408786 EB02                    jmp 0040878A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040876F(C)
|
:00408788 8B0A                    mov ecx, dword ptr [edx]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408786(U)
|
:0040878A 8B01                    mov eax, dword ptr [ecx]
:0040878C FF9054010000            call dword ptr [eax+00000154]
:00408792 8D4C2428                lea ecx, dword ptr [esp+28]
:00408796 8BF8                    mov edi, eax
:00408798 E8B3100000              call 00409850
:0040879D 8D4C2420                lea ecx, dword ptr [esp+20]
:004087A1 8BF0                    mov esi, eax
:004087A3 57                      push edi
:004087A4 51                      push ecx
:004087A5 8B1E                    mov ebx, dword ptr [esi]
:004087A7 8D4C2418                lea ecx, dword ptr [esp+18]
:004087AB E8E00E0000              call 00409690
:004087B0 51                      push ecx
:004087B1 8BCC                    mov ecx, esp
:004087B3 89642428                mov dword ptr [esp+28], esp
:004087B7 50                      push eax
:004087B8 E873100000              call 00409830
:004087BD 8D542444                lea edx, dword ptr [esp+44]
:004087C1 8BCE                    mov ecx, esi
:004087C3 52                      push edx
:004087C4 FF9340040000            call dword ptr [ebx+00000440]
:004087CA 8B442438                mov eax, dword ptr [esp+38]
:004087CE B302                    mov bl, 02
:004087D0 3BC5                    cmp eax, ebp
:004087D2 885C2478                mov byte ptr [esp+78], bl
:004087D6 0F85EC000000            jne 004088C8
:004087DC B958987A00              mov ecx, 007A9858
:004087E1 E86A100000              call 00409850
:004087E6 8BF0                    mov esi, eax
:004087E8 55                      push ebp
:004087E9 8D442424                lea eax, dword ptr [esp+24]
:004087ED 57                      push edi
:004087EE 8B16                    mov edx, dword ptr [esi]
:004087F0 50                      push eax
:004087F1 51                      push ecx
:004087F2 8D442430                lea eax, dword ptr [esp+30]
:004087F6 8BCC                    mov ecx, esp
:004087F8 8964242C                mov dword ptr [esp+2C], esp
:004087FC 50                      push eax
:004087FD 89542430                mov dword ptr [esp+30], edx
:00408801 E82A100000              call 00409830
:00408806 8B54242C                mov edx, dword ptr [esp+2C]
:0040880A 8D4C2464                lea ecx, dword ptr [esp+64]
:0040880E 51                      push ecx
:0040880F 8BCE                    mov ecx, esi
:00408811 FF923C040000            call dword ptr [edx+0000043C]
:00408817 8BF0                    mov esi, eax
:00408819 8B06                    mov eax, dword ptr [esi]
:0040881B C644247803              mov [esp+78], 03
:00408820 89442438                mov dword ptr [esp+38], eax
:00408824 668B4E04                mov cx, word ptr [esi+04]
:00408828 66894C243C              mov word ptr [esp+3C], cx
:0040882D 668B5606                mov dx, word ptr [esi+06]
:00408831 668954243E              mov word ptr [esp+3E], dx
:00408836 8B4608                  mov eax, dword ptr [esi+08]
:00408839 89442440                mov dword ptr [esp+40], eax
:0040883D 8B4E0C                  mov ecx, dword ptr [esi+0C]
:00408840 8D5610                  lea edx, dword ptr [esi+10]
:00408843 894C2444                mov dword ptr [esp+44], ecx
:00408847 52                      push edx
:00408848 8D4C244C                lea ecx, dword ptr [esp+4C]
:0040884C E8CF2A1E00              call 005EB320
:00408851 668B4614                mov ax, word ptr [esi+14]
:00408855 885C2478                mov byte ptr [esp+78], bl
:00408859 668944244C              mov word ptr [esp+4C], ax
:0040885E 668B4E16                mov cx, word ptr [esi+16]
:00408862 8B442464                mov eax, dword ptr [esp+64]
:00408866 66894C244E              mov word ptr [esp+4E], cx
:0040886B 8B5618                  mov edx, dword ptr [esi+18]
:0040886E 83C0F4                  add eax, FFFFFFF4
:00408871 89542450                mov dword ptr [esp+50], edx
:00408875 8B08                    mov ecx, dword ptr [eax]
:00408877 49                      dec ecx
:00408878 8908                    mov dword ptr [eax], ecx
:0040887A 7509                    jne 00408885
:0040887C 50                      push eax
:0040887D E87E8A1D00              call 005E1300
:00408882 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040887A(C)
|
:00408885 396C2438                cmp dword ptr [esp+38], ebp
:00408889 743D                    je 004088C8
:0040888B 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00408891 8B542422                mov edx, dword ptr [esp+22]
:00408895 81E2FFFF0000            and edx, 0000FFFF
:0040889B 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:004088A1 8D04D0                  lea eax, dword ptr [eax+8*edx]
:004088A4 668B5006                mov dx, word ptr [eax+06]
:004088A8 663B542420              cmp dx, word ptr [esp+20]
:004088AD 7410                    je 004088BF
:004088AF 66896C2420              mov word ptr [esp+20], bp
:004088B4 66896C2422              mov word ptr [esp+22], bp
:004088B9 8B81CD050000            mov eax, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004088AD(C)
|
:004088BF 8B00                    mov eax, dword ptr [eax]
:004088C1 8BC8                    mov ecx, eax
:004088C3 8B10                    mov edx, dword ptr [eax]
:004088C5 FF5228                  call [edx+28]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004087D6(C), :00408889(C)
|
:004088C8 8B442448                mov eax, dword ptr [esp+48]
:004088CC C644247801              mov [esp+78], 01
:004088D1 83C0F4                  add eax, FFFFFFF4
:004088D4 8B08                    mov ecx, dword ptr [eax]
:004088D6 49                      dec ecx
:004088D7 8908                    mov dword ptr [eax], ecx
:004088D9 7509                    jne 004088E4
:004088DB 50                      push eax
:004088DC E81F8A1D00              call 005E1300
:004088E1 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004088D9(C)
|
:004088E4 8B4C2410                mov ecx, dword ptr [esp+10]
:004088E8 8B01                    mov eax, dword ptr [ecx]
:004088EA 8B4C2414                mov ecx, dword ptr [esp+14]
:004088EE 3BC1                    cmp eax, ecx
:004088F0 89442410                mov dword ptr [esp+10], eax
:004088F4 0F854BFEFFFF            jne 00408745

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040873F(C)
|
:004088FA 8B4C2418                mov ecx, dword ptr [esp+18]
:004088FE 8B01                    mov eax, dword ptr [ecx]
:00408900 3BC1                    cmp eax, ecx
:00408902 89442410                mov dword ptr [esp+10], eax
:00408906 0F84B3010000            je 00408ABF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408AB9(C)
|
:0040890C 8B15089C7A00            mov edx, dword ptr [007A9C08]
:00408912 8D480A                  lea ecx, dword ptr [eax+0A]
:00408915 33F6                    xor esi, esi
:00408917 66896C2420              mov word ptr [esp+20], bp
:0040891C 66896C2422              mov word ptr [esp+22], bp
:00408921 8B92CD050000            mov edx, dword ptr [edx+000005CD]
:00408927 668B31                  mov si, word ptr [ecx]
:0040892A 8D14F2                  lea edx, dword ptr [edx+8*esi]
:0040892D 668B7206                mov si, word ptr [edx+06]
:00408931 663B7008                cmp si, word ptr [eax+08]
:00408935 7416                    je 0040894D
:00408937 66896808                mov word ptr [eax+08], bp
:0040893B 668929                  mov word ptr [ecx], bp
:0040893E A1089C7A00              mov eax, dword ptr [007A9C08]
:00408943 8B80CD050000            mov eax, dword ptr [eax+000005CD]
:00408949 8B08                    mov ecx, dword ptr [eax]
:0040894B EB02                    jmp 0040894F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408935(C)
|
:0040894D 8B0A                    mov ecx, dword ptr [edx]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040894B(U)
|
:0040894F 8B11                    mov edx, dword ptr [ecx]
:00408951 FF9254010000            call dword ptr [edx+00000154]
:00408957 8D4C2430                lea ecx, dword ptr [esp+30]
:0040895B 8BF8                    mov edi, eax
:0040895D E8EE0E0000              call 00409850
:00408962 8BF0                    mov esi, eax
:00408964 8D442420                lea eax, dword ptr [esp+20]
:00408968 57                      push edi
:00408969 50                      push eax
:0040896A 8B1E                    mov ebx, dword ptr [esi]
:0040896C 8D4C2418                lea ecx, dword ptr [esp+18]
:00408970 E81B0D0000              call 00409690
:00408975 51                      push ecx
:00408976 8BCC                    mov ecx, esp
:00408978 89642428                mov dword ptr [esp+28], esp
:0040897C 50                      push eax
:0040897D E8AE0E0000              call 00409830
:00408982 8D4C2444                lea ecx, dword ptr [esp+44]
:00408986 51                      push ecx
:00408987 8BCE                    mov ecx, esi
:00408989 FF9340040000            call dword ptr [ebx+00000440]
:0040898F 8B442438                mov eax, dword ptr [esp+38]
:00408993 B304                    mov bl, 04
:00408995 3BC5                    cmp eax, ebp
:00408997 885C2478                mov byte ptr [esp+78], bl
:0040899B 0F85EC000000            jne 00408A8D
:004089A1 B95C987A00              mov ecx, 007A985C
:004089A6 E8A50E0000              call 00409850
:004089AB 8BF0                    mov esi, eax
:004089AD 55                      push ebp
:004089AE 8D442424                lea eax, dword ptr [esp+24]
:004089B2 57                      push edi
:004089B3 8B16                    mov edx, dword ptr [esi]
:004089B5 50                      push eax
:004089B6 51                      push ecx
:004089B7 8D442430                lea eax, dword ptr [esp+30]
:004089BB 8BCC                    mov ecx, esp
:004089BD 8964242C                mov dword ptr [esp+2C], esp
:004089C1 50                      push eax
:004089C2 89542430                mov dword ptr [esp+30], edx
:004089C6 E8650E0000              call 00409830
:004089CB 8B54242C                mov edx, dword ptr [esp+2C]
:004089CF 8D4C2464                lea ecx, dword ptr [esp+64]
:004089D3 51                      push ecx
:004089D4 8BCE                    mov ecx, esi
:004089D6 FF923C040000            call dword ptr [edx+0000043C]
:004089DC 8BF0                    mov esi, eax
:004089DE 8B06                    mov eax, dword ptr [esi]
:004089E0 C644247805              mov [esp+78], 05
:004089E5 89442438                mov dword ptr [esp+38], eax
:004089E9 668B4E04                mov cx, word ptr [esi+04]
:004089ED 66894C243C              mov word ptr [esp+3C], cx
:004089F2 668B5606                mov dx, word ptr [esi+06]
:004089F6 668954243E              mov word ptr [esp+3E], dx
:004089FB 8B4608                  mov eax, dword ptr [esi+08]
:004089FE 89442440                mov dword ptr [esp+40], eax
:00408A02 8B4E0C                  mov ecx, dword ptr [esi+0C]
:00408A05 8D5610                  lea edx, dword ptr [esi+10]
:00408A08 894C2444                mov dword ptr [esp+44], ecx
:00408A0C 52                      push edx
:00408A0D 8D4C244C                lea ecx, dword ptr [esp+4C]
:00408A11 E80A291E00              call 005EB320
:00408A16 668B4614                mov ax, word ptr [esi+14]
:00408A1A 885C2478                mov byte ptr [esp+78], bl
:00408A1E 668944244C              mov word ptr [esp+4C], ax
:00408A23 668B4E16                mov cx, word ptr [esi+16]
:00408A27 8B442464                mov eax, dword ptr [esp+64]
:00408A2B 66894C244E              mov word ptr [esp+4E], cx
:00408A30 8B5618                  mov edx, dword ptr [esi+18]
:00408A33 83C0F4                  add eax, FFFFFFF4
:00408A36 89542450                mov dword ptr [esp+50], edx
:00408A3A 8B08                    mov ecx, dword ptr [eax]
:00408A3C 49                      dec ecx
:00408A3D 8908                    mov dword ptr [eax], ecx
:00408A3F 7509                    jne 00408A4A
:00408A41 50                      push eax
:00408A42 E8B9881D00              call 005E1300
:00408A47 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408A3F(C)
|
:00408A4A 396C2438                cmp dword ptr [esp+38], ebp
:00408A4E 743D                    je 00408A8D
:00408A50 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00408A56 8B542422                mov edx, dword ptr [esp+22]
:00408A5A 81E2FFFF0000            and edx, 0000FFFF
:00408A60 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00408A66 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00408A69 668B5006                mov dx, word ptr [eax+06]
:00408A6D 663B542420              cmp dx, word ptr [esp+20]
:00408A72 7410                    je 00408A84
:00408A74 66896C2420              mov word ptr [esp+20], bp
:00408A79 66896C2422              mov word ptr [esp+22], bp
:00408A7E 8B81CD050000            mov eax, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408A72(C)
|
:00408A84 8B00                    mov eax, dword ptr [eax]
:00408A86 8BC8                    mov ecx, eax
:00408A88 8B10                    mov edx, dword ptr [eax]
:00408A8A FF5228                  call [edx+28]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040899B(C), :00408A4E(C)
|
:00408A8D 8B442448                mov eax, dword ptr [esp+48]
:00408A91 C644247801              mov [esp+78], 01
:00408A96 83C0F4                  add eax, FFFFFFF4
:00408A99 8B08                    mov ecx, dword ptr [eax]
:00408A9B 49                      dec ecx
:00408A9C 8908                    mov dword ptr [eax], ecx
:00408A9E 7509                    jne 00408AA9
:00408AA0 50                      push eax
:00408AA1 E85A881D00              call 005E1300
:00408AA6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408A9E(C)
|
:00408AA9 8B4C2410                mov ecx, dword ptr [esp+10]
:00408AAD 8B01                    mov eax, dword ptr [ecx]
:00408AAF 8B4C2418                mov ecx, dword ptr [esp+18]
:00408AB3 3BC1                    cmp eax, ecx
:00408AB5 89442410                mov dword ptr [esp+10], eax
:00408AB9 0F854DFEFFFF            jne 0040890C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408906(C)
|
:00408ABF 8B31                    mov esi, dword ptr [ecx]
:00408AC1 C644247806              mov [esp+78], 06
:00408AC6 3BF1                    cmp esi, ecx
:00408AC8 741B                    je 00408AE5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408AE3(C)
|
:00408ACA 8BC6                    mov eax, esi
:00408ACC 8B36                    mov esi, dword ptr [esi]
:00408ACE 3BC5                    cmp eax, ebp
:00408AD0 740F                    je 00408AE1
:00408AD2 6A0C                    push 0000000C
:00408AD4 50                      push eax
:00408AD5 E8D6DEFFFF              call 004069B0
:00408ADA 8B4C2420                mov ecx, dword ptr [esp+20]
:00408ADE 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408AD0(C)
|
:00408AE1 3BF1                    cmp esi, ecx
:00408AE3 75E5                    jne 00408ACA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408AC8(C)
|
:00408AE5 8909                    mov dword ptr [ecx], ecx
:00408AE7 8B442418                mov eax, dword ptr [esp+18]
:00408AEB 894004                  mov dword ptr [eax+04], eax
:00408AEE 8B442418                mov eax, dword ptr [esp+18]
:00408AF2 3BC5                    cmp eax, ebp
:00408AF4 740B                    je 00408B01
:00408AF6 6A0C                    push 0000000C
:00408AF8 50                      push eax
:00408AF9 E8B2DEFFFF              call 004069B0
:00408AFE 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408AF4(C)
|
:00408B01 8B4C2414                mov ecx, dword ptr [esp+14]
:00408B05 C744247807000000        mov [esp+78], 00000007
:00408B0D 8B31                    mov esi, dword ptr [ecx]
:00408B0F 3BF1                    cmp esi, ecx
:00408B11 741B                    je 00408B2E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408B2C(C)
|
:00408B13 8BC6                    mov eax, esi
:00408B15 8B36                    mov esi, dword ptr [esi]
:00408B17 3BC5                    cmp eax, ebp
:00408B19 740F                    je 00408B2A
:00408B1B 6A0C                    push 0000000C
:00408B1D 50                      push eax
:00408B1E E88DDEFFFF              call 004069B0
:00408B23 8B4C241C                mov ecx, dword ptr [esp+1C]
:00408B27 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408B19(C)
|
:00408B2A 3BF1                    cmp esi, ecx
:00408B2C 75E5                    jne 00408B13

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408B11(C)
|
:00408B2E 8909                    mov dword ptr [ecx], ecx
:00408B30 8B442414                mov eax, dword ptr [esp+14]
:00408B34 894004                  mov dword ptr [eax+04], eax
:00408B37 8B442414                mov eax, dword ptr [esp+14]
:00408B3B 3BC5                    cmp eax, ebp
:00408B3D 740D                    je 00408B4C
:00408B3F 8B1500987A00            mov edx, dword ptr [007A9800]
:00408B45 8910                    mov dword ptr [eax], edx
:00408B47 A300987A00              mov dword ptr [007A9800], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004085E3(C), :004085EE(C), :0040860E(C), :00408617(C), :00408B3D(C)
|
:00408B4C 8B4C2470                mov ecx, dword ptr [esp+70]
:00408B50 5F                      pop edi
:00408B51 5E                      pop esi
:00408B52 5D                      pop ebp
:00408B53 64890D00000000          mov dword ptr fs:[00000000], ecx
:00408B5A 5B                      pop ebx
:00408B5B 83C46C                  add esp, 0000006C
:00408B5E C3                      ret


:00408B5F 90                      nop

* Referenced by a CALL at Address:
|:00407CE6   
|
:00408B60 64A100000000            mov eax, dword ptr fs:[00000000]
:00408B66 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00408B6C 6AFF                    push FFFFFFFF
:00408B6E 68B6F76C00              push 006CF7B6
:00408B73 50                      push eax
:00408B74 33D2                    xor edx, edx
:00408B76 668B155E987A00          mov dx, word ptr [007A985E]
:00408B7D 64892500000000          mov dword ptr fs:[00000000], esp
:00408B84 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00408B8A 83EC60                  sub esp, 00000060
:00408B8D 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00408B90 53                      push ebx
:00408B91 55                      push ebp
:00408B92 33ED                    xor ebp, ebp
:00408B94 668B5006                mov dx, word ptr [eax+06]
:00408B98 56                      push esi
:00408B99 663B155C987A00          cmp dx, word ptr [007A985C]
:00408BA0 57                      push edi
:00408BA1 7414                    je 00408BB7
:00408BA3 66892D5C987A00          mov word ptr [007A985C], bp
:00408BAA 66892D5E987A00          mov word ptr [007A985E], bp
:00408BB1 8B81CD050000            mov eax, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408BA1(C)
|
:00408BB7 8B08                    mov ecx, dword ptr [eax]
:00408BB9 8D542428                lea edx, dword ptr [esp+28]
:00408BBD 52                      push edx
:00408BBE 8B01                    mov eax, dword ptr [ecx]
:00408BC0 FF907C050000            call dword ptr [eax+0000057C]
:00408BC6 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00408BCC 33D2                    xor edx, edx
:00408BCE 668B155A987A00          mov dx, word ptr [007A985A]
:00408BD5 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00408BDB 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00408BDE 668B5006                mov dx, word ptr [eax+06]
:00408BE2 663B1558987A00          cmp dx, word ptr [007A9858]
:00408BE9 7414                    je 00408BFF
:00408BEB 66892D58987A00          mov word ptr [007A9858], bp
:00408BF2 66892D5A987A00          mov word ptr [007A985A], bp
:00408BF9 8B81CD050000            mov eax, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408BE9(C)
|
:00408BFF 8B08                    mov ecx, dword ptr [eax]
:00408C01 8D542430                lea edx, dword ptr [esp+30]
:00408C05 52                      push edx
:00408C06 8B01                    mov eax, dword ptr [ecx]
:00408C08 FF907C050000            call dword ptr [eax+0000057C]
:00408C0E 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00408C14 8B54242A                mov edx, dword ptr [esp+2A]
:00408C18 81E2FFFF0000            and edx, 0000FFFF
:00408C1E 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00408C24 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00408C27 668B5006                mov dx, word ptr [eax+06]
:00408C2B 663B542428              cmp dx, word ptr [esp+28]
:00408C30 7414                    je 00408C46
:00408C32 66896C2428              mov word ptr [esp+28], bp
:00408C37 66896C242A              mov word ptr [esp+2A], bp
:00408C3C 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:00408C42 8B09                    mov ecx, dword ptr [ecx]
:00408C44 EB02                    jmp 00408C48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408C30(C)
|
:00408C46 8B08                    mov ecx, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408C44(U)
|
:00408C48 8B01                    mov eax, dword ptr [ecx]
:00408C4A 8D542414                lea edx, dword ptr [esp+14]
:00408C4E 52                      push edx
:00408C4F FF9070050000            call dword ptr [eax+00000570]
:00408C55 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00408C5B 8B542432                mov edx, dword ptr [esp+32]
:00408C5F 81E2FFFF0000            and edx, 0000FFFF
:00408C65 896C2478                mov dword ptr [esp+78], ebp
:00408C69 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00408C6F 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00408C72 668B5006                mov dx, word ptr [eax+06]
:00408C76 663B542430              cmp dx, word ptr [esp+30]
:00408C7B 7414                    je 00408C91
:00408C7D 66896C2430              mov word ptr [esp+30], bp
:00408C82 66896C2432              mov word ptr [esp+32], bp
:00408C87 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:00408C8D 8B09                    mov ecx, dword ptr [ecx]
:00408C8F EB02                    jmp 00408C93

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408C7B(C)
|
:00408C91 8B08                    mov ecx, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408C8F(U)
|
:00408C93 8B01                    mov eax, dword ptr [ecx]
:00408C95 8D542418                lea edx, dword ptr [esp+18]
:00408C99 52                      push edx
:00408C9A FF9070050000            call dword ptr [eax+00000570]
:00408CA0 8B4C2414                mov ecx, dword ptr [esp+14]
:00408CA4 C644247801              mov [esp+78], 01
:00408CA9 8B01                    mov eax, dword ptr [ecx]
:00408CAB 3BC1                    cmp eax, ecx
:00408CAD 89442410                mov dword ptr [esp+10], eax
:00408CB1 0F84B5010000            je 00408E6C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408E66(C)
|
:00408CB7 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00408CBD 66896C2420              mov word ptr [esp+20], bp
:00408CC2 66896C2422              mov word ptr [esp+22], bp
:00408CC7 33F6                    xor esi, esi
:00408CC9 8B91CD050000            mov edx, dword ptr [ecx+000005CD]
:00408CCF 668B700A                mov si, word ptr [eax+0A]
:00408CD3 8D480A                  lea ecx, dword ptr [eax+0A]
:00408CD6 8D14F2                  lea edx, dword ptr [edx+8*esi]
:00408CD9 668B7206                mov si, word ptr [edx+06]
:00408CDD 663B7008                cmp si, word ptr [eax+08]
:00408CE1 7417                    je 00408CFA
:00408CE3 66896808                mov word ptr [eax+08], bp
:00408CE7 668929                  mov word ptr [ecx], bp
:00408CEA 8B15089C7A00            mov edx, dword ptr [007A9C08]
:00408CF0 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:00408CF6 8B08                    mov ecx, dword ptr [eax]
:00408CF8 EB02                    jmp 00408CFC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408CE1(C)
|
:00408CFA 8B0A                    mov ecx, dword ptr [edx]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408CF8(U)
|
:00408CFC 8B01                    mov eax, dword ptr [ecx]
:00408CFE FF9054010000            call dword ptr [eax+00000154]
:00408D04 8D4C2428                lea ecx, dword ptr [esp+28]
:00408D08 8BF8                    mov edi, eax
:00408D0A E8410B0000              call 00409850
:00408D0F 8D4C2420                lea ecx, dword ptr [esp+20]
:00408D13 8BF0                    mov esi, eax
:00408D15 57                      push edi
:00408D16 51                      push ecx
:00408D17 8B1E                    mov ebx, dword ptr [esi]
:00408D19 8D4C2418                lea ecx, dword ptr [esp+18]
:00408D1D E86E090000              call 00409690
:00408D22 51                      push ecx
:00408D23 8BCC                    mov ecx, esp
:00408D25 89642428                mov dword ptr [esp+28], esp
:00408D29 50                      push eax
:00408D2A E8010B0000              call 00409830
:00408D2F 8D542444                lea edx, dword ptr [esp+44]
:00408D33 8BCE                    mov ecx, esi
:00408D35 52                      push edx
:00408D36 FF9340040000            call dword ptr [ebx+00000440]
:00408D3C 8B442438                mov eax, dword ptr [esp+38]
:00408D40 B302                    mov bl, 02
:00408D42 3BC5                    cmp eax, ebp
:00408D44 885C2478                mov byte ptr [esp+78], bl
:00408D48 0F85EC000000            jne 00408E3A
:00408D4E B95C987A00              mov ecx, 007A985C
:00408D53 E8F80A0000              call 00409850
:00408D58 8BF0                    mov esi, eax
:00408D5A 55                      push ebp
:00408D5B 8D442424                lea eax, dword ptr [esp+24]
:00408D5F 57                      push edi
:00408D60 8B16                    mov edx, dword ptr [esi]
:00408D62 50                      push eax
:00408D63 51                      push ecx
:00408D64 8D442430                lea eax, dword ptr [esp+30]
:00408D68 8BCC                    mov ecx, esp
:00408D6A 8964242C                mov dword ptr [esp+2C], esp
:00408D6E 50                      push eax
:00408D6F 89542430                mov dword ptr [esp+30], edx
:00408D73 E8B80A0000              call 00409830
:00408D78 8B54242C                mov edx, dword ptr [esp+2C]
:00408D7C 8D4C2464                lea ecx, dword ptr [esp+64]
:00408D80 51                      push ecx
:00408D81 8BCE                    mov ecx, esi
:00408D83 FF923C040000            call dword ptr [edx+0000043C]
:00408D89 8BF0                    mov esi, eax
:00408D8B 8B06                    mov eax, dword ptr [esi]
:00408D8D C644247803              mov [esp+78], 03
:00408D92 89442438                mov dword ptr [esp+38], eax
:00408D96 668B4E04                mov cx, word ptr [esi+04]
:00408D9A 66894C243C              mov word ptr [esp+3C], cx
:00408D9F 668B5606                mov dx, word ptr [esi+06]
:00408DA3 668954243E              mov word ptr [esp+3E], dx
:00408DA8 8B4608                  mov eax, dword ptr [esi+08]
:00408DAB 89442440                mov dword ptr [esp+40], eax
:00408DAF 8B4E0C                  mov ecx, dword ptr [esi+0C]
:00408DB2 8D5610                  lea edx, dword ptr [esi+10]
:00408DB5 894C2444                mov dword ptr [esp+44], ecx
:00408DB9 52                      push edx
:00408DBA 8D4C244C                lea ecx, dword ptr [esp+4C]
:00408DBE E85D251E00              call 005EB320
:00408DC3 668B4614                mov ax, word ptr [esi+14]
:00408DC7 885C2478                mov byte ptr [esp+78], bl
:00408DCB 668944244C              mov word ptr [esp+4C], ax
:00408DD0 668B4E16                mov cx, word ptr [esi+16]
:00408DD4 8B442464                mov eax, dword ptr [esp+64]
:00408DD8 66894C244E              mov word ptr [esp+4E], cx
:00408DDD 8B5618                  mov edx, dword ptr [esi+18]
:00408DE0 83C0F4                  add eax, FFFFFFF4
:00408DE3 89542450                mov dword ptr [esp+50], edx
:00408DE7 8B08                    mov ecx, dword ptr [eax]
:00408DE9 49                      dec ecx
:00408DEA 8908                    mov dword ptr [eax], ecx
:00408DEC 7509                    jne 00408DF7
:00408DEE 50                      push eax
:00408DEF E80C851D00              call 005E1300
:00408DF4 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408DEC(C)
|
:00408DF7 396C2438                cmp dword ptr [esp+38], ebp
:00408DFB 743D                    je 00408E3A
:00408DFD 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00408E03 8B542422                mov edx, dword ptr [esp+22]
:00408E07 81E2FFFF0000            and edx, 0000FFFF
:00408E0D 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00408E13 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00408E16 668B5006                mov dx, word ptr [eax+06]
:00408E1A 663B542420              cmp dx, word ptr [esp+20]
:00408E1F 7410                    je 00408E31
:00408E21 66896C2420              mov word ptr [esp+20], bp
:00408E26 66896C2422              mov word ptr [esp+22], bp
:00408E2B 8B81CD050000            mov eax, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408E1F(C)
|
:00408E31 8B00                    mov eax, dword ptr [eax]
:00408E33 8BC8                    mov ecx, eax
:00408E35 8B10                    mov edx, dword ptr [eax]
:00408E37 FF5228                  call [edx+28]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408D48(C), :00408DFB(C)
|
:00408E3A 8B442448                mov eax, dword ptr [esp+48]
:00408E3E C644247801              mov [esp+78], 01
:00408E43 83C0F4                  add eax, FFFFFFF4
:00408E46 8B08                    mov ecx, dword ptr [eax]
:00408E48 49                      dec ecx
:00408E49 8908                    mov dword ptr [eax], ecx
:00408E4B 7509                    jne 00408E56
:00408E4D 50                      push eax
:00408E4E E8AD841D00              call 005E1300
:00408E53 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408E4B(C)
|
:00408E56 8B4C2410                mov ecx, dword ptr [esp+10]
:00408E5A 8B01                    mov eax, dword ptr [ecx]
:00408E5C 8B4C2414                mov ecx, dword ptr [esp+14]
:00408E60 3BC1                    cmp eax, ecx
:00408E62 89442410                mov dword ptr [esp+10], eax
:00408E66 0F854BFEFFFF            jne 00408CB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408CB1(C)
|
:00408E6C 8B4C2418                mov ecx, dword ptr [esp+18]
:00408E70 8B01                    mov eax, dword ptr [ecx]
:00408E72 3BC1                    cmp eax, ecx
:00408E74 89442410                mov dword ptr [esp+10], eax
:00408E78 0F84B3010000            je 00409031

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040902B(C)
|
:00408E7E 8B15089C7A00            mov edx, dword ptr [007A9C08]
:00408E84 8D480A                  lea ecx, dword ptr [eax+0A]
:00408E87 33F6                    xor esi, esi
:00408E89 66896C2420              mov word ptr [esp+20], bp
:00408E8E 66896C2422              mov word ptr [esp+22], bp
:00408E93 8B92CD050000            mov edx, dword ptr [edx+000005CD]
:00408E99 668B31                  mov si, word ptr [ecx]
:00408E9C 8D14F2                  lea edx, dword ptr [edx+8*esi]
:00408E9F 668B7206                mov si, word ptr [edx+06]
:00408EA3 663B7008                cmp si, word ptr [eax+08]
:00408EA7 7416                    je 00408EBF
:00408EA9 66896808                mov word ptr [eax+08], bp
:00408EAD 668929                  mov word ptr [ecx], bp
:00408EB0 A1089C7A00              mov eax, dword ptr [007A9C08]
:00408EB5 8B80CD050000            mov eax, dword ptr [eax+000005CD]
:00408EBB 8B08                    mov ecx, dword ptr [eax]
:00408EBD EB02                    jmp 00408EC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408EA7(C)
|
:00408EBF 8B0A                    mov ecx, dword ptr [edx]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408EBD(U)
|
:00408EC1 8B11                    mov edx, dword ptr [ecx]
:00408EC3 FF9254010000            call dword ptr [edx+00000154]
:00408EC9 8D4C2430                lea ecx, dword ptr [esp+30]
:00408ECD 8BF8                    mov edi, eax
:00408ECF E87C090000              call 00409850
:00408ED4 8BF0                    mov esi, eax
:00408ED6 8D442420                lea eax, dword ptr [esp+20]
:00408EDA 57                      push edi
:00408EDB 50                      push eax
:00408EDC 8B1E                    mov ebx, dword ptr [esi]
:00408EDE 8D4C2418                lea ecx, dword ptr [esp+18]
:00408EE2 E8A9070000              call 00409690
:00408EE7 51                      push ecx
:00408EE8 8BCC                    mov ecx, esp
:00408EEA 89642428                mov dword ptr [esp+28], esp
:00408EEE 50                      push eax
:00408EEF E83C090000              call 00409830
:00408EF4 8D4C2444                lea ecx, dword ptr [esp+44]
:00408EF8 51                      push ecx
:00408EF9 8BCE                    mov ecx, esi
:00408EFB FF9340040000            call dword ptr [ebx+00000440]
:00408F01 8B442438                mov eax, dword ptr [esp+38]
:00408F05 B304                    mov bl, 04
:00408F07 3BC5                    cmp eax, ebp
:00408F09 885C2478                mov byte ptr [esp+78], bl
:00408F0D 0F85EC000000            jne 00408FFF
:00408F13 B958987A00              mov ecx, 007A9858
:00408F18 E833090000              call 00409850
:00408F1D 8BF0                    mov esi, eax
:00408F1F 55                      push ebp
:00408F20 8D442424                lea eax, dword ptr [esp+24]
:00408F24 57                      push edi
:00408F25 8B16                    mov edx, dword ptr [esi]
:00408F27 50                      push eax
:00408F28 51                      push ecx
:00408F29 8D442430                lea eax, dword ptr [esp+30]
:00408F2D 8BCC                    mov ecx, esp
:00408F2F 8964242C                mov dword ptr [esp+2C], esp
:00408F33 50                      push eax
:00408F34 89542430                mov dword ptr [esp+30], edx
:00408F38 E8F3080000              call 00409830
:00408F3D 8B54242C                mov edx, dword ptr [esp+2C]
:00408F41 8D4C2464                lea ecx, dword ptr [esp+64]
:00408F45 51                      push ecx
:00408F46 8BCE                    mov ecx, esi
:00408F48 FF923C040000            call dword ptr [edx+0000043C]
:00408F4E 8BF0                    mov esi, eax
:00408F50 8B06                    mov eax, dword ptr [esi]
:00408F52 C644247805              mov [esp+78], 05
:00408F57 89442438                mov dword ptr [esp+38], eax
:00408F5B 668B4E04                mov cx, word ptr [esi+04]
:00408F5F 66894C243C              mov word ptr [esp+3C], cx
:00408F64 668B5606                mov dx, word ptr [esi+06]
:00408F68 668954243E              mov word ptr [esp+3E], dx
:00408F6D 8B4608                  mov eax, dword ptr [esi+08]
:00408F70 89442440                mov dword ptr [esp+40], eax
:00408F74 8B4E0C                  mov ecx, dword ptr [esi+0C]
:00408F77 8D5610                  lea edx, dword ptr [esi+10]
:00408F7A 894C2444                mov dword ptr [esp+44], ecx
:00408F7E 52                      push edx
:00408F7F 8D4C244C                lea ecx, dword ptr [esp+4C]
:00408F83 E898231E00              call 005EB320
:00408F88 668B4614                mov ax, word ptr [esi+14]
:00408F8C 885C2478                mov byte ptr [esp+78], bl
:00408F90 668944244C              mov word ptr [esp+4C], ax
:00408F95 668B4E16                mov cx, word ptr [esi+16]
:00408F99 8B442464                mov eax, dword ptr [esp+64]
:00408F9D 66894C244E              mov word ptr [esp+4E], cx
:00408FA2 8B5618                  mov edx, dword ptr [esi+18]
:00408FA5 83C0F4                  add eax, FFFFFFF4
:00408FA8 89542450                mov dword ptr [esp+50], edx
:00408FAC 8B08                    mov ecx, dword ptr [eax]
:00408FAE 49                      dec ecx
:00408FAF 8908                    mov dword ptr [eax], ecx
:00408FB1 7509                    jne 00408FBC
:00408FB3 50                      push eax
:00408FB4 E847831D00              call 005E1300
:00408FB9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408FB1(C)
|
:00408FBC 396C2438                cmp dword ptr [esp+38], ebp
:00408FC0 743D                    je 00408FFF
:00408FC2 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00408FC8 8B542422                mov edx, dword ptr [esp+22]
:00408FCC 81E2FFFF0000            and edx, 0000FFFF
:00408FD2 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00408FD8 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00408FDB 668B5006                mov dx, word ptr [eax+06]
:00408FDF 663B542420              cmp dx, word ptr [esp+20]
:00408FE4 7410                    je 00408FF6
:00408FE6 66896C2420              mov word ptr [esp+20], bp
:00408FEB 66896C2422              mov word ptr [esp+22], bp
:00408FF0 8B81CD050000            mov eax, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408FE4(C)
|
:00408FF6 8B00                    mov eax, dword ptr [eax]
:00408FF8 8BC8                    mov ecx, eax
:00408FFA 8B10                    mov edx, dword ptr [eax]
:00408FFC FF5228                  call [edx+28]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408F0D(C), :00408FC0(C)
|
:00408FFF 8B442448                mov eax, dword ptr [esp+48]
:00409003 C644247801              mov [esp+78], 01
:00409008 83C0F4                  add eax, FFFFFFF4
:0040900B 8B08                    mov ecx, dword ptr [eax]
:0040900D 49                      dec ecx
:0040900E 8908                    mov dword ptr [eax], ecx
:00409010 7509                    jne 0040901B
:00409012 50                      push eax
:00409013 E8E8821D00              call 005E1300
:00409018 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409010(C)
|
:0040901B 8B4C2410                mov ecx, dword ptr [esp+10]
:0040901F 8B01                    mov eax, dword ptr [ecx]
:00409021 8B4C2418                mov ecx, dword ptr [esp+18]
:00409025 3BC1                    cmp eax, ecx
:00409027 89442410                mov dword ptr [esp+10], eax
:0040902B 0F854DFEFFFF            jne 00408E7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408E78(C)
|
:00409031 8B31                    mov esi, dword ptr [ecx]
:00409033 C644247806              mov [esp+78], 06
:00409038 3BF1                    cmp esi, ecx
:0040903A 741B                    je 00409057

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409055(C)
|
:0040903C 8BC6                    mov eax, esi
:0040903E 8B36                    mov esi, dword ptr [esi]
:00409040 3BC5                    cmp eax, ebp
:00409042 740F                    je 00409053
:00409044 6A0C                    push 0000000C
:00409046 50                      push eax
:00409047 E864D9FFFF              call 004069B0
:0040904C 8B4C2420                mov ecx, dword ptr [esp+20]
:00409050 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409042(C)
|
:00409053 3BF1                    cmp esi, ecx
:00409055 75E5                    jne 0040903C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040903A(C)
|
:00409057 8909                    mov dword ptr [ecx], ecx
:00409059 8B442418                mov eax, dword ptr [esp+18]
:0040905D 894004                  mov dword ptr [eax+04], eax
:00409060 8B442418                mov eax, dword ptr [esp+18]
:00409064 3BC5                    cmp eax, ebp
:00409066 740B                    je 00409073
:00409068 6A0C                    push 0000000C
:0040906A 50                      push eax
:0040906B E840D9FFFF              call 004069B0
:00409070 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409066(C)
|
:00409073 8B4C2414                mov ecx, dword ptr [esp+14]
:00409077 C744247807000000        mov [esp+78], 00000007
:0040907F 8B31                    mov esi, dword ptr [ecx]
:00409081 3BF1                    cmp esi, ecx
:00409083 741B                    je 004090A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040909E(C)
|
:00409085 8BC6                    mov eax, esi
:00409087 8B36                    mov esi, dword ptr [esi]
:00409089 3BC5                    cmp eax, ebp
:0040908B 740F                    je 0040909C
:0040908D 6A0C                    push 0000000C
:0040908F 50                      push eax
:00409090 E81BD9FFFF              call 004069B0
:00409095 8B4C241C                mov ecx, dword ptr [esp+1C]
:00409099 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040908B(C)
|
:0040909C 3BF1                    cmp esi, ecx
:0040909E 75E5                    jne 00409085

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409083(C)
|
:004090A0 8909                    mov dword ptr [ecx], ecx
:004090A2 8B442414                mov eax, dword ptr [esp+14]
:004090A6 894004                  mov dword ptr [eax+04], eax
:004090A9 8B442414                mov eax, dword ptr [esp+14]
:004090AD 3BC5                    cmp eax, ebp
:004090AF 740D                    je 004090BE
:004090B1 8B1500987A00            mov edx, dword ptr [007A9800]
:004090B7 8910                    mov dword ptr [eax], edx
:004090B9 A300987A00              mov dword ptr [007A9800], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004090AF(C)
|
:004090BE 8B4C2470                mov ecx, dword ptr [esp+70]
:004090C2 5F                      pop edi
:004090C3 5E                      pop esi
:004090C4 5D                      pop ebp
:004090C5 64890D00000000          mov dword ptr fs:[00000000], ecx
:004090CC 5B                      pop ebx
:004090CD 83C46C                  add esp, 0000006C
:004090D0 C3                      ret


:004090D1 90                      nop
:004090D2 90                      nop
:004090D3 90                      nop
:004090D4 90                      nop
:004090D5 90                      nop
:004090D6 90                      nop
:004090D7 90                      nop
:004090D8 90                      nop
:004090D9 90                      nop
:004090DA 90                      nop
:004090DB 90                      nop
:004090DC 90                      nop
:004090DD 90                      nop
:004090DE 90                      nop
:004090DF 90                      nop

* Referenced by a CALL at Addresses:
|:00407197   , :0040721C   , :004080E8   , :0041B697   , :0041BFE0   
|
:004090E0 64A100000000            mov eax, dword ptr fs:[00000000]
:004090E6 6AFF                    push FFFFFFFF
:004090E8 68D0F76C00              push 006CF7D0
:004090ED 50                      push eax
:004090EE 64892500000000          mov dword ptr fs:[00000000], esp
:004090F5 83EC3C                  sub esp, 0000003C
:004090F8 53                      push ebx
:004090F9 55                      push ebp
:004090FA 56                      push esi
:004090FB 57                      push edi
:004090FC 8B7C2468                mov edi, dword ptr [esp+68]
:00409100 33DB                    xor ebx, ebx
:00409102 3BFB                    cmp edi, ebx
:00409104 7D35                    jge 0040913B
:00409106 51                      push ecx
:00409107 668B4C2468              mov cx, word ptr [esp+68]
:0040910C 8BC4                    mov eax, esp
:0040910E 89642414                mov dword ptr [esp+14], esp
:00409112 51                      push ecx
:00409113 668908                  mov word ptr [eax], cx
:00409116 668B54246E              mov dx, word ptr [esp+6E]
:0040911B 8BCC                    mov ecx, esp
:0040911D 66895002                mov word ptr [eax+02], dx
:00409121 89642418                mov dword ptr [esp+18], esp
:00409125 E896B3FFFF              call 004044C0
:0040912A 8B442464                mov eax, dword ptr [esp+64]
:0040912E 50                      push eax
:0040912F E85CFC0300              call 00448D90
:00409134 8BF8                    mov edi, eax
:00409136 83C40C                  add esp, 0000000C
:00409139 3BFB                    cmp edi, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409104(C)
|
:0040913B 0F847C010000            je 004092BD
:00409141 8D4C2460                lea ecx, dword ptr [esp+60]
:00409145 66895C2468              mov word ptr [esp+68], bx
:0040914A 66895C246A              mov word ptr [esp+6A], bx
:0040914F E8FC060000              call 00409850
:00409154 8D4C2468                lea ecx, dword ptr [esp+68]
:00409158 57                      push edi
:00409159 51                      push ecx
:0040915A 51                      push ecx
:0040915B 8BF0                    mov esi, eax
:0040915D 8D542470                lea edx, dword ptr [esp+70]
:00409161 8BCC                    mov ecx, esp
:00409163 8964241C                mov dword ptr [esp+1C], esp
:00409167 8B2E                    mov ebp, dword ptr [esi]
:00409169 52                      push edx
:0040916A E8C1060000              call 00409830
:0040916F 8D442420                lea eax, dword ptr [esp+20]
:00409173 8BCE                    mov ecx, esi
:00409175 50                      push eax
:00409176 FF9568040000            call dword ptr [ebp+00000468]
:0040917C 8B442414                mov eax, dword ptr [esp+14]
:00409180 895C2454                mov dword ptr [esp+54], ebx
:00409184 3BC3                    cmp eax, ebx
:00409186 0F8511010000            jne 0040929D
:0040918C 8D4C2460                lea ecx, dword ptr [esp+60]
:00409190 E8BB060000              call 00409850
:00409195 8B10                    mov edx, dword ptr [eax]
:00409197 8D4C245C                lea ecx, dword ptr [esp+5C]
:0040919B 51                      push ecx
:0040919C 8BC8                    mov ecx, eax
:0040919E FF927C050000            call dword ptr [edx+0000057C]
:004091A4 8BC8                    mov ecx, eax
:004091A6 E8A5060000              call 00409850
:004091AB 53                      push ebx
:004091AC 8D54246C                lea edx, dword ptr [esp+6C]
:004091B0 57                      push edi
:004091B1 52                      push edx
:004091B2 8BF0                    mov esi, eax
:004091B4 51                      push ecx
:004091B5 8D442478                lea eax, dword ptr [esp+78]
:004091B9 8BCC                    mov ecx, esp
:004091BB 8B2E                    mov ebp, dword ptr [esi]
:004091BD 89642420                mov dword ptr [esp+20], esp
:004091C1 50                      push eax
:004091C2 E869060000              call 00409830
:004091C7 8D4C2440                lea ecx, dword ptr [esp+40]
:004091CB 51                      push ecx
:004091CC 8BCE                    mov ecx, esi
:004091CE FF953C040000            call dword ptr [ebp+0000043C]
:004091D4 8BF0                    mov esi, eax
:004091D6 8B16                    mov edx, dword ptr [esi]
:004091D8 C644245401              mov [esp+54], 01
:004091DD 89542414                mov dword ptr [esp+14], edx
:004091E1 668B4604                mov ax, word ptr [esi+04]
:004091E5 6689442418              mov word ptr [esp+18], ax
:004091EA 668B4E06                mov cx, word ptr [esi+06]
:004091EE 66894C241A              mov word ptr [esp+1A], cx
:004091F3 8B5608                  mov edx, dword ptr [esi+08]
:004091F6 8D4E10                  lea ecx, dword ptr [esi+10]
:004091F9 8954241C                mov dword ptr [esp+1C], edx
:004091FD 8B460C                  mov eax, dword ptr [esi+0C]
:00409200 51                      push ecx
:00409201 8D4C2428                lea ecx, dword ptr [esp+28]
:00409205 89442424                mov dword ptr [esp+24], eax
:00409209 E812211E00              call 005EB320
:0040920E 668B5614                mov dx, word ptr [esi+14]
:00409212 885C2454                mov byte ptr [esp+54], bl
:00409216 6689542428              mov word ptr [esp+28], dx
:0040921B 668B4616                mov ax, word ptr [esi+16]
:0040921F 8B542440                mov edx, dword ptr [esp+40]
:00409223 668944242A              mov word ptr [esp+2A], ax
:00409228 8B4E18                  mov ecx, dword ptr [esi+18]
:0040922B 8D42F4                  lea eax, dword ptr [edx-0C]
:0040922E 894C242C                mov dword ptr [esp+2C], ecx
:00409232 8B08                    mov ecx, dword ptr [eax]
:00409234 49                      dec ecx
:00409235 8908                    mov dword ptr [eax], ecx
:00409237 7509                    jne 00409242
:00409239 50                      push eax
:0040923A E8C1801D00              call 005E1300
:0040923F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409237(C)
|
:00409242 395C2414                cmp dword ptr [esp+14], ebx
:00409246 7455                    je 0040929D
:00409248 8D4C2460                lea ecx, dword ptr [esp+60]
:0040924C 66895C245C              mov word ptr [esp+5C], bx
:00409251 66895C245E              mov word ptr [esp+5E], bx
:00409256 E8F5050000              call 00409850
:0040925B 8BF0                    mov esi, eax
:0040925D 6A01                    push 00000001
:0040925F 8D442460                lea eax, dword ptr [esp+60]
:00409263 57                      push edi
:00409264 8B1E                    mov ebx, dword ptr [esi]
:00409266 50                      push eax
:00409267 51                      push ecx
:00409268 8D542478                lea edx, dword ptr [esp+78]
:0040926C 8BCC                    mov ecx, esp
:0040926E 89642420                mov dword ptr [esp+20], esp
:00409272 52                      push edx
:00409273 E8B8050000              call 00409830
:00409278 8D442440                lea eax, dword ptr [esp+40]
:0040927C 8BCE                    mov ecx, esi
:0040927E 50                      push eax
:0040927F FF933C040000            call dword ptr [ebx+0000043C]
:00409285 8B4C2440                mov ecx, dword ptr [esp+40]
:00409289 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040928C 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040928F 49                      dec ecx
:00409290 8908                    mov dword ptr [eax], ecx
:00409292 7509                    jne 0040929D
:00409294 50                      push eax
:00409295 E866801D00              call 005E1300
:0040929A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409186(C), :00409246(C), :00409292(C)
|
:0040929D 8B542424                mov edx, dword ptr [esp+24]
:004092A1 C7442454FFFFFFFF        mov [esp+54], FFFFFFFF
:004092A9 8B4AF4                  mov ecx, dword ptr [edx-0C]
:004092AC 8D42F4                  lea eax, dword ptr [edx-0C]
:004092AF 49                      dec ecx
:004092B0 8908                    mov dword ptr [eax], ecx
:004092B2 7509                    jne 004092BD
:004092B4 50                      push eax
:004092B5 E846801D00              call 005E1300
:004092BA 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040913B(C), :004092B2(C)
|
:004092BD 8B4C244C                mov ecx, dword ptr [esp+4C]
:004092C1 5F                      pop edi
:004092C2 5E                      pop esi
:004092C3 5D                      pop ebp
:004092C4 64890D00000000          mov dword ptr fs:[00000000], ecx
:004092CB 5B                      pop ebx
:004092CC 83C448                  add esp, 00000048
:004092CF C3                      ret



* Referenced by a CALL at Addresses:
|:00408337   , :004083BC   , :004084A7   , :0040852C   
|
:004092D0 64A100000000            mov eax, dword ptr fs:[00000000]
:004092D6 6AFF                    push FFFFFFFF
:004092D8 68EAF76C00              push 006CF7EA
:004092DD 50                      push eax
:004092DE 64892500000000          mov dword ptr fs:[00000000], esp
:004092E5 83EC40                  sub esp, 00000040
:004092E8 53                      push ebx
:004092E9 55                      push ebp
:004092EA 56                      push esi
:004092EB 57                      push edi
:004092EC 8B7C246C                mov edi, dword ptr [esp+6C]
:004092F0 33DB                    xor ebx, ebx
:004092F2 3BFB                    cmp edi, ebx
:004092F4 7D35                    jge 0040932B
:004092F6 51                      push ecx
:004092F7 668B4C246C              mov cx, word ptr [esp+6C]
:004092FC 8BC4                    mov eax, esp
:004092FE 89642418                mov dword ptr [esp+18], esp
:00409302 51                      push ecx
:00409303 668908                  mov word ptr [eax], cx
:00409306 668B542472              mov dx, word ptr [esp+72]
:0040930B 8BCC                    mov ecx, esp
:0040930D 66895002                mov word ptr [eax+02], dx
:00409311 8964241C                mov dword ptr [esp+1C], esp
:00409315 E8A6B1FFFF              call 004044C0
:0040931A 8B442468                mov eax, dword ptr [esp+68]
:0040931E 50                      push eax
:0040931F E86CFA0300              call 00448D90
:00409324 8BF8                    mov edi, eax
:00409326 83C40C                  add esp, 0000000C
:00409329 3BFB                    cmp edi, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004092F4(C)
|
:0040932B 0F84A9010000            je 004094DA
:00409331 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00409337 8B542466                mov edx, dword ptr [esp+66]
:0040933B 81E2FFFF0000            and edx, 0000FFFF
:00409341 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00409347 8D04D0                  lea eax, dword ptr [eax+8*edx]
:0040934A 668B5006                mov dx, word ptr [eax+06]
:0040934E 663B542464              cmp dx, word ptr [esp+64]
:00409353 7410                    je 00409365
:00409355 66895C2464              mov word ptr [esp+64], bx
:0040935A 66895C2466              mov word ptr [esp+66], bx
:0040935F 8B81CD050000            mov eax, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409353(C)
|
:00409365 8B08                    mov ecx, dword ptr [eax]
:00409367 8D542460                lea edx, dword ptr [esp+60]
:0040936B 52                      push edx
:0040936C 8B01                    mov eax, dword ptr [ecx]
:0040936E FF907C050000            call dword ptr [eax+0000057C]
:00409374 8D4C2460                lea ecx, dword ptr [esp+60]
:00409378 66895C246C              mov word ptr [esp+6C], bx
:0040937D 66895C246E              mov word ptr [esp+6E], bx
:00409382 E8C9040000              call 00409850
:00409387 8BF0                    mov esi, eax
:00409389 8D44246C                lea eax, dword ptr [esp+6C]
:0040938D 57                      push edi
:0040938E 50                      push eax
:0040938F 8B2E                    mov ebp, dword ptr [esi]
:00409391 51                      push ecx
:00409392 8D542474                lea edx, dword ptr [esp+74]
:00409396 8BCC                    mov ecx, esp
:00409398 89642420                mov dword ptr [esp+20], esp
:0040939C 52                      push edx
:0040939D E88E040000              call 00409830
:004093A2 8D442424                lea eax, dword ptr [esp+24]
:004093A6 8BCE                    mov ecx, esi
:004093A8 50                      push eax
:004093A9 FF9540040000            call dword ptr [ebp+00000440]
:004093AF 8B442418                mov eax, dword ptr [esp+18]
:004093B3 895C2458                mov dword ptr [esp+58], ebx
:004093B7 3BC3                    cmp eax, ebx
:004093B9 0F85FC000000            jne 004094BB
:004093BF 8D4C2464                lea ecx, dword ptr [esp+64]
:004093C3 E888040000              call 00409850
:004093C8 53                      push ebx
:004093C9 8D4C2470                lea ecx, dword ptr [esp+70]
:004093CD 57                      push edi
:004093CE 51                      push ecx
:004093CF 51                      push ecx
:004093D0 8BF0                    mov esi, eax
:004093D2 8D54247C                lea edx, dword ptr [esp+7C]
:004093D6 8BCC                    mov ecx, esp
:004093D8 8B2E                    mov ebp, dword ptr [esi]
:004093DA 89642424                mov dword ptr [esp+24], esp
:004093DE 52                      push edx
:004093DF E84C040000              call 00409830
:004093E4 8D442444                lea eax, dword ptr [esp+44]
:004093E8 8BCE                    mov ecx, esi
:004093EA 50                      push eax
:004093EB FF953C040000            call dword ptr [ebp+0000043C]
:004093F1 8BF0                    mov esi, eax
:004093F3 8B0E                    mov ecx, dword ptr [esi]
:004093F5 C644245801              mov [esp+58], 01
:004093FA 894C2418                mov dword ptr [esp+18], ecx
:004093FE 668B5604                mov dx, word ptr [esi+04]
:00409402 668954241C              mov word ptr [esp+1C], dx
:00409407 668B4606                mov ax, word ptr [esi+06]
:0040940B 668944241E              mov word ptr [esp+1E], ax
:00409410 8B4E08                  mov ecx, dword ptr [esi+08]
:00409413 894C2420                mov dword ptr [esp+20], ecx
:00409417 8B560C                  mov edx, dword ptr [esi+0C]
:0040941A 8D4610                  lea eax, dword ptr [esi+10]
:0040941D 8D4C2428                lea ecx, dword ptr [esp+28]
:00409421 50                      push eax
:00409422 89542428                mov dword ptr [esp+28], edx
:00409426 E8F51E1E00              call 005EB320
:0040942B 668B4E14                mov cx, word ptr [esi+14]
:0040942F 885C2458                mov byte ptr [esp+58], bl
:00409433 66894C242C              mov word ptr [esp+2C], cx
:00409438 668B5616                mov dx, word ptr [esi+16]
:0040943C 8B4C2444                mov ecx, dword ptr [esp+44]
:00409440 668954242E              mov word ptr [esp+2E], dx
:00409445 8B4618                  mov eax, dword ptr [esi+18]
:00409448 89442430                mov dword ptr [esp+30], eax
:0040944C 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040944F 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00409452 49                      dec ecx
:00409453 8908                    mov dword ptr [eax], ecx
:00409455 7509                    jne 00409460
:00409457 50                      push eax
:00409458 E8A37E1D00              call 005E1300
:0040945D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409455(C)
|
:00409460 395C2418                cmp dword ptr [esp+18], ebx
:00409464 7455                    je 004094BB
:00409466 8D4C2460                lea ecx, dword ptr [esp+60]
:0040946A 66895C2410              mov word ptr [esp+10], bx
:0040946F 66895C2412              mov word ptr [esp+12], bx
:00409474 E8D7030000              call 00409850
:00409479 6A01                    push 00000001
:0040947B 8D542414                lea edx, dword ptr [esp+14]
:0040947F 57                      push edi
:00409480 52                      push edx
:00409481 8BF0                    mov esi, eax
:00409483 51                      push ecx
:00409484 8D44247C                lea eax, dword ptr [esp+7C]
:00409488 8BCC                    mov ecx, esp
:0040948A 8B1E                    mov ebx, dword ptr [esi]
:0040948C 89642424                mov dword ptr [esp+24], esp
:00409490 50                      push eax
:00409491 E89A030000              call 00409830
:00409496 8D4C2444                lea ecx, dword ptr [esp+44]
:0040949A 51                      push ecx
:0040949B 8BCE                    mov ecx, esi
:0040949D FF933C040000            call dword ptr [ebx+0000043C]
:004094A3 8B542444                mov edx, dword ptr [esp+44]
:004094A7 8B4AF4                  mov ecx, dword ptr [edx-0C]
:004094AA 8D42F4                  lea eax, dword ptr [edx-0C]
:004094AD 49                      dec ecx
:004094AE 8908                    mov dword ptr [eax], ecx
:004094B0 7509                    jne 004094BB
:004094B2 50                      push eax
:004094B3 E8487E1D00              call 005E1300
:004094B8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004093B9(C), :00409464(C), :004094B0(C)
|
:004094BB 8B442428                mov eax, dword ptr [esp+28]
:004094BF C7442458FFFFFFFF        mov [esp+58], FFFFFFFF
:004094C7 83C0F4                  add eax, FFFFFFF4
:004094CA 8B08                    mov ecx, dword ptr [eax]
:004094CC 49                      dec ecx
:004094CD 8908                    mov dword ptr [eax], ecx
:004094CF 7509                    jne 004094DA
:004094D1 50                      push eax
:004094D2 E8297E1D00              call 005E1300
:004094D7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040932B(C), :004094CF(C)
|
:004094DA 8B4C2450                mov ecx, dword ptr [esp+50]
:004094DE 5F                      pop edi
:004094DF 5E                      pop esi
:004094E0 5D                      pop ebp
:004094E1 64890D00000000          mov dword ptr fs:[00000000], ecx
:004094E8 5B                      pop ebx
:004094E9 83C44C                  add esp, 0000004C
:004094EC C3                      ret


:004094ED 90                      nop
:004094EE 90                      nop
:004094EF 90                      nop
:004094F0 E90B000000              jmp 00409500
:004094F5 90                      nop
:004094F6 90                      nop
:004094F7 90                      nop
:004094F8 90                      nop
:004094F9 90                      nop
:004094FA 90                      nop
:004094FB 90                      nop
:004094FC 90                      nop
:004094FD 90                      nop
:004094FE 90                      nop
:004094FF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004094F0(U)
|
:00409500 D90560837000            fld dword ptr [00708360]
:00409506 D835108C7000            fdiv dword ptr [00708C10]
:0040950C D91D60987A00            fstp dword ptr [007A9860]
:00409512 C3                      ret


:00409513 90                      nop
:00409514 90                      nop
:00409515 90                      nop
:00409516 90                      nop
:00409517 90                      nop
:00409518 90                      nop
:00409519 90                      nop
:0040951A 90                      nop
:0040951B 90                      nop
:0040951C 90                      nop
:0040951D 90                      nop
:0040951E 90                      nop
:0040951F 90                      nop
:00409520 8A0DA8D47A00            mov cl, byte ptr [007AD4A8]
:00409526 B001                    mov al, 01
:00409528 84C8                    test al, cl
:0040952A 7508                    jne 00409534
:0040952C 0AC8                    or cl, al
:0040952E 880DA8D47A00            mov byte ptr [007AD4A8], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040952A(C)
|
:00409534 E907000000              jmp 00409540
:00409539 90                      nop
:0040953A 90                      nop
:0040953B 90                      nop
:0040953C 90                      nop
:0040953D 90                      nop
:0040953E 90                      nop
:0040953F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409534(U)
|
:00409540 6880104000              push 00401080
:00409545 E8134F2B00              call 006BE45D
:0040954A 59                      pop ecx
:0040954B C3                      ret


:0040954C 90                      nop
:0040954D 90                      nop
:0040954E 90                      nop
:0040954F 90                      nop

* Referenced by a CALL at Addresses:
|:00406E6C   , :00406E89   
|
:00409550 51                      push ecx
:00409551 8B44240C                mov eax, dword ptr [esp+0C]
:00409555 53                      push ebx
:00409556 56                      push esi
:00409557 57                      push edi
:00409558 83EC10                  sub esp, 00000010
:0040955B 33D2                    xor edx, edx
:0040955D 8BDC                    mov ebx, esp
:0040955F 33F6                    xor esi, esi
:00409561 33FF                    xor edi, edi
:00409563 8903                    mov dword ptr [ebx], eax
:00409565 897C241C                mov dword ptr [esp+1C], edi
:00409569 895304                  mov dword ptr [ebx+04], edx
:0040956C 897308                  mov dword ptr [ebx+08], esi
:0040956F 8B742424                mov esi, dword ptr [esp+24]
:00409573 56                      push esi
:00409574 897B0C                  mov dword ptr [ebx+0C], edi
:00409577 E8E4A0FFFF              call 00403660
:0040957C 8BC6                    mov eax, esi
:0040957E 5F                      pop edi
:0040957F 5E                      pop esi
:00409580 5B                      pop ebx
:00409581 59                      pop ecx
:00409582 C20C00                  ret 000C


:00409585 90                      nop
:00409586 90                      nop
:00409587 90                      nop
:00409588 90                      nop
:00409589 90                      nop
:0040958A 90                      nop
:0040958B 90                      nop
:0040958C 90                      nop
:0040958D 90                      nop
:0040958E 90                      nop
:0040958F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409813(U)
|
:00409590 56                      push esi
:00409591 8BF1                    mov esi, ecx
:00409593 E8F8D9FFFF              call 00406F90
:00409598 F644240801              test [esp+08], 01
:0040959D 7409                    je 004095A8
:0040959F 56                      push esi
:004095A0 E85B7D1D00              call 005E1300
:004095A5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040959D(C)
|
:004095A8 8BC6                    mov eax, esi
:004095AA 5E                      pop esi
:004095AB C20400                  ret 0004


:004095AE 90                      nop
:004095AF 90                      nop
:004095B0 B001                    mov al, 01
:004095B2 C3                      ret


:004095B3 90                      nop
:004095B4 90                      nop
:004095B5 90                      nop
:004095B6 90                      nop
:004095B7 90                      nop
:004095B8 90                      nop
:004095B9 90                      nop
:004095BA 90                      nop
:004095BB 90                      nop
:004095BC 90                      nop
:004095BD 90                      nop
:004095BE 90                      nop
:004095BF 90                      nop

* Referenced by a CALL at Addresses:
|:004076D4   , :004076FA   , :00407876   , :0040789F   , :00407A77   
|:00407BC9   
|
:004095C0 51                      push ecx
:004095C1 8B44240C                mov eax, dword ptr [esp+0C]
:004095C5 53                      push ebx
:004095C6 56                      push esi
:004095C7 57                      push edi
:004095C8 83EC10                  sub esp, 00000010
:004095CB 33D2                    xor edx, edx
:004095CD 8BDC                    mov ebx, esp
:004095CF 33F6                    xor esi, esi
:004095D1 33FF                    xor edi, edi
:004095D3 8903                    mov dword ptr [ebx], eax
:004095D5 897C241C                mov dword ptr [esp+1C], edi
:004095D9 895304                  mov dword ptr [ebx+04], edx
:004095DC 897308                  mov dword ptr [ebx+08], esi
:004095DF 8B742424                mov esi, dword ptr [esp+24]
:004095E3 56                      push esi
:004095E4 897B0C                  mov dword ptr [ebx+0C], edi
:004095E7 E874A0FFFF              call 00403660
:004095EC 8BC6                    mov eax, esi
:004095EE 5F                      pop edi
:004095EF 5E                      pop esi
:004095F0 5B                      pop ebx
:004095F1 59                      pop ecx
:004095F2 C20C00                  ret 000C


:004095F5 90                      nop
:004095F6 90                      nop
:004095F7 90                      nop
:004095F8 90                      nop
:004095F9 90                      nop
:004095FA 90                      nop
:004095FB 90                      nop
:004095FC 90                      nop
:004095FD 90                      nop
:004095FE 90                      nop
:004095FF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409823(U)
|
:00409600 56                      push esi
:00409601 8BF1                    mov esi, ecx
:00409603 E8A8E6FFFF              call 00407CB0
:00409608 F644240801              test [esp+08], 01
:0040960D 7409                    je 00409618
:0040960F 56                      push esi
:00409610 E8EB7C1D00              call 005E1300
:00409615 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040960D(C)
|
:00409618 8BC6                    mov eax, esi
:0040961A 5E                      pop esi
:0040961B C20400                  ret 0004


:0040961E 90                      nop
:0040961F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CF70D(U), :006CF72F(U), :006CF737(U), :006CF779(U), :006CF781(U)
|:006D5BC9(U), :006D5D65(U), :006DB670(U), :006DB866(U), :006DBD53(U)
|:006DBDB2(U), :006DCA56(U), :006DCD06(U), :006DCF07(U), :006DCF57(U)
|:006DD0DF(U), :006DD207(U), :006DDA91(U), :006DDCFC(U), :006DF143(U)
|:006E07C9(U), :006E1004(U), :006E10A4(U), :006E1725(U), :006E1E5C(U)
|:006E1E76(U), :006E1E98(U), :006E1EB2(U), :006E1ECC(U), :006E23CD(U)
|:006E265B(U), :006E615B(U), :006E61ED(U), :006E9B2A(U), :006EA083(U)
|:006FB053(U)
|
:00409620 64A100000000            mov eax, dword ptr fs:[00000000]
:00409626 6AFF                    push FFFFFFFF
:00409628 6808F86C00              push 006CF808
:0040962D 50                      push eax
:0040962E 64892500000000          mov dword ptr fs:[00000000], esp
:00409635 56                      push esi
:00409636 8B11                    mov edx, dword ptr [ecx]
:00409638 8B02                    mov eax, dword ptr [edx]
:0040963A 3BC2                    cmp eax, edx
:0040963C 741C                    je 0040965A
:0040963E 8B3500987A00            mov esi, dword ptr [007A9800]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409658(C)
|
:00409644 8BD0                    mov edx, eax
:00409646 8B00                    mov eax, dword ptr [eax]
:00409648 85D2                    test edx, edx
:0040964A 740A                    je 00409656
:0040964C 8932                    mov dword ptr [edx], esi
:0040964E 8BF2                    mov esi, edx
:00409650 893500987A00            mov dword ptr [007A9800], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040964A(C)
|
:00409656 3B01                    cmp eax, dword ptr [ecx]
:00409658 75EA                    jne 00409644

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040963C(C)
|
:0040965A 8B01                    mov eax, dword ptr [ecx]
:0040965C 8900                    mov dword ptr [eax], eax
:0040965E 8B01                    mov eax, dword ptr [ecx]
:00409660 894004                  mov dword ptr [eax+04], eax
:00409663 8B09                    mov ecx, dword ptr [ecx]
:00409665 85C9                    test ecx, ecx
:00409667 740D                    je 00409676
:00409669 A100987A00              mov eax, dword ptr [007A9800]
:0040966E 8901                    mov dword ptr [ecx], eax
:00409670 890D00987A00            mov dword ptr [007A9800], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409667(C)
|
:00409676 8B4C2404                mov ecx, dword ptr [esp+04]
:0040967A 5E                      pop esi
:0040967B 64890D00000000          mov dword ptr fs:[00000000], ecx
:00409682 83C40C                  add esp, 0000000C
:00409685 C3                      ret


:00409686 90                      nop
:00409687 90                      nop
:00409688 90                      nop
:00409689 90                      nop
:0040968A 90                      nop
:0040968B 90                      nop
:0040968C 90                      nop
:0040968D 90                      nop
:0040968E 90                      nop
:0040968F 90                      nop

* Referenced by a CALL at Addresses:
|:004087AB   , :00408970   , :00408D1D   , :00408EE2   , :00420EA2   
|:00423D7D   , :00440341   , :0046D6B9   , :0046D79C   , :0048E848   
|:004907F1   , :004ACFC4   , :004AFF2C   , :004B363C   , :004B3A4C   
|:004B431C   , :004B4AF5   , :004B4B6E   , :004B6B3A   , :004CF4DB   
|:004D7FE5   , :004E51E0   , :004EAA1D   , :0050FFF0   , :005C30FD   
|
:00409690 8B01                    mov eax, dword ptr [ecx]
:00409692 83C008                  add eax, 00000008
:00409695 C3                      ret


:00409696 90                      nop
:00409697 90                      nop
:00409698 90                      nop
:00409699 90                      nop
:0040969A 90                      nop
:0040969B 90                      nop
:0040969C 90                      nop
:0040969D 90                      nop
:0040969E 90                      nop
:0040969F 90                      nop

* Referenced by a CALL at Addresses:
|:00407D61   , :004865F6   , :005658BB   , :005C9F77   , :005C9FD8   
|:005CA394   , :005CBDD8   , :005CD572   , :005CD5FC   , :0063312B   
|:0063313D   , :006333C5   , :006333DA   
|
:004096A0 8B442404                mov eax, dword ptr [esp+04]
:004096A4 56                      push esi
:004096A5 8B7104                  mov esi, dword ptr [ecx+04]
:004096A8 57                      push edi
:004096A9 8B7C2410                mov edi, dword ptr [esp+10]
:004096AD 8BD0                    mov edx, eax
:004096AF 2BF7                    sub esi, edi
:004096B1 C1FE02                  sar esi, 02
:004096B4 85F6                    test esi, esi
:004096B6 7E17                    jle 004096CF
:004096B8 53                      push ebx
:004096B9 2BF8                    sub edi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004096C4(C)
|
:004096BB 8B1C17                  mov ebx, dword ptr [edi+edx]
:004096BE 891A                    mov dword ptr [edx], ebx
:004096C0 83C204                  add edx, 00000004
:004096C3 4E                      dec esi
:004096C4 75F5                    jne 004096BB
:004096C6 5B                      pop ebx
:004096C7 5F                      pop edi
:004096C8 895104                  mov dword ptr [ecx+04], edx
:004096CB 5E                      pop esi
:004096CC C20800                  ret 0008



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004096B6(C)
|
:004096CF 5F                      pop edi
:004096D0 895104                  mov dword ptr [ecx+04], edx
:004096D3 5E                      pop esi
:004096D4 C20800                  ret 0008


:004096D7 90                      nop
:004096D8 90                      nop
:004096D9 90                      nop
:004096DA 90                      nop
:004096DB 90                      nop
:004096DC 90                      nop
:004096DD 90                      nop
:004096DE 90                      nop
:004096DF 90                      nop

* Referenced by a CALL at Addresses:
|:00407D4C   , :004345CF   , :004347D7   , :0045203D   , :004521E9   
|:00488918   , :0053B657   , :0059C8A9   , :005CB682   , :005E4DFC   
|:005E6868   , :005EBAFA   , :00604B3C   , :0061F6BC   , :006CDDDA   
|
:004096E0 53                      push ebx
:004096E1 55                      push ebp
:004096E2 8BE9                    mov ebp, ecx
:004096E4 56                      push esi
:004096E5 8B4C2410                mov ecx, dword ptr [esp+10]
:004096E9 57                      push edi
:004096EA 8B4504                  mov eax, dword ptr [ebp+04]
:004096ED 8B7C2418                mov edi, dword ptr [esp+18]
:004096F1 2BC7                    sub eax, edi
:004096F3 8BF1                    mov esi, ecx
:004096F5 C1F802                  sar eax, 02
:004096F8 85C0                    test eax, eax
:004096FA 7E19                    jle 00409715
:004096FC 2BF9                    sub edi, ecx
:004096FE 8BD8                    mov ebx, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040970F(C)
|
:00409700 8D0437                  lea eax, dword ptr [edi+esi]
:00409703 8BCE                    mov ecx, esi
:00409705 50                      push eax
:00409706 E8151C1E00              call 005EB320
:0040970B 83C604                  add esi, 00000004
:0040970E 4B                      dec ebx
:0040970F 75EF                    jne 00409700
:00409711 8B4C2414                mov ecx, dword ptr [esp+14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004096FA(C)
|
:00409715 8B5D04                  mov ebx, dword ptr [ebp+04]
:00409718 8BFE                    mov edi, esi
:0040971A 3BF3                    cmp esi, ebx
:0040971C 7420                    je 0040973E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040973C(C)
|
:0040971E 8B07                    mov eax, dword ptr [edi]
:00409720 83E80C                  sub eax, 0000000C
:00409723 8B10                    mov edx, dword ptr [eax]
:00409725 4A                      dec edx
:00409726 8910                    mov dword ptr [eax], edx
:00409728 750D                    jne 00409737
:0040972A 50                      push eax
:0040972B E8D07B1D00              call 005E1300
:00409730 8B4C2418                mov ecx, dword ptr [esp+18]
:00409734 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409728(C)
|
:00409737 83C704                  add edi, 00000004
:0040973A 3BFB                    cmp edi, ebx
:0040973C 75E0                    jne 0040971E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040971C(C)
|
:0040973E 897504                  mov dword ptr [ebp+04], esi
:00409741 5F                      pop edi
:00409742 5E                      pop esi
:00409743 5D                      pop ebp
:00409744 8BC1                    mov eax, ecx
:00409746 5B                      pop ebx
:00409747 C20800                  ret 0008


:0040974A 90                      nop
:0040974B 90                      nop
:0040974C 90                      nop
:0040974D 90                      nop
:0040974E 90                      nop
:0040974F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CF715(U), :006CF75F(U), :006CF767(U), :006CF7A9(U), :006CF7B1(U)
|:006CF803(U), :006D5BD1(U), :006D5DA8(U), :006DB87C(U), :006DBA63(U)
|:006DBE1B(U), :006DCADB(U), :006DCB03(U), :006DE61B(U), :006DF1BC(U)
|:006E07D1(U), :006E07E1(U), :006E07E9(U), :006E101F(U), :006E102A(U)
|:006E10B4(U), :006E1745(U), :006E1E64(U), :006E1E7E(U), :006E1E86(U)
|:006E1EA0(U), :006E1EBA(U), :006E1ED4(U), :006E23FF(U), :006E266B(U)
|:006E614D(U), :006E61DF(U), :006E620F(U), :006E638B(U), :006E9B32(U)
|:006EA08B(U), :006EB055(U), :006EC2DB(U), :006EC9AB(U), :006ECB0D(U)
|:006ECCF3(U), :006ECD1B(U), :006EE803(U), :006FB05B(U)
|
:00409750 C3                      ret
:00409751 90                      nop
:00409752 90                      nop
:00409753 90                      nop
:00409754 90                      nop
:00409755 90                      nop
:00409756 90                      nop
:00409757 90                      nop
:00409758 90                      nop
:00409759 90                      nop
:0040975A 90                      nop
:0040975B 90                      nop
:0040975C 90                      nop
:0040975D 90                      nop
:0040975E 90                      nop
:0040975F 90                      nop

* Referenced by a CALL at Addresses:
|:00407F1D   , :004C3E72   , :004C3E93   , :004D82A5   , :00531818   
|
:00409760 8B4C2404                mov ecx, dword ptr [esp+04]
:00409764 85C9                    test ecx, ecx
:00409766 7433                    je 0040979B
:00409768 8B442408                mov eax, dword ptr [esp+08]
:0040976C 8D0440                  lea eax, dword ptr [eax+2*eax]
:0040976F C1E002                  shl eax, 02
:00409772 3D80000000              cmp eax, 00000080
:00409777 760C                    jbe 00409785
:00409779 51                      push ecx
:0040977A E8817B1D00              call 005E1300
:0040977F 83C404                  add esp, 00000004
:00409782 C20800                  ret 0008



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409777(C)
|
:00409785 48                      dec eax
:00409786 C1E803                  shr eax, 03
:00409789 8B1485FC977A00          mov edx, dword ptr [4*eax+007A97FC]
:00409790 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:00409797 8911                    mov dword ptr [ecx], edx
:00409799 8908                    mov dword ptr [eax], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409766(C)
|
:0040979B C20800                  ret 0008
:0040979E 90                      nop
:0040979F 90                      nop

* Referenced by a CALL at Addresses:
|:00407A4E   , :00407BA2   , :00409FC7   , :0040A108   , :0040A22A   
|:0040B919   , :0040BA19   , :0040BADA   , :0040BB49   , :0040BBCF   
|:0040BCFA   , :0040C543   , :0040CAEB   , :0040D481   , :0040D69F   
|:0040D7AB   , :0040D840   , :0040E1A5   , :0040E45A   , :0040E5AC   
|:0040E6AB   , :0040F14E   , :0040F47B   , :0040F809   , :0040F9FD   
|:0040FCCC   , :00410A8B   , :00410C70   , :004113B5   , :00411508   
|:0041186B   , :00411AEC   , :00411D4B   , :00412113   , :0041232C   
|:0041271C   , :00412926   , :00412C42   , :00412E39   , :0041321C   
|:0041342A   , :00413A19   , :00413AAF   , :00413B5B   , :00415A10   
|:0041619B   , :004165CC   , :004165F6   , :004169B0   , :004169E0   
|:00416F9E   , :00417074   , :00419225   , :00419D38   , :00419E3A   
|:0041A02D   , :0041A0A2   , :0041A2B4   , :0041A35E   , :0041A3D3   
|:0041A4B0   , :0041A672   , :00423B54   , :00423C0B   , :0042943F   
|:00429605   , :0042B024   , :0042B167   , :0042C913   , :0042CA3A   
|:0042CB7A   , :0042CCBB   , :0042CDDD   , :0042CEFF   , :0042D256   
|:0042D7AE   , :0042D8B8   , :0042D9D1   , :0042DADB   , :0042DC2F   
|:0042DD39   , :0042DE43   , :0042E1DB   , :0042E272   , :0042E342   
|:0042E3D9   , :0042E4E7   , :0042E50C   , :0042E6F0   , :0042E824   
|:0042E9B2   , :0042EAD5   , :0042EC7E   , :0042EE5B   , :0042EFBA   
|:0042F2ED   , :0043050A   , :004307A0   , :0043083C   , :004308F0   
|:004313F6   , :00431411   , :004314E8   , :00431503   , :004315D9   
|:004315F4   , :0043170A   , :00431726   , :004317FC   , :00431818   
|:004318EE   , :0043190A   , :00431A1B   , :00431A37   , :00431B0D   
|:00431B29   , :00431BFF   , :00431C1B   , :00431CF1   , :00431DB7   
|:00431DF8   , :00431E3C   , :00431F7A   , :0043203D   , :00432106   
|:00432122   , :00432248   , :00432264   , :00432356   , :00432370   
|:004324A6   , :0043252F   , :004325B8   , :00432641   , :004326B0   
|:00432726   , :004327EE   , :0043280A   , :004330DF   , :004331C5   
|:00433231   , :004332C0   , :004338EF   , :004339A0   , :00433A47   
|:00433B4D   , :00433BF4   , :00433C9B   , :00433DBD   , :00433DE5   
|:00433FBF   , :00434066   , :0043410D   , :004341FA   , :004342A1   
|:00434348   , :0043446A   , :00434492   , :00434600   , :004346A7   
|:0043474E   , :00434807   , :004348AE   , :00434955   , :00434A79   
|:00434AA6   , :00434C3F   , :00434DFA   , :00434EB4   , :004350B3   
|:00435176   , :00435227   , :004352D8   , :00435389   , :0043543A   
|:0043554A   , :004356F7   , :004358A0   , :00435A5B   , :00435C08   
|:00435DF4   , :00435EA8   , :0043600B   , :004361EE   , :004362A2   
|:00436422   , :00436571   , :004366C3   , :00443621   , :00443A38   
|:0044BDF0   , :0044BF04   , :0044C13D   , :0044C349   , :0044C45F   
|:0044C57A   , :0044C693   , :0044C7BA   , :0044C912   , :0044CA53   
|:0044D08F   , :0044DC29   , :0044DD48   , :0044DEF9   , :0044E0FF   
|:0044E225   , :0044E3EF   , :0044E50A   , :0044E711   , :0044E837   
|:0044EE69   , :00450042   , :004500E2   , :0045017D   , :00450231   
|:004502CC   , :00450367   , :00450478   , :0045049F   , :00450634   
|:004506D0   , :004507AD   , :00450849   , :0045095A   , :0045097F   
|:00450B16   , :00450BBB   , :00450C56   , :00450CF1   , :00450DCC   
|:00450E67   , :00450F02   , :00450F9D   , :004510AD   , :004510D2   
|:00451266   , :0045130B   , :004513A6   , :00451483   , :0045151E   
|:004515C2   , :004516E4   , :0045170C   , :004518B8   , :0045195D   
|:00451A02   , :00451AA7   , :00451B8E   , :00451C33   , :00451CD8   
|:00451D7D   , :00451EA3   , :00451ECB   , :0045209B   , :00452140   
|:00452247   , :004522EC   , :00452412   , :0045243A   , :004525E0   
|:004526ED   , :004530A3   , :00453125   , :004534A9   , :004534D1   
|:004536D7   , :004537B1   , :004537D9   , :004539E3   , :00453AC1   
|:00453AEC   , :00453D0B   , :00453DEE   , :00453E19   , :0045407E   
|:0045413D   , :00454260   , :004546AF   , :00454731   , :00454AC2   
|:00454BE3   , :00454C9C   , :00454DC3   , :00454E70   , :00454F21   
|:00454FFA   , :004550AB   , :004552D1   , :004552F9   , :0045548A   
|:004555AF   , :004565E6   , :00456755   , :004568C0   , :00456A93   
|:00456BBD   , :0045731B   , :004573B1   , :00457447   , :004603B8   
|:004633E2   , :0046345C   , :0046B125   , :005785FE   , :00578731   
|:00578867   , :0057899C   , :00578AD1   , :00578D0F   , :00578DB7   
|:005790D7   , :0057E4B3   , :0057E4F8   , :0057E68A   , :0057E7A4   
|:0057E8BA   , :0057E9D4   , :0057EB25   , :0057F05A   , :0057F108   
|:0057FB50   , :0057FBF5   , :0057FC78   , :0057FCFB   , :0057FD7B   
|:00581C7D   , :00581CAD   , :00581D01   , :00581E5C   , :00581E8D   
|:00581EE2   , :005DC0DB   , :005DC214   , :005DC34D   , :005DC486   
|:005DCF22   , :005DD058   , :005DD18F   , :005DD2C6   , :005DD3FD   
|:005DDC60   , :005DDDED   , :005E0AF6   , :005E0B6F   
|
:004097A0 51                      push ecx
:004097A1 8B44240C                mov eax, dword ptr [esp+0C]
:004097A5 56                      push esi
:004097A6 8B74240C                mov esi, dword ptr [esp+0C]
:004097AA 50                      push eax
:004097AB 56                      push esi
:004097AC C744240C00000000        mov [esp+0C], 00000000
:004097B4 E817AF1F00              call 006046D0
:004097B9 8BC6                    mov eax, esi
:004097BB 5E                      pop esi
:004097BC 59                      pop ecx
:004097BD C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00407F0D   , :0046CA5C   , :004C3DC2   , :004CF6CF   , :004D0DB8   
|:004EACB3   , :004EE5BF   , :00531808   
|
:004097C0 8B11                    mov edx, dword ptr [ecx]
:004097C2 8B02                    mov eax, dword ptr [edx]
:004097C4 3BC2                    cmp eax, edx
:004097C6 741E                    je 004097E6
:004097C8 56                      push esi
:004097C9 8B3500987A00            mov esi, dword ptr [007A9800]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004097E3(C)
|
:004097CF 8BD0                    mov edx, eax
:004097D1 8B00                    mov eax, dword ptr [eax]
:004097D3 85D2                    test edx, edx
:004097D5 740A                    je 004097E1
:004097D7 8932                    mov dword ptr [edx], esi
:004097D9 8BF2                    mov esi, edx
:004097DB 893500987A00            mov dword ptr [007A9800], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004097D5(C)
|
:004097E1 3B01                    cmp eax, dword ptr [ecx]
:004097E3 75EA                    jne 004097CF
:004097E5 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004097C6(C)
|
:004097E6 8B01                    mov eax, dword ptr [ecx]
:004097E8 8900                    mov dword ptr [eax], eax
:004097EA 8B09                    mov ecx, dword ptr [ecx]
:004097EC 894904                  mov dword ptr [ecx+04], ecx
:004097EF C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CF5DB(U), :006CF73F(U), :006CF747(U), :006CF74F(U), :006CF757(U)
|:006CF789(U), :006CF791(U), :006CF799(U), :006CF7A1(U), :006CF7C3(U)
|:006CF7CB(U), :006CF7DD(U), :006CF7E5(U), :006D1F4A(U), :006D1F52(U)
|:006D1F5A(U), :006D1F6A(U), :006DBE7B(U), :006DDF2A(U), :006DE04D(U)
|:006DEBEF(U), :006DEEDD(U), :006DF7DE(U), :006E062C(U), :006E07D9(U)
|:006E0876(U), :006E09A5(U), :006E09BD(U), :006E09C5(U), :006E0B2F(U)
|:006E0B50(U), :006E0BD3(U), :006E0BDB(U), :006E0BE6(U), :006E0BEE(U)
|:006E0BF6(U), :006E0C01(U), :006E0C0C(U), :006E0C14(U), :006E0C83(U)
|:006E0C99(U), :006E0CAC(U), :006E0CC2(U), :006E0CD5(U), :006E0CEB(U)
|:006E0CFE(U), :006E0D1E(U), :006E0D34(U), :006E0D71(U), :006E0D79(U)
|:006E0D8F(U), :006E0DA2(U), :006E0DB5(U), :006E0DCB(U), :006E0EB7(U)
|:006E100C(U), :006E1014(U), :006E107D(U), :006E1093(U), :006E10AC(U)
|:006E10C6(U), :006E10DC(U), :006E10ED(U), :006E1151(U), :006E1177(U)
|:006E118A(U), :006E11A0(U), :006E11C3(U), :006E11D9(U), :006E11EC(U)
|:006E11F4(U), :006E120A(U), :006E121D(U), :006E1233(U), :006E1292(U)
|:006E12D1(U), :006E13A3(U), :006E13C1(U), :006E13CA(U), :006E13E4(U)
|:006E1402(U), :006E1425(U), :006E143B(U), :006E144E(U), :006E1464(U)
|:006E146D(U), :006E1487(U), :006E148F(U), :006E14A5(U), :006E14C0(U)
|:006E14C8(U), :006E14DE(U), :006E14E7(U), :006E14F9(U), :006E1501(U)
|:006E1517(U), :006E1520(U), :006E1528(U), :006E153A(U), :006E1568(U)
|:006E157B(U), :006E1583(U), :006E1599(U), :006E15AC(U), :006E15C2(U)
|:006E15CB(U), :006E15D3(U), :006E15E5(U), :006E15ED(U), :006E1603(U)
|:006E1616(U), :006E162C(U), :006E163F(U), :006E1655(U), :006E165E(U)
|:006E1666(U), :006E166E(U), :006E1680(U), :006E1696(U), :006E16A9(U)
|:006E16BF(U), :006E1706(U), :006E171C(U), :006E172D(U), :006E1735(U)
|:006E173D(U), :006E1769(U), :006E1771(U), :006E1787(U), :006E1798(U)
|:006E17A0(U), :006E17B2(U), :006E17BA(U), :006E17D0(U), :006E17E3(U)
|:006E1801(U), :006E1854(U), :006E187C(U), :006E1884(U), :006E189A(U)
|:006E18AD(U), :006E18CB(U), :006E1A08(U), :006E1A26(U), :006E1A41(U)
|:006E1A49(U), :006E1A5B(U), :006E1A63(U), :006E1AA3(U), :006E1AAB(U)
|:006E1AD1(U), :006E1F2E(U), :006E1F44(U), :006E237E(U), :006E2386(U)
|:006E238E(U), :006E2396(U), :006E23AC(U), :006E23C2(U), :006E23D5(U)
|:006E23DD(U), :006E23F3(U), :006E2414(U), :006E241F(U), :006E2427(U)
|:006E2432(U), :006E243D(U), :006E2448(U), :006E2450(U), :006E245B(U)
|:006E2466(U), :006E246E(U), :006E2484(U), :006E248F(U), :006E24A5(U)
|:006E24BB(U), :006E24C6(U), :006E24DC(U), :006E24E7(U), :006E24FD(U)
|:006E2508(U), :006E2513(U), :006E251E(U), :006E26E5(U), :006E26FE(U)
|:006E2727(U), :006E2737(U), :006E2757(U), :006E279F(U), :006E27AF(U)
|:006E2821(U), :006E2829(U), :006E287D(U), :006E289F(U), :006E2937(U)
|:006E294D(U), :006E2988(U), :006E2CB5(U), :006E2ED5(U), :006E3221(U)
|:006E365D(U), :006E3916(U), :006E3B59(U), :006E3E13(U), :006E400B(U)
|:006E4201(U), :006E43D9(U), :006E46AD(U), :006E4993(U), :006E4BAF(U)
|:006E4DA5(U), :006E4DBB(U), :006E4E28(U), :006E502B(U), :006E527B(U)
|:006E546B(U), :006E5481(U), :006E54B2(U), :006E5757(U), :006E5775(U)
|:006E577E(U), :006E5790(U), :006E5798(U), :006E57AE(U), :006E57C1(U)
|:006E57D7(U), :006E5814(U), :006E582A(U), :006E589D(U), :006E58B3(U)
|:006E59E0(U), :006E5BB1(U), :006E5BC7(U), :006E5E5C(U), :006E5EA2(U)
|:006E5FE1(U), :006E6229(U), :006E623F(U), :006E625A(U), :006E6278(U)
|:006E6366(U), :006E663F(U), :006E67DD(U), :006E67F3(U), :006E6824(U)
|:006E6868(U), :006E6878(U), :006E688E(U), :006E68EB(U), :006E6B9B(U)
|:006E6BB1(U), :006E6C56(U), :006E6D69(U), :006E6FA5(U), :006E7317(U)
|:006E751A(U), :006E7533(U), :006E757E(U), :006E7755(U), :006E778B(U)
|:006E77AC(U), :006E791D(U), :006E7933(U), :006E79EE(U), :006E7BDB(U)
|:006E7BF1(U), :006E7C34(U), :006E7E29(U), :006E8027(U), :006E803D(U)
|:006E808E(U), :006E81FD(U), :006E8205(U), :006E821B(U), :006E823C(U)
|:006E842B(U), :006E8441(U), :006E846A(U), :006E866B(U), :006E8681(U)
|:006E869C(U), :006E86BA(U), :006E86DB(U), :006E88BB(U), :006E88D1(U)
|:006E890E(U), :006E892C(U), :006E894D(U), :006E8BE2(U), :006E8C1A(U)
|:006E8C22(U), :006E8C34(U), :006E8C8A(U), :006E8C95(U), :006E8CB6(U)
|:006E8CC9(U), :006E8CEF(U), :006E8D38(U), :006E8D52(U), :006E8D70(U)
|:006E8F64(U), :006E9189(U), :006E94DF(U), :006E9BD2(U), :006E9BE8(U)
|:006E9E7C(U), :006EA0AB(U), :006EA339(U), :006EA9E4(U), :006EB560(U)
|:006EE5B3(U), :006EE5C5(U)
|
:004097F0 8B4110                  mov eax, dword ptr [ecx+10]
:004097F3 8B48F4                  mov ecx, dword ptr [eax-0C]
:004097F6 83E80C                  sub eax, 0000000C
:004097F9 49                      dec ecx
:004097FA 8908                    mov dword ptr [eax], ecx
:004097FC 7507                    jne 00409805
:004097FE 50                      push eax
:004097FF E8FC7A1D00              call 005E1300
:00409804 59                      pop ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004097FC(C)
|
:00409805 C3                      ret
:00409806 90                      nop
:00409807 90                      nop
:00409808 90                      nop
:00409809 90                      nop
:0040980A 90                      nop
:0040980B 90                      nop
:0040980C 90                      nop
:0040980D 90                      nop
:0040980E 90                      nop
:0040980F 90                      nop
:00409810 83E908                  sub ecx, 00000008
:00409813 E978FDFFFF              jmp 00409590
:00409818 CC                      int 03
:00409819 CC                      int 03
:0040981A CC                      int 03
:0040981B CC                      int 03
:0040981C CC                      int 03
:0040981D CC                      int 03
:0040981E CC                      int 03
:0040981F CC                      int 03
:00409820 83E908                  sub ecx, 00000008
:00409823 E9D8FDFFFF              jmp 00409600
:00409828 CC                      int 03
:00409829 CC                      int 03
:0040982A CC                      int 03
:0040982B CC                      int 03
:0040982C CC                      int 03
:0040982D CC                      int 03
:0040982E CC                      int 03
:0040982F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040717E   , :0040718B   , :00407203   , :00407210   , :004075BF   
|:004080CF   , :004080DC   , :0040831E   , :0040832B   , :004083A3   
|:004083B0   , :0040848E   , :0040849B   , :00408513   , :00408520   
|:004087B8   , :00408801   , :0040897D   , :004089C6   , :00408D2A   
|:00408D73   , :00408EEF   , :00408F38   , :0040916A   , :004091C2   
|:00409273   , :0040939D   , :004093DF   , :00409491   , :0041B67E   
|:0041B68B   , :0041B967   , :0041BC5B   , :0041BD15   , :0041BDE3   
|:0041BEB7   , :0041BF5A   , :0041BFC0   , :0041BFD4   , :0041C266   
|:00420613   , :004206D6   , :004208EE   , :004209B5   , :004209E5   
|:00420A59   , :004221F8   , :0042A87D   , :0042A900   , :0042C0A2   
|:0043A5C0   , :0043A5F4   , :0043CE7B   , :0043CF04   , :0043D360   
|:0043E0A4   , :0043E0CC   , :0043E0D9   , :0044034E   , :00442968   
|:00442979   , :00443455   , :00444647   , :00445F75   , :00448E99   
|:00461630   , :00462826   , :00467CE9   , :004688DA   , :0046A6E3   
|:0046E8C3   , :0046E923   , :0046E948   , :0046E96F   , :0046EA60   
|:0046EB70   , :0046EB9B   , :0046EBC2   , :0046EBDB   , :0046EC08   
|:0046ECE2   , :0046ED15   , :0046EE32   , :0046EE71   , :0046EE8E   
|:0046EECC   , :0046EF0F   , :0046EF6E   , :0046EFB4   , :0046EFF2   
|:0046F064   , :0046F0C6   , :0046F11C   , :0046F17A   , :0046F1E3   
|:004800B1   , :004804C3   , :00481F5B   , :00482D30   , :00482FE0   
|:0048300B   , :00483032   , :0048304B   , :00483078   , :004831B2   
|:004831E5   , :00483263   , :0048330E   , :00483335   , :0048339F   
|:00483412   , :0048345B   , :004834E8   , :00483582   , :00483608   
|:00483666   , :004836D0   , :0048376A   , :004837DD   , :004842A5   
|:00484A67   , :00484A78   , :004877FD   , :00487857   , :004879BF   
|:0048E003   , :0048E056   , :0048E0A9   , :0048E0FC   , :0048E855   
|:0048ED46   , :0048FC2C   , :004903B0   , :00490416   , :00490648   
|:0049BBBB   , :0049BF3E   , :0049F603   , :004A0FDD   , :004A1473   
|:004A189E   , :004A1AF9   , :004A1BA2   , :004A2429   , :004A280F   
|:004A29AB   , :004A2B60   , :004A3041   , :004A3244   , :004A34E0   
|:004A3930   , :004A3AB7   , :004A3C70   , :004A4271   , :004A429A   
|:004A4717   , :004A4790   , :004A48A7   , :004A5A3B   , :004A5D66   
|:004A5D79   , :004A5F7A   , :004A60E2   , :004A60F5   , :004A63A0   
|:004A66B8   , :004A6B92   , :004A6BAC   , :004A6C1A   , :004A6C34   
|:004A6E1F   , :004A6E9A   , :004A6F3E   , :004A8166   , :004A817F   
|:004A8225   , :004A823E   , :004A8364   , :004A8951   , :004A9B95   
|:004AA7C0   , :004AA945   , :004AB1EC   , :004ABA06   , :004ABCA0   
|:004ABCB1   , :004AE3AD   , :004AFD8D   , :004AFE3E   , :004B0E49   
|:004B1E58   , :004B274A   , :004B2765   , :004B2ADD   , :004B2B90   
|:004B59B3   , :004B5A13   , :004B5A38   , :004B5A5F   , :004B5AD0   
|:004B5E20   , :004B5E4B   , :004B5E72   , :004B5E8B   , :004B5EB8   
|:004B5F72   , :004B5FA5   , :004B6052   , :004B6091   , :004B60AE   
|:004B60EC   , :004B612F   , :004B618E   , :004B61D4   , :004B6212   
|:004B6284   , :004B62E6   , :004B633C   , :004B639A   , :004B6403   
|:004B68A6   , :004B7069   , :004C0252   , :004C26AD   , :004C2860   
|:004C288E   , :004C3569   , :004C385F   , :004C5877   , :004C58C5   
|:004C7CCF   , :004C7D73   , :004C8A0A   , :004C8C75   , :004C8E93   
|:004C9600   , :004C969B   , :004CA900   , :004CA910   , :004CBF38   
|:004CC1A1   , :004CCDA6   , :004CDCD2   , :004CE091   , :004CE431   
|:004CE6BB   , :004CE6D1   , :004CE8FC   , :004CEA07   , :004CEA1A   
|:004CED74   , :004CF3D3   , :004CF4E8   , :004CF525   , :004CFF72   
|:004D02C9   , :004D1056   , :004D1892   , :004D18C2   , :004D1941   
|:004D21ED   , :004D2528   , :004D43E6   , :004D43F5   , :004D4423   
|:004D4432   , :004D507A   , :004D58A9   , :004D5B49   , :004D5EAD   
|:004D5F58   , :004D617D   , :004D628C   , :004D633D   , :004D642E   
|:004D6A0E   , :004D6B13   , :004D6DAA   , :004D6DE6   , :004D6EBC   
|:004D712F   , :004D7556   , :004D75A0   , :004D7672   , :004D7750   
|:004D7902   , :004D795A   , :004D7AB7   , :004D7B0A   , :004D7FF2   
|:004D80DD   , :004D81B4   , :004D88F2   , :004D8C8E   , :004D8EA7   
|:004DA025   , :004DA03C   , :004DA4AF   , :004DA55D   , :004DA61C   
|:004DA856   , :004DD6D8   , :004DDA02   , :004DDEAB   , :004DDFCD   
|:004DE0D5   , :004DE121   , :004DE1DE   , :004DE1F1   , :004E50E5   
|:004E50F6   , :004E54C5   , :004E54D6   , :004E5785   , :004E5796   
|:004E5A45   , :004E5A56   , :004EA52B   , :004EA5D3   , :004EA66A   
|:004EA738   , :004EAA2A   , :004EAB13   , :004EAC0C   , :004EB169   
|:004EB1D2   , :004EB29B   , :004EB3B3   , :004EB468   , :004EB53B   
|:004EB803   , :004EB813   , :004EB9E5   , :004EB9F5   , :004EBC6F   
|:004EC036   , :004EC191   , :004EC2C2   , :004EC7B3   , :004ECF9D   
|:004EF168   , :004EF1ED   , :004EF2DD   , :004EF384   , :004EF4E8   
|:004EFC52   , :004EFCD4   , :004EFDC3   , :004EFE6A   , :004F010D   
|:004F0600   , :00502513   , :005025AF   , :00502BF1   , :00502BFE   
|:00508E4E   , :0050907D   , :005092B2   , :005094E5   , :00509825   
|:0050A051   , :0050DD7B   , :0050EA54   , :00510013   , :00510F3D   
|:0051136B   , :00513FD1   , :005140C0   , :0051469C   , :00515A73   
|:00518123   , :0051AAE5   , :0051FEC8   , :00520B59   , :005217E9   
|:005224FE   , :00523FA1   , :00524995   , :00524AE8   , :00524B2E   
|:00524BE1   , :00524CDB   , :005252F6   , :005257CA   , :00525811   
|:0052592A   , :00525E50   , :0052624C   , :00526723   , :00526AA1   
|:00526AFB   , :00526D6E   , :005291DE   , :0052921F   , :0052A7FF   
|:0052AEF6   , :0052D64B   , :0052D6A4   , :0052D766   , :0052E715   
|:0052E9AC   , :0052EC1F   , :00530DF5   , :00531693   , :00531905   
|:00531970   , :0053656F   , :005393D6   , :00539431   , :005396E6   
|:00557CD7   , :005592FC   , :00561C86   , :00561D67   , :00563A02   
|:00563A32   , :005674BB   , :00567519   , :005676E4   , :00567F3F   
|:00567F4F   , :005682F9   , :005686AF   , :00568AA3   , :00568C38   
|:00568CF0   , :00568DD0   , :00568EAE   , :00568F8E   , :00569070   
|:0056914F   , :0056922E   , :0056930D   , :005693F7   , :005694E1   
|:005696B8   , :00569A5A   , :0057006C   , :005700D2   , :005702AC   
|:00570928   , :00572D29   , :005B7AEF   , :005B7BF8   , :005B8107   
|:005B8304   , :0062741F   
|
:00409830 8BC1                    mov eax, ecx
:00409832 8B4C2404                mov ecx, dword ptr [esp+04]
:00409836 668B11                  mov dx, word ptr [ecx]
:00409839 668910                  mov word ptr [eax], dx
:0040983C 668B4902                mov cx, word ptr [ecx+02]
:00409840 66894802                mov word ptr [eax+02], cx
:00409844 C20400                  ret 0004


:00409847 90                      nop
:00409848 90                      nop
:00409849 90                      nop
:0040984A 90                      nop
:0040984B 90                      nop
:0040984C 90                      nop
:0040984D 90                      nop
:0040984E 90                      nop
:0040984F 90                      nop

* Referenced by a CALL at Addresses:
|:004073B4   , :00407405   , :0040759B   , :0040768C   , :00407EF5   
|:00408798   , :004087E1   , :0040895D   , :004089A6   , :00408D0A   
|:00408D53   , :00408ECF   , :00408F18   , :0040914F   , :00409190   
|:004091A6   , :00409256   , :00409382   , :004093C3   , :00409474   
|:00418F0B   , :00418F3E   , :00418F71   , :0041B923   , :0041BB1A   
|:0041BB4A   , :0041BD98   , :004217A2   , :0043A5A6   , :0043A5DB   
|:0043A623   , :0043A6BA   , :0043A7E9   , :0043D1E0   , :0043D2B7   
|:0043DF09   , :0043DFD5   , :0043E041   , :0043E057   , :0043E08F   
|:0043E3B6   , :0043E474   , :0043E4DE   , :0043E4F4   , :00444565   
|:00444632   , :00444EF2   , :00444F88   , :004451DC   , :0046C49B   
|:0046C57C   , :0046CC56   , :0046CC7E   , :0046CC8B   , :0046F8A8   
|:0046F9D1   , :0048007B   , :004804AD   , :004809FC   , :00480A20   
|:00480A2D   , :0048FC14   , :0049B88B   , :0049BB99   , :0049BF1C   
|:0049F49B   , :0049F53E   , :0049F5E3   , :0049F71D   , :0049F8E3   
|:0049FB11   , :004A03CB   , :004A0719   , :004A0A20   , :004A0FCA   
|:004A144C   , :004A1888   , :004A1AE1   , :004A1B8F   , :004A1CF0   
|:004A1F4F   , :004A21B7   , :004A2412   , :004A27F8   , :004A298F   
|:004A2B53   , :004A3022   , :004A322C   , :004A34C6   , :004A3626   
|:004A3738   , :004A3919   , :004A3A97   , :004A3C58   , :004A4259   
|:004A4282   , :004A44BD   , :004A5CAC   , :004A5D41   , :004A6095   
|:004A60BD   , :004A6388   , :004A656B   , :004A660E   , :004A66A3   
|:004A6B99   , :004A6C21   , :004A6C77   , :004A6CB0   , :004A6DF7   
|:004A6E0E   , :004A6E6F   , :004A6F11   , :004A78CD   , :004A816D   
|:004A822C   , :004A827C   , :004A8346   , :004A8629   , :004A8929   
|:004A8940   , :004A8DE9   , :004A8DFF   , :004A90B9   , :004A92A1   
|:004A9529   , :004A9AA9   , :004A9CCC   , :004A9D5A   , :004A9E7B   
|:004AA7AA   , :004AA92F   , :004AB0EC   , :004AB1D6   , :004AB9F2   
|:004AD29B   , :004AD2A8   , :004AD3CB   , :004AD3D8   , :004AFD6A   
|:004B1FD0   , :004B1FFC   , :004B21E1   , :004B235E   , :004C0259   
|:004C026F   , :004C244F   , :004C24C8   , :004C269C   , :004C2825   
|:004C283A   , :004C287B   , :004C2C9E   , :004C2CB4   , :004C311E   
|:004C3214   , :004C32EF   , :004C35BF   , :004C3866   , :004C3AF9   
|:004C3B0F   , :004C3B76   , :004C3B7F   , :004C3E01   , :004C3E0A   
|:004C60D5   , :004C744D   , :004C7D7C   , :004C8FAD   , :004C9039   
|:004C911D   , :004C95E7   , :004C9655   , :004C9678   , :004C9AC0   
|:004CB189   , :004CBF1F   , :004CC18A   , :004CCC7D   , :004CE047   
|:004CE690   , :004CE8AE   , :004CE8D0   , :004CE8E6   , :004CF067   
|:004CF4C7   , :004CFF04   , :004CFF1A   , :004CFF38   , :004CFF45   
|:004CFF5B   , :004D003F   , :004D0294   , :004D043C   , :004D103D   
|:004D24B3   , :004D2512   , :004D2936   , :004D296B   , :004D2EE6   
|:004D2F1B   , :004D3AA6   , :004D4274   , :004D429D   , :004D42D6   
|:004D4306   , :004D43C7   , :004D4404   , :004D505E   , :004D541C   
|:004D5889   , :004D59BD   , :004D5B2A   , :004D5C58   , :004D6841   
|:004D684E   , :004D7D9A   , :004D7DEB   , :004D7FB2   , :004D88E1   
|:004D8E96   , :004DA487   , :004DA53E   , :004DA5F9   , :004DA82B   
|:004DA848   , :004DDFA9   , :004DDFB6   , :004DE0C3   , :004DE10A   
|:004DE7B8   , :004E284B   , :004E4F87   , :004E5007   , :004E5078   
|:004E51E7   , :004E5367   , :004E53E7   , :004E5458   , :004E5627   
|:004E56A7   , :004E5718   , :004E58E7   , :004E5967   , :004E59D8   
|:004E636B   , :004E6549   , :004E6738   , :004E69B9   , :004EAA06   
|:004EABE2   , :004EAFD8   , :004EB1AE   , :004EB391   , :004EB513   
|:004EBFC4   , :004EC12A   , :004EC578   , :004EC5B8   , :004EF0CC   
|:004EF146   , :004EF1D5   , :004EF2BF   , :004EF36C   , :004EFBB8   
|:004EFC33   , :004EFCBC   , :004EFDA5   , :004EFE52   , :004F759E   
|:004F78C0   , :004F7C72   , :004F8305   , :004F85A6   , :004F9CA1   
|:004FBF3F   , :004FBFF7   , :0050065F   , :005025B8   , :00502BCC   
|:00507B87   , :00507CB8   , :00508E2E   , :00508F5F   , :0050905E   
|:0050918E   , :00509755   , :00509A17   , :00509A4B   , :0050AF2C   
|:0050AF7B   , :0050BA2F   , :0050BCAC   , :0050BCE0   , :0050F1B7   
|:0050FFF7   , :00513C60   , :005157E6   , :00515A5B   , :0051A7B1   
|:0051BE80   , :0051C492   , :0051FEB3   , :00520B44   , :005217D4   
|:005224E9   , :00524ACC   , :00524B13   , :00525096   , :005250A3   
|:005257AE   , :005257F3   , :00527704   , :00527F5B   , :005284C2   
|:00528F2A   , :0052AED3   , :0052B84F   , :0052B89F   , :0052D669   
|:0052E53E   , :0052E98E   , :0052EBFB   , :0052F302   , :00530DE0   
|:00531677   , :005318DF   , :005318EF   , :00531956   , :00533CF2   
|:0053621B   , :00538F03   , :00540AE9   , :0055E019   , :00561C70   
|:005AEB2C   , :005AEFBC   , :005B0AFA   , :005B4088   , :005B7A2E   
|:005B7AD3   , :005B7BDA   , :005B80B6   , :005B80EB   , :005B82E6   
|
:00409850 8B15089C7A00            mov edx, dword ptr [007A9C08]
:00409856 33C0                    xor eax, eax
:00409858 668B4102                mov ax, word ptr [ecx+02]
:0040985C 8B92CD050000            mov edx, dword ptr [edx+000005CD]
:00409862 8D04C2                  lea eax, dword ptr [edx+8*eax]
:00409865 668B5006                mov dx, word ptr [eax+06]
:00409869 663B11                  cmp dx, word ptr [ecx]
:0040986C 7419                    je 00409887
:0040986E 66C7010000              mov word ptr [ecx], 0000
:00409873 66C741020000            mov [ecx+02], 0000
:00409879 A1089C7A00              mov eax, dword ptr [007A9C08]
:0040987E 8B88CD050000            mov ecx, dword ptr [eax+000005CD]
:00409884 8B01                    mov eax, dword ptr [ecx]
:00409886 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040986C(C)
|
:00409887 8B00                    mov eax, dword ptr [eax]
:00409889 C3                      ret


:0040988A 90                      nop
:0040988B 90                      nop
:0040988C 90                      nop
:0040988D 90                      nop
:0040988E 90                      nop
:0040988F 90                      nop
:00409890 668B4102                mov ax, word ptr [ecx+02]
:00409894 56                      push esi
:00409895 8B35089C7A00            mov esi, dword ptr [007A9C08]
:0040989B 8BD0                    mov edx, eax
:0040989D 81E2FFFF0000            and edx, 0000FFFF
:004098A3 8BB6CD050000            mov esi, dword ptr [esi+000005CD]
:004098A9 668B54D606              mov dx, word ptr [esi+8*edx+06]
:004098AE 5E                      pop esi
:004098AF 663B11                  cmp dx, word ptr [ecx]
:004098B2 750B                    jne 004098BF
:004098B4 6685C0                  test ax, ax
:004098B7 7406                    je 004098BF
:004098B9 B801000000              mov eax, 00000001
:004098BE C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004098B2(C), :004098B7(C)
|
:004098BF 33C0                    xor eax, eax
:004098C1 C3                      ret


:004098C2 90                      nop
:004098C3 90                      nop
:004098C4 90                      nop
:004098C5 90                      nop
:004098C6 90                      nop
:004098C7 90                      nop
:004098C8 90                      nop
:004098C9 90                      nop
:004098CA 90                      nop
:004098CB 90                      nop
:004098CC 90                      nop
:004098CD 90                      nop
:004098CE 90                      nop
:004098CF 90                      nop

* Referenced by a CALL at Addresses:
|:00624615   , :00624627   , :0062463C   , :006571B6   
|
:004098D0 8B44240C                mov eax, dword ptr [esp+0C]
:004098D4 48                      dec eax
:004098D5 7820                    js 004098F7
:004098D7 53                      push ebx
:004098D8 8B5C2414                mov ebx, dword ptr [esp+14]
:004098DC 55                      push ebp
:004098DD 8B6C2410                mov ebp, dword ptr [esp+10]
:004098E1 56                      push esi
:004098E2 8B742410                mov esi, dword ptr [esp+10]
:004098E6 57                      push edi
:004098E7 8D7801                  lea edi, dword ptr [eax+01]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004098F1(C)
|
:004098EA 8BCE                    mov ecx, esi
:004098EC FFD3                    call ebx
:004098EE 03F5                    add esi, ebp
:004098F0 4F                      dec edi
:004098F1 75F7                    jne 004098EA
:004098F3 5F                      pop edi
:004098F4 5E                      pop esi
:004098F5 5D                      pop ebp
:004098F6 5B                      pop ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004098D5(C)
|
:004098F7 C21000                  ret 0010
:004098FA 90                      nop
:004098FB 90                      nop
:004098FC 90                      nop
:004098FD 90                      nop
:004098FE 90                      nop
:004098FF 90                      nop
:00409900 E90B000000              jmp 00409910
:00409905 90                      nop
:00409906 90                      nop
:00409907 90                      nop
:00409908 90                      nop
:00409909 90                      nop
:0040990A 90                      nop
:0040990B 90                      nop
:0040990C 90                      nop
:0040990D 90                      nop
:0040990E 90                      nop
:0040990F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409900(U)
|
:00409910 C705E0987A00A69B443F    mov dword ptr [007A98E0], 3F449BA6
:0040991A C705E4987A001283203F    mov dword ptr [007A98E4], 3F208312
:00409924 C705E8987A0077BE1F3E    mov dword ptr [007A98E8], 3E1FBE77
:0040992E C3                      ret


:0040992F 90                      nop
:00409930 E90B000000              jmp 00409940
:00409935 90                      nop
:00409936 90                      nop
:00409937 90                      nop
:00409938 90                      nop
:00409939 90                      nop
:0040993A 90                      nop
:0040993B 90                      nop
:0040993C 90                      nop
:0040993D 90                      nop
:0040993E 90                      nop
:0040993F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409930(U)
|
:00409940 C705F0987A009A99193F    mov dword ptr [007A98F0], 3F19999A
:0040994A C705F4987A009A99193F    mov dword ptr [007A98F4], 3F19999A
:00409954 C705F8987A0000000000    mov dword ptr [007A98F8], 00000000
:0040995E C3                      ret


:0040995F 90                      nop
:00409960 E90B000000              jmp 00409970
:00409965 90                      nop
:00409966 90                      nop
:00409967 90                      nop
:00409968 90                      nop
:00409969 90                      nop
:0040996A 90                      nop
:0040996B 90                      nop
:0040996C 90                      nop
:0040996D 90                      nop
:0040996E 90                      nop
:0040996F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409960(U)
|
:00409970 C705A0987A0000000000    mov dword ptr [007A98A0], 00000000
:0040997A C705A4987A000000803F    mov dword ptr [007A98A4], 3F800000
:00409984 C705A8987A0000000000    mov dword ptr [007A98A8], 00000000
:0040998E C3                      ret


:0040998F 90                      nop
:00409990 E90B000000              jmp 004099A0
:00409995 90                      nop
:00409996 90                      nop
:00409997 90                      nop
:00409998 90                      nop
:00409999 90                      nop
:0040999A 90                      nop
:0040999B 90                      nop
:0040999C 90                      nop
:0040999D 90                      nop
:0040999E 90                      nop
:0040999F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409990(U)
|
:004099A0 C705B0987A0000000000    mov dword ptr [007A98B0], 00000000
:004099AA C705B4987A000000003F    mov dword ptr [007A98B4], 3F000000
:004099B4 C705B8987A0000000000    mov dword ptr [007A98B8], 00000000
:004099BE C3                      ret


:004099BF 90                      nop
:004099C0 E90B000000              jmp 004099D0
:004099C5 90                      nop
:004099C6 90                      nop
:004099C7 90                      nop
:004099C8 90                      nop
:004099C9 90                      nop
:004099CA 90                      nop
:004099CB 90                      nop
:004099CC 90                      nop
:004099CD 90                      nop
:004099CE 90                      nop
:004099CF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004099C0(U)
|
:004099D0 C705C0987A000000803F    mov dword ptr [007A98C0], 3F800000
:004099DA C705C4987A000000803F    mov dword ptr [007A98C4], 3F800000
:004099E4 C705C8987A000000803F    mov dword ptr [007A98C8], 3F800000
:004099EE C3                      ret


:004099EF 90                      nop
:004099F0 E90B000000              jmp 00409A00
:004099F5 90                      nop
:004099F6 90                      nop
:004099F7 90                      nop
:004099F8 90                      nop
:004099F9 90                      nop
:004099FA 90                      nop
:004099FB 90                      nop
:004099FC 90                      nop
:004099FD 90                      nop
:004099FE 90                      nop
:004099FF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004099F0(U)
|
:00409A00 C70580987A0000000000    mov dword ptr [007A9880], 00000000
:00409A0A C70584987A0000000000    mov dword ptr [007A9884], 00000000
:00409A14 C70588987A0000000000    mov dword ptr [007A9888], 00000000
:00409A1E C3                      ret


:00409A1F 90                      nop
:00409A20 E90B000000              jmp 00409A30
:00409A25 90                      nop
:00409A26 90                      nop
:00409A27 90                      nop
:00409A28 90                      nop
:00409A29 90                      nop
:00409A2A 90                      nop
:00409A2B 90                      nop
:00409A2C 90                      nop
:00409A2D 90                      nop
:00409A2E 90                      nop
:00409A2F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409A20(U)
|
:00409A30 C70590987A000000803F    mov dword ptr [007A9890], 3F800000
:00409A3A C70594987A00F1F0703E    mov dword ptr [007A9894], 3E70F0F1
:00409A44 C70598987A00F1F0F03D    mov dword ptr [007A9898], 3DF0F0F1
:00409A4E C3                      ret


:00409A4F 90                      nop
:00409A50 E90B000000              jmp 00409A60
:00409A55 90                      nop
:00409A56 90                      nop
:00409A57 90                      nop
:00409A58 90                      nop
:00409A59 90                      nop
:00409A5A 90                      nop
:00409A5B 90                      nop
:00409A5C 90                      nop
:00409A5D 90                      nop
:00409A5E 90                      nop
:00409A5F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409A50(U)
|
:00409A60 C70570987A00FDFC7C3F    mov dword ptr [007A9870], 3F7CFCFD
:00409A6A C70574987A00FDFC7C3F    mov dword ptr [007A9874], 3F7CFCFD
:00409A74 C70578987A00F9F8F83E    mov dword ptr [007A9878], 3EF8F8F9
:00409A7E C3                      ret


:00409A7F 90                      nop
:00409A80 E90B000000              jmp 00409A90
:00409A85 90                      nop
:00409A86 90                      nop
:00409A87 90                      nop
:00409A88 90                      nop
:00409A89 90                      nop
:00409A8A 90                      nop
:00409A8B 90                      nop
:00409A8C 90                      nop
:00409A8D 90                      nop
:00409A8E 90                      nop
:00409A8F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409A80(U)
|
:00409A90 C705D0987A00DDDCDC3E    mov dword ptr [007A98D0], 3EDCDCDD
:00409A9A C705D4987A00A1A0203F    mov dword ptr [007A98D4], 3F20A0A1
:00409AA4 C705D8987A000000803F    mov dword ptr [007A98D8], 3F800000
:00409AAE C3                      ret


:00409AAF 90                      nop
:00409AB0 E90B000000              jmp 00409AC0
:00409AB5 90                      nop
:00409AB6 90                      nop
:00409AB7 90                      nop
:00409AB8 90                      nop
:00409AB9 90                      nop
:00409ABA 90                      nop
:00409ABB 90                      nop
:00409ABC 90                      nop
:00409ABD 90                      nop
:00409ABE 90                      nop
:00409ABF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409AB0(U)
|
:00409AC0 C70500997A00F1F0703E    mov dword ptr [007A9900], 3E70F0F1
:00409ACA C70504997A00F9F8783F    mov dword ptr [007A9904], 3F78F8F9
:00409AD4 C70508997A0000000000    mov dword ptr [007A9908], 00000000
:00409ADE C3                      ret


:00409ADF 90                      nop
:00409AE0 E90B000000              jmp 00409AF0
:00409AE5 90                      nop
:00409AE6 90                      nop
:00409AE7 90                      nop
:00409AE8 90                      nop
:00409AE9 90                      nop
:00409AEA 90                      nop
:00409AEB 90                      nop
:00409AEC 90                      nop
:00409AED 90                      nop
:00409AEE 90                      nop
:00409AEF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409AE0(U)
|
:00409AF0 C70510997A00A1A0203F    mov dword ptr [007A9910], 3F20A0A1
:00409AFA C70514997A00A1A0203F    mov dword ptr [007A9914], 3F20A0A1
:00409B04 C70518997A00A1A0203F    mov dword ptr [007A9918], 3F20A0A1
:00409B0E C3                      ret


:00409B0F 90                      nop

* Referenced by a CALL at Addresses:
|:0041E458   , :0045F28C   , :0045F3E6   
|
:00409B10 6AFF                    push FFFFFFFF
:00409B12 6830FA6C00              push 006CFA30
:00409B17 64A100000000            mov eax, dword ptr fs:[00000000]
:00409B1D 50                      push eax
:00409B1E 64892500000000          mov dword ptr fs:[00000000], esp
:00409B25 83EC34                  sub esp, 00000034
:00409B28 53                      push ebx
:00409B29 55                      push ebp
:00409B2A 56                      push esi
:00409B2B 57                      push edi
:00409B2C 8B7C2454                mov edi, dword ptr [esp+54]
:00409B30 8BF1                    mov esi, ecx
:00409B32 33DB                    xor ebx, ebx
:00409B34 89742424                mov dword ptr [esp+24], esi
:00409B38 8B87CC000000            mov eax, dword ptr [edi+000000CC]
:00409B3E 8B97C4000000            mov edx, dword ptr [edi+000000C4]
:00409B44 2BC2                    sub eax, edx
:00409B46 8B8FC0000000            mov ecx, dword ptr [edi+000000C0]
:00409B4C 2D58020000              sub eax, 00000258
:00409B51 895C2410                mov dword ptr [esp+10], ebx
:00409B55 99                      cdq
:00409B56 2BC2                    sub eax, edx
:00409B58 8BE8                    mov ebp, eax
:00409B5A 8B87C8000000            mov eax, dword ptr [edi+000000C8]
:00409B60 2BC1                    sub eax, ecx
:00409B62 2D20030000              sub eax, 00000320
:00409B67 99                      cdq
:00409B68 D1FD                    sar ebp, 1
:00409B6A 2BC2                    sub eax, edx
:00409B6C D1F8                    sar eax, 1
:00409B6E 8D8DD8010000            lea ecx, dword ptr [ebp+000001D8]
:00409B74 89442410                mov dword ptr [esp+10], eax
:00409B78 894C241C                mov dword ptr [esp+1C], ecx
:00409B7C 0520030000              add eax, 00000320
:00409B81 8BCE                    mov ecx, esi
:00409B83 89442414                mov dword ptr [esp+14], eax
:00409B87 E8049AFFFF              call 00403590
:00409B8C 33C0                    xor eax, eax
:00409B8E C7460878877000          mov [esi+08], 00708778
:00409B95 8944244C                mov dword ptr [esp+4C], eax
:00409B99 89460C                  mov dword ptr [esi+0C], eax
:00409B9C 894610                  mov dword ptr [esi+10], eax
:00409B9F 894614                  mov dword ptr [esi+14], eax
:00409BA2 894618                  mov dword ptr [esi+18], eax
:00409BA5 89461C                  mov dword ptr [esi+1C], eax
:00409BA8 8B0D88DA7900            mov ecx, dword ptr [0079DA88]
:00409BAE 41                      inc ecx
:00409BAF 890D88DA7900            mov dword ptr [0079DA88], ecx
:00409BB5 B994DA7900              mov ecx, 0079DA94
:00409BBA 894E24                  mov dword ptr [esi+24], ecx
:00409BBD 8B1588DA7900            mov edx, dword ptr [0079DA88]
:00409BC3 42                      inc edx
:00409BC4 891588DA7900            mov dword ptr [0079DA88], edx
:00409BCA 894E28                  mov dword ptr [esi+28], ecx
:00409BCD 8B1588DA7900            mov edx, dword ptr [0079DA88]
:00409BD3 42                      inc edx
:00409BD4 891588DA7900            mov dword ptr [0079DA88], edx
:00409BDA 894E2C                  mov dword ptr [esi+2C], ecx
:00409BDD 894637                  mov dword ptr [esi+37], eax
:00409BE0 89442438                mov dword ptr [esp+38], eax
:00409BE4 8D463B                  lea eax, dword ptr [esi+3B]
:00409BE7 33C9                    xor ecx, ecx
:00409BE9 33D2                    xor edx, edx
:00409BEB 8908                    mov dword ptr [eax], ecx
:00409BED 8B4C2438                mov ecx, dword ptr [esp+38]
:00409BF1 895004                  mov dword ptr [eax+04], edx
:00409BF4 894808                  mov dword ptr [eax+08], ecx
:00409BF7 8BD0                    mov edx, eax
:00409BF9 83C8FF                  or eax, FFFFFFFF
:00409BFC 89420C                  mov dword ptr [edx+0C], eax
:00409BFF 8D4E4B                  lea ecx, dword ptr [esi+4B]
:00409C02 C644244C05              mov [esp+4C], 05
:00409C07 E8B49AFFFF              call 004036C0
:00409C0C 8D4E5F                  lea ecx, dword ptr [esi+5F]
:00409C0F C644244C06              mov [esp+4C], 06
:00409C14 E8A79AFFFF              call 004036C0
:00409C19 C644244C07              mov [esp+4C], 07
:00409C1E 8D4E73                  lea ecx, dword ptr [esi+73]
:00409C21 E89A9AFFFF              call 004036C0
:00409C26 8D8E87000000            lea ecx, dword ptr [esi+00000087]
:00409C2C C644244C08              mov [esp+4C], 08
:00409C31 E88A9AFFFF              call 004036C0
:00409C36 8D8E9B000000            lea ecx, dword ptr [esi+0000009B]
:00409C3C C644244C09              mov [esp+4C], 09
:00409C41 E87A9AFFFF              call 004036C0
:00409C46 33C0                    xor eax, eax
:00409C48 8BCE                    mov ecx, esi
:00409C4A 8986E8000000            mov dword ptr [esi+000000E8], eax
:00409C50 8986EC000000            mov dword ptr [esi+000000EC], eax
:00409C56 C644244C0A              mov [esp+4C], 0A
:00409C5B C7060C867000            mov dword ptr [esi], 0070860C
:00409C61 C7460804867000          mov [esi+08], 00708604
:00409C68 E8C32C1F00              call 005FC930
:00409C6D 8B4C2410                mov ecx, dword ptr [esp+10]
:00409C71 8B542414                mov edx, dword ptr [esp+14]
:00409C75 8D86C0000000            lea eax, dword ptr [esi+000000C0]
:00409C7B 898EC0000000            mov dword ptr [esi+000000C0], ecx
:00409C81 8B4C241C                mov ecx, dword ptr [esp+1C]
:00409C85 896804                  mov dword ptr [eax+04], ebp
:00409C88 33ED                    xor ebp, ebp
:00409C8A 3BFD                    cmp edi, ebp
:00409C8C 895008                  mov dword ptr [eax+08], edx
:00409C8F 89480C                  mov dword ptr [eax+0C], ecx
:00409C92 7409                    je 00409C9D
:00409C94 8B17                    mov edx, dword ptr [edi]
:00409C96 55                      push ebp
:00409C97 56                      push esi
:00409C98 8BCF                    mov ecx, edi
:00409C9A FF523C                  call [edx+3C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409C92(C)
|
:00409C9D 8B44245C                mov eax, dword ptr [esp+5C]
:00409CA1 8DBEFA000000            lea edi, dword ptr [esi+000000FA]
:00409CA7 8BC8                    mov ecx, eax
:00409CA9 8BD0                    mov edx, eax
:00409CAB D1E9                    shr ecx, 1
:00409CAD 80E101                  and cl, 01
:00409CB0 C744244C0B000000        mov [esp+4C], 0000000B
:00409CB8 888EF2000000            mov byte ptr [esi+000000F2], cl
:00409CBE 8AC8                    mov cl, al
:00409CC0 C1EA02                  shr edx, 02
:00409CC3 C1E803                  shr eax, 03
:00409CC6 80E101                  and cl, 01
:00409CC9 80E201                  and dl, 01
:00409CCC 2401                    and al, 01
:00409CCE 888EF4000000            mov byte ptr [esi+000000F4], cl
:00409CD4 8896F3000000            mov byte ptr [esi+000000F3], dl
:00409CDA 8886F5000000            mov byte ptr [esi+000000F5], al
:00409CE0 8BCF                    mov ecx, edi
:00409CE2 6689AEF6000000          mov word ptr [esi+000000F6], bp
:00409CE9 6689AEF8000000          mov word ptr [esi+000000F8], bp
:00409CF0 E86BB31400              call 00555060
:00409CF5 8D8F03030000            lea ecx, dword ptr [edi+00000303]
:00409CFB E860B31400              call 00555060
:00409D00 8D8F06060000            lea ecx, dword ptr [edi+00000606]
:00409D06 E855B31400              call 00555060
:00409D0B 8D8F09090000            lea ecx, dword ptr [edi+00000909]
:00409D11 E84AB31400              call 00555060
:00409D16 8D8E060D0000            lea ecx, dword ptr [esi+00000D06]
:00409D1C E83FB31400              call 00555060
:00409D21 8D8E09100000            lea ecx, dword ptr [esi+00001009]
:00409D27 E834B31400              call 00555060
:00409D2C 8D8E0C130000            lea ecx, dword ptr [esi+0000130C]
:00409D32 E899B61400              call 005553D0
:00409D37 8B2D88DA7900            mov ebp, dword ptr [0079DA88]
:00409D3D 45                      inc ebp
:00409D3E 892D88DA7900            mov dword ptr [0079DA88], ebp
:00409D44 BD94DA7900              mov ebp, 0079DA94
:00409D49 89AE31130000            mov dword ptr [esi+00001331], ebp
:00409D4F 8DBE35130000            lea edi, dword ptr [esi+00001335]
:00409D55 C644244C0C              mov [esp+4C], 0C
:00409D5A 8BCF                    mov ecx, edi
:00409D5C E87FE21400              call 00557FE0
:00409D61 8D4F20                  lea ecx, dword ptr [edi+20]
:00409D64 E877E21400              call 00557FE0
:00409D69 8D4F40                  lea ecx, dword ptr [edi+40]
:00409D6C E86FE21400              call 00557FE0
:00409D71 8D542454                lea edx, dword ptr [esp+54]
:00409D75 8D8E96130000            lea ecx, dword ptr [esi+00001396]
:00409D7B 52                      push edx
:00409D7C C64424500D              mov [esp+50], 0D
:00409D81 E81AB70000              call 004154A0
:00409D86 8B1588DA7900            mov edx, dword ptr [0079DA88]
:00409D8C 42                      inc edx
:00409D8D 891588DA7900            mov dword ptr [0079DA88], edx
:00409D93 89AEAA160000            mov dword ptr [esi+000016AA], ebp
:00409D99 C7060C8F7000            mov dword ptr [esi], 00708F0C
:00409D9F C74608048F7000          mov [esi+08], 00708F04
:00409DA6 C6869513000000          mov byte ptr [esi+00001395], 00
:00409DAD A1089C7A00              mov eax, dword ptr [007A9C08]
:00409DB2 33ED                    xor ebp, ebp
:00409DB4 C644244C10              mov [esp+4C], 10
:00409DB9 3BC5                    cmp eax, ebp
:00409DBB 7475                    je 00409E32
:00409DBD 8DB8C7050000            lea edi, dword ptr [eax+000005C7]
:00409DC3 A128FE7200              mov eax, dword ptr [0072FE28]
:00409DC8 50                      push eax

* Possible StringData Ref from Data Obj ->"locale/missions/tutorial1/tutorial1.txt"
                                  |
:00409DC9 68C0B47800              push 0078B4C0
:00409DCE 8D4C2464                lea ecx, dword ptr [esp+64]
:00409DD2 E8D9121E00              call 005EB0B0
:00409DD7 8B0F                    mov ecx, dword ptr [edi]
:00409DD9 8B10                    mov edx, dword ptr [eax]
:00409DDB 3BCA                    cmp ecx, edx
:00409DDD C644244C11              mov [esp+4C], 11
:00409DE2 7504                    jne 00409DE8
:00409DE4 33C0                    xor eax, eax
:00409DE6 EB12                    jmp 00409DFA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409DE2(C)
|
:00409DE8 8B52FC                  mov edx, dword ptr [edx-04]
:00409DEB 8B49FC                  mov ecx, dword ptr [ecx-04]
:00409DEE 52                      push edx
:00409DEF 55                      push ebp
:00409DF0 50                      push eax
:00409DF1 51                      push ecx
:00409DF2 55                      push ebp
:00409DF3 8BCF                    mov ecx, edi
:00409DF5 E8D6191E00              call 005EB7D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409DE6(U)
|
:00409DFA 8B4C245C                mov ecx, dword ptr [esp+5C]
:00409DFE 3BC5                    cmp eax, ebp
:00409E00 0F95442454              setne byte ptr [esp+54]
:00409E05 8D41F4                  lea eax, dword ptr [ecx-0C]
:00409E08 C644244C10              mov [esp+4C], 10
:00409E0D 8B08                    mov ecx, dword ptr [eax]
:00409E0F 49                      dec ecx
:00409E10 8908                    mov dword ptr [eax], ecx
:00409E12 7509                    jne 00409E1D
:00409E14 50                      push eax
:00409E15 E8E6741D00              call 005E1300
:00409E1A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409E12(C)
|
:00409E1D 8A442454                mov al, byte ptr [esp+54]
:00409E21 84C0                    test al, al
:00409E23 740D                    je 00409E32
:00409E25 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00409E2B 6A01                    push 00000001
:00409E2D E84EBF0700              call 00485D80

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409DBB(C), :00409E23(C)
|
:00409E32 8B442458                mov eax, dword ptr [esp+58]
:00409E36 8BCE                    mov ecx, esi
:00409E38 668B10                  mov dx, word ptr [eax]
:00409E3B 668996F6000000          mov word ptr [esi+000000F6], dx
:00409E42 668B4002                mov ax, word ptr [eax+02]
:00409E46 668986F8000000          mov word ptr [esi+000000F8], ax
:00409E4D E8BE0A0000              call 0040A910
:00409E52 8A86F4000000            mov al, byte ptr [esi+000000F4]
:00409E58 68F6000000              push 000000F6
:00409E5D 84C0                    test al, al
:00409E5F 7479                    je 00409EDA
:00409E61 E81A741D00              call 005E1280
:00409E66 8BF8                    mov edi, eax
:00409E68 83C404                  add esp, 00000004
:00409E6B 897C245C                mov dword ptr [esp+5C], edi
:00409E6F 3BFD                    cmp edi, ebp
:00409E71 C644244C12              mov [esp+4C], 12
:00409E76 743D                    je 00409EB5
:00409E78 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:00409E7E 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/back/CharCreate"
                                  |
:00409E7F 68ACB47800              push 0078B4AC
:00409E84 8D4C245C                lea ecx, dword ptr [esp+5C]
:00409E88 E823121E00              call 005EB0B0
:00409E8D BB01000000              mov ebx, 00000001
:00409E92 895C2410                mov dword ptr [esp+10], ebx
:00409E96 8D542454                lea edx, dword ptr [esp+54]
:00409E9A 8D44241C                lea eax, dword ptr [esp+1C]
:00409E9E 52                      push edx
:00409E9F 50                      push eax
:00409EA0 56                      push esi
:00409EA1 8BCF                    mov ecx, edi
:00409EA3 C644245813              mov [esp+58], 13
:00409EA8 896C2428                mov dword ptr [esp+28], ebp
:00409EAC 896C242C                mov dword ptr [esp+2C], ebp
:00409EB0 E87B661F00              call 00600530

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409E76(C)
|
:00409EB5 F6C301                  test bl, 01
:00409EB8 C744244C10000000        mov [esp+4C], 00000010
:00409EC0 0F8490000000            je 00409F56
:00409EC6 8B4C2454                mov ecx, dword ptr [esp+54]
:00409ECA 83E3FE                  and ebx, FFFFFFFE
:00409ECD 8D41F4                  lea eax, dword ptr [ecx-0C]
:00409ED0 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00409ED3 49                      dec ecx
:00409ED4 8908                    mov dword ptr [eax], ecx
:00409ED6 757E                    jne 00409F56
:00409ED8 EB73                    jmp 00409F4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409E5F(C)
|
:00409EDA E8A1731D00              call 005E1280
:00409EDF 8BF8                    mov edi, eax
:00409EE1 83C404                  add esp, 00000004
:00409EE4 897C245C                mov dword ptr [esp+5C], edi
:00409EE8 3BFD                    cmp edi, ebp
:00409EEA C644244C15              mov [esp+4C], 15
:00409EEF 743D                    je 00409F2E
:00409EF1 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00409EF7 8D4C2454                lea ecx, dword ptr [esp+54]
:00409EFB 52                      push edx

* Possible StringData Ref from Data Obj ->"gui/back/CharReview"
                                  |
:00409EFC 6898B47800              push 0078B498
:00409F01 E8AA111E00              call 005EB0B0
:00409F06 BB02000000              mov ebx, 00000002
:00409F0B 895C2410                mov dword ptr [esp+10], ebx
:00409F0F 8D442454                lea eax, dword ptr [esp+54]
:00409F13 8D4C241C                lea ecx, dword ptr [esp+1C]
:00409F17 50                      push eax
:00409F18 51                      push ecx
:00409F19 56                      push esi
:00409F1A 8BCF                    mov ecx, edi
:00409F1C C644245816              mov [esp+58], 16
:00409F21 896C2428                mov dword ptr [esp+28], ebp
:00409F25 896C242C                mov dword ptr [esp+2C], ebp
:00409F29 E802661F00              call 00600530

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409EEF(C)
|
:00409F2E F6C302                  test bl, 02
:00409F31 C744244C10000000        mov [esp+4C], 00000010
:00409F39 741B                    je 00409F56
:00409F3B 8B542454                mov edx, dword ptr [esp+54]
:00409F3F 83E3FD                  and ebx, FFFFFFFD
:00409F42 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00409F45 8D42F4                  lea eax, dword ptr [edx-0C]
:00409F48 49                      dec ecx
:00409F49 8908                    mov dword ptr [eax], ecx
:00409F4B 7509                    jne 00409F56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409ED8(U)
|
:00409F4D 50                      push eax
:00409F4E E8AD731D00              call 005E1300
:00409F53 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409EC0(C), :00409ED6(C), :00409F39(C), :00409F4B(C)
|
:00409F56 684F010000              push 0000014F
:00409F5B C7869A1300002C010000    mov dword ptr [esi+0000139A], 0000012C
:00409F65 89AE9E130000            mov dword ptr [esi+0000139E], ebp
:00409F6B E810731D00              call 005E1280
:00409F70 83C404                  add esp, 00000004
:00409F73 89442458                mov dword ptr [esp+58], eax
:00409F77 3BC5                    cmp eax, ebp
:00409F79 C644244C18              mov [esp+4C], 18
:00409F7E 0F849A000000            je 0040A01E
:00409F84 A128FE7200              mov eax, dword ptr [0072FE28]
:00409F89 8D4C2454                lea ecx, dword ptr [esp+54]
:00409F8D 50                      push eax

* Possible StringData Ref from Data Obj ->"name_perks"
                                  |
:00409F8E 688CB47800              push 0078B48C
:00409F93 E818111E00              call 005EB0B0
:00409F98 83CB04                  or ebx, 00000004
:00409F9B 8BBE9A130000            mov edi, dword ptr [esi+0000139A]
:00409FA1 8D4C2454                lea ecx, dword ptr [esp+54]
:00409FA5 8D54241C                lea edx, dword ptr [esp+1C]
:00409FA9 83CB08                  or ebx, 00000008
:00409FAC 51                      push ecx
:00409FAD 52                      push edx
:00409FAE B9D7AF7A00              mov ecx, 007AAFD7
:00409FB3 C644245419              mov [esp+54], 19
:00409FB8 BDD0AF4000              mov ebp, 0040AFD0
:00409FBD 81C759010000            add edi, 00000159
:00409FC3 895C2418                mov dword ptr [esp+18], ebx
:00409FC7 E8D4F7FFFF              call 004097A0
:00409FCC 8944245C                mov dword ptr [esp+5C], eax
:00409FD0 33C0                    xor eax, eax
:00409FD2 83CB10                  or ebx, 00000010
:00409FD5 50                      push eax
:00409FD6 8D442434                lea eax, dword ptr [esp+34]
:00409FDA 55                      push ebp
:00409FDB 50                      push eax
:00409FDC 8BCE                    mov ecx, esi
:00409FDE C74424581A000000        mov [esp+58], 0000001A
:00409FE6 895C241C                mov dword ptr [esp+1C], ebx
:00409FEA E8519E0000              call 00413E40
:00409FEF 8B4C245C                mov ecx, dword ptr [esp+5C]
:00409FF3 6A02                    push 00000002
:00409FF5 51                      push ecx
:00409FF6 8B4C2460                mov ecx, dword ptr [esp+60]
:00409FFA 8D54241C                lea edx, dword ptr [esp+1C]
:00409FFE 50                      push eax
:00409FFF 52                      push edx
:0040A000 56                      push esi
:0040A001 C74424601B000000        mov [esp+60], 0000001B
:0040A009 897C2428                mov dword ptr [esp+28], edi
:0040A00D C744242CAD010000        mov [esp+2C], 000001AD
:0040A015 E816271800              call 0058C730
:0040A01A 33ED                    xor ebp, ebp
:0040A01C EB02                    jmp 0040A020

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409F7E(C)
|
:0040A01E 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A01C(U)
|
:0040A020 F6C310                  test bl, 10
:0040A023 8986A2130000            mov dword ptr [esi+000013A2], eax
:0040A029 C744244C1D000000        mov [esp+4C], 0000001D
:0040A031 7419                    je 0040A04C
:0040A033 8B4C2430                mov ecx, dword ptr [esp+30]
:0040A037 83E3EF                  and ebx, FFFFFFEF
:0040A03A 3BCD                    cmp ecx, ebp
:0040A03C 895C2410                mov dword ptr [esp+10], ebx
:0040A040 740A                    je 0040A04C
:0040A042 8D442430                lea eax, dword ptr [esp+30]
:0040A046 50                      push eax
:0040A047 E8D4421F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A031(C), :0040A040(C)
|
:0040A04C F6C308                  test bl, 08
:0040A04F C744244C1C000000        mov [esp+4C], 0000001C
:0040A057 741F                    je 0040A078
:0040A059 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040A05D 83E3F7                  and ebx, FFFFFFF7
:0040A060 895C2410                mov dword ptr [esp+10], ebx
:0040A064 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040A067 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040A06A 49                      dec ecx
:0040A06B 8908                    mov dword ptr [eax], ecx
:0040A06D 7509                    jne 0040A078
:0040A06F 50                      push eax
:0040A070 E88B721D00              call 005E1300
:0040A075 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A057(C), :0040A06D(C)
|
:0040A078 F6C304                  test bl, 04
:0040A07B C744244C10000000        mov [esp+4C], 00000010
:0040A083 741B                    je 0040A0A0
:0040A085 8B542454                mov edx, dword ptr [esp+54]
:0040A089 83E3FB                  and ebx, FFFFFFFB
:0040A08C 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040A08F 8D42F4                  lea eax, dword ptr [edx-0C]
:0040A092 49                      dec ecx
:0040A093 8908                    mov dword ptr [eax], ecx
:0040A095 7509                    jne 0040A0A0
:0040A097 50                      push eax
:0040A098 E863721D00              call 005E1300
:0040A09D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A083(C), :0040A095(C)
|
:0040A0A0 8B869A130000            mov eax, dword ptr [esi+0000139A]
:0040A0A6 684F010000              push 0000014F
:0040A0AB 83C014                  add eax, 00000014
:0040A0AE C7442430B8010000        mov [esp+30], 000001B8
:0040A0B6 8944242C                mov dword ptr [esp+2C], eax
:0040A0BA E8C1711D00              call 005E1280
:0040A0BF 8BF8                    mov edi, eax
:0040A0C1 83C404                  add esp, 00000004
:0040A0C4 897C241C                mov dword ptr [esp+1C], edi
:0040A0C8 3BFD                    cmp edi, ebp
:0040A0CA C644244C1F              mov [esp+4C], 1F
:0040A0CF 747E                    je 0040A14F
:0040A0D1 A128FE7200              mov eax, dword ptr [0072FE28]
:0040A0D6 8D4C2454                lea ecx, dword ptr [esp+54]
:0040A0DA 50                      push eax

* Possible StringData Ref from Data Obj ->"genericGui_done"
                                  |
:0040A0DB 687CB47800              push 0078B47C
:0040A0E0 E8CB0F1E00              call 005EB0B0
:0040A0E5 83CB20                  or ebx, 00000020
:0040A0E8 8D4C2454                lea ecx, dword ptr [esp+54]
:0040A0EC 8D542458                lea edx, dword ptr [esp+58]
:0040A0F0 83CB40                  or ebx, 00000040
:0040A0F3 51                      push ecx
:0040A0F4 52                      push edx
:0040A0F5 B9B0AF7A00              mov ecx, 007AAFB0
:0040A0FA C644245420              mov [esp+54], 20
:0040A0FF BDD03B4100              mov ebp, 00413BD0
:0040A104 895C2418                mov dword ptr [esp+18], ebx
:0040A108 E893F6FFFF              call 004097A0
:0040A10D 8944245C                mov dword ptr [esp+5C], eax
:0040A111 33C0                    xor eax, eax
:0040A113 8BCE                    mov ecx, esi
:0040A115 50                      push eax
:0040A116 8D442434                lea eax, dword ptr [esp+34]
:0040A11A 55                      push ebp
:0040A11B 50                      push eax
:0040A11C C744245821000000        mov [esp+58], 00000021
:0040A124 E8179D0000              call 00413E40
:0040A129 80CB80                  or bl, 80
:0040A12C 895C2410                mov dword ptr [esp+10], ebx
:0040A130 8B4C245C                mov ecx, dword ptr [esp+5C]
:0040A134 6A02                    push 00000002
:0040A136 51                      push ecx
:0040A137 8D542430                lea edx, dword ptr [esp+30]
:0040A13B 50                      push eax
:0040A13C 52                      push edx
:0040A13D 56                      push esi
:0040A13E 8BCF                    mov ecx, edi
:0040A140 C744246022000000        mov [esp+60], 00000022
:0040A148 E8E3251800              call 0058C730
:0040A14D 33ED                    xor ebp, ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A0CF(C)
|
:0040A14F F6C380                  test bl, 80
:0040A152 C744244C24000000        mov [esp+4C], 00000024
:0040A15A 7419                    je 0040A175
:0040A15C 8B4C2430                mov ecx, dword ptr [esp+30]
:0040A160 80E37F                  and bl, 7F
:0040A163 3BCD                    cmp ecx, ebp
:0040A165 895C2410                mov dword ptr [esp+10], ebx
:0040A169 740A                    je 0040A175
:0040A16B 8D442430                lea eax, dword ptr [esp+30]
:0040A16F 50                      push eax
:0040A170 E8AB411F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A15A(C), :0040A169(C)
|
:0040A175 F6C340                  test bl, 40
:0040A178 C744244C23000000        mov [esp+4C], 00000023
:0040A180 741F                    je 0040A1A1
:0040A182 8B4C2458                mov ecx, dword ptr [esp+58]
:0040A186 83E3BF                  and ebx, FFFFFFBF
:0040A189 895C2410                mov dword ptr [esp+10], ebx
:0040A18D 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040A190 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040A193 49                      dec ecx
:0040A194 8908                    mov dword ptr [eax], ecx
:0040A196 7509                    jne 0040A1A1
:0040A198 50                      push eax
:0040A199 E862711D00              call 005E1300
:0040A19E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A180(C), :0040A196(C)
|
:0040A1A1 F6C320                  test bl, 20
:0040A1A4 C744244C10000000        mov [esp+4C], 00000010
:0040A1AC 741B                    je 0040A1C9
:0040A1AE 8B542454                mov edx, dword ptr [esp+54]
:0040A1B2 83E3DF                  and ebx, FFFFFFDF
:0040A1B5 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040A1B8 8D42F4                  lea eax, dword ptr [edx-0C]
:0040A1BB 49                      dec ecx
:0040A1BC 8908                    mov dword ptr [eax], ecx
:0040A1BE 7509                    jne 0040A1C9
:0040A1C0 50                      push eax
:0040A1C1 E83A711D00              call 005E1300
:0040A1C6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A1AC(C), :0040A1BE(C)
|
:0040A1C9 8B7C2428                mov edi, dword ptr [esp+28]
:0040A1CD 684F010000              push 0000014F
:0040A1D2 81C782000000            add edi, 00000082
:0040A1D8 897C242C                mov dword ptr [esp+2C], edi
:0040A1DC E89F701D00              call 005E1280
:0040A1E1 8BF8                    mov edi, eax
:0040A1E3 83C404                  add esp, 00000004
:0040A1E6 897C241C                mov dword ptr [esp+1C], edi
:0040A1EA 3BFD                    cmp edi, ebp
:0040A1EC C644244C26              mov [esp+4C], 26
:0040A1F1 747E                    je 0040A271
:0040A1F3 A128FE7200              mov eax, dword ptr [0072FE28]
:0040A1F8 8D4C2454                lea ecx, dword ptr [esp+54]
:0040A1FC 50                      push eax

* Possible StringData Ref from Data Obj ->"genericGui_cancel"
                                  |
:0040A1FD 6834B37800              push 0078B334
:0040A202 E8A90E1E00              call 005EB0B0
:0040A207 80CF01                  or bh, 01
:0040A20A 8D4C2454                lea ecx, dword ptr [esp+54]
:0040A20E 8D542458                lea edx, dword ptr [esp+58]
:0040A212 80CF02                  or bh, 02
:0040A215 51                      push ecx
:0040A216 52                      push edx
:0040A217 B9B0AF7A00              mov ecx, 007AAFB0
:0040A21C C644245427              mov [esp+54], 27
:0040A221 BDB03D4100              mov ebp, 00413DB0
:0040A226 895C2418                mov dword ptr [esp+18], ebx
:0040A22A E871F5FFFF              call 004097A0
:0040A22F 8944245C                mov dword ptr [esp+5C], eax
:0040A233 33C0                    xor eax, eax
:0040A235 8BCE                    mov ecx, esi
:0040A237 50                      push eax
:0040A238 8D442434                lea eax, dword ptr [esp+34]
:0040A23C 55                      push ebp
:0040A23D 50                      push eax
:0040A23E C744245828000000        mov [esp+58], 00000028
:0040A246 E8F59B0000              call 00413E40
:0040A24B 80CF04                  or bh, 04
:0040A24E 895C2410                mov dword ptr [esp+10], ebx
:0040A252 8B4C245C                mov ecx, dword ptr [esp+5C]
:0040A256 6A02                    push 00000002
:0040A258 51                      push ecx
:0040A259 8D542430                lea edx, dword ptr [esp+30]
:0040A25D 50                      push eax
:0040A25E 52                      push edx
:0040A25F 56                      push esi
:0040A260 8BCF                    mov ecx, edi
:0040A262 C744246029000000        mov [esp+60], 00000029
:0040A26A E8C1241800              call 0058C730
:0040A26F 33ED                    xor ebp, ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A1F1(C)
|
:0040A271 F6C704                  test bh, 04
:0040A274 C744244C2B000000        mov [esp+4C], 0000002B
:0040A27C 7419                    je 0040A297
:0040A27E 8B4C2430                mov ecx, dword ptr [esp+30]
:0040A282 80E7FB                  and bh, FB
:0040A285 3BCD                    cmp ecx, ebp
:0040A287 895C2410                mov dword ptr [esp+10], ebx
:0040A28B 740A                    je 0040A297
:0040A28D 8D442430                lea eax, dword ptr [esp+30]
:0040A291 50                      push eax
:0040A292 E889401F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A27C(C), :0040A28B(C)
|
:0040A297 F6C702                  test bh, 02
:0040A29A C744244C2A000000        mov [esp+4C], 0000002A
:0040A2A2 741F                    je 0040A2C3
:0040A2A4 8B4C2458                mov ecx, dword ptr [esp+58]
:0040A2A8 80E7FD                  and bh, FD
:0040A2AB 895C2410                mov dword ptr [esp+10], ebx
:0040A2AF 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040A2B2 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040A2B5 49                      dec ecx
:0040A2B6 8908                    mov dword ptr [eax], ecx
:0040A2B8 7509                    jne 0040A2C3
:0040A2BA 50                      push eax
:0040A2BB E840701D00              call 005E1300
:0040A2C0 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A2A2(C), :0040A2B8(C)
|
:0040A2C3 F6C701                  test bh, 01
:0040A2C6 C744244C10000000        mov [esp+4C], 00000010
:0040A2CE 7418                    je 0040A2E8
:0040A2D0 8B542454                mov edx, dword ptr [esp+54]
:0040A2D4 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040A2D7 8D42F4                  lea eax, dword ptr [edx-0C]
:0040A2DA 49                      dec ecx
:0040A2DB 8908                    mov dword ptr [eax], ecx
:0040A2DD 7509                    jne 0040A2E8
:0040A2DF 50                      push eax
:0040A2E0 E81B701D00              call 005E1300
:0040A2E5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A2CE(C), :0040A2DD(C)
|
:0040A2E8 6812010000              push 00000112
:0040A2ED E88E6F1D00              call 005E1280
:0040A2F2 83C404                  add esp, 00000004
:0040A2F5 89442454                mov dword ptr [esp+54], eax
:0040A2F9 3BC5                    cmp eax, ebp
:0040A2FB C644244C2D              mov [esp+4C], 2D
:0040A300 741F                    je 0040A321
:0040A302 8D4C2430                lea ecx, dword ptr [esp+30]
:0040A306 C744243031010000        mov [esp+30], 00000131
:0040A30E 51                      push ecx
:0040A30F 56                      push esi
:0040A310 8BC8                    mov ecx, eax
:0040A312 C744243C05010000        mov [esp+3C], 00000105
:0040A31A E861170500              call 0045BA80
:0040A31F EB02                    jmp 0040A323

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A300(C)
|
:0040A321 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A31F(U)
|
:0040A323 8BCE                    mov ecx, esi
:0040A325 C644244C10              mov [esp+4C], 10
:0040A32A 8986B2160000            mov dword ptr [esi+000016B2], eax
:0040A330 E80B0D0000              call 0040B040
:0040A335 8BCE                    mov ecx, esi
:0040A337 E814200000              call 0040C350
:0040A33C 8BCE                    mov ecx, esi
:0040A33E E89D500000              call 0040F3E0
:0040A343 8BCE                    mov ecx, esi
:0040A345 E8F63B0000              call 0040DF40
:0040A34A 392DCC997A00            cmp dword ptr [007A99CC], ebp
:0040A350 7427                    je 0040A379
:0040A352 682B010000              push 0000012B
:0040A357 E8246F1D00              call 005E1280
:0040A35C 83C404                  add esp, 00000004
:0040A35F 89442454                mov dword ptr [esp+54], eax
:0040A363 3BC5                    cmp eax, ebp
:0040A365 C644244C2E              mov [esp+4C], 2E
:0040A36A 7408                    je 0040A374
:0040A36C 56                      push esi
:0040A36D 8BC8                    mov ecx, eax
:0040A36F E87CC80500              call 00466BF0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A36A(C)
|
:0040A374 C644244C10              mov [esp+4C], 10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A350(C)
|
:0040A379 8A86F4000000            mov al, byte ptr [esi+000000F4]
:0040A37F 8BCE                    mov ecx, esi
:0040A381 84C0                    test al, al
:0040A383 7407                    je 0040A38C
:0040A385 E866680000              call 00410BF0
:0040A38A EB05                    jmp 0040A391

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A383(C)
|
:0040A38C E8EF720000              call 00411680

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A38A(U)
|
:0040A391 8BCE                    mov ecx, esi
:0040A393 E8680C0000              call 0040B000
:0040A398 A1089C7A00              mov eax, dword ptr [007A9C08]
:0040A39D 33D2                    xor edx, edx
:0040A39F 668B96F8000000          mov dx, word ptr [esi+000000F8]
:0040A3A6 8B88CD050000            mov ecx, dword ptr [eax+000005CD]
:0040A3AC 8D04D1                  lea eax, dword ptr [ecx+8*edx]
:0040A3AF 668B54D106              mov dx, word ptr [ecx+8*edx+06]
:0040A3B4 663B96F6000000          cmp dx, word ptr [esi+000000F6]
:0040A3BB 741D                    je 0040A3DA
:0040A3BD 6689AEF6000000          mov word ptr [esi+000000F6], bp
:0040A3C4 6689AEF8000000          mov word ptr [esi+000000F8], bp
:0040A3CB A1089C7A00              mov eax, dword ptr [007A9C08]
:0040A3D0 8B88CD050000            mov ecx, dword ptr [eax+000005CD]
:0040A3D6 8B01                    mov eax, dword ptr [ecx]
:0040A3D8 EB02                    jmp 0040A3DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A3BB(C)
|
:0040A3DA 8B00                    mov eax, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A3D8(U)
|
:0040A3DC 8B8EB2160000            mov ecx, dword ptr [esi+000016B2]
:0040A3E2 50                      push eax
:0040A3E3 E8E81C0500              call 0045C0D0
:0040A3E8 8BCE                    mov ecx, esi
:0040A3EA E8A1010000              call 0040A590
:0040A3EF 84C0                    test al, al
:0040A3F1 7507                    jne 0040A3FA
:0040A3F3 C6869513000001          mov byte ptr [esi+00001395], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A3F1(C)
|
:0040A3FA 8B4C2444                mov ecx, dword ptr [esp+44]
:0040A3FE 8BC6                    mov eax, esi
:0040A400 5F                      pop edi
:0040A401 5E                      pop esi
:0040A402 5D                      pop ebp
:0040A403 5B                      pop ebx
:0040A404 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040A40B 83C440                  add esp, 00000040
:0040A40E C20C00                  ret 000C


:0040A411 90                      nop
:0040A412 90                      nop
:0040A413 90                      nop
:0040A414 90                      nop
:0040A415 90                      nop
:0040A416 90                      nop
:0040A417 90                      nop
:0040A418 90                      nop
:0040A419 90                      nop
:0040A41A 90                      nop
:0040A41B 90                      nop
:0040A41C 90                      nop
:0040A41D 90                      nop
:0040A41E 90                      nop
:0040A41F 90                      nop

* Referenced by a CALL at Address:
|:00413E83   
|
:0040A420 6AFF                    push FFFFFFFF
:0040A422 687CFA6C00              push 006CFA7C
:0040A427 64A100000000            mov eax, dword ptr fs:[00000000]
:0040A42D 50                      push eax
:0040A42E 64892500000000          mov dword ptr fs:[00000000], esp
:0040A435 83EC0C                  sub esp, 0000000C
:0040A438 55                      push ebp
:0040A439 8BE9                    mov ebp, ecx
:0040A43B 56                      push esi
:0040A43C 896C240C                mov dword ptr [esp+0C], ebp
:0040A440 C745000C8F7000          mov [ebp+00], 00708F0C
:0040A447 C74508048F7000          mov [ebp+08], 00708F04
:0040A44E A1089C7A00              mov eax, dword ptr [007A9C08]
:0040A453 C744241C03000000        mov [esp+1C], 00000003
:0040A45B 85C0                    test eax, eax
:0040A45D 7473                    je 0040A4D2
:0040A45F 8DB0C7050000            lea esi, dword ptr [eax+000005C7]
:0040A465 A128FE7200              mov eax, dword ptr [0072FE28]
:0040A46A 50                      push eax

* Possible StringData Ref from Data Obj ->"locale/missions/tutorial1/tutorial1.txt"
                                  |
:0040A46B 68C0B47800              push 0078B4C0
:0040A470 8D4C2410                lea ecx, dword ptr [esp+10]
:0040A474 E8370C1E00              call 005EB0B0
:0040A479 8B0E                    mov ecx, dword ptr [esi]
:0040A47B 8B10                    mov edx, dword ptr [eax]
:0040A47D 3BCA                    cmp ecx, edx
:0040A47F C644241C04              mov [esp+1C], 04
:0040A484 7504                    jne 0040A48A
:0040A486 33C0                    xor eax, eax
:0040A488 EB14                    jmp 0040A49E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A484(C)
|
:0040A48A 8B52FC                  mov edx, dword ptr [edx-04]
:0040A48D 8B49FC                  mov ecx, dword ptr [ecx-04]
:0040A490 52                      push edx
:0040A491 6A00                    push 00000000
:0040A493 50                      push eax
:0040A494 51                      push ecx
:0040A495 6A00                    push 00000000
:0040A497 8BCE                    mov ecx, esi
:0040A499 E832131E00              call 005EB7D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A488(U)
|
:0040A49E 8B4C2408                mov ecx, dword ptr [esp+08]
:0040A4A2 53                      push ebx
:0040A4A3 85C0                    test eax, eax
:0040A4A5 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040A4A8 C644242003              mov [esp+20], 03
:0040A4AD 0F95C3                  setne bl
:0040A4B0 8B08                    mov ecx, dword ptr [eax]
:0040A4B2 49                      dec ecx
:0040A4B3 8908                    mov dword ptr [eax], ecx
:0040A4B5 7509                    jne 0040A4C0
:0040A4B7 50                      push eax
:0040A4B8 E8436E1D00              call 005E1300
:0040A4BD 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A4B5(C)
|
:0040A4C0 84DB                    test bl, bl
:0040A4C2 5B                      pop ebx
:0040A4C3 740D                    je 0040A4D2
:0040A4C5 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040A4CB 6A00                    push 00000000
:0040A4CD E8AEB80700              call 00485D80

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A45D(C), :0040A4C3(C)
|
:0040A4D2 8B85AA160000            mov eax, dword ptr [ebp+000016AA]
:0040A4D8 C644241C02              mov [esp+1C], 02
:0040A4DD 83E80C                  sub eax, 0000000C
:0040A4E0 8B08                    mov ecx, dword ptr [eax]
:0040A4E2 49                      dec ecx
:0040A4E3 8908                    mov dword ptr [eax], ecx
:0040A4E5 7509                    jne 0040A4F0
:0040A4E7 50                      push eax
:0040A4E8 E8136E1D00              call 005E1300
:0040A4ED 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A4E5(C)
|
:0040A4F0 57                      push edi
:0040A4F1 8DBD96130000            lea edi, dword ptr [ebp+00001396]
:0040A4F7 897C2414                mov dword ptr [esp+14], edi
:0040A4FB 8B07                    mov eax, dword ptr [edi]
:0040A4FD C644242005              mov [esp+20], 05
:0040A502 8B30                    mov esi, dword ptr [eax]
:0040A504 3BF0                    cmp esi, eax
:0040A506 741A                    je 0040A522

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A520(C)
|
:0040A508 8BC6                    mov eax, esi
:0040A50A 8B36                    mov esi, dword ptr [esi]
:0040A50C 85C0                    test eax, eax
:0040A50E 740E                    je 0040A51E
:0040A510 680B030000              push 0000030B
:0040A515 50                      push eax
:0040A516 E895C4FFFF              call 004069B0
:0040A51B 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A50E(C)
|
:0040A51E 3B37                    cmp esi, dword ptr [edi]
:0040A520 75E6                    jne 0040A508

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A506(C)
|
:0040A522 8B07                    mov eax, dword ptr [edi]
:0040A524 8900                    mov dword ptr [eax], eax
:0040A526 8B07                    mov eax, dword ptr [edi]
:0040A528 894004                  mov dword ptr [eax+04], eax
:0040A52B 8B3F                    mov edi, dword ptr [edi]
:0040A52D 85FF                    test edi, edi
:0040A52F 740E                    je 0040A53F
:0040A531 680B030000              push 0000030B
:0040A536 57                      push edi
:0040A537 E874C4FFFF              call 004069B0
:0040A53C 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A52F(C)
|
:0040A53F 8B8531130000            mov eax, dword ptr [ebp+00001331]
:0040A545 C644242000              mov [esp+20], 00
:0040A54A 83E80C                  sub eax, 0000000C
:0040A54D 5F                      pop edi
:0040A54E 8B08                    mov ecx, dword ptr [eax]
:0040A550 49                      dec ecx
:0040A551 8908                    mov dword ptr [eax], ecx
:0040A553 7509                    jne 0040A55E
:0040A555 50                      push eax
:0040A556 E8A56D1D00              call 005E1300
:0040A55B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A553(C)
|
:0040A55E 8BCD                    mov ecx, ebp
:0040A560 C744241CFFFFFFFF        mov [esp+1C], FFFFFFFF
:0040A568 E873241F00              call 005FC9E0
:0040A56D 8B4C2414                mov ecx, dword ptr [esp+14]
:0040A571 5E                      pop esi
:0040A572 5D                      pop ebp
:0040A573 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040A57A 83C418                  add esp, 00000018
:0040A57D C3                      ret


:0040A57E 90                      nop
:0040A57F 90                      nop
:0040A580 C3                      ret


:0040A581 90                      nop
:0040A582 90                      nop
:0040A583 90                      nop
:0040A584 90                      nop
:0040A585 90                      nop
:0040A586 90                      nop
:0040A587 90                      nop
:0040A588 90                      nop
:0040A589 90                      nop
:0040A58A 90                      nop
:0040A58B 90                      nop
:0040A58C 90                      nop
:0040A58D 90                      nop
:0040A58E 90                      nop
:0040A58F 90                      nop

* Referenced by a CALL at Addresses:
|:0040A3EA   , :0040A8F7   , :0040AFD0   , :0040DCB5   
|
:0040A590 6AFF                    push FFFFFFFF
:0040A592 6899FA6C00              push 006CFA99
:0040A597 64A100000000            mov eax, dword ptr fs:[00000000]
:0040A59D 50                      push eax
:0040A59E 64892500000000          mov dword ptr fs:[00000000], esp
:0040A5A5 83EC10                  sub esp, 00000010
:0040A5A8 53                      push ebx
:0040A5A9 55                      push ebp
:0040A5AA 56                      push esi
:0040A5AB 8BF1                    mov esi, ecx
:0040A5AD 57                      push edi
:0040A5AE C644241201              mov [esp+12], 01
:0040A5B3 8B862C0A0000            mov eax, dword ptr [esi+00000A2C]
:0040A5B9 50                      push eax
:0040A5BA E851981400              call 00553E10
:0040A5BF 8944241C                mov dword ptr [esp+1C], eax
:0040A5C3 8B8633010000            mov eax, dword ptr [esi+00000133]
:0040A5C9 33DB                    xor ebx, ebx
:0040A5CB 83C404                  add esp, 00000004
:0040A5CE 3BC3                    cmp eax, ebx
:0040A5D0 885C2413                mov byte ptr [esp+13], bl
:0040A5D4 0F84FA010000            je 0040A7D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A79B(C)
|
:0040A5DA 33ED                    xor ebp, ebp
:0040A5DC 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A5F8(C)
|
:0040A5DE 8B4C2418                mov ecx, dword ptr [esp+18]
:0040A5E2 51                      push ecx
:0040A5E3 57                      push edi
:0040A5E4 8D8E030A0000            lea ecx, dword ptr [esi+00000A03]
:0040A5EA E801CA1400              call 00556FF0
:0040A5EF 84C0                    test al, al
:0040A5F1 7401                    je 0040A5F4
:0040A5F3 45                      inc ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A5F1(C)
|
:0040A5F4 47                      inc edi
:0040A5F5 83FF62                  cmp edi, 00000062
:0040A5F8 7CE4                    jl 0040A5DE
:0040A5FA 3BEB                    cmp ebp, ebx
:0040A5FC 7F0C                    jg 0040A60A
:0040A5FE 389EF3000000            cmp byte ptr [esi+000000F3], bl
:0040A604 0F84BD010000            je 0040A7C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A5FC(C)
|
:0040A60A 8B3D88DA7900            mov edi, dword ptr [0079DA88]
:0040A610 C744241494DA7900        mov [esp+14], 0079DA94
:0040A618 47                      inc edi
:0040A619 893D88DA7900            mov dword ptr [0079DA88], edi
:0040A61F 68FE000000              push 000000FE
:0040A624 895C242C                mov dword ptr [esp+2C], ebx
:0040A628 E8536C1D00              call 005E1280
:0040A62D 8BF8                    mov edi, eax
:0040A62F 83C404                  add esp, 00000004
:0040A632 897C241C                mov dword ptr [esp+1C], edi
:0040A636 3BFB                    cmp edi, ebx
:0040A638 C644242801              mov [esp+28], 01
:0040A63D 742D                    je 0040A66C
:0040A63F 8B962C0A0000            mov edx, dword ptr [esi+00000A2C]
:0040A645 52                      push edx
:0040A646 E8C5971400              call 00553E10
:0040A64B 8A8EF3000000            mov cl, byte ptr [esi+000000F3]
:0040A651 83C404                  add esp, 00000004
:0040A654 8D96FD030000            lea edx, dword ptr [esi+000003FD]
:0040A65A 51                      push ecx
:0040A65B 50                      push eax
:0040A65C 8D44241C                lea eax, dword ptr [esp+1C]
:0040A660 52                      push edx
:0040A661 50                      push eax
:0040A662 56                      push esi
:0040A663 8BCF                    mov ecx, edi
:0040A665 E876DF0400              call 004585E0
:0040A66A EB02                    jmp 0040A66E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A63D(C)
|
:0040A66C 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A66A(U)
|
:0040A66E 8986BA160000            mov dword ptr [esi+000016BA], eax
:0040A674 8B10                    mov edx, dword ptr [eax]
:0040A676 8BC8                    mov ecx, eax
:0040A678 885C2428                mov byte ptr [esp+28], bl
:0040A67C FF522C                  call [edx+2C]
:0040A67F 83F804                  cmp eax, 00000004
:0040A682 0F851B010000            jne 0040A7A3
:0040A688 8D442414                lea eax, dword ptr [esp+14]
:0040A68C 8DBEFA000000            lea edi, dword ptr [esi+000000FA]
:0040A692 50                      push eax
:0040A693 E848C81400              call 00556EE0
:0040A698 50                      push eax
:0040A699 57                      push edi
:0040A69A E811C21400              call 005568B0
:0040A69F 8B9633010000            mov edx, dword ptr [esi+00000133]
:0040A6A5 83C40C                  add esp, 0000000C
:0040A6A8 4A                      dec edx
:0040A6A9 899633010000            mov dword ptr [esi+00000133], edx
:0040A6AF 8A4F04                  mov cl, byte ptr [edi+04]
:0040A6B2 888E0D100000            mov byte ptr [esi+0000100D], cl
:0040A6B8 8B5709                  mov edx, dword ptr [edi+09]
:0040A6BB 899612100000            mov dword ptr [esi+00001012], edx
:0040A6C1 8B470D                  mov eax, dword ptr [edi+0D]
:0040A6C4 898616100000            mov dword ptr [esi+00001016], eax
:0040A6CA 8B4F11                  mov ecx, dword ptr [edi+11]
:0040A6CD 898E1A100000            mov dword ptr [esi+0000101A], ecx
:0040A6D3 8B5715                  mov edx, dword ptr [edi+15]
:0040A6D6 89961E100000            mov dword ptr [esi+0000101E], edx
:0040A6DC 8B4719                  mov eax, dword ptr [edi+19]
:0040A6DF 898622100000            mov dword ptr [esi+00001022], eax
:0040A6E5 8B4F1D                  mov ecx, dword ptr [edi+1D]
:0040A6E8 898E26100000            mov dword ptr [esi+00001026], ecx
:0040A6EE 8B5721                  mov edx, dword ptr [edi+21]
:0040A6F1 8D4725                  lea eax, dword ptr [edi+25]
:0040A6F4 8D8E2E100000            lea ecx, dword ptr [esi+0000102E]
:0040A6FA 50                      push eax
:0040A6FB 89962A100000            mov dword ptr [esi+0000102A], edx
:0040A701 E89A970000              call 00413EA0
:0040A706 8D4F55                  lea ecx, dword ptr [edi+55]
:0040A709 51                      push ecx
:0040A70A 8D8E5E100000            lea ecx, dword ptr [esi+0000105E]
:0040A710 E8DB970000              call 00413EF0
:0040A715 8D97C1000000            lea edx, dword ptr [edi+000000C1]
:0040A71B 8D8ECA100000            lea ecx, dword ptr [esi+000010CA]
:0040A721 52                      push edx
:0040A722 E879980000              call 00413FA0
:0040A727 8D871F010000            lea eax, dword ptr [edi+0000011F]
:0040A72D 8D8E28110000            lea ecx, dword ptr [esi+00001128]
:0040A733 50                      push eax
:0040A734 E807990000              call 00414040
:0040A739 8D8F47010000            lea ecx, dword ptr [edi+00000147]
:0040A73F 51                      push ecx
:0040A740 8D8E50110000            lea ecx, dword ptr [esi+00001150]
:0040A746 E8E5990000              call 00414130
:0040A74B 8D97D3020000            lea edx, dword ptr [edi+000002D3]
:0040A751 8D8EDC120000            lea ecx, dword ptr [esi+000012DC]
:0040A757 52                      push edx
:0040A758 E8C39D0000              call 00414520
:0040A75D 8B87FF020000            mov eax, dword ptr [edi+000002FF]
:0040A763 8BCE                    mov ecx, esi
:0040A765 898608130000            mov dword ptr [esi+00001308], eax
:0040A76B E8B0050000              call 0040AD20
:0040A770 8B4C2414                mov ecx, dword ptr [esp+14]
:0040A774 C644241301              mov [esp+13], 01
:0040A779 C7442428FFFFFFFF        mov [esp+28], FFFFFFFF
:0040A781 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040A784 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040A787 49                      dec ecx
:0040A788 8908                    mov dword ptr [eax], ecx
:0040A78A 7509                    jne 0040A795
:0040A78C 50                      push eax
:0040A78D E86E6B1D00              call 005E1300
:0040A792 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A78A(C)
|
:0040A795 399E33010000            cmp dword ptr [esi+00000133], ebx
:0040A79B 0F8539FEFFFF            jne 0040A5DA
:0040A7A1 EB2A                    jmp 0040A7CD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A682(C)
|
:0040A7A3 8B542414                mov edx, dword ptr [esp+14]
:0040A7A7 885C2412                mov byte ptr [esp+12], bl
:0040A7AB C7442428FFFFFFFF        mov [esp+28], FFFFFFFF
:0040A7B3 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040A7B6 8D42F4                  lea eax, dword ptr [edx-0C]
:0040A7B9 49                      dec ecx
:0040A7BA 8908                    mov dword ptr [eax], ecx
:0040A7BC 7509                    jne 0040A7C7
:0040A7BE 50                      push eax
:0040A7BF E83C6B1D00              call 005E1300
:0040A7C4 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A604(C), :0040A7BC(C)
|
:0040A7C7 385C2413                cmp byte ptr [esp+13], bl
:0040A7CB 7407                    je 0040A7D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A7A1(U)
|
:0040A7CD 8BCE                    mov ecx, esi
:0040A7CF E82C080000              call 0040B000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A5D4(C), :0040A7CB(C)
|
:0040A7D4 8B4C2420                mov ecx, dword ptr [esp+20]
:0040A7D8 8A442412                mov al, byte ptr [esp+12]
:0040A7DC 5F                      pop edi
:0040A7DD 5E                      pop esi
:0040A7DE 5D                      pop ebp
:0040A7DF 5B                      pop ebx
:0040A7E0 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040A7E7 83C41C                  add esp, 0000001C
:0040A7EA C3                      ret


:0040A7EB 90                      nop
:0040A7EC 90                      nop
:0040A7ED 90                      nop
:0040A7EE 90                      nop
:0040A7EF 90                      nop
:0040A7F0 83EC08                  sub esp, 00000008
:0040A7F3 56                      push esi
:0040A7F4 8BF1                    mov esi, ecx
:0040A7F6 8A86F2000000            mov al, byte ptr [esi+000000F2]
:0040A7FC 84C0                    test al, al
:0040A7FE 0F84F8000000            je 0040A8FC
:0040A804 A1CC997A00              mov eax, dword ptr [007A99CC]
:0040A809 85C0                    test eax, eax
:0040A80B 0F84EB000000            je 0040A8FC
:0040A811 8D4C2404                lea ecx, dword ptr [esp+04]
:0040A815 51                      push ecx
:0040A816 8B88FA000000            mov ecx, dword ptr [eax+000000FA]
:0040A81C E81F141800              call 0058BC40
:0040A821 8B442406                mov eax, dword ptr [esp+06]
:0040A825 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040A82B 8BD0                    mov edx, eax
:0040A82D 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]
:0040A833 81E2FFFF0000            and edx, 0000FFFF
:0040A839 668B54D106              mov dx, word ptr [ecx+8*edx+06]
:0040A83E 663B542404              cmp dx, word ptr [esp+04]
:0040A843 7505                    jne 0040A84A
:0040A845 6685C0                  test ax, ax
:0040A848 7511                    jne 0040A85B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A843(C)
|
:0040A84A 8B0DCC997A00            mov ecx, dword ptr [007A99CC]
:0040A850 6A00                    push 00000000
:0040A852 E8492F0100              call 0041D7A0
:0040A857 8B442406                mov eax, dword ptr [esp+06]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A848(C)
|
:0040A85B 663986F8000000          cmp word ptr [esi+000000F8], ax
:0040A862 7512                    jne 0040A876
:0040A864 668B442404              mov ax, word ptr [esp+04]
:0040A869 663986F6000000          cmp word ptr [esi+000000F6], ax
:0040A870 0F8486000000            je 0040A8FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A862(C)
|
:0040A876 8BCE                    mov ecx, esi
:0040A878 E8D3930000              call 00413C50
:0040A87D 668B4C2404              mov cx, word ptr [esp+04]
:0040A882 668B542406              mov dx, word ptr [esp+06]
:0040A887 66898EF6000000          mov word ptr [esi+000000F6], cx
:0040A88E 8BCE                    mov ecx, esi
:0040A890 668996F8000000          mov word ptr [esi+000000F8], dx
:0040A897 E874000000              call 0040A910
:0040A89C 8BCE                    mov ecx, esi
:0040A89E E85D070000              call 0040B000
:0040A8A3 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040A8A9 33C0                    xor eax, eax
:0040A8AB 668B86F8000000          mov ax, word ptr [esi+000000F8]
:0040A8B2 8B91CD050000            mov edx, dword ptr [ecx+000005CD]
:0040A8B8 668B4CC206              mov cx, word ptr [edx+8*eax+06]
:0040A8BD 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040A8C4 8D04C2                  lea eax, dword ptr [edx+8*eax]
:0040A8C7 741E                    je 0040A8E7
:0040A8C9 66C786F60000000000      mov word ptr [esi+000000F6], 0000
:0040A8D2 66C786F80000000000      mov word ptr [esi+000000F8], 0000
:0040A8DB 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040A8E1 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A8C7(C)
|
:0040A8E7 8B00                    mov eax, dword ptr [eax]
:0040A8E9 8B8EB2160000            mov ecx, dword ptr [esi+000016B2]
:0040A8EF 50                      push eax
:0040A8F0 E8DB170500              call 0045C0D0
:0040A8F5 8BCE                    mov ecx, esi
:0040A8F7 E894FCFFFF              call 0040A590

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A7FE(C), :0040A80B(C), :0040A870(C)
|
:0040A8FC 5E                      pop esi
:0040A8FD 83C408                  add esp, 00000008
:0040A900 C3                      ret


:0040A901 90                      nop
:0040A902 90                      nop
:0040A903 90                      nop
:0040A904 90                      nop
:0040A905 90                      nop
:0040A906 90                      nop
:0040A907 90                      nop
:0040A908 90                      nop
:0040A909 90                      nop
:0040A90A 90                      nop
:0040A90B 90                      nop
:0040A90C 90                      nop
:0040A90D 90                      nop
:0040A90E 90                      nop
:0040A90F 90                      nop

* Referenced by a CALL at Addresses:
|:00409E4D   , :0040A897   
|
:0040A910 64A100000000            mov eax, dword ptr fs:[00000000]
:0040A916 6AFF                    push FFFFFFFF
:0040A918 68ABFA6C00              push 006CFAAB
:0040A91D 50                      push eax
:0040A91E 64892500000000          mov dword ptr fs:[00000000], esp
:0040A925 A1089C7A00              mov eax, dword ptr [007A9C08]
:0040A92A 83EC08                  sub esp, 00000008
:0040A92D 8B80CD050000            mov eax, dword ptr [eax+000005CD]
:0040A933 53                      push ebx
:0040A934 55                      push ebp
:0040A935 56                      push esi
:0040A936 8BF1                    mov esi, ecx
:0040A938 33C9                    xor ecx, ecx
:0040A93A 57                      push edi
:0040A93B 668B8EF8000000          mov cx, word ptr [esi+000000F8]
:0040A942 668B54C806              mov dx, word ptr [eax+8*ecx+06]
:0040A947 8D04C8                  lea eax, dword ptr [eax+8*ecx]
:0040A94A 663B96F6000000          cmp dx, word ptr [esi+000000F6]
:0040A951 741F                    je 0040A972
:0040A953 33FF                    xor edi, edi
:0040A955 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040A95C 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040A963 A1089C7A00              mov eax, dword ptr [007A9C08]
:0040A968 8B80CD050000            mov eax, dword ptr [eax+000005CD]
:0040A96E 8B08                    mov ecx, dword ptr [eax]
:0040A970 EB04                    jmp 0040A976

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A951(C)
|
:0040A972 8B08                    mov ecx, dword ptr [eax]
:0040A974 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A970(U)
|
:0040A976 8B11                    mov edx, dword ptr [ecx]
:0040A978 8D442410                lea eax, dword ptr [esp+10]
:0040A97C 50                      push eax
:0040A97D FF92E8040000            call dword ptr [edx+000004E8]
:0040A983 50                      push eax
:0040A984 8D8E31130000            lea ecx, dword ptr [esi+00001331]
:0040A98A 897C2424                mov dword ptr [esp+24], edi
:0040A98E E88D091E00              call 005EB320
:0040A993 8B4C2410                mov ecx, dword ptr [esp+10]
:0040A997 C7442420FFFFFFFF        mov [esp+20], FFFFFFFF
:0040A99F 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040A9A2 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040A9A5 49                      dec ecx
:0040A9A6 8908                    mov dword ptr [eax], ecx
:0040A9A8 7509                    jne 0040A9B3
:0040A9AA 50                      push eax
:0040A9AB E850691D00              call 005E1300
:0040A9B0 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A9A8(C)
|
:0040A9B3 A1089C7A00              mov eax, dword ptr [007A9C08]
:0040A9B8 33D2                    xor edx, edx
:0040A9BA 668B96F8000000          mov dx, word ptr [esi+000000F8]
:0040A9C1 8B88CD050000            mov ecx, dword ptr [eax+000005CD]
:0040A9C7 8D04D1                  lea eax, dword ptr [ecx+8*edx]
:0040A9CA 668B54D106              mov dx, word ptr [ecx+8*edx+06]
:0040A9CF 663B96F6000000          cmp dx, word ptr [esi+000000F6]
:0040A9D6 741D                    je 0040A9F5
:0040A9D8 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040A9DF 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040A9E6 A1089C7A00              mov eax, dword ptr [007A9C08]
:0040A9EB 8B88CD050000            mov ecx, dword ptr [eax+000005CD]
:0040A9F1 8B09                    mov ecx, dword ptr [ecx]
:0040A9F3 EB02                    jmp 0040A9F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A9D6(C)
|
:0040A9F5 8B08                    mov ecx, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A9F3(U)
|
:0040A9F7 8B11                    mov edx, dword ptr [ecx]
:0040A9F9 FF92B8040000            call dword ptr [edx+000004B8]
:0040A9FF 8BD8                    mov ebx, eax
:0040AA01 8DBEFA000000            lea edi, dword ptr [esi+000000FA]
:0040AA07 8A4304                  mov al, byte ptr [ebx+04]
:0040AA0A 8D4B05                  lea ecx, dword ptr [ebx+05]
:0040AA0D 8D6F05                  lea ebp, dword ptr [edi+05]
:0040AA10 51                      push ecx
:0040AA11 8BCD                    mov ecx, ebp
:0040AA13 884704                  mov byte ptr [edi+04], al
:0040AA16 E8559B0000              call 00414570
:0040AA1B 8D5325                  lea edx, dword ptr [ebx+25]
:0040AA1E 8D4F25                  lea ecx, dword ptr [edi+25]
:0040AA21 52                      push edx
:0040AA22 E879940000              call 00413EA0
:0040AA27 8D4355                  lea eax, dword ptr [ebx+55]
:0040AA2A 8D4F55                  lea ecx, dword ptr [edi+55]
:0040AA2D 50                      push eax
:0040AA2E E8BD940000              call 00413EF0
:0040AA33 8D93C1000000            lea edx, dword ptr [ebx+000000C1]
:0040AA39 8D8FC1000000            lea ecx, dword ptr [edi+000000C1]
:0040AA3F 52                      push edx
:0040AA40 E85B950000              call 00413FA0
:0040AA45 8D831F010000            lea eax, dword ptr [ebx+0000011F]
:0040AA4B 8D8F1F010000            lea ecx, dword ptr [edi+0000011F]
:0040AA51 50                      push eax
:0040AA52 E8E9950000              call 00414040
:0040AA57 8D9347010000            lea edx, dword ptr [ebx+00000147]
:0040AA5D 8D8F47010000            lea ecx, dword ptr [edi+00000147]
:0040AA63 52                      push edx
:0040AA64 E8C7960000              call 00414130
:0040AA69 8D83D3020000            lea eax, dword ptr [ebx+000002D3]
:0040AA6F 8D8FD3020000            lea ecx, dword ptr [edi+000002D3]
:0040AA75 50                      push eax
:0040AA76 E8A59A0000              call 00414520
:0040AA7B 8B8BFF020000            mov ecx, dword ptr [ebx+000002FF]
:0040AA81 8A5704                  mov dl, byte ptr [edi+04]
:0040AA84 898FFF020000            mov dword ptr [edi+000002FF], ecx
:0040AA8A 55                      push ebp
:0040AA8B 8D8E0E100000            lea ecx, dword ptr [esi+0000100E]
:0040AA91 88960D100000            mov byte ptr [esi+0000100D], dl
:0040AA97 E8D49A0000              call 00414570
:0040AA9C 8D4725                  lea eax, dword ptr [edi+25]
:0040AA9F 8D8E2E100000            lea ecx, dword ptr [esi+0000102E]
:0040AAA5 50                      push eax
:0040AAA6 E8F5930000              call 00413EA0
:0040AAAB 8D4755                  lea eax, dword ptr [edi+55]
:0040AAAE 8D8E5E100000            lea ecx, dword ptr [esi+0000105E]
:0040AAB4 50                      push eax
:0040AAB5 E836940000              call 00413EF0
:0040AABA 8D87C1000000            lea eax, dword ptr [edi+000000C1]
:0040AAC0 8D8ECA100000            lea ecx, dword ptr [esi+000010CA]
:0040AAC6 50                      push eax
:0040AAC7 E8D4940000              call 00413FA0
:0040AACC 8D871F010000            lea eax, dword ptr [edi+0000011F]
:0040AAD2 8D8E28110000            lea ecx, dword ptr [esi+00001128]
:0040AAD8 50                      push eax
:0040AAD9 E862950000              call 00414040
:0040AADE 8D8747010000            lea eax, dword ptr [edi+00000147]
:0040AAE4 8D8E50110000            lea ecx, dword ptr [esi+00001150]
:0040AAEA 50                      push eax
:0040AAEB E840960000              call 00414130
:0040AAF0 8D87D3020000            lea eax, dword ptr [edi+000002D3]
:0040AAF6 8D8EDC120000            lea ecx, dword ptr [esi+000012DC]
:0040AAFC 50                      push eax
:0040AAFD E81E9A0000              call 00414520
:0040AB02 8B87FF020000            mov eax, dword ptr [edi+000002FF]
:0040AB08 8D9E96130000            lea ebx, dword ptr [esi+00001396]
:0040AB0E 898608130000            mov dword ptr [esi+00001308], eax
:0040AB14 8B03                    mov eax, dword ptr [ebx]
:0040AB16 8B28                    mov ebp, dword ptr [eax]
:0040AB18 3BE8                    cmp ebp, eax
:0040AB1A 7413                    je 0040AB2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AB2D(C)
|
:0040AB1C 8BC5                    mov eax, ebp
:0040AB1E 8B6D00                  mov ebp, dword ptr [ebp+00]
:0040AB21 6A01                    push 00000001
:0040AB23 50                      push eax
:0040AB24 8BCB                    mov ecx, ebx
:0040AB26 E875AB0000              call 004156A0
:0040AB2B 3B2B                    cmp ebp, dword ptr [ebx]
:0040AB2D 75ED                    jne 0040AB1C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AB1A(C)
|
:0040AB2F 8B03                    mov eax, dword ptr [ebx]
:0040AB31 57                      push edi
:0040AB32 51                      push ecx
:0040AB33 54                      push esp
:0040AB34 8900                    mov dword ptr [eax], eax
:0040AB36 8B03                    mov eax, dword ptr [ebx]
:0040AB38 8BCB                    mov ecx, ebx
:0040AB3A 894004                  mov dword ptr [eax+04], eax
:0040AB3D E8EEA80000              call 00415430
:0040AB42 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040AB46 51                      push ecx
:0040AB47 8BCB                    mov ecx, ebx
:0040AB49 E8F2A80000              call 00415440
:0040AB4E A1089C7A00              mov eax, dword ptr [007A9C08]
:0040AB53 33D2                    xor edx, edx
:0040AB55 668B96F8000000          mov dx, word ptr [esi+000000F8]
:0040AB5C 8B88CD050000            mov ecx, dword ptr [eax+000005CD]
:0040AB62 8D04D1                  lea eax, dword ptr [ecx+8*edx]
:0040AB65 668B54D106              mov dx, word ptr [ecx+8*edx+06]
:0040AB6A 663B96F6000000          cmp dx, word ptr [esi+000000F6]
:0040AB71 741F                    je 0040AB92
:0040AB73 33ED                    xor ebp, ebp
:0040AB75 6689AEF6000000          mov word ptr [esi+000000F6], bp
:0040AB7C 6689AEF8000000          mov word ptr [esi+000000F8], bp
:0040AB83 A1089C7A00              mov eax, dword ptr [007A9C08]
:0040AB88 8B88CD050000            mov ecx, dword ptr [eax+000005CD]
:0040AB8E 8B09                    mov ecx, dword ptr [ecx]
:0040AB90 EB04                    jmp 0040AB96

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AB71(C)
|
:0040AB92 8B08                    mov ecx, dword ptr [eax]
:0040AB94 33ED                    xor ebp, ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AB90(U)
|
:0040AB96 8B11                    mov edx, dword ptr [ecx]
:0040AB98 FF92B4040000            call dword ptr [edx+000004B4]
:0040AB9E 8BF8                    mov edi, eax
:0040ABA0 8A4704                  mov al, byte ptr [edi+04]
:0040ABA3 8D4F05                  lea ecx, dword ptr [edi+05]
:0040ABA6 51                      push ecx
:0040ABA7 8D8E05070000            lea ecx, dword ptr [esi+00000705]
:0040ABAD 888604070000            mov byte ptr [esi+00000704], al
:0040ABB3 E8B8990000              call 00414570
:0040ABB8 8D5725                  lea edx, dword ptr [edi+25]
:0040ABBB 8D8E25070000            lea ecx, dword ptr [esi+00000725]
:0040ABC1 52                      push edx
:0040ABC2 E8D9920000              call 00413EA0
:0040ABC7 8D4755                  lea eax, dword ptr [edi+55]
:0040ABCA 8D8E55070000            lea ecx, dword ptr [esi+00000755]
:0040ABD0 50                      push eax
:0040ABD1 E81A930000              call 00413EF0
:0040ABD6 8D8FC1000000            lea ecx, dword ptr [edi+000000C1]
:0040ABDC 51                      push ecx
:0040ABDD 8D8EC1070000            lea ecx, dword ptr [esi+000007C1]
:0040ABE3 E8B8930000              call 00413FA0
:0040ABE8 8D971F010000            lea edx, dword ptr [edi+0000011F]
:0040ABEE 8D8E1F080000            lea ecx, dword ptr [esi+0000081F]
:0040ABF4 52                      push edx
:0040ABF5 E846940000              call 00414040
:0040ABFA 8D8747010000            lea eax, dword ptr [edi+00000147]
:0040AC00 8D8E47080000            lea ecx, dword ptr [esi+00000847]
:0040AC06 50                      push eax
:0040AC07 E824950000              call 00414130
:0040AC0C 8D8FD3020000            lea ecx, dword ptr [edi+000002D3]
:0040AC12 51                      push ecx
:0040AC13 8D8ED3090000            lea ecx, dword ptr [esi+000009D3]
:0040AC19 E802990000              call 00414520
:0040AC1E 8B97FF020000            mov edx, dword ptr [edi+000002FF]
:0040AC24 8D8619020000            lea eax, dword ptr [esi+00000219]
:0040AC2A 8996FF090000            mov dword ptr [esi+000009FF], edx
:0040AC30 8B8E4B010000            mov ecx, dword ptr [esi+0000014B]
:0040AC36 50                      push eax
:0040AC37 51                      push ecx
:0040AC38 E8C3051600              call 0056B200
:0040AC3D 83C408                  add esp, 00000008
:0040AC40 8BF8                    mov edi, eax
:0040AC42 8D9E35130000            lea ebx, dword ptr [esi+00001335]
:0040AC48 57                      push edi
:0040AC49 8BCB                    mov ecx, ebx
:0040AC4B E820990000              call 00414570
:0040AC50 8D5720                  lea edx, dword ptr [edi+20]
:0040AC53 8D4B20                  lea ecx, dword ptr [ebx+20]
:0040AC56 52                      push edx
:0040AC57 E814990000              call 00414570
:0040AC5C 83C740                  add edi, 00000040
:0040AC5F 8D4B40                  lea ecx, dword ptr [ebx+40]
:0040AC62 57                      push edi
:0040AC63 E808990000              call 00414570
:0040AC68 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040AC6E 33C0                    xor eax, eax
:0040AC70 668B86F8000000          mov ax, word ptr [esi+000000F8]
:0040AC77 8B91CD050000            mov edx, dword ptr [ecx+000005CD]
:0040AC7D 668B4CC206              mov cx, word ptr [edx+8*eax+06]
:0040AC82 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040AC89 8D04C2                  lea eax, dword ptr [edx+8*eax]
:0040AC8C 741A                    je 0040ACA8
:0040AC8E 6689AEF6000000          mov word ptr [esi+000000F6], bp
:0040AC95 6689AEF8000000          mov word ptr [esi+000000F8], bp
:0040AC9C 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040ACA2 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AC8C(C)
|
:0040ACA8 8B00                    mov eax, dword ptr [eax]
:0040ACAA 8BC8                    mov ecx, eax
:0040ACAC 8B10                    mov edx, dword ptr [eax]
:0040ACAE FF92C0040000            call dword ptr [edx+000004C0]
:0040ACB4 8B4804                  mov ecx, dword ptr [eax+04]
:0040ACB7 898E10130000            mov dword ptr [esi+00001310], ecx
:0040ACBD 8B5008                  mov edx, dword ptr [eax+08]
:0040ACC0 899614130000            mov dword ptr [esi+00001314], edx
:0040ACC6 8B480C                  mov ecx, dword ptr [eax+0C]
:0040ACC9 898E18130000            mov dword ptr [esi+00001318], ecx
:0040ACCF 8B5010                  mov edx, dword ptr [eax+10]
:0040ACD2 89961C130000            mov dword ptr [esi+0000131C], edx
:0040ACD8 8B4814                  mov ecx, dword ptr [eax+14]
:0040ACDB 898E20130000            mov dword ptr [esi+00001320], ecx
:0040ACE1 8B5018                  mov edx, dword ptr [eax+18]
:0040ACE4 899624130000            mov dword ptr [esi+00001324], edx
:0040ACEA 8B481C                  mov ecx, dword ptr [eax+1C]
:0040ACED 898E28130000            mov dword ptr [esi+00001328], ecx
:0040ACF3 8B5020                  mov edx, dword ptr [eax+20]
:0040ACF6 89962C130000            mov dword ptr [esi+0000132C], edx
:0040ACFC 8A4024                  mov al, byte ptr [eax+24]
:0040ACFF 8BCE                    mov ecx, esi
:0040AD01 888630130000            mov byte ptr [esi+00001330], al
:0040AD07 E814000000              call 0040AD20
:0040AD0C 8B4C2418                mov ecx, dword ptr [esp+18]
:0040AD10 5F                      pop edi
:0040AD11 5E                      pop esi
:0040AD12 5D                      pop ebp
:0040AD13 5B                      pop ebx
:0040AD14 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040AD1B 83C414                  add esp, 00000014
:0040AD1E C3                      ret


:0040AD1F 90                      nop

* Referenced by a CALL at Addresses:
|:0040A76B   , :0040AD07   , :0040BFFE   , :0040D931   , :0040DC9D   
|:0040DF1E   , :0041091D   , :004109AB   , :00410AFD   , :0041155D   
|
:0040AD20 81EC100F0000            sub esp, 00000F10
:0040AD26 56                      push esi
:0040AD27 57                      push edi
:0040AD28 8BF9                    mov edi, ecx
:0040AD2A 8A87F3000000            mov al, byte ptr [edi+000000F3]
:0040AD30 8D8F31130000            lea ecx, dword ptr [edi+00001331]
:0040AD36 8DB7FA000000            lea esi, dword ptr [edi+000000FA]
:0040AD3C 50                      push eax
:0040AD3D 51                      push ecx
:0040AD3E 8BCE                    mov ecx, esi
:0040AD40 E87BA21400              call 00554FC0
:0040AD45 56                      push esi
:0040AD46 8D4C240C                lea ecx, dword ptr [esp+0C]
:0040AD4A E881A31400              call 005550D0
:0040AD4F 8D9603030000            lea edx, dword ptr [esi+00000303]
:0040AD55 8D8C240B030000          lea ecx, dword ptr [esp+0000030B]
:0040AD5C 52                      push edx
:0040AD5D E86EA31400              call 005550D0
:0040AD62 8D8606060000            lea eax, dword ptr [esi+00000606]
:0040AD68 8D8C240E060000          lea ecx, dword ptr [esp+0000060E]
:0040AD6F 50                      push eax
:0040AD70 E85BA31400              call 005550D0
:0040AD75 81C609090000            add esi, 00000909
:0040AD7B 8D8C2411090000          lea ecx, dword ptr [esp+00000911]
:0040AD82 56                      push esi
:0040AD83 E848A31400              call 005550D0
:0040AD88 8D8C24140C0000          lea ecx, dword ptr [esp+00000C14]
:0040AD8F E8CCA21400              call 00555060
:0040AD94 8BF0                    mov esi, eax
:0040AD96 8A4E04                  mov cl, byte ptr [esi+04]
:0040AD99 888C2412060000          mov byte ptr [esp+00000612], cl
:0040ADA0 8B5609                  mov edx, dword ptr [esi+09]
:0040ADA3 89942417060000          mov dword ptr [esp+00000617], edx
:0040ADAA 8B460D                  mov eax, dword ptr [esi+0D]
:0040ADAD 8984241B060000          mov dword ptr [esp+0000061B], eax
:0040ADB4 8B4E11                  mov ecx, dword ptr [esi+11]
:0040ADB7 898C241F060000          mov dword ptr [esp+0000061F], ecx
:0040ADBE 8B5615                  mov edx, dword ptr [esi+15]
:0040ADC1 89942423060000          mov dword ptr [esp+00000623], edx
:0040ADC8 8B4619                  mov eax, dword ptr [esi+19]
:0040ADCB 89842427060000          mov dword ptr [esp+00000627], eax
:0040ADD2 8B4E1D                  mov ecx, dword ptr [esi+1D]
:0040ADD5 898C242B060000          mov dword ptr [esp+0000062B], ecx
:0040ADDC 8B5621                  mov edx, dword ptr [esi+21]
:0040ADDF 8994242F060000          mov dword ptr [esp+0000062F], edx
:0040ADE6 8B4629                  mov eax, dword ptr [esi+29]
:0040ADE9 89842437060000          mov dword ptr [esp+00000637], eax
:0040ADF0 8B4E2D                  mov ecx, dword ptr [esi+2D]
:0040ADF3 898C243B060000          mov dword ptr [esp+0000063B], ecx
:0040ADFA 8B5631                  mov edx, dword ptr [esi+31]
:0040ADFD 8994243F060000          mov dword ptr [esp+0000063F], edx
:0040AE04 8B4635                  mov eax, dword ptr [esi+35]
:0040AE07 89842443060000          mov dword ptr [esp+00000643], eax
:0040AE0E 8B4E39                  mov ecx, dword ptr [esi+39]
:0040AE11 898C2447060000          mov dword ptr [esp+00000647], ecx
:0040AE18 8B563D                  mov edx, dword ptr [esi+3D]
:0040AE1B 8994244B060000          mov dword ptr [esp+0000064B], edx
:0040AE22 8B4641                  mov eax, dword ptr [esi+41]
:0040AE25 8984244F060000          mov dword ptr [esp+0000064F], eax
:0040AE2C 8B4E45                  mov ecx, dword ptr [esi+45]
:0040AE2F 898C2453060000          mov dword ptr [esp+00000653], ecx
:0040AE36 8B5649                  mov edx, dword ptr [esi+49]
:0040AE39 89942457060000          mov dword ptr [esp+00000657], edx
:0040AE40 8B464D                  mov eax, dword ptr [esi+4D]
:0040AE43 8984245B060000          mov dword ptr [esp+0000065B], eax
:0040AE4A 8B4E51                  mov ecx, dword ptr [esi+51]
:0040AE4D 8D5655                  lea edx, dword ptr [esi+55]
:0040AE50 898C245F060000          mov dword ptr [esp+0000065F], ecx
:0040AE57 52                      push edx
:0040AE58 8D8C2467060000          lea ecx, dword ptr [esp+00000667]
:0040AE5F E88C900000              call 00413EF0
:0040AE64 8D86C1000000            lea eax, dword ptr [esi+000000C1]
:0040AE6A 8D8C24CF060000          lea ecx, dword ptr [esp+000006CF]
:0040AE71 50                      push eax
:0040AE72 E829910000              call 00413FA0
:0040AE77 8D8E1F010000            lea ecx, dword ptr [esi+0000011F]
:0040AE7D 51                      push ecx
:0040AE7E 8D8C2431070000          lea ecx, dword ptr [esp+00000731]
:0040AE85 E8B6910000              call 00414040
:0040AE8A 8D9647010000            lea edx, dword ptr [esi+00000147]
:0040AE90 8D8C2455070000          lea ecx, dword ptr [esp+00000755]
:0040AE97 52                      push edx
:0040AE98 E893920000              call 00414130
:0040AE9D 8D86D3020000            lea eax, dword ptr [esi+000002D3]
:0040AEA3 8D8C24E1080000          lea ecx, dword ptr [esp+000008E1]
:0040AEAA 50                      push eax
:0040AEAB E870960000              call 00414520
:0040AEB0 8B8EFF020000            mov ecx, dword ptr [esi+000002FF]
:0040AEB6 898C240D090000          mov dword ptr [esp+0000090D], ecx
:0040AEBD 8D4C2408                lea ecx, dword ptr [esp+08]
:0040AEC1 E87AA11400              call 00555040
:0040AEC6 8A942415090000          mov dl, byte ptr [esp+00000915]
:0040AECD 8B8C241E090000          mov ecx, dword ptr [esp+0000091E]
:0040AED4 8B84241A090000          mov eax, dword ptr [esp+0000091A]
:0040AEDB 88970A0D0000            mov byte ptr [edi+00000D0A], dl
:0040AEE1 8B942422090000          mov edx, dword ptr [esp+00000922]
:0040AEE8 898F130D0000            mov dword ptr [edi+00000D13], ecx
:0040AEEE 8B8C242A090000          mov ecx, dword ptr [esp+0000092A]
:0040AEF5 89870F0D0000            mov dword ptr [edi+00000D0F], eax
:0040AEFB 8B842426090000          mov eax, dword ptr [esp+00000926]
:0040AF02 898F1F0D0000            mov dword ptr [edi+00000D1F], ecx
:0040AF08 8D8C2436090000          lea ecx, dword ptr [esp+00000936]
:0040AF0F 8997170D0000            mov dword ptr [edi+00000D17], edx
:0040AF15 8B94242E090000          mov edx, dword ptr [esp+0000092E]
:0040AF1C 89871B0D0000            mov dword ptr [edi+00000D1B], eax
:0040AF22 8B842432090000          mov eax, dword ptr [esp+00000932]
:0040AF29 51                      push ecx
:0040AF2A 8D8F2B0D0000            lea ecx, dword ptr [edi+00000D2B]
:0040AF30 8997230D0000            mov dword ptr [edi+00000D23], edx
:0040AF36 8987270D0000            mov dword ptr [edi+00000D27], eax
:0040AF3C E85F8F0000              call 00413EA0
:0040AF41 8D942466090000          lea edx, dword ptr [esp+00000966]
:0040AF48 8D8F5B0D0000            lea ecx, dword ptr [edi+00000D5B]
:0040AF4E 52                      push edx
:0040AF4F E89C8F0000              call 00413EF0
:0040AF54 8D8424D2090000          lea eax, dword ptr [esp+000009D2]
:0040AF5B 8D8FC70D0000            lea ecx, dword ptr [edi+00000DC7]
:0040AF61 50                      push eax
:0040AF62 E839900000              call 00413FA0
:0040AF67 8D8C24300A0000          lea ecx, dword ptr [esp+00000A30]
:0040AF6E 51                      push ecx
:0040AF6F 8D8F250E0000            lea ecx, dword ptr [edi+00000E25]
:0040AF75 E8C6900000              call 00414040
:0040AF7A 8D9424580A0000          lea edx, dword ptr [esp+00000A58]
:0040AF81 8D8F4D0E0000            lea ecx, dword ptr [edi+00000E4D]
:0040AF87 52                      push edx
:0040AF88 E8A3910000              call 00414130
:0040AF8D 8D8424E40B0000          lea eax, dword ptr [esp+00000BE4]
:0040AF94 8D8FD90F0000            lea ecx, dword ptr [edi+00000FD9]
:0040AF9A 50                      push eax
:0040AF9B E880950000              call 00414520
:0040AFA0 8B8C24100C0000          mov ecx, dword ptr [esp+00000C10]
:0040AFA7 898F05100000            mov dword ptr [edi+00001005], ecx
:0040AFAD 5F                      pop edi
:0040AFAE 5E                      pop esi
:0040AFAF 81C4100F0000            add esp, 00000F10
:0040AFB5 C3                      ret


:0040AFB6 90                      nop
:0040AFB7 90                      nop
:0040AFB8 90                      nop
:0040AFB9 90                      nop
:0040AFBA 90                      nop
:0040AFBB 90                      nop
:0040AFBC 90                      nop
:0040AFBD 90                      nop
:0040AFBE 90                      nop
:0040AFBF 90                      nop
:0040AFC0 C20400                  ret 0004


:0040AFC3 90                      nop
:0040AFC4 90                      nop
:0040AFC5 90                      nop
:0040AFC6 90                      nop
:0040AFC7 90                      nop
:0040AFC8 90                      nop
:0040AFC9 90                      nop
:0040AFCA 90                      nop
:0040AFCB 90                      nop
:0040AFCC 90                      nop
:0040AFCD 90                      nop
:0040AFCE 90                      nop
:0040AFCF 90                      nop
:0040AFD0 E8BBF5FFFF              call 0040A590
:0040AFD5 C20400                  ret 0004


:0040AFD8 90                      nop
:0040AFD9 90                      nop
:0040AFDA 90                      nop
:0040AFDB 90                      nop
:0040AFDC 90                      nop
:0040AFDD 90                      nop
:0040AFDE 90                      nop
:0040AFDF 90                      nop
:0040AFE0 8B442404                mov eax, dword ptr [esp+04]
:0040AFE4 8B89B2160000            mov ecx, dword ptr [ecx+000016B2]
:0040AFEA 8B5004                  mov edx, dword ptr [eax+04]
:0040AFED 83C224                  add edx, 00000024
:0040AFF0 52                      push edx
:0040AFF1 E8DA130500              call 0045C3D0
:0040AFF6 C20400                  ret 0004


:0040AFF9 90                      nop
:0040AFFA 90                      nop
:0040AFFB 90                      nop
:0040AFFC 90                      nop
:0040AFFD 90                      nop
:0040AFFE 90                      nop
:0040AFFF 90                      nop

* Referenced by a CALL at Addresses:
|:0040A393   , :0040A7CF   , :0040A89E   , :0040C005   , :0040DCA4   
|:0040DF25   , :00411647   
|
:0040B000 56                      push esi
:0040B001 8BF1                    mov esi, ecx
:0040B003 E868080000              call 0040B870
:0040B008 8BCE                    mov ecx, esi
:0040B00A E881240000              call 0040D490
:0040B00F 8BCE                    mov ecx, esi
:0040B011 E87A530000              call 00410390
:0040B016 8BCE                    mov ecx, esi
:0040B018 E803330000              call 0040E320
:0040B01D 8A86F4000000            mov al, byte ptr [esi+000000F4]
:0040B023 8BCE                    mov ecx, esi
:0040B025 84C0                    test al, al
:0040B027 7407                    je 0040B030
:0040B029 E882600000              call 004110B0
:0040B02E 5E                      pop esi
:0040B02F C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B027(C)
|
:0040B030 E8BB6E0000              call 00411EF0
:0040B035 5E                      pop esi
:0040B036 C3                      ret


:0040B037 90                      nop
:0040B038 90                      nop
:0040B039 90                      nop
:0040B03A 90                      nop
:0040B03B 90                      nop
:0040B03C 90                      nop
:0040B03D 90                      nop
:0040B03E 90                      nop
:0040B03F 90                      nop

* Referenced by a CALL at Address:
|:0040A330   
|
:0040B040 6AFF                    push FFFFFFFF
:0040B042 68ABFC6C00              push 006CFCAB
:0040B047 64A100000000            mov eax, dword ptr fs:[00000000]
:0040B04D 50                      push eax
:0040B04E 64892500000000          mov dword ptr fs:[00000000], esp
:0040B055 83EC4C                  sub esp, 0000004C
:0040B058 53                      push ebx
:0040B059 55                      push ebp
:0040B05A 56                      push esi
:0040B05B 8BF1                    mov esi, ecx
:0040B05D 57                      push edi
:0040B05E 33DB                    xor ebx, ebx
:0040B060 8B869E130000            mov eax, dword ptr [esi+0000139E]
:0040B066 6833010000              push 00000133
:0040B06B 895C2414                mov dword ptr [esp+14], ebx
:0040B06F 89442428                mov dword ptr [esp+28], eax
:0040B073 895C242C                mov dword ptr [esp+2C], ebx
:0040B077 E804621D00              call 005E1280
:0040B07C 8BF8                    mov edi, eax
:0040B07E 83C404                  add esp, 00000004
:0040B081 897C2420                mov dword ptr [esp+20], edi
:0040B085 3BFB                    cmp edi, ebx
:0040B087 895C2464                mov dword ptr [esp+64], ebx
:0040B08B 0F8485000000            je 0040B116
:0040B091 A128FE7200              mov eax, dword ptr [0072FE28]
:0040B096 8D4C2418                lea ecx, dword ptr [esp+18]
:0040B09A 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/cname_dn"
                                  |
:0040B09B 68B4B57800              push 0078B5B4
:0040B0A0 E80B001E00              call 005EB0B0
:0040B0A5 C744241001000000        mov [esp+10], 00000001
:0040B0AD 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040B0B3 C644246401              mov [esp+64], 01
:0040B0B8 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/btn/cname_up"
                                  |
:0040B0B9 68A0B57800              push 0078B5A0
:0040B0BE 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040B0C2 E8E9FF1D00              call 005EB0B0
:0040B0C7 BD03000000              mov ebp, 00000003
:0040B0CC 896C2410                mov dword ptr [esp+10], ebp
:0040B0D0 33C9                    xor ecx, ecx
:0040B0D2 B880C04000              mov eax, 0040C080
:0040B0D7 51                      push ecx
:0040B0D8 8D542438                lea edx, dword ptr [esp+38]
:0040B0DC 50                      push eax
:0040B0DD 52                      push edx
:0040B0DE 8BCE                    mov ecx, esi
:0040B0E0 C744247002000000        mov [esp+70], 00000002
:0040B0E8 E8538D0000              call 00413E40
:0040B0ED BB07000000              mov ebx, 00000007
:0040B0F2 895C2410                mov dword ptr [esp+10], ebx
:0040B0F6 8D4C2418                lea ecx, dword ptr [esp+18]
:0040B0FA 6A00                    push 00000000
:0040B0FC 8D542418                lea edx, dword ptr [esp+18]
:0040B100 51                      push ecx
:0040B101 52                      push edx
:0040B102 50                      push eax
:0040B103 8D442434                lea eax, dword ptr [esp+34]
:0040B107 8BCF                    mov ecx, edi
:0040B109 50                      push eax
:0040B10A 56                      push esi
:0040B10B 896C247C                mov dword ptr [esp+7C], ebp
:0040B10F E85C421F00              call 005FF370
:0040B114 EB02                    jmp 0040B118

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B08B(C)
|
:0040B116 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B114(U)
|
:0040B118 F6C304                  test bl, 04
:0040B11B 8986A6130000            mov dword ptr [esi+000013A6], eax
:0040B121 C744246405000000        mov [esp+64], 00000005
:0040B129 7419                    je 0040B144
:0040B12B 8B4C2434                mov ecx, dword ptr [esp+34]
:0040B12F 83E3FB                  and ebx, FFFFFFFB
:0040B132 85C9                    test ecx, ecx
:0040B134 895C2410                mov dword ptr [esp+10], ebx
:0040B138 740A                    je 0040B144
:0040B13A 8D542434                lea edx, dword ptr [esp+34]
:0040B13E 52                      push edx
:0040B13F E8DC311F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B129(C), :0040B138(C)
|
:0040B144 F6C302                  test bl, 02
:0040B147 C744246404000000        mov [esp+64], 00000004
:0040B14F 741E                    je 0040B16F
:0040B151 8B442414                mov eax, dword ptr [esp+14]
:0040B155 83E3FD                  and ebx, FFFFFFFD
:0040B158 83C0F4                  add eax, FFFFFFF4
:0040B15B 895C2410                mov dword ptr [esp+10], ebx
:0040B15F 8B08                    mov ecx, dword ptr [eax]
:0040B161 49                      dec ecx
:0040B162 8908                    mov dword ptr [eax], ecx
:0040B164 7509                    jne 0040B16F
:0040B166 50                      push eax
:0040B167 E894611D00              call 005E1300
:0040B16C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B14F(C), :0040B164(C)
|
:0040B16F 83CDFF                  or ebp, FFFFFFFF
:0040B172 F6C301                  test bl, 01
:0040B175 896C2464                mov dword ptr [esp+64], ebp
:0040B179 741B                    je 0040B196
:0040B17B 8B4C2418                mov ecx, dword ptr [esp+18]
:0040B17F 83E3FE                  and ebx, FFFFFFFE
:0040B182 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040B185 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040B188 49                      dec ecx
:0040B189 8908                    mov dword ptr [eax], ecx
:0040B18B 7509                    jne 0040B196
:0040B18D 50                      push eax
:0040B18E E86D611D00              call 005E1300
:0040B193 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B179(C), :0040B18B(C)
|
:0040B196 8B96D4000000            mov edx, dword ptr [esi+000000D4]
:0040B19C 8B8EA6130000            mov ecx, dword ptr [esi+000013A6]
:0040B1A2 83C258                  add edx, 00000058
:0040B1A5 52                      push edx
:0040B1A6 E8853D1F00              call 005FEF30
:0040B1AB 8B96D4000000            mov edx, dword ptr [esi+000000D4]
:0040B1B1 8B8EA6130000            mov ecx, dword ptr [esi+000013A6]
:0040B1B7 8B522C                  mov edx, dword ptr [edx+2C]
:0040B1BA 8B01                    mov eax, dword ptr [ecx]
:0040B1BC 52                      push edx
:0040B1BD FF90A4000000            call dword ptr [eax+000000A4]
:0040B1C3 8B7C2424                mov edi, dword ptr [esp+24]
:0040B1C7 6833010000              push 00000133
:0040B1CC 81C787000000            add edi, 00000087
:0040B1D2 897C2428                mov dword ptr [esp+28], edi
:0040B1D6 E8A5601D00              call 005E1280
:0040B1DB 8BF8                    mov edi, eax
:0040B1DD 83C404                  add esp, 00000004
:0040B1E0 897C2420                mov dword ptr [esp+20], edi
:0040B1E4 85FF                    test edi, edi
:0040B1E6 C744246407000000        mov [esp+64], 00000007
:0040B1EE 0F8484000000            je 0040B278
:0040B1F4 A128FE7200              mov eax, dword ptr [0072FE28]
:0040B1F9 8D4C2414                lea ecx, dword ptr [esp+14]
:0040B1FD 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/cage_dn"
                                  |
:0040B1FE 6890B57800              push 0078B590
:0040B203 E8A8FE1D00              call 005EB0B0
:0040B208 83CB08                  or ebx, 00000008
:0040B20B 895C2410                mov dword ptr [esp+10], ebx
:0040B20F 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040B215 C644246408              mov [esp+64], 08
:0040B21A 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/btn/cage_up"
                                  |
:0040B21B 6880B57800              push 0078B580
:0040B220 8D4C2420                lea ecx, dword ptr [esp+20]
:0040B224 E887FE1D00              call 005EB0B0
:0040B229 83CB10                  or ebx, 00000010
:0040B22C 895C2410                mov dword ptr [esp+10], ebx
:0040B230 33C9                    xor ecx, ecx
:0040B232 B860C24000              mov eax, 0040C260
:0040B237 51                      push ecx
:0040B238 8D542438                lea edx, dword ptr [esp+38]
:0040B23C 50                      push eax
:0040B23D 52                      push edx
:0040B23E 8BCE                    mov ecx, esi
:0040B240 C744247009000000        mov [esp+70], 00000009
:0040B248 E8F38B0000              call 00413E40
:0040B24D 83CB20                  or ebx, 00000020
:0040B250 895C2410                mov dword ptr [esp+10], ebx
:0040B254 8D4C2414                lea ecx, dword ptr [esp+14]
:0040B258 6A00                    push 00000000
:0040B25A 8D54241C                lea edx, dword ptr [esp+1C]
:0040B25E 51                      push ecx
:0040B25F 52                      push edx
:0040B260 50                      push eax
:0040B261 8D442434                lea eax, dword ptr [esp+34]
:0040B265 8BCF                    mov ecx, edi
:0040B267 50                      push eax
:0040B268 56                      push esi
:0040B269 C744247C0A000000        mov [esp+7C], 0000000A
:0040B271 E8FA401F00              call 005FF370
:0040B276 EB02                    jmp 0040B27A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B1EE(C)
|
:0040B278 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B276(U)
|
:0040B27A F6C320                  test bl, 20
:0040B27D 8986AA130000            mov dword ptr [esi+000013AA], eax
:0040B283 C74424640C000000        mov [esp+64], 0000000C
:0040B28B 7419                    je 0040B2A6
:0040B28D 8B4C2434                mov ecx, dword ptr [esp+34]
:0040B291 83E3DF                  and ebx, FFFFFFDF
:0040B294 85C9                    test ecx, ecx
:0040B296 895C2410                mov dword ptr [esp+10], ebx
:0040B29A 740A                    je 0040B2A6
:0040B29C 8D542434                lea edx, dword ptr [esp+34]
:0040B2A0 52                      push edx
:0040B2A1 E87A301F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B28B(C), :0040B29A(C)
|
:0040B2A6 F6C310                  test bl, 10
:0040B2A9 C74424640B000000        mov [esp+64], 0000000B
:0040B2B1 741E                    je 0040B2D1
:0040B2B3 8B442418                mov eax, dword ptr [esp+18]
:0040B2B7 83E3EF                  and ebx, FFFFFFEF
:0040B2BA 83C0F4                  add eax, FFFFFFF4
:0040B2BD 895C2410                mov dword ptr [esp+10], ebx
:0040B2C1 8B08                    mov ecx, dword ptr [eax]
:0040B2C3 49                      dec ecx
:0040B2C4 8908                    mov dword ptr [eax], ecx
:0040B2C6 7509                    jne 0040B2D1
:0040B2C8 50                      push eax
:0040B2C9 E832601D00              call 005E1300
:0040B2CE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B2B1(C), :0040B2C6(C)
|
:0040B2D1 F6C308                  test bl, 08
:0040B2D4 896C2464                mov dword ptr [esp+64], ebp
:0040B2D8 741B                    je 0040B2F5
:0040B2DA 8B4C2414                mov ecx, dword ptr [esp+14]
:0040B2DE 83E3F7                  and ebx, FFFFFFF7
:0040B2E1 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040B2E4 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040B2E7 49                      dec ecx
:0040B2E8 8908                    mov dword ptr [eax], ecx
:0040B2EA 7509                    jne 0040B2F5
:0040B2EC 50                      push eax
:0040B2ED E80E601D00              call 005E1300
:0040B2F2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B2D8(C), :0040B2EA(C)
|
:0040B2F5 8B96D4000000            mov edx, dword ptr [esi+000000D4]
:0040B2FB 8B8EAA130000            mov ecx, dword ptr [esi+000013AA]
:0040B301 83C258                  add edx, 00000058
:0040B304 52                      push edx
:0040B305 E8263C1F00              call 005FEF30
:0040B30A 8B96D4000000            mov edx, dword ptr [esi+000000D4]
:0040B310 8B8EAA130000            mov ecx, dword ptr [esi+000013AA]
:0040B316 8B522C                  mov edx, dword ptr [edx+2C]
:0040B319 8B01                    mov eax, dword ptr [ecx]
:0040B31B 52                      push edx
:0040B31C FF90A4000000            call dword ptr [eax+000000A4]
:0040B322 8A86F4000000            mov al, byte ptr [esi+000000F4]
:0040B328 84C0                    test al, al
:0040B32A 0F845F020000            je 0040B58F
:0040B330 6833010000              push 00000133
:0040B335 E8465F1D00              call 005E1280
:0040B33A 8BE8                    mov ebp, eax
:0040B33C 83C404                  add esp, 00000004
:0040B33F 896C2420                mov dword ptr [esp+20], ebp
:0040B343 85ED                    test ebp, ebp
:0040B345 C74424640E000000        mov [esp+64], 0000000E
:0040B34D 0F8491000000            je 0040B3E4
:0040B353 A128FE7200              mov eax, dword ptr [0072FE28]
:0040B358 8D4C2414                lea ecx, dword ptr [esp+14]
:0040B35C 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/splus_dn"
                                  |
:0040B35D 686CB57800              push 0078B56C
:0040B362 E849FD1D00              call 005EB0B0
:0040B367 83CB40                  or ebx, 00000040
:0040B36A 895C2410                mov dword ptr [esp+10], ebx
:0040B36E 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040B374 C64424640F              mov [esp+64], 0F
:0040B379 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/btn/splus_up"
                                  |
:0040B37A 6858B57800              push 0078B558
:0040B37F 8D4C2420                lea ecx, dword ptr [esp+20]
:0040B383 E828FD1D00              call 005EB0B0
:0040B388 80CB80                  or bl, 80
:0040B38B 8B542428                mov edx, dword ptr [esp+28]
:0040B38F 33C9                    xor ecx, ecx
:0040B391 B820C24000              mov eax, 0040C220
:0040B396 51                      push ecx
:0040B397 50                      push eax
:0040B398 8D44243C                lea eax, dword ptr [esp+3C]
:0040B39C 80CF01                  or bh, 01
:0040B39F 50                      push eax
:0040B3A0 8BCE                    mov ecx, esi
:0040B3A2 C744247010000000        mov [esp+70], 00000010
:0040B3AA 8D7A06                  lea edi, dword ptr [edx+06]
:0040B3AD 895C241C                mov dword ptr [esp+1C], ebx
:0040B3B1 E88A8A0000              call 00413E40
:0040B3B6 8B4C2424                mov ecx, dword ptr [esp+24]
:0040B3BA 8D542414                lea edx, dword ptr [esp+14]
:0040B3BE 894C242C                mov dword ptr [esp+2C], ecx
:0040B3C2 6A01                    push 00000001
:0040B3C4 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040B3C8 52                      push edx
:0040B3C9 51                      push ecx
:0040B3CA 8D542438                lea edx, dword ptr [esp+38]
:0040B3CE 50                      push eax
:0040B3CF 52                      push edx
:0040B3D0 56                      push esi
:0040B3D1 8BCD                    mov ecx, ebp
:0040B3D3 C744247C11000000        mov [esp+7C], 00000011
:0040B3DB 897C2448                mov dword ptr [esp+48], edi
:0040B3DF E88C3F1F00              call 005FF370

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B34D(C)
|
:0040B3E4 F6C701                  test bh, 01
:0040B3E7 C744246413000000        mov [esp+64], 00000013
:0040B3EF 7419                    je 0040B40A
:0040B3F1 8B4C2434                mov ecx, dword ptr [esp+34]
:0040B3F5 80E7FE                  and bh, FE
:0040B3F8 85C9                    test ecx, ecx
:0040B3FA 895C2410                mov dword ptr [esp+10], ebx
:0040B3FE 740A                    je 0040B40A
:0040B400 8D442434                lea eax, dword ptr [esp+34]
:0040B404 50                      push eax
:0040B405 E8162F1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B3EF(C), :0040B3FE(C)
|
:0040B40A F6C380                  test bl, 80
:0040B40D C744246412000000        mov [esp+64], 00000012
:0040B415 741F                    je 0040B436
:0040B417 8B4C2418                mov ecx, dword ptr [esp+18]
:0040B41B 80E37F                  and bl, 7F
:0040B41E 895C2410                mov dword ptr [esp+10], ebx
:0040B422 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040B425 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040B428 49                      dec ecx
:0040B429 8908                    mov dword ptr [eax], ecx
:0040B42B 7509                    jne 0040B436
:0040B42D 50                      push eax
:0040B42E E8CD5E1D00              call 005E1300
:0040B433 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B415(C), :0040B42B(C)
|
:0040B436 F6C340                  test bl, 40
:0040B439 C7442464FFFFFFFF        mov [esp+64], FFFFFFFF
:0040B441 741B                    je 0040B45E
:0040B443 8B542414                mov edx, dword ptr [esp+14]
:0040B447 83E3BF                  and ebx, FFFFFFBF
:0040B44A 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040B44D 8D42F4                  lea eax, dword ptr [edx-0C]
:0040B450 49                      dec ecx
:0040B451 8908                    mov dword ptr [eax], ecx
:0040B453 7509                    jne 0040B45E
:0040B455 50                      push eax
:0040B456 E8A55E1D00              call 005E1300
:0040B45B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B441(C), :0040B453(C)
|
:0040B45E 6833010000              push 00000133
:0040B463 E8185E1D00              call 005E1280
:0040B468 8BE8                    mov ebp, eax
:0040B46A 83C404                  add esp, 00000004
:0040B46D 896C2420                mov dword ptr [esp+20], ebp
:0040B471 85ED                    test ebp, ebp
:0040B473 C744246415000000        mov [esp+64], 00000015
:0040B47B 0F8491000000            je 0040B512
:0040B481 A128FE7200              mov eax, dword ptr [0072FE28]
:0040B486 8D4C2414                lea ecx, dword ptr [esp+14]
:0040B48A 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/sminus_dn"
                                  |
:0040B48B 6844B57800              push 0078B544
:0040B490 E81BFC1D00              call 005EB0B0
:0040B495 80CF02                  or bh, 02
:0040B498 895C2410                mov dword ptr [esp+10], ebx
:0040B49C 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040B4A2 C644246416              mov [esp+64], 16
:0040B4A7 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/btn/sminus_up"
                                  |
:0040B4A8 6830B57800              push 0078B530
:0040B4AD 8D4C2420                lea ecx, dword ptr [esp+20]
:0040B4B1 E8FAFB1D00              call 005EB0B0
:0040B4B6 80CF04                  or bh, 04
:0040B4B9 8B542428                mov edx, dword ptr [esp+28]
:0040B4BD 33C9                    xor ecx, ecx
:0040B4BF B840C24000              mov eax, 0040C240
:0040B4C4 51                      push ecx
:0040B4C5 50                      push eax
:0040B4C6 8D44243C                lea eax, dword ptr [esp+3C]
:0040B4CA 80CF08                  or bh, 08
:0040B4CD 50                      push eax
:0040B4CE 8BCE                    mov ecx, esi
:0040B4D0 C744247017000000        mov [esp+70], 00000017
:0040B4D8 8D7A10                  lea edi, dword ptr [edx+10]
:0040B4DB 895C241C                mov dword ptr [esp+1C], ebx
:0040B4DF E85C890000              call 00413E40
:0040B4E4 8B4C2424                mov ecx, dword ptr [esp+24]
:0040B4E8 8D542414                lea edx, dword ptr [esp+14]
:0040B4EC 894C242C                mov dword ptr [esp+2C], ecx
:0040B4F0 6A01                    push 00000001
:0040B4F2 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040B4F6 52                      push edx
:0040B4F7 51                      push ecx
:0040B4F8 8D542438                lea edx, dword ptr [esp+38]
:0040B4FC 50                      push eax
:0040B4FD 52                      push edx
:0040B4FE 56                      push esi
:0040B4FF 8BCD                    mov ecx, ebp
:0040B501 C744247C18000000        mov [esp+7C], 00000018
:0040B509 897C2448                mov dword ptr [esp+48], edi
:0040B50D E85E3E1F00              call 005FF370

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B47B(C)
|
:0040B512 F6C708                  test bh, 08
:0040B515 C74424641A000000        mov [esp+64], 0000001A
:0040B51D 7419                    je 0040B538
:0040B51F 8B4C2434                mov ecx, dword ptr [esp+34]
:0040B523 80E7F7                  and bh, F7
:0040B526 85C9                    test ecx, ecx
:0040B528 895C2410                mov dword ptr [esp+10], ebx
:0040B52C 740A                    je 0040B538
:0040B52E 8D442434                lea eax, dword ptr [esp+34]
:0040B532 50                      push eax
:0040B533 E8E82D1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B51D(C), :0040B52C(C)
|
:0040B538 F6C704                  test bh, 04
:0040B53B C744246419000000        mov [esp+64], 00000019
:0040B543 741F                    je 0040B564
:0040B545 8B4C2418                mov ecx, dword ptr [esp+18]
:0040B549 80E7FB                  and bh, FB
:0040B54C 895C2410                mov dword ptr [esp+10], ebx
:0040B550 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040B553 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040B556 49                      dec ecx
:0040B557 8908                    mov dword ptr [eax], ecx
:0040B559 7509                    jne 0040B564
:0040B55B 50                      push eax
:0040B55C E89F5D1D00              call 005E1300
:0040B561 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B543(C), :0040B559(C)
|
:0040B564 F6C702                  test bh, 02
:0040B567 C7442464FFFFFFFF        mov [esp+64], FFFFFFFF
:0040B56F 741B                    je 0040B58C
:0040B571 8B542414                mov edx, dword ptr [esp+14]
:0040B575 80E7FD                  and bh, FD
:0040B578 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040B57B 8D42F4                  lea eax, dword ptr [edx-0C]
:0040B57E 49                      dec ecx
:0040B57F 8908                    mov dword ptr [eax], ecx
:0040B581 7509                    jne 0040B58C
:0040B583 50                      push eax
:0040B584 E8775D1D00              call 005E1300
:0040B589 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B56F(C), :0040B581(C)
|
:0040B58C 83CDFF                  or ebp, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B32A(C)
|
:0040B58F 8B7C2424                mov edi, dword ptr [esp+24]
:0040B593 6833010000              push 00000133
:0040B598 83C750                  add edi, 00000050
:0040B59B 897C2428                mov dword ptr [esp+28], edi
:0040B59F E8DC5C1D00              call 005E1280
:0040B5A4 8BF8                    mov edi, eax
:0040B5A6 83C404                  add esp, 00000004
:0040B5A9 897C2420                mov dword ptr [esp+20], edi
:0040B5AD 85FF                    test edi, edi
:0040B5AF C74424641C000000        mov [esp+64], 0000001C
:0040B5B7 0F8484000000            je 0040B641
:0040B5BD A128FE7200              mov eax, dword ptr [0072FE28]
:0040B5C2 8D4C2414                lea ecx, dword ptr [esp+14]
:0040B5C6 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/csex_dn"
                                  |
:0040B5C7 6820B57800              push 0078B520
:0040B5CC E8DFFA1D00              call 005EB0B0
:0040B5D1 80CF10                  or bh, 10
:0040B5D4 895C2410                mov dword ptr [esp+10], ebx
:0040B5D8 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040B5DE C64424641D              mov [esp+64], 1D
:0040B5E3 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/btn/csex_up"
                                  |
:0040B5E4 6810B57800              push 0078B510
:0040B5E9 8D4C2420                lea ecx, dword ptr [esp+20]
:0040B5ED E8BEFA1D00              call 005EB0B0
:0040B5F2 80CF20                  or bh, 20
:0040B5F5 895C2410                mov dword ptr [esp+10], ebx
:0040B5F9 33C9                    xor ecx, ecx
:0040B5FB B8D0C24000              mov eax, 0040C2D0
:0040B600 51                      push ecx
:0040B601 8D542438                lea edx, dword ptr [esp+38]
:0040B605 50                      push eax
:0040B606 52                      push edx
:0040B607 8BCE                    mov ecx, esi
:0040B609 C74424701E000000        mov [esp+70], 0000001E
:0040B611 E82A880000              call 00413E40
:0040B616 80CF40                  or bh, 40
:0040B619 895C2410                mov dword ptr [esp+10], ebx
:0040B61D 8D4C2414                lea ecx, dword ptr [esp+14]
:0040B621 6A00                    push 00000000
:0040B623 8D54241C                lea edx, dword ptr [esp+1C]
:0040B627 51                      push ecx
:0040B628 52                      push edx
:0040B629 50                      push eax
:0040B62A 8D442434                lea eax, dword ptr [esp+34]
:0040B62E 8BCF                    mov ecx, edi
:0040B630 50                      push eax
:0040B631 56                      push esi
:0040B632 C744247C1F000000        mov [esp+7C], 0000001F
:0040B63A E8313D1F00              call 005FF370
:0040B63F EB02                    jmp 0040B643

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B5B7(C)
|
:0040B641 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B63F(U)
|
:0040B643 F6C740                  test bh, 40
:0040B646 8986AE130000            mov dword ptr [esi+000013AE], eax
:0040B64C C744246421000000        mov [esp+64], 00000021
:0040B654 7419                    je 0040B66F
:0040B656 8B4C2434                mov ecx, dword ptr [esp+34]
:0040B65A 80E7BF                  and bh, BF
:0040B65D 85C9                    test ecx, ecx
:0040B65F 895C2410                mov dword ptr [esp+10], ebx
:0040B663 740A                    je 0040B66F
:0040B665 8D542434                lea edx, dword ptr [esp+34]
:0040B669 52                      push edx
:0040B66A E8B12C1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B654(C), :0040B663(C)
|
:0040B66F F6C720                  test bh, 20
:0040B672 C744246420000000        mov [esp+64], 00000020
:0040B67A 741E                    je 0040B69A
:0040B67C 8B442418                mov eax, dword ptr [esp+18]
:0040B680 80E7DF                  and bh, DF
:0040B683 83C0F4                  add eax, FFFFFFF4
:0040B686 895C2410                mov dword ptr [esp+10], ebx
:0040B68A 8B08                    mov ecx, dword ptr [eax]
:0040B68C 49                      dec ecx
:0040B68D 8908                    mov dword ptr [eax], ecx
:0040B68F 7509                    jne 0040B69A
:0040B691 50                      push eax
:0040B692 E8695C1D00              call 005E1300
:0040B697 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B67A(C), :0040B68F(C)
|
:0040B69A F6C710                  test bh, 10
:0040B69D 896C2464                mov dword ptr [esp+64], ebp
:0040B6A1 741B                    je 0040B6BE
:0040B6A3 8B4C2414                mov ecx, dword ptr [esp+14]
:0040B6A7 80E7EF                  and bh, EF
:0040B6AA 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040B6AD 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040B6B0 49                      dec ecx
:0040B6B1 8908                    mov dword ptr [eax], ecx
:0040B6B3 7509                    jne 0040B6BE
:0040B6B5 50                      push eax
:0040B6B6 E8455C1D00              call 005E1300
:0040B6BB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B6A1(C), :0040B6B3(C)
|
:0040B6BE 8B96D4000000            mov edx, dword ptr [esi+000000D4]
:0040B6C4 8B8EAE130000            mov ecx, dword ptr [esi+000013AE]
:0040B6CA 83C258                  add edx, 00000058
:0040B6CD 52                      push edx
:0040B6CE E85D381F00              call 005FEF30
:0040B6D3 8B96D4000000            mov edx, dword ptr [esi+000000D4]
:0040B6D9 8B8EAE130000            mov ecx, dword ptr [esi+000013AE]
:0040B6DF 8B522C                  mov edx, dword ptr [edx+2C]
:0040B6E2 8B01                    mov eax, dword ptr [ecx]
:0040B6E4 52                      push edx
:0040B6E5 FF90A4000000            call dword ptr [eax+000000A4]
:0040B6EB 8B7C2424                mov edi, dword ptr [esp+24]
:0040B6EF 6833010000              push 00000133
:0040B6F4 83C751                  add edi, 00000051
:0040B6F7 897C2428                mov dword ptr [esp+28], edi
:0040B6FB E8805B1D00              call 005E1280
:0040B700 8BF8                    mov edi, eax
:0040B702 83C404                  add esp, 00000004
:0040B705 897C2418                mov dword ptr [esp+18], edi
:0040B709 85FF                    test edi, edi
:0040B70B C744246423000000        mov [esp+64], 00000023
:0040B713 0F848A000000            je 0040B7A3
:0040B719 A128FE7200              mov eax, dword ptr [0072FE28]
:0040B71E 8D4C2420                lea ecx, dword ptr [esp+20]
:0040B722 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/crace_dn"
                                  |
:0040B723 68FCB47800              push 0078B4FC
:0040B728 E883F91D00              call 005EB0B0
:0040B72D 80CF80                  or bh, 80
:0040B730 895C2410                mov dword ptr [esp+10], ebx
:0040B734 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040B73A C644246424              mov [esp+64], 24
:0040B73F 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/btn/crace_up"
                                  |
:0040B740 68E8B47800              push 0078B4E8
:0040B745 8D4C2424                lea ecx, dword ptr [esp+24]
:0040B749 E862F91D00              call 005EB0B0
:0040B74E 81CB00000100            or ebx, 00010000
:0040B754 895C2410                mov dword ptr [esp+10], ebx
:0040B758 33C9                    xor ecx, ecx
:0040B75A B800BE4000              mov eax, 0040BE00
:0040B75F 51                      push ecx
:0040B760 8D54244C                lea edx, dword ptr [esp+4C]
:0040B764 50                      push eax
:0040B765 52                      push edx
:0040B766 8BCE                    mov ecx, esi
:0040B768 C744247025000000        mov [esp+70], 00000025
:0040B770 E8CB860000              call 00413E40
:0040B775 81CB00000200            or ebx, 00020000
:0040B77B 895C2410                mov dword ptr [esp+10], ebx
:0040B77F 8D4C2420                lea ecx, dword ptr [esp+20]
:0040B783 6A00                    push 00000000
:0040B785 8D542420                lea edx, dword ptr [esp+20]
:0040B789 51                      push ecx
:0040B78A 52                      push edx
:0040B78B 50                      push eax
:0040B78C 8D442434                lea eax, dword ptr [esp+34]
:0040B790 8BCF                    mov ecx, edi
:0040B792 50                      push eax
:0040B793 56                      push esi
:0040B794 C744247C26000000        mov [esp+7C], 00000026
:0040B79C E8CF3B1F00              call 005FF370
:0040B7A1 EB02                    jmp 0040B7A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B713(C)
|
:0040B7A3 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B7A1(U)
|
:0040B7A5 F7C300000200            test ebx, 00020000
:0040B7AB 8986B2130000            mov dword ptr [esi+000013B2], eax
:0040B7B1 C744246428000000        mov [esp+64], 00000028
:0040B7B9 741C                    je 0040B7D7
:0040B7BB 8B4C2448                mov ecx, dword ptr [esp+48]
:0040B7BF 81E3FFFFFDFF            and ebx, FFFDFFFF
:0040B7C5 85C9                    test ecx, ecx
:0040B7C7 895C2410                mov dword ptr [esp+10], ebx
:0040B7CB 740A                    je 0040B7D7
:0040B7CD 8D542448                lea edx, dword ptr [esp+48]
:0040B7D1 52                      push edx
:0040B7D2 E8492B1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B7B9(C), :0040B7CB(C)
|
:0040B7D7 F7C300000100            test ebx, 00010000
:0040B7DD C744246427000000        mov [esp+64], 00000027
:0040B7E5 7421                    je 0040B808
:0040B7E7 8B44241C                mov eax, dword ptr [esp+1C]
:0040B7EB 81E3FFFFFEFF            and ebx, FFFEFFFF
:0040B7F1 83C0F4                  add eax, FFFFFFF4
:0040B7F4 895C2410                mov dword ptr [esp+10], ebx
:0040B7F8 8B08                    mov ecx, dword ptr [eax]
:0040B7FA 49                      dec ecx
:0040B7FB 8908                    mov dword ptr [eax], ecx
:0040B7FD 7509                    jne 0040B808
:0040B7FF 50                      push eax
:0040B800 E8FB5A1D00              call 005E1300
:0040B805 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B7E5(C), :0040B7FD(C)
|
:0040B808 F6C780                  test bh, 80
:0040B80B 896C2464                mov dword ptr [esp+64], ebp
:0040B80F 7418                    je 0040B829
:0040B811 8B4C2420                mov ecx, dword ptr [esp+20]
:0040B815 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040B818 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040B81B 49                      dec ecx
:0040B81C 8908                    mov dword ptr [eax], ecx
:0040B81E 7509                    jne 0040B829
:0040B820 50                      push eax
:0040B821 E8DA5A1D00              call 005E1300
:0040B826 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B80F(C), :0040B81E(C)
|
:0040B829 8B96D4000000            mov edx, dword ptr [esi+000000D4]
:0040B82F 8B8EB2130000            mov ecx, dword ptr [esi+000013B2]
:0040B835 83C258                  add edx, 00000058
:0040B838 52                      push edx
:0040B839 E8F2361F00              call 005FEF30
:0040B83E 8B96D4000000            mov edx, dword ptr [esi+000000D4]
:0040B844 8B8EB2130000            mov ecx, dword ptr [esi+000013B2]
:0040B84A 8B522C                  mov edx, dword ptr [edx+2C]
:0040B84D 8B01                    mov eax, dword ptr [ecx]
:0040B84F 52                      push edx
:0040B850 FF90A4000000            call dword ptr [eax+000000A4]
:0040B856 8B4C245C                mov ecx, dword ptr [esp+5C]
:0040B85A 5F                      pop edi
:0040B85B 5E                      pop esi
:0040B85C 5D                      pop ebp
:0040B85D 5B                      pop ebx
:0040B85E 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040B865 83C458                  add esp, 00000058
:0040B868 C3                      ret


:0040B869 90                      nop
:0040B86A 90                      nop
:0040B86B 90                      nop
:0040B86C 90                      nop
:0040B86D 90                      nop
:0040B86E 90                      nop
:0040B86F 90                      nop

* Referenced by a CALL at Addresses:
|:0040B003   , :0040C1AC   , :0040C237   , :0040C257   , :0040C2F2   
|:0040DCC7   
|
:0040B870 64A100000000            mov eax, dword ptr fs:[00000000]
:0040B876 6AFF                    push FFFFFFFF
:0040B878 6825FD6C00              push 006CFD25
:0040B87D 50                      push eax
:0040B87E A1089C7A00              mov eax, dword ptr [007A9C08]
:0040B883 64892500000000          mov dword ptr fs:[00000000], esp
:0040B88A 83EC1C                  sub esp, 0000001C
:0040B88D 8B80CD050000            mov eax, dword ptr [eax+000005CD]
:0040B893 56                      push esi
:0040B894 8BF1                    mov esi, ecx
:0040B896 33C9                    xor ecx, ecx
:0040B898 57                      push edi
:0040B899 668B8EF8000000          mov cx, word ptr [esi+000000F8]
:0040B8A0 668B54C806              mov dx, word ptr [eax+8*ecx+06]
:0040B8A5 8D04C8                  lea eax, dword ptr [eax+8*ecx]
:0040B8A8 663B96F6000000          cmp dx, word ptr [esi+000000F6]
:0040B8AF 741F                    je 0040B8D0
:0040B8B1 33FF                    xor edi, edi
:0040B8B3 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040B8BA 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040B8C1 A1089C7A00              mov eax, dword ptr [007A9C08]
:0040B8C6 8B80CD050000            mov eax, dword ptr [eax+000005CD]
:0040B8CC 8B00                    mov eax, dword ptr [eax]
:0040B8CE EB04                    jmp 0040B8D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B8AF(C)
|
:0040B8D0 8B00                    mov eax, dword ptr [eax]
:0040B8D2 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B8CE(U)
|
:0040B8D4 8B804A010000            mov eax, dword ptr [eax+0000014A]
:0040B8DA 89442408                mov dword ptr [esp+08], eax
:0040B8DE FF40F4                  inc [eax-0C]
:0040B8E1 8B4C2408                mov ecx, dword ptr [esp+08]
:0040B8E5 897C242C                mov dword ptr [esp+2C], edi
:0040B8E9 8B41FC                  mov eax, dword ptr [ecx-04]
:0040B8EC 3BC7                    cmp eax, edi
:0040B8EE 7573                    jne 0040B963
:0040B8F0 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040B8F6 8D4C2410                lea ecx, dword ptr [esp+10]
:0040B8FA 52                      push edx

* Possible StringData Ref from Data Obj ->"trait_noname"
                                  |
:0040B8FB 6800B67800              push 0078B600
:0040B900 E8ABF71D00              call 005EB0B0
:0040B905 8D442410                lea eax, dword ptr [esp+10]
:0040B909 8D4C2414                lea ecx, dword ptr [esp+14]
:0040B90D 50                      push eax
:0040B90E 51                      push ecx
:0040B90F B9D7AF7A00              mov ecx, 007AAFD7
:0040B914 C644243401              mov [esp+34], 01
:0040B919 E882DEFFFF              call 004097A0
:0040B91E 50                      push eax
:0040B91F 8D4C240C                lea ecx, dword ptr [esp+0C]
:0040B923 C644243002              mov [esp+30], 02
:0040B928 E8F3F91D00              call 005EB320
:0040B92D 8B542414                mov edx, dword ptr [esp+14]
:0040B931 C644242C01              mov [esp+2C], 01
:0040B936 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040B939 8D42F4                  lea eax, dword ptr [edx-0C]
:0040B93C 49                      dec ecx
:0040B93D 8908                    mov dword ptr [eax], ecx
:0040B93F 7509                    jne 0040B94A
:0040B941 50                      push eax
:0040B942 E8B9591D00              call 005E1300
:0040B947 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B93F(C)
|
:0040B94A 8B442410                mov eax, dword ptr [esp+10]
:0040B94E C644242C00              mov [esp+2C], 00
:0040B953 83C0F4                  add eax, FFFFFFF4
:0040B956 8B08                    mov ecx, dword ptr [eax]
:0040B958 49                      dec ecx
:0040B959 8908                    mov dword ptr [eax], ecx
:0040B95B 0F8580000000            jne 0040B9E1
:0040B961 EB75                    jmp 0040B9D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B8EE(C)
|
:0040B963 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040B969 33D2                    xor edx, edx
:0040B96B 668B96F8000000          mov dx, word ptr [esi+000000F8]
:0040B972 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:0040B978 668B4CD006              mov cx, word ptr [eax+8*edx+06]
:0040B97D 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040B984 8D04D0                  lea eax, dword ptr [eax+8*edx]
:0040B987 741A                    je 0040B9A3
:0040B989 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040B990 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040B997 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040B99D 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B987(C)
|
:0040B9A3 8B00                    mov eax, dword ptr [eax]
:0040B9A5 B9B0AF7A00              mov ecx, 007AAFB0
:0040B9AA 50                      push eax
:0040B9AB 8D442418                lea eax, dword ptr [esp+18]
:0040B9AF 50                      push eax
:0040B9B0 E81B621700              call 00581BD0
:0040B9B5 50                      push eax
:0040B9B6 8D4C240C                lea ecx, dword ptr [esp+0C]
:0040B9BA C644243003              mov [esp+30], 03
:0040B9BF E85CF91D00              call 005EB320
:0040B9C4 8B4C2414                mov ecx, dword ptr [esp+14]
:0040B9C8 C644242C00              mov [esp+2C], 00
:0040B9CD 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040B9D0 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040B9D3 49                      dec ecx
:0040B9D4 8908                    mov dword ptr [eax], ecx
:0040B9D6 7509                    jne 0040B9E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B961(U)
|
:0040B9D8 50                      push eax
:0040B9D9 E822591D00              call 005E1300
:0040B9DE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B95B(C), :0040B9D6(C)
|
:0040B9E1 8B8EA6130000            mov ecx, dword ptr [esi+000013A6]
:0040B9E7 8D542408                lea edx, dword ptr [esp+08]
:0040B9EB 52                      push edx
:0040B9EC E8AF341F00              call 005FEEA0
:0040B9F1 A128FE7200              mov eax, dword ptr [0072FE28]
:0040B9F6 8D4C2410                lea ecx, dword ptr [esp+10]
:0040B9FA 50                      push eax

* Possible StringData Ref from Data Obj ->"name_age"
                                  |
:0040B9FB 68F4B57800              push 0078B5F4
:0040BA00 E8ABF61D00              call 005EB0B0
:0040BA05 8D4C2410                lea ecx, dword ptr [esp+10]
:0040BA09 8D54241C                lea edx, dword ptr [esp+1C]
:0040BA0D 51                      push ecx
:0040BA0E 52                      push edx
:0040BA0F B9D7AF7A00              mov ecx, 007AAFD7
:0040BA14 C644243404              mov [esp+34], 04
:0040BA19 E882DDFFFF              call 004097A0
:0040BA1E 8B8E3F010000            mov ecx, dword ptr [esi+0000013F]
:0040BA24 8B10                    mov edx, dword ptr [eax]
:0040BA26 51                      push ecx
:0040BA27 52                      push edx

* Possible StringData Ref from Data Obj ->"%s %d"
                                  |
:0040BA28 68ECB57800              push 0078B5EC
:0040BA2D C644243805              mov [esp+38], 05
:0040BA32 E879031E00              call 005EBDB0
:0040BA37 8B00                    mov eax, dword ptr [eax]
:0040BA39 83C40C                  add esp, 0000000C
:0040BA3C 89442418                mov dword ptr [esp+18], eax
:0040BA40 FF40F4                  inc [eax-0C]
:0040BA43 8B44241C                mov eax, dword ptr [esp+1C]
:0040BA47 C644242C08              mov [esp+2C], 08
:0040BA4C 83C0F4                  add eax, FFFFFFF4
:0040BA4F 8B08                    mov ecx, dword ptr [eax]
:0040BA51 49                      dec ecx
:0040BA52 8908                    mov dword ptr [eax], ecx
:0040BA54 7509                    jne 0040BA5F
:0040BA56 50                      push eax
:0040BA57 E8A4581D00              call 005E1300
:0040BA5C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BA54(C)
|
:0040BA5F 8B4C2410                mov ecx, dword ptr [esp+10]
:0040BA63 C644242C07              mov [esp+2C], 07
:0040BA68 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040BA6B 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040BA6E 49                      dec ecx
:0040BA6F 8908                    mov dword ptr [eax], ecx
:0040BA71 7509                    jne 0040BA7C
:0040BA73 50                      push eax
:0040BA74 E887581D00              call 005E1300
:0040BA79 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BA71(C)
|
:0040BA7C 8B8EAA130000            mov ecx, dword ptr [esi+000013AA]
:0040BA82 8D542418                lea edx, dword ptr [esp+18]
:0040BA86 53                      push ebx
:0040BA87 52                      push edx
:0040BA88 E813341F00              call 005FEEA0
:0040BA8D 8B0D88DA7900            mov ecx, dword ptr [0079DA88]
:0040BA93 C744241094DA7900        mov [esp+10], 0079DA94
:0040BA9B 41                      inc ecx
:0040BA9C 890D88DA7900            mov dword ptr [0079DA88], ecx
:0040BAA2 8B8647010000            mov eax, dword ptr [esi+00000147]
:0040BAA8 C644243009              mov [esp+30], 09
:0040BAAD 3BC7                    cmp eax, edi
:0040BAAF 756E                    jne 0040BB1F
:0040BAB1 A128FE7200              mov eax, dword ptr [0072FE28]
:0040BAB6 8D4C2418                lea ecx, dword ptr [esp+18]
:0040BABA 50                      push eax

* Possible StringData Ref from Data Obj ->"trait_male"
                                  |
:0040BABB 68E0B57800              push 0078B5E0
:0040BAC0 E8EBF51D00              call 005EB0B0
:0040BAC5 8D4C2418                lea ecx, dword ptr [esp+18]
:0040BAC9 8D542424                lea edx, dword ptr [esp+24]
:0040BACD B30A                    mov bl, 0A
:0040BACF 51                      push ecx
:0040BAD0 52                      push edx
:0040BAD1 B9D7AF7A00              mov ecx, 007AAFD7
:0040BAD6 885C2438                mov byte ptr [esp+38], bl
:0040BADA E8C1DCFFFF              call 004097A0
:0040BADF 50                      push eax
:0040BAE0 8D4C2414                lea ecx, dword ptr [esp+14]
:0040BAE4 C64424340B              mov [esp+34], 0B
:0040BAE9 E832F81D00              call 005EB320
:0040BAEE 8B442424                mov eax, dword ptr [esp+24]
:0040BAF2 885C2430                mov byte ptr [esp+30], bl
:0040BAF6 83C0F4                  add eax, FFFFFFF4
:0040BAF9 8B08                    mov ecx, dword ptr [eax]
:0040BAFB 49                      dec ecx
:0040BAFC 8908                    mov dword ptr [eax], ecx
:0040BAFE 7509                    jne 0040BB09
:0040BB00 50                      push eax
:0040BB01 E8FA571D00              call 005E1300
:0040BB06 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BAFE(C)
|
:0040BB09 8B4C2418                mov ecx, dword ptr [esp+18]
:0040BB0D C644243009              mov [esp+30], 09
:0040BB12 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040BB15 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040BB18 49                      dec ecx
:0040BB19 8908                    mov dword ptr [eax], ecx
:0040BB1B 7578                    jne 0040BB95
:0040BB1D EB6D                    jmp 0040BB8C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BAAF(C)
|
:0040BB1F 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040BB25 8D4C2418                lea ecx, dword ptr [esp+18]
:0040BB29 52                      push edx

* Possible StringData Ref from Data Obj ->"trait_female"
                                  |
:0040BB2A 68D0B57800              push 0078B5D0
:0040BB2F E87CF51D00              call 005EB0B0
:0040BB34 8D442418                lea eax, dword ptr [esp+18]
:0040BB38 8D4C2424                lea ecx, dword ptr [esp+24]
:0040BB3C 50                      push eax
:0040BB3D B30C                    mov bl, 0C
:0040BB3F 51                      push ecx
:0040BB40 B9D7AF7A00              mov ecx, 007AAFD7
:0040BB45 885C2438                mov byte ptr [esp+38], bl
:0040BB49 E852DCFFFF              call 004097A0
:0040BB4E 50                      push eax
:0040BB4F 8D4C2414                lea ecx, dword ptr [esp+14]
:0040BB53 C64424340D              mov [esp+34], 0D
:0040BB58 E8C3F71D00              call 005EB320
:0040BB5D 8B542424                mov edx, dword ptr [esp+24]
:0040BB61 885C2430                mov byte ptr [esp+30], bl
:0040BB65 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040BB68 8D42F4                  lea eax, dword ptr [edx-0C]
:0040BB6B 49                      dec ecx
:0040BB6C 8908                    mov dword ptr [eax], ecx
:0040BB6E 7509                    jne 0040BB79
:0040BB70 50                      push eax
:0040BB71 E88A571D00              call 005E1300
:0040BB76 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BB6E(C)
|
:0040BB79 8B442418                mov eax, dword ptr [esp+18]
:0040BB7D C644243009              mov [esp+30], 09
:0040BB82 83C0F4                  add eax, FFFFFFF4
:0040BB85 8B08                    mov ecx, dword ptr [eax]
:0040BB87 49                      dec ecx
:0040BB88 8908                    mov dword ptr [eax], ecx
:0040BB8A 7509                    jne 0040BB95

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BB1D(U)
|
:0040BB8C 50                      push eax
:0040BB8D E86E571D00              call 005E1300
:0040BB92 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040BB1B(C), :0040BB8A(C)
|
:0040BB95 8D4C2410                lea ecx, dword ptr [esp+10]
:0040BB99 51                      push ecx
:0040BB9A 8B8EAE130000            mov ecx, dword ptr [esi+000013AE]
:0040BBA0 E8FB321F00              call 005FEEA0
:0040BBA5 8D9631130000            lea edx, dword ptr [esi+00001331]
:0040BBAB 8D442418                lea eax, dword ptr [esp+18]
:0040BBAF 52                      push edx

* Possible StringData Ref from Data Obj ->"name_"
                                  |
:0040BBB0 68C8B57800              push 0078B5C8
:0040BBB5 50                      push eax
:0040BBB6 E8F5890000              call 004145B0
:0040BBBB 83C40C                  add esp, 0000000C
:0040BBBE 8D4C2424                lea ecx, dword ptr [esp+24]
:0040BBC2 50                      push eax
:0040BBC3 B30E                    mov bl, 0E
:0040BBC5 51                      push ecx
:0040BBC6 B9D7AF7A00              mov ecx, 007AAFD7
:0040BBCB 885C2438                mov byte ptr [esp+38], bl
:0040BBCF E8CCDBFFFF              call 004097A0
:0040BBD4 8B8EB2130000            mov ecx, dword ptr [esi+000013B2]
:0040BBDA 50                      push eax
:0040BBDB C64424340F              mov [esp+34], 0F
:0040BBE0 E8BB321F00              call 005FEEA0
:0040BBE5 8B542424                mov edx, dword ptr [esp+24]
:0040BBE9 885C2430                mov byte ptr [esp+30], bl
:0040BBED 5B                      pop ebx
:0040BBEE 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040BBF1 8D42F4                  lea eax, dword ptr [edx-0C]
:0040BBF4 49                      dec ecx
:0040BBF5 8908                    mov dword ptr [eax], ecx
:0040BBF7 7509                    jne 0040BC02
:0040BBF9 50                      push eax
:0040BBFA E801571D00              call 005E1300
:0040BBFF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BBF7(C)
|
:0040BC02 8B442414                mov eax, dword ptr [esp+14]
:0040BC06 C644242C09              mov [esp+2C], 09
:0040BC0B 83C0F4                  add eax, FFFFFFF4
:0040BC0E 8B08                    mov ecx, dword ptr [eax]
:0040BC10 49                      dec ecx
:0040BC11 8908                    mov dword ptr [eax], ecx
:0040BC13 7509                    jne 0040BC1E
:0040BC15 50                      push eax
:0040BC16 E8E5561D00              call 005E1300
:0040BC1B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BC13(C)
|
:0040BC1E 39BE33010000            cmp dword ptr [esi+00000133], edi
:0040BC24 7E11                    jle 0040BC37
:0040BC26 8A8695130000            mov al, byte ptr [esi+00001395]
:0040BC2C 84C0                    test al, al
:0040BC2E 7407                    je 0040BC37
:0040BC30 B801000000              mov eax, 00000001
:0040BC35 EB02                    jmp 0040BC39

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040BC24(C), :0040BC2E(C)
|
:0040BC37 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BC35(U)
|
:0040BC39 8B8EA2130000            mov ecx, dword ptr [esi+000013A2]
:0040BC3F 50                      push eax
:0040BC40 8B11                    mov edx, dword ptr [ecx]
:0040BC42 FF5228                  call [edx+28]
:0040BC45 8B44240C                mov eax, dword ptr [esp+0C]
:0040BC49 5F                      pop edi
:0040BC4A 83C0F4                  add eax, FFFFFFF4
:0040BC4D C644242807              mov [esp+28], 07
:0040BC52 5E                      pop esi
:0040BC53 8B08                    mov ecx, dword ptr [eax]
:0040BC55 49                      dec ecx
:0040BC56 8908                    mov dword ptr [eax], ecx
:0040BC58 7509                    jne 0040BC63
:0040BC5A 50                      push eax
:0040BC5B E8A0561D00              call 005E1300
:0040BC60 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BC58(C)
|
:0040BC63 8B4C2410                mov ecx, dword ptr [esp+10]
:0040BC67 C644242400              mov [esp+24], 00
:0040BC6C 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040BC6F 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040BC72 49                      dec ecx
:0040BC73 8908                    mov dword ptr [eax], ecx
:0040BC75 7509                    jne 0040BC80
:0040BC77 50                      push eax
:0040BC78 E883561D00              call 005E1300
:0040BC7D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BC75(C)
|
:0040BC80 8B542400                mov edx, dword ptr [esp]
:0040BC84 C7442424FFFFFFFF        mov [esp+24], FFFFFFFF
:0040BC8C 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040BC8F 8D42F4                  lea eax, dword ptr [edx-0C]
:0040BC92 49                      dec ecx
:0040BC93 8908                    mov dword ptr [eax], ecx
:0040BC95 7509                    jne 0040BCA0
:0040BC97 50                      push eax
:0040BC98 E863561D00              call 005E1300
:0040BC9D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BC95(C)
|
:0040BCA0 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040BCA4 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040BCAB 83C428                  add esp, 00000028
:0040BCAE C3                      ret


:0040BCAF 90                      nop

* Referenced by a CALL at Address:
|:0040BE5D   
|
:0040BCB0 6AFF                    push FFFFFFFF
:0040BCB2 684FFD6C00              push 006CFD4F
:0040BCB7 64A100000000            mov eax, dword ptr fs:[00000000]
:0040BCBD 50                      push eax
:0040BCBE 64892500000000          mov dword ptr fs:[00000000], esp
:0040BCC5 83EC0C                  sub esp, 0000000C
:0040BCC8 A128FE7200              mov eax, dword ptr [0072FE28]
:0040BCCD 56                      push esi
:0040BCCE 8BF1                    mov esi, ecx
:0040BCD0 50                      push eax

* Possible StringData Ref from Data Obj ->"char_pickRace"
                                  |
:0040BCD1 6840B67800              push 0078B640
:0040BCD6 8D4C240C                lea ecx, dword ptr [esp+0C]
:0040BCDA 89742414                mov dword ptr [esp+14], esi
:0040BCDE E8CDF31D00              call 005EB0B0
:0040BCE3 8D4C2404                lea ecx, dword ptr [esp+04]
:0040BCE7 8D542408                lea edx, dword ptr [esp+08]
:0040BCEB 51                      push ecx
:0040BCEC 52                      push edx
:0040BCED B9B0AF7A00              mov ecx, 007AAFB0
:0040BCF2 C744242000000000        mov [esp+20], 00000000
:0040BCFA E8A1DAFFFF              call 004097A0
:0040BCFF 50                      push eax
:0040BD00 8B442424                mov eax, dword ptr [esp+24]
:0040BD04 50                      push eax
:0040BD05 8BCE                    mov ecx, esi
:0040BD07 C644242001              mov [esp+20], 01
:0040BD0C E88FCB0400              call 004588A0
:0040BD11 8B4C2408                mov ecx, dword ptr [esp+08]
:0040BD15 C644241804              mov [esp+18], 04
:0040BD1A 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040BD1D 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040BD20 49                      dec ecx
:0040BD21 8908                    mov dword ptr [eax], ecx
:0040BD23 7509                    jne 0040BD2E
:0040BD25 50                      push eax
:0040BD26 E8D5551D00              call 005E1300
:0040BD2B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BD23(C)
|
:0040BD2E 8B542404                mov edx, dword ptr [esp+04]
:0040BD32 C644241803              mov [esp+18], 03
:0040BD37 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040BD3A 8D42F4                  lea eax, dword ptr [edx-0C]
:0040BD3D 49                      dec ecx
:0040BD3E 8908                    mov dword ptr [eax], ecx
:0040BD40 7509                    jne 0040BD4B
:0040BD42 50                      push eax
:0040BD43 E8B8551D00              call 005E1300
:0040BD48 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BD40(C)
|
:0040BD4B 57                      push edi
:0040BD4C 8B7C2428                mov edi, dword ptr [esp+28]
:0040BD50 89BEFA000000            mov dword ptr [esi+000000FA], edi
:0040BD56 C70680907000            mov dword ptr [esi], 00709080
:0040BD5C C7460878907000          mov [esi+08], 00709078
:0040BD63 A128FE7200              mov eax, dword ptr [0072FE28]
:0040BD68 50                      push eax
:0040BD69 6868987A00              push 007A9868
:0040BD6E 8D4C242C                lea ecx, dword ptr [esp+2C]
:0040BD72 E839F31D00              call 005EB0B0
:0040BD77 50                      push eax
:0040BD78 8BCF                    mov ecx, edi
:0040BD7A C644242005              mov [esp+20], 05
:0040BD7F E89CF51D00              call 005EB320
:0040BD84 8B4C2424                mov ecx, dword ptr [esp+24]
:0040BD88 C644241C03              mov [esp+1C], 03
:0040BD8D 5F                      pop edi
:0040BD8E 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040BD91 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040BD94 49                      dec ecx
:0040BD95 8908                    mov dword ptr [eax], ecx
:0040BD97 7509                    jne 0040BDA2
:0040BD99 50                      push eax
:0040BD9A E861551D00              call 005E1300
:0040BD9F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BD97(C)
|
:0040BDA2 8A442428                mov al, byte ptr [esp+28]
:0040BDA6 84C0                    test al, al
:0040BDA8 7409                    je 0040BDB3
:0040BDAA 6A01                    push 00000001
:0040BDAC 6830AD7A00              push 007AAD30
:0040BDB1 EB07                    jmp 0040BDBA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BDA8(C)
|
:0040BDB3 6A00                    push 00000000
:0040BDB5 689CAD7A00              push 007AAD9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BDB1(U)
|
:0040BDBA 8BCE                    mov ecx, esi
:0040BDBC E83FD10400              call 00458F00
:0040BDC1 8B4C2410                mov ecx, dword ptr [esp+10]
:0040BDC5 8BC6                    mov eax, esi
:0040BDC7 5E                      pop esi
:0040BDC8 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040BDCF 83C418                  add esp, 00000018
:0040BDD2 C20C00                  ret 000C


:0040BDD5 90                      nop
:0040BDD6 90                      nop
:0040BDD7 90                      nop
:0040BDD8 90                      nop
:0040BDD9 90                      nop
:0040BDDA 90                      nop
:0040BDDB 90                      nop
:0040BDDC 90                      nop
:0040BDDD 90                      nop
:0040BDDE 90                      nop
:0040BDDF 90                      nop
:0040BDE0 8B442404                mov eax, dword ptr [esp+04]
:0040BDE4 8B89FA000000            mov ecx, dword ptr [ecx+000000FA]
:0040BDEA 50                      push eax
:0040BDEB E830F51D00              call 005EB320
:0040BDF0 C20400                  ret 0004


:0040BDF3 90                      nop
:0040BDF4 90                      nop
:0040BDF5 90                      nop
:0040BDF6 90                      nop
:0040BDF7 90                      nop
:0040BDF8 90                      nop
:0040BDF9 90                      nop
:0040BDFA 90                      nop
:0040BDFB 90                      nop
:0040BDFC 90                      nop
:0040BDFD 90                      nop
:0040BDFE 90                      nop
:0040BDFF 90                      nop
:0040BE00 64A100000000            mov eax, dword ptr fs:[00000000]
:0040BE06 6AFF                    push FFFFFFFF
:0040BE08 6867FD6C00              push 006CFD67
:0040BE0D 50                      push eax
:0040BE0E 64892500000000          mov dword ptr fs:[00000000], esp
:0040BE15 81EC08030000            sub esp, 00000308
:0040BE1B 56                      push esi
:0040BE1C 8BF1                    mov esi, ecx
:0040BE1E 8A86F4000000            mov al, byte ptr [esi+000000F4]
:0040BE24 84C0                    test al, al
:0040BE26 0F84DF010000            je 0040C00B
:0040BE2C 68FE000000              push 000000FE
:0040BE31 E84A541D00              call 005E1280
:0040BE36 83C404                  add esp, 00000004
:0040BE39 89442404                mov dword ptr [esp+04], eax
:0040BE3D 85C0                    test eax, eax
:0040BE3F C784241403000000000000  mov dword ptr [esp+00000314], 00000000
:0040BE4A 7418                    je 0040BE64
:0040BE4C 8A8EF5000000            mov cl, byte ptr [esi+000000F5]
:0040BE52 8D9631130000            lea edx, dword ptr [esi+00001331]
:0040BE58 51                      push ecx
:0040BE59 52                      push edx
:0040BE5A 56                      push esi
:0040BE5B 8BC8                    mov ecx, eax
:0040BE5D E84EFEFFFF              call 0040BCB0
:0040BE62 EB02                    jmp 0040BE66

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BE4A(C)
|
:0040BE64 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BE62(U)
|
:0040BE66 8B10                    mov edx, dword ptr [eax]
:0040BE68 8BC8                    mov ecx, eax
:0040BE6A C7842414030000FFFFFFFF  mov dword ptr [esp+00000314], FFFFFFFF
:0040BE75 FF522C                  call [edx+2C]
:0040BE78 83F804                  cmp eax, 00000004
:0040BE7B 0F858A010000            jne 0040C00B
:0040BE81 8D8631130000            lea eax, dword ptr [esi+00001331]
:0040BE87 57                      push edi
:0040BE88 50                      push eax
:0040BE89 8D8EFA000000            lea ecx, dword ptr [esi+000000FA]
:0040BE8F E87C841400              call 00554310
:0040BE94 8D4C240C                lea ecx, dword ptr [esp+0C]
:0040BE98 E8C3911400              call 00555060
:0040BE9D 8BF8                    mov edi, eax
:0040BE9F 8A4F04                  mov cl, byte ptr [edi+04]
:0040BEA2 888E04070000            mov byte ptr [esi+00000704], cl
:0040BEA8 8B5709                  mov edx, dword ptr [edi+09]
:0040BEAB 899609070000            mov dword ptr [esi+00000709], edx
:0040BEB1 8B470D                  mov eax, dword ptr [edi+0D]
:0040BEB4 89860D070000            mov dword ptr [esi+0000070D], eax
:0040BEBA 8B4F11                  mov ecx, dword ptr [edi+11]
:0040BEBD 898E11070000            mov dword ptr [esi+00000711], ecx
:0040BEC3 8B5715                  mov edx, dword ptr [edi+15]
:0040BEC6 899615070000            mov dword ptr [esi+00000715], edx
:0040BECC 8B4719                  mov eax, dword ptr [edi+19]
:0040BECF 898619070000            mov dword ptr [esi+00000719], eax
:0040BED5 8B4F1D                  mov ecx, dword ptr [edi+1D]
:0040BED8 898E1D070000            mov dword ptr [esi+0000071D], ecx
:0040BEDE 8B5721                  mov edx, dword ptr [edi+21]
:0040BEE1 8D4725                  lea eax, dword ptr [edi+25]
:0040BEE4 8D8E25070000            lea ecx, dword ptr [esi+00000725]
:0040BEEA 50                      push eax
:0040BEEB 899621070000            mov dword ptr [esi+00000721], edx
:0040BEF1 E8AA7F0000              call 00413EA0
:0040BEF6 8D4F55                  lea ecx, dword ptr [edi+55]
:0040BEF9 51                      push ecx
:0040BEFA 8D8E55070000            lea ecx, dword ptr [esi+00000755]
:0040BF00 E8EB7F0000              call 00413EF0
:0040BF05 8D97C1000000            lea edx, dword ptr [edi+000000C1]
:0040BF0B 8D8EC1070000            lea ecx, dword ptr [esi+000007C1]
:0040BF11 52                      push edx
:0040BF12 E889800000              call 00413FA0
:0040BF17 8D871F010000            lea eax, dword ptr [edi+0000011F]
:0040BF1D 8D8E1F080000            lea ecx, dword ptr [esi+0000081F]
:0040BF23 50                      push eax
:0040BF24 E817810000              call 00414040
:0040BF29 8D8F47010000            lea ecx, dword ptr [edi+00000147]
:0040BF2F 51                      push ecx
:0040BF30 8D8E47080000            lea ecx, dword ptr [esi+00000847]
:0040BF36 E8F5810000              call 00414130
:0040BF3B 8D97D3020000            lea edx, dword ptr [edi+000002D3]
:0040BF41 8D8ED3090000            lea ecx, dword ptr [esi+000009D3]
:0040BF47 52                      push edx
:0040BF48 E8D3850000              call 00414520
:0040BF4D 8B87FF020000            mov eax, dword ptr [edi+000002FF]
:0040BF53 8D8E220B0000            lea ecx, dword ptr [esi+00000B22]
:0040BF59 8986FF090000            mov dword ptr [esi+000009FF], eax
:0040BF5F 8B964B010000            mov edx, dword ptr [esi+0000014B]
:0040BF65 51                      push ecx
:0040BF66 52                      push edx
:0040BF67 E894F21500              call 0056B200
:0040BF6C 8B4804                  mov ecx, dword ptr [eax+04]
:0040BF6F 83C408                  add esp, 00000008
:0040BF72 898E39130000            mov dword ptr [esi+00001339], ecx
:0040BF78 8B5008                  mov edx, dword ptr [eax+08]
:0040BF7B 89963D130000            mov dword ptr [esi+0000133D], edx
:0040BF81 8B480C                  mov ecx, dword ptr [eax+0C]
:0040BF84 898E41130000            mov dword ptr [esi+00001341], ecx
:0040BF8A 8B5010                  mov edx, dword ptr [eax+10]
:0040BF8D 899645130000            mov dword ptr [esi+00001345], edx
:0040BF93 8B4814                  mov ecx, dword ptr [eax+14]
:0040BF96 898E49130000            mov dword ptr [esi+00001349], ecx
:0040BF9C 8B5018                  mov edx, dword ptr [eax+18]
:0040BF9F 89964D130000            mov dword ptr [esi+0000134D], edx
:0040BFA5 8B481C                  mov ecx, dword ptr [eax+1C]
:0040BFA8 898E51130000            mov dword ptr [esi+00001351], ecx
:0040BFAE 8B5024                  mov edx, dword ptr [eax+24]
:0040BFB1 899659130000            mov dword ptr [esi+00001359], edx
:0040BFB7 8B4828                  mov ecx, dword ptr [eax+28]
:0040BFBA 898E5D130000            mov dword ptr [esi+0000135D], ecx
:0040BFC0 8B502C                  mov edx, dword ptr [eax+2C]
:0040BFC3 899661130000            mov dword ptr [esi+00001361], edx
:0040BFC9 8B4830                  mov ecx, dword ptr [eax+30]
:0040BFCC 898E65130000            mov dword ptr [esi+00001365], ecx
:0040BFD2 8B5034                  mov edx, dword ptr [eax+34]
:0040BFD5 899669130000            mov dword ptr [esi+00001369], edx
:0040BFDB 8B4838                  mov ecx, dword ptr [eax+38]
:0040BFDE 898E6D130000            mov dword ptr [esi+0000136D], ecx
:0040BFE4 8B503C                  mov edx, dword ptr [eax+3C]
:0040BFE7 83C040                  add eax, 00000040
:0040BFEA 8D8E75130000            lea ecx, dword ptr [esi+00001375]
:0040BFF0 50                      push eax
:0040BFF1 899671130000            mov dword ptr [esi+00001371], edx
:0040BFF7 E874850000              call 00414570
:0040BFFC 8BCE                    mov ecx, esi
:0040BFFE E81DEDFFFF              call 0040AD20
:0040C003 8BCE                    mov ecx, esi
:0040C005 E8F6EFFFFF              call 0040B000
:0040C00A 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040BE26(C), :0040BE7B(C)
|
:0040C00B 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040C011 33C0                    xor eax, eax
:0040C013 668B86F8000000          mov ax, word ptr [esi+000000F8]
:0040C01A 8B91CD050000            mov edx, dword ptr [ecx+000005CD]
:0040C020 668B4CC206              mov cx, word ptr [edx+8*eax+06]
:0040C025 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040C02C 8D04C2                  lea eax, dword ptr [edx+8*eax]
:0040C02F 741E                    je 0040C04F
:0040C031 66C786F60000000000      mov word ptr [esi+000000F6], 0000
:0040C03A 66C786F80000000000      mov word ptr [esi+000000F8], 0000
:0040C043 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040C049 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C02F(C)
|
:0040C04F 8B00                    mov eax, dword ptr [eax]
:0040C051 8B8EB2160000            mov ecx, dword ptr [esi+000016B2]
:0040C057 50                      push eax
:0040C058 E873000500              call 0045C0D0
:0040C05D 8B8C240C030000          mov ecx, dword ptr [esp+0000030C]
:0040C064 5E                      pop esi
:0040C065 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040C06C 81C414030000            add esp, 00000314
:0040C072 C20400                  ret 0004


:0040C075 90                      nop
:0040C076 90                      nop
:0040C077 90                      nop
:0040C078 90                      nop
:0040C079 90                      nop
:0040C07A 90                      nop
:0040C07B 90                      nop
:0040C07C 90                      nop
:0040C07D 90                      nop
:0040C07E 90                      nop
:0040C07F 90                      nop
:0040C080 64A100000000            mov eax, dword ptr fs:[00000000]
:0040C086 6AFF                    push FFFFFFFF
:0040C088 6881FD6C00              push 006CFD81
:0040C08D 50                      push eax
:0040C08E 64892500000000          mov dword ptr fs:[00000000], esp
:0040C095 83EC08                  sub esp, 00000008
:0040C098 53                      push ebx
:0040C099 56                      push esi
:0040C09A 8BF1                    mov esi, ecx
:0040C09C 33DB                    xor ebx, ebx
:0040C09E 389EF4000000            cmp byte ptr [esi+000000F4], bl
:0040C0A4 0F8407010000            je 0040C1B1
:0040C0AA A128FE7200              mov eax, dword ptr [0072FE28]
:0040C0AF 8D4C2408                lea ecx, dword ptr [esp+08]
:0040C0B3 50                      push eax

* Possible StringData Ref from Data Obj ->"Name?"
                                  |
:0040C0B4 6850B67800              push 0078B650
:0040C0B9 E8F2EF1D00              call 005EB0B0
:0040C0BE 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040C0C4 33D2                    xor edx, edx
:0040C0C6 668B96F8000000          mov dx, word ptr [esi+000000F8]
:0040C0CD 895C2418                mov dword ptr [esp+18], ebx
:0040C0D1 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:0040C0D7 668B4CD006              mov cx, word ptr [eax+8*edx+06]
:0040C0DC 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040C0E3 8D04D0                  lea eax, dword ptr [eax+8*edx]
:0040C0E6 741A                    je 0040C102
:0040C0E8 66899EF6000000          mov word ptr [esi+000000F6], bx
:0040C0EF 66899EF8000000          mov word ptr [esi+000000F8], bx
:0040C0F6 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040C0FC 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C0E6(C)
|
:0040C102 8B00                    mov eax, dword ptr [eax]
:0040C104 8D4C240C                lea ecx, dword ptr [esp+0C]
:0040C108 054A010000              add eax, 0000014A
:0040C10D 50                      push eax
:0040C10E 8D44240C                lea eax, dword ptr [esp+0C]
:0040C112 50                      push eax
:0040C113 56                      push esi
:0040C114 51                      push ecx
:0040C115 E8969C1F00              call 00605DB0
:0040C11A 83C410                  add esp, 00000010
:0040C11D 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040C123 C644241801              mov [esp+18], 01
:0040C128 8B8ACD050000            mov ecx, dword ptr [edx+000005CD]
:0040C12E 33D2                    xor edx, edx
:0040C130 668B96F8000000          mov dx, word ptr [esi+000000F8]
:0040C137 8D0CD1                  lea ecx, dword ptr [ecx+8*edx]
:0040C13A 668B5106                mov dx, word ptr [ecx+06]
:0040C13E 663B96F6000000          cmp dx, word ptr [esi+000000F6]
:0040C145 741A                    je 0040C161
:0040C147 66899EF6000000          mov word ptr [esi+000000F6], bx
:0040C14E 66899EF8000000          mov word ptr [esi+000000F8], bx
:0040C155 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040C15B 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C145(C)
|
:0040C161 8B09                    mov ecx, dword ptr [ecx]
:0040C163 50                      push eax
:0040C164 81C14A010000            add ecx, 0000014A
:0040C16A E8B1F11D00              call 005EB320
:0040C16F 8B54240C                mov edx, dword ptr [esp+0C]
:0040C173 885C2418                mov byte ptr [esp+18], bl
:0040C177 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040C17A 8D42F4                  lea eax, dword ptr [edx-0C]
:0040C17D 49                      dec ecx
:0040C17E 8908                    mov dword ptr [eax], ecx
:0040C180 7509                    jne 0040C18B
:0040C182 50                      push eax
:0040C183 E878511D00              call 005E1300
:0040C188 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C180(C)
|
:0040C18B 8B442408                mov eax, dword ptr [esp+08]
:0040C18F C7442418FFFFFFFF        mov [esp+18], FFFFFFFF
:0040C197 83C0F4                  add eax, FFFFFFF4
:0040C19A 8B08                    mov ecx, dword ptr [eax]
:0040C19C 49                      dec ecx
:0040C19D 8908                    mov dword ptr [eax], ecx
:0040C19F 7509                    jne 0040C1AA
:0040C1A1 50                      push eax
:0040C1A2 E859511D00              call 005E1300
:0040C1A7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C19F(C)
|
:0040C1AA 8BCE                    mov ecx, esi
:0040C1AC E8BFF6FFFF              call 0040B870

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C0A4(C)
|
:0040C1B1 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040C1B7 33C9                    xor ecx, ecx
:0040C1B9 668B8EF8000000          mov cx, word ptr [esi+000000F8]
:0040C1C0 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:0040C1C6 8D04C8                  lea eax, dword ptr [eax+8*ecx]
:0040C1C9 668B4806                mov cx, word ptr [eax+06]
:0040C1CD 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040C1D4 741A                    je 0040C1F0
:0040C1D6 66899EF6000000          mov word ptr [esi+000000F6], bx
:0040C1DD 66899EF8000000          mov word ptr [esi+000000F8], bx
:0040C1E4 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040C1EA 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C1D4(C)
|
:0040C1F0 8B00                    mov eax, dword ptr [eax]
:0040C1F2 8B8EB2160000            mov ecx, dword ptr [esi+000016B2]
:0040C1F8 50                      push eax
:0040C1F9 E8D2FE0400              call 0045C0D0
:0040C1FE 8B4C2410                mov ecx, dword ptr [esp+10]
:0040C202 5E                      pop esi
:0040C203 5B                      pop ebx
:0040C204 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040C20B 83C414                  add esp, 00000014
:0040C20E C20400                  ret 0004


:0040C211 90                      nop
:0040C212 90                      nop
:0040C213 90                      nop
:0040C214 90                      nop
:0040C215 90                      nop
:0040C216 90                      nop
:0040C217 90                      nop
:0040C218 90                      nop
:0040C219 90                      nop
:0040C21A 90                      nop
:0040C21B 90                      nop
:0040C21C 90                      nop
:0040C21D 90                      nop
:0040C21E 90                      nop
:0040C21F 90                      nop
:0040C220 8B813F010000            mov eax, dword ptr [ecx+0000013F]
:0040C226 40                      inc eax
:0040C227 83F824                  cmp eax, 00000024
:0040C22A 7E05                    jle 0040C231
:0040C22C B824000000              mov eax, 00000024

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C22A(C)
|
:0040C231 89813F010000            mov dword ptr [ecx+0000013F], eax
:0040C237 E834F6FFFF              call 0040B870
:0040C23C C20400                  ret 0004


:0040C23F 90                      nop
:0040C240 8B813F010000            mov eax, dword ptr [ecx+0000013F]
:0040C246 48                      dec eax
:0040C247 83F810                  cmp eax, 00000010
:0040C24A 7D05                    jge 0040C251
:0040C24C B810000000              mov eax, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C24A(C)
|
:0040C251 89813F010000            mov dword ptr [ecx+0000013F], eax
:0040C257 E814F6FFFF              call 0040B870
:0040C25C C20400                  ret 0004


:0040C25F 90                      nop
:0040C260 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040C266 33C0                    xor eax, eax
:0040C268 668B81F8000000          mov ax, word ptr [ecx+000000F8]
:0040C26F 8B92CD050000            mov edx, dword ptr [edx+000005CD]
:0040C275 8D04C2                  lea eax, dword ptr [edx+8*eax]
:0040C278 668B5006                mov dx, word ptr [eax+06]
:0040C27C 663B91F6000000          cmp dx, word ptr [ecx+000000F6]
:0040C283 742C                    je 0040C2B1
:0040C285 33C0                    xor eax, eax
:0040C287 668981F6000000          mov word ptr [ecx+000000F6], ax
:0040C28E 668981F8000000          mov word ptr [ecx+000000F8], ax
:0040C295 A1089C7A00              mov eax, dword ptr [007A9C08]
:0040C29A 8B89B2160000            mov ecx, dword ptr [ecx+000016B2]
:0040C2A0 8B90CD050000            mov edx, dword ptr [eax+000005CD]
:0040C2A6 8B02                    mov eax, dword ptr [edx]
:0040C2A8 50                      push eax
:0040C2A9 E822FE0400              call 0045C0D0
:0040C2AE C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C283(C)
|
:0040C2B1 8B00                    mov eax, dword ptr [eax]
:0040C2B3 8B89B2160000            mov ecx, dword ptr [ecx+000016B2]
:0040C2B9 50                      push eax
:0040C2BA E811FE0400              call 0045C0D0
:0040C2BF C20400                  ret 0004


:0040C2C2 90                      nop
:0040C2C3 90                      nop
:0040C2C4 90                      nop
:0040C2C5 90                      nop
:0040C2C6 90                      nop
:0040C2C7 90                      nop
:0040C2C8 90                      nop
:0040C2C9 90                      nop
:0040C2CA 90                      nop
:0040C2CB 90                      nop
:0040C2CC 90                      nop
:0040C2CD 90                      nop
:0040C2CE 90                      nop
:0040C2CF 90                      nop
:0040C2D0 56                      push esi
:0040C2D1 8BF1                    mov esi, ecx
:0040C2D3 8A86F4000000            mov al, byte ptr [esi+000000F4]
:0040C2D9 84C0                    test al, al
:0040C2DB 741A                    je 0040C2F7
:0040C2DD 8B8E47010000            mov ecx, dword ptr [esi+00000147]
:0040C2E3 33C0                    xor eax, eax
:0040C2E5 85C9                    test ecx, ecx
:0040C2E7 0F94C0                  sete al
:0040C2EA 8BCE                    mov ecx, esi
:0040C2EC 898647010000            mov dword ptr [esi+00000147], eax
:0040C2F2 E879F5FFFF              call 0040B870

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C2DB(C)
|
:0040C2F7 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040C2FD 33C9                    xor ecx, ecx
:0040C2FF 668B8EF8000000          mov cx, word ptr [esi+000000F8]
:0040C306 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:0040C30C 8D04C8                  lea eax, dword ptr [eax+8*ecx]
:0040C30F 668B4806                mov cx, word ptr [eax+06]
:0040C313 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040C31A 741E                    je 0040C33A
:0040C31C 66C786F60000000000      mov word ptr [esi+000000F6], 0000
:0040C325 66C786F80000000000      mov word ptr [esi+000000F8], 0000
:0040C32E 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040C334 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C31A(C)
|
:0040C33A 8B00                    mov eax, dword ptr [eax]
:0040C33C 8B8EB2160000            mov ecx, dword ptr [esi+000016B2]
:0040C342 50                      push eax
:0040C343 E888FD0400              call 0045C0D0
:0040C348 5E                      pop esi
:0040C349 C20400                  ret 0004


:0040C34C 90                      nop
:0040C34D 90                      nop
:0040C34E 90                      nop
:0040C34F 90                      nop

* Referenced by a CALL at Address:
|:0040A337   
|
:0040C350 6AFF                    push FFFFFFFF
:0040C352 68B4016D00              push 006D01B4
:0040C357 64A100000000            mov eax, dword ptr fs:[00000000]
:0040C35D 50                      push eax
:0040C35E 64892500000000          mov dword ptr fs:[00000000], esp
:0040C365 81ECC8000000            sub esp, 000000C8
:0040C36B 53                      push ebx
:0040C36C 55                      push ebp
:0040C36D 56                      push esi
:0040C36E 57                      push edi
:0040C36F 8BF9                    mov edi, ecx
:0040C371 33DB                    xor ebx, ebx
:0040C373 BD3B000000              mov ebp, 0000003B
:0040C378 895C2410                mov dword ptr [esp+10], ebx
:0040C37C 8D870A140000            lea eax, dword ptr [edi+0000140A]

* Possible Indirect StringData Ref from Data Obj ->"strength"
                                  |
:0040C382 C744246438677900        mov [esp+64], 00796738
:0040C38A 89442420                mov dword ptr [esp+20], eax
:0040C38E 896C2448                mov dword ptr [esp+48], ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CA6A(C)
|
:0040C392 8B8F9E130000            mov ecx, dword ptr [edi+0000139E]
:0040C398 8B442464                mov eax, dword ptr [esp+64]
:0040C39C 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040C3A2 894C244C                mov dword ptr [esp+4C], ecx
:0040C3A6 8B08                    mov ecx, dword ptr [eax]
:0040C3A8 52                      push edx
:0040C3A9 51                      push ecx
:0040C3AA 8D4C2434                lea ecx, dword ptr [esp+34]
:0040C3AE E8FDEC1D00              call 005EB0B0
:0040C3B3 683F010000              push 0000013F
:0040C3B8 C78424E400000000000000  mov dword ptr [esp+000000E4], 00000000
:0040C3C3 E8B84E1D00              call 005E1280
:0040C3C8 83C404                  add esp, 00000004
:0040C3CB 89442424                mov dword ptr [esp+24], eax
:0040C3CF 85C0                    test eax, eax
:0040C3D1 C68424E000000001        mov byte ptr [esp+000000E0], 01
:0040C3D9 0F8492000000            je 0040C471
:0040C3DF 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040C3E5 8D4C246C                lea ecx, dword ptr [esp+6C]
:0040C3E9 52                      push edx
:0040C3EA 6868987A00              push 007A9868
:0040C3EF E8BCEC1D00              call 005EB0B0
:0040C3F4 83CB01                  or ebx, 00000001
:0040C3F7 8B54244C                mov edx, dword ptr [esp+4C]
:0040C3FB 33C9                    xor ecx, ecx
:0040C3FD B8E0AF4000              mov eax, 0040AFE0
:0040C402 51                      push ecx
:0040C403 50                      push eax
:0040C404 8D8424CC000000          lea eax, dword ptr [esp+000000CC]
:0040C40B 83CB02                  or ebx, 00000002
:0040C40E 50                      push eax
:0040C40F 8BCF                    mov ecx, edi
:0040C411 C68424EC00000002        mov byte ptr [esp+000000EC], 02
:0040C419 8D724E                  lea esi, dword ptr [edx+4E]
:0040C41C 895C241C                mov dword ptr [esp+1C], ebx
:0040C420 E81B7A0000              call 00413E40
:0040C425 8D55EE                  lea edx, dword ptr [ebp-12]
:0040C428 8D4E36                  lea ecx, dword ptr [esi+36]
:0040C42B 89942490000000          mov dword ptr [esp+00000090], edx
:0040C432 8D54246C                lea edx, dword ptr [esp+6C]
:0040C436 6A00                    push 00000000
:0040C438 52                      push edx
:0040C439 898C249C000000          mov dword ptr [esp+0000009C], ecx
:0040C440 50                      push eax
:0040C441 8D4D04                  lea ecx, dword ptr [ebp+04]
:0040C444 8D842498000000          lea eax, dword ptr [esp+00000098]
:0040C44B 898C24A4000000          mov dword ptr [esp+000000A4], ecx
:0040C452 8B4C2430                mov ecx, dword ptr [esp+30]
:0040C456 50                      push eax
:0040C457 57                      push edi
:0040C458 C78424F400000003000000  mov dword ptr [esp+000000F4], 00000003
:0040C463 89B424A0000000          mov dword ptr [esp+000000A0], esi
:0040C46A E861281800              call 0058ECD0
:0040C46F EB02                    jmp 0040C473

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C3D9(C)
|
:0040C471 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C46F(U)
|
:0040C473 8B4C2420                mov ecx, dword ptr [esp+20]
:0040C477 C78424E000000004000000  mov dword ptr [esp+000000E0], 00000004
:0040C482 F6C302                  test bl, 02
:0040C485 8901                    mov dword ptr [ecx], eax
:0040C487 741F                    je 0040C4A8
:0040C489 8B8C24C4000000          mov ecx, dword ptr [esp+000000C4]
:0040C490 83E3FD                  and ebx, FFFFFFFD
:0040C493 85C9                    test ecx, ecx
:0040C495 895C2410                mov dword ptr [esp+10], ebx
:0040C499 740D                    je 0040C4A8
:0040C49B 8D9424C4000000          lea edx, dword ptr [esp+000000C4]
:0040C4A2 52                      push edx
:0040C4A3 E8781E1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C487(C), :0040C499(C)
|
:0040C4A8 F6C301                  test bl, 01
:0040C4AB C78424E000000000000000  mov dword ptr [esp+000000E0], 00000000
:0040C4B6 741A                    je 0040C4D2
:0040C4B8 8B44246C                mov eax, dword ptr [esp+6C]
:0040C4BC 83E3FE                  and ebx, FFFFFFFE
:0040C4BF 83C0F4                  add eax, FFFFFFF4
:0040C4C2 8B08                    mov ecx, dword ptr [eax]
:0040C4C4 49                      dec ecx
:0040C4C5 8908                    mov dword ptr [eax], ecx
:0040C4C7 7509                    jne 0040C4D2
:0040C4C9 50                      push eax
:0040C4CA E8314E1D00              call 005E1300
:0040C4CF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C4B6(C), :0040C4C7(C)
|
:0040C4D2 8B4C2420                mov ecx, dword ptr [esp+20]
:0040C4D6 8D54242C                lea edx, dword ptr [esp+2C]
:0040C4DA 52                      push edx
:0040C4DB 8B09                    mov ecx, dword ptr [ecx]
:0040C4DD 83C124                  add ecx, 00000024
:0040C4E0 E83BEE1D00              call 005EB320
:0040C4E5 683F010000              push 0000013F
:0040C4EA E8914D1D00              call 005E1280
:0040C4EF 8BF0                    mov esi, eax
:0040C4F1 83C404                  add esp, 00000004
:0040C4F4 89742428                mov dword ptr [esp+28], esi
:0040C4F8 85F6                    test esi, esi
:0040C4FA C68424E000000006        mov byte ptr [esp+000000E0], 06
:0040C502 0F84E8000000            je 0040C5F0
:0040C508 8B44244C                mov eax, dword ptr [esp+4C]
:0040C50C 8D4C242C                lea ecx, dword ptr [esp+2C]
:0040C510 51                      push ecx
:0040C511 8D54241C                lea edx, dword ptr [esp+1C]

* Possible StringData Ref from Data Obj ->"short_"
                                  |
:0040C515 6860B77800              push 0078B760
:0040C51A 52                      push edx
:0040C51B 8D6807                  lea ebp, dword ptr [eax+07]
:0040C51E 83CB04                  or ebx, 00000004
:0040C521 E88A800000              call 004145B0
:0040C526 83C40C                  add esp, 0000000C
:0040C529 50                      push eax
:0040C52A 8D44246C                lea eax, dword ptr [esp+6C]
:0040C52E 83CB08                  or ebx, 00000008
:0040C531 50                      push eax
:0040C532 B9D7AF7A00              mov ecx, 007AAFD7
:0040C537 C68424E800000007        mov byte ptr [esp+000000E8], 07
:0040C53F 895C2418                mov dword ptr [esp+18], ebx
:0040C543 E858D2FFFF              call 004097A0
:0040C548 89442424                mov dword ptr [esp+24], eax
:0040C54C 33C0                    xor eax, eax
:0040C54E 8D8C249C000000          lea ecx, dword ptr [esp+0000009C]
:0040C555 50                      push eax
:0040C556 B8E0AF4000              mov eax, 0040AFE0
:0040C55B 50                      push eax
:0040C55C 83CB10                  or ebx, 00000010
:0040C55F 51                      push ecx
:0040C560 8BCF                    mov ecx, edi
:0040C562 C78424EC00000008000000  mov dword ptr [esp+000000EC], 00000008
:0040C56D 895C241C                mov dword ptr [esp+1C], ebx
:0040C571 E8CA780000              call 00413E40
:0040C576 8B4C2448                mov ecx, dword ptr [esp+48]
:0040C57A 8D551D                  lea edx, dword ptr [ebp+1D]
:0040C57D 89542440                mov dword ptr [esp+40], edx
:0040C581 8B542424                mov edx, dword ptr [esp+24]
:0040C585 6A02                    push 00000002
:0040C587 52                      push edx
:0040C588 50                      push eax
:0040C589 8D442444                lea eax, dword ptr [esp+44]
:0040C58D 896C2444                mov dword ptr [esp+44], ebp
:0040C591 8D69EA                  lea ebp, dword ptr [ecx-16]
:0040C594 894C2450                mov dword ptr [esp+50], ecx
:0040C598 50                      push eax
:0040C599 57                      push edi
:0040C59A 8BCE                    mov ecx, esi
:0040C59C C78424F400000009000000  mov dword ptr [esp+000000F4], 00000009
:0040C5A7 896C2450                mov dword ptr [esp+50], ebp
:0040C5AB E820271800              call 0058ECD0
:0040C5B0 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:0040C5B6 C78424E00000000A000000  mov dword ptr [esp+000000E0], 0000000A
:0040C5C1 83C158                  add ecx, 00000058
:0040C5C4 C7066C937000            mov dword ptr [esi], 0070936C
:0040C5CA 51                      push ecx
:0040C5CB 8BCE                    mov ecx, esi
:0040C5CD C7460864937000          mov [esi+08], 00709364
:0040C5D4 E847C41F00              call 00608A20
:0040C5D9 8B96D4000000            mov edx, dword ptr [esi+000000D4]
:0040C5DF 8BCE                    mov ecx, esi
:0040C5E1 8B422C                  mov eax, dword ptr [edx+2C]
:0040C5E4 50                      push eax
:0040C5E5 E896C41F00              call 00608A80
:0040C5EA 8B6C2448                mov ebp, dword ptr [esp+48]
:0040C5EE EB02                    jmp 0040C5F2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C502(C)
|
:0040C5F0 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C5EE(U)
|
:0040C5F2 F6C310                  test bl, 10
:0040C5F5 C78424E00000000C000000  mov dword ptr [esp+000000E0], 0000000C
:0040C600 741F                    je 0040C621
:0040C602 8B8C249C000000          mov ecx, dword ptr [esp+0000009C]
:0040C609 83E3EF                  and ebx, FFFFFFEF
:0040C60C 85C9                    test ecx, ecx
:0040C60E 895C2410                mov dword ptr [esp+10], ebx
:0040C612 740D                    je 0040C621
:0040C614 8D94249C000000          lea edx, dword ptr [esp+0000009C]
:0040C61B 52                      push edx
:0040C61C E8FF1C1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C600(C), :0040C612(C)
|
:0040C621 F6C308                  test bl, 08
:0040C624 C78424E00000000B000000  mov dword ptr [esp+000000E0], 0000000B
:0040C62F 741E                    je 0040C64F
:0040C631 8B442468                mov eax, dword ptr [esp+68]
:0040C635 83E3F7                  and ebx, FFFFFFF7
:0040C638 83C0F4                  add eax, FFFFFFF4
:0040C63B 895C2410                mov dword ptr [esp+10], ebx
:0040C63F 8B08                    mov ecx, dword ptr [eax]
:0040C641 49                      dec ecx
:0040C642 8908                    mov dword ptr [eax], ecx
:0040C644 7509                    jne 0040C64F
:0040C646 50                      push eax
:0040C647 E8B44C1D00              call 005E1300
:0040C64C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C62F(C), :0040C644(C)
|
:0040C64F F6C304                  test bl, 04
:0040C652 C78424E000000000000000  mov dword ptr [esp+000000E0], 00000000
:0040C65D 741B                    je 0040C67A
:0040C65F 8B4C2418                mov ecx, dword ptr [esp+18]
:0040C663 83E3FB                  and ebx, FFFFFFFB
:0040C666 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040C669 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040C66C 49                      dec ecx
:0040C66D 8908                    mov dword ptr [eax], ecx
:0040C66F 7509                    jne 0040C67A
:0040C671 50                      push eax
:0040C672 E8894C1D00              call 005E1300
:0040C677 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C65D(C), :0040C66F(C)
|
:0040C67A 8D54242C                lea edx, dword ptr [esp+2C]
:0040C67E 8D4E24                  lea ecx, dword ptr [esi+24]
:0040C681 52                      push edx
:0040C682 E899EC1D00              call 005EB320
:0040C687 6837010000              push 00000137
:0040C68C E8EF4B1D00              call 005E1280
:0040C691 8BF0                    mov esi, eax
:0040C693 83C404                  add esp, 00000004
:0040C696 89742428                mov dword ptr [esp+28], esi
:0040C69A 85F6                    test esi, esi
:0040C69C C68424E00000000E        mov byte ptr [esp+000000E0], 0E
:0040C6A4 7478                    je 0040C71E
:0040C6A6 8B44244C                mov eax, dword ptr [esp+4C]
:0040C6AA 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040C6B0 8D4DED                  lea ecx, dword ptr [ebp-13]
:0040C6B3 83C027                  add eax, 00000027
:0040C6B6 898C2480000000          mov dword ptr [esp+00000080], ecx
:0040C6BD 52                      push edx

* Possible StringData Ref from Data Obj ->"gui/font/spin_large"
                                  |
:0040C6BE 684CB77800              push 0078B74C
:0040C6C3 8D4C247C                lea ecx, dword ptr [esp+7C]
:0040C6C7 89842484000000          mov dword ptr [esp+00000084], eax
:0040C6CE E8DDE91D00              call 005EB0B0
:0040C6D3 8D442474                lea eax, dword ptr [esp+74]
:0040C6D7 8D4C247C                lea ecx, dword ptr [esp+7C]
:0040C6DB 50                      push eax
:0040C6DC 6A02                    push 00000002
:0040C6DE 51                      push ecx
:0040C6DF 57                      push edi
:0040C6E0 8BCE                    mov ecx, esi
:0040C6E2 C68424F00000000F        mov byte ptr [esp+000000F0], 0F
:0040C6EA E8811E1800              call 0058E570
:0040C6EF 8B542474                mov edx, dword ptr [esp+74]
:0040C6F3 C68424E000000011        mov byte ptr [esp+000000E0], 11
:0040C6FB 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040C6FE 8D42F4                  lea eax, dword ptr [edx-0C]
:0040C701 49                      dec ecx
:0040C702 8908                    mov dword ptr [eax], ecx
:0040C704 7509                    jne 0040C70F
:0040C706 50                      push eax
:0040C707 E8F44B1D00              call 005E1300
:0040C70C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C704(C)
|
:0040C70F C706F8917000            mov dword ptr [esi], 007091F8
:0040C715 C74608F0917000          mov [esi+08], 007091F0
:0040C71C EB02                    jmp 0040C720

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C6A4(C)
|
:0040C71E 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C71C(U)
|
:0040C720 8B442420                mov eax, dword ptr [esp+20]
:0040C724 8D54242C                lea edx, dword ptr [esp+2C]
:0040C728 8D4E24                  lea ecx, dword ptr [esi+24]
:0040C72B 52                      push edx
:0040C72C C68424E400000000        mov byte ptr [esp+000000E4], 00
:0040C734 8970E4                  mov dword ptr [eax-1C], esi
:0040C737 E8E4EB1D00              call 005EB320
:0040C73C 8A87F4000000            mov al, byte ptr [edi+000000F4]
:0040C742 84C0                    test al, al
:0040C744 0F84D7020000            je 0040CA21
:0040C74A 6833010000              push 00000133
:0040C74F E82C4B1D00              call 005E1280
:0040C754 83C404                  add esp, 00000004
:0040C757 89442424                mov dword ptr [esp+24], eax
:0040C75B 85C0                    test eax, eax
:0040C75D C68424E000000012        mov byte ptr [esp+000000E0], 12
:0040C765 0F84AC000000            je 0040C817
:0040C76B A128FE7200              mov eax, dword ptr [0072FE28]
:0040C770 8D4C2478                lea ecx, dword ptr [esp+78]
:0040C774 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/splus_dn"
                                  |
:0040C775 686CB57800              push 0078B56C
:0040C77A E831E91D00              call 005EB0B0
:0040C77F 83CB20                  or ebx, 00000020
:0040C782 895C2410                mov dword ptr [esp+10], ebx
:0040C786 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040C78C C68424E000000013        mov byte ptr [esp+000000E0], 13
:0040C794 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/btn/splus_up"
                                  |
:0040C795 6858B57800              push 0078B558
:0040C79A 8D4C2478                lea ecx, dword ptr [esp+78]
:0040C79E E80DE91D00              call 005EB0B0
:0040C7A3 83CB40                  or ebx, 00000040
:0040C7A6 8B54244C                mov edx, dword ptr [esp+4C]
:0040C7AA 33C9                    xor ecx, ecx
:0040C7AC B860D94000              mov eax, 0040D960
:0040C7B1 51                      push ecx
:0040C7B2 50                      push eax
:0040C7B3 8D8424B8000000          lea eax, dword ptr [esp+000000B8]
:0040C7BA 80CB80                  or bl, 80
:0040C7BD 50                      push eax
:0040C7BE 8BCF                    mov ecx, edi
:0040C7C0 C78424EC00000014000000  mov dword ptr [esp+000000EC], 00000014
:0040C7CB 8DB287000000            lea esi, dword ptr [edx+00000087]
:0040C7D1 895C241C                mov dword ptr [esp+1C], ebx
:0040C7D5 E866760000              call 00413E40
:0040C7DA 8D4C2478                lea ecx, dword ptr [esp+78]
:0040C7DE 6A01                    push 00000001
:0040C7E0 8D542474                lea edx, dword ptr [esp+74]
:0040C7E4 51                      push ecx
:0040C7E5 8B4C242C                mov ecx, dword ptr [esp+2C]
:0040C7E9 52                      push edx
:0040C7EA 50                      push eax
:0040C7EB 8D842494000000          lea eax, dword ptr [esp+00000094]
:0040C7F2 83C5EC                  add ebp, FFFFFFEC
:0040C7F5 50                      push eax
:0040C7F6 57                      push edi
:0040C7F7 C78424F800000015000000  mov dword ptr [esp+000000F8], 00000015
:0040C802 89B4249C000000          mov dword ptr [esp+0000009C], esi
:0040C809 89AC24A0000000          mov dword ptr [esp+000000A0], ebp
:0040C810 E85B2B1F00              call 005FF370
:0040C815 EB02                    jmp 0040C819

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C765(C)
|
:0040C817 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C815(U)
|
:0040C819 8B4C2420                mov ecx, dword ptr [esp+20]
:0040C81D C78424E000000017000000  mov dword ptr [esp+000000E0], 00000017
:0040C828 F6C380                  test bl, 80
:0040C82B 8941AC                  mov dword ptr [ecx-54], eax
:0040C82E 741F                    je 0040C84F
:0040C830 8B8C24B0000000          mov ecx, dword ptr [esp+000000B0]
:0040C837 80E37F                  and bl, 7F
:0040C83A 85C9                    test ecx, ecx
:0040C83C 895C2410                mov dword ptr [esp+10], ebx
:0040C840 740D                    je 0040C84F
:0040C842 8D9424B0000000          lea edx, dword ptr [esp+000000B0]
:0040C849 52                      push edx
:0040C84A E8D11A1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C82E(C), :0040C840(C)
|
:0040C84F F6C340                  test bl, 40
:0040C852 C78424E000000016000000  mov dword ptr [esp+000000E0], 00000016
:0040C85D 741E                    je 0040C87D
:0040C85F 8B442470                mov eax, dword ptr [esp+70]
:0040C863 83E3BF                  and ebx, FFFFFFBF
:0040C866 83C0F4                  add eax, FFFFFFF4
:0040C869 895C2410                mov dword ptr [esp+10], ebx
:0040C86D 8B08                    mov ecx, dword ptr [eax]
:0040C86F 49                      dec ecx
:0040C870 8908                    mov dword ptr [eax], ecx
:0040C872 7509                    jne 0040C87D
:0040C874 50                      push eax
:0040C875 E8864A1D00              call 005E1300
:0040C87A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C85D(C), :0040C872(C)
|
:0040C87D F6C320                  test bl, 20
:0040C880 C78424E000000000000000  mov dword ptr [esp+000000E0], 00000000
:0040C88B 741B                    je 0040C8A8
:0040C88D 8B4C2478                mov ecx, dword ptr [esp+78]
:0040C891 83E3DF                  and ebx, FFFFFFDF
:0040C894 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040C897 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040C89A 49                      dec ecx
:0040C89B 8908                    mov dword ptr [eax], ecx
:0040C89D 7509                    jne 0040C8A8
:0040C89F 50                      push eax
:0040C8A0 E85B4A1D00              call 005E1300
:0040C8A5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C88B(C), :0040C89D(C)
|
:0040C8A8 8B742420                mov esi, dword ptr [esp+20]
:0040C8AC 8D54242C                lea edx, dword ptr [esp+2C]
:0040C8B0 52                      push edx
:0040C8B1 8B4EAC                  mov ecx, dword ptr [esi-54]
:0040C8B4 83C124                  add ecx, 00000024
:0040C8B7 E864EA1D00              call 005EB320
:0040C8BC 6833010000              push 00000133
:0040C8C1 E8BA491D00              call 005E1280
:0040C8C6 8BE8                    mov ebp, eax
:0040C8C8 83C404                  add esp, 00000004
:0040C8CB 896C2428                mov dword ptr [esp+28], ebp
:0040C8CF 85ED                    test ebp, ebp
:0040C8D1 C68424E000000019        mov byte ptr [esp+000000E0], 19
:0040C8D9 0F84A6000000            je 0040C985
:0040C8DF A128FE7200              mov eax, dword ptr [0072FE28]
:0040C8E4 8D4C2414                lea ecx, dword ptr [esp+14]
:0040C8E8 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/sminus_dn"
                                  |
:0040C8E9 6844B57800              push 0078B544
:0040C8EE E8BDE71D00              call 005EB0B0
:0040C8F3 80CF01                  or bh, 01
:0040C8F6 895C2410                mov dword ptr [esp+10], ebx
:0040C8FA 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040C900 C68424E00000001A        mov byte ptr [esp+000000E0], 1A
:0040C908 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/btn/sminus_up"
                                  |
:0040C909 6830B57800              push 0078B530
:0040C90E 8D4C2424                lea ecx, dword ptr [esp+24]
:0040C912 E899E71D00              call 005EB0B0
:0040C917 80CF02                  or bh, 02
:0040C91A 8B54244C                mov edx, dword ptr [esp+4C]
:0040C91E 33C9                    xor ecx, ecx
:0040C920 B890D94000              mov eax, 0040D990
:0040C925 51                      push ecx
:0040C926 50                      push eax
:0040C927 8D442458                lea eax, dword ptr [esp+58]
:0040C92B 80CF04                  or bh, 04
:0040C92E 50                      push eax
:0040C92F 8BCF                    mov ecx, edi
:0040C931 C78424EC0000001B000000  mov dword ptr [esp+000000EC], 0000001B
:0040C93C 8DB287000000            lea esi, dword ptr [edx+00000087]
:0040C942 895C241C                mov dword ptr [esp+1C], ebx
:0040C946 E8F5740000              call 00413E40
:0040C94B 8B4C2448                mov ecx, dword ptr [esp+48]
:0040C94F 8D542414                lea edx, dword ptr [esp+14]
:0040C953 83C1F8                  add ecx, FFFFFFF8
:0040C956 6A01                    push 00000001
:0040C958 894C2438                mov dword ptr [esp+38], ecx
:0040C95C 8D4C2420                lea ecx, dword ptr [esp+20]
:0040C960 52                      push edx
:0040C961 51                      push ecx
:0040C962 8D54243C                lea edx, dword ptr [esp+3C]
:0040C966 50                      push eax
:0040C967 52                      push edx
:0040C968 57                      push edi
:0040C969 8BCD                    mov ecx, ebp
:0040C96B C78424F80000001C000000  mov dword ptr [esp+000000F8], 0000001C
:0040C976 89742448                mov dword ptr [esp+48], esi
:0040C97A E8F1291F00              call 005FF370
:0040C97F 8B742420                mov esi, dword ptr [esp+20]
:0040C983 EB02                    jmp 0040C987

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C8D9(C)
|
:0040C985 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C983(U)
|
:0040C987 F6C704                  test bh, 04
:0040C98A 8946C8                  mov dword ptr [esi-38], eax
:0040C98D C78424E00000001E000000  mov dword ptr [esp+000000E0], 0000001E
:0040C998 7419                    je 0040C9B3
:0040C99A 8B4C2450                mov ecx, dword ptr [esp+50]
:0040C99E 80E7FB                  and bh, FB
:0040C9A1 85C9                    test ecx, ecx
:0040C9A3 895C2410                mov dword ptr [esp+10], ebx
:0040C9A7 740A                    je 0040C9B3
:0040C9A9 8D442450                lea eax, dword ptr [esp+50]
:0040C9AD 50                      push eax
:0040C9AE E86D191F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C998(C), :0040C9A7(C)
|
:0040C9B3 F6C702                  test bh, 02
:0040C9B6 C78424E00000001D000000  mov dword ptr [esp+000000E0], 0000001D
:0040C9C1 741F                    je 0040C9E2
:0040C9C3 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040C9C7 80E7FD                  and bh, FD
:0040C9CA 895C2410                mov dword ptr [esp+10], ebx
:0040C9CE 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040C9D1 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040C9D4 49                      dec ecx
:0040C9D5 8908                    mov dword ptr [eax], ecx
:0040C9D7 7509                    jne 0040C9E2
:0040C9D9 50                      push eax
:0040C9DA E821491D00              call 005E1300
:0040C9DF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C9C1(C), :0040C9D7(C)
|
:0040C9E2 F6C701                  test bh, 01
:0040C9E5 C78424E000000000000000  mov dword ptr [esp+000000E0], 00000000
:0040C9F0 741B                    je 0040CA0D
:0040C9F2 8B542414                mov edx, dword ptr [esp+14]
:0040C9F6 80E7FE                  and bh, FE
:0040C9F9 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040C9FC 8D42F4                  lea eax, dword ptr [edx-0C]
:0040C9FF 49                      dec ecx
:0040CA00 8908                    mov dword ptr [eax], ecx
:0040CA02 7509                    jne 0040CA0D
:0040CA04 50                      push eax
:0040CA05 E8F6481D00              call 005E1300
:0040CA0A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C9F0(C), :0040CA02(C)
|
:0040CA0D 8B4EC8                  mov ecx, dword ptr [esi-38]
:0040CA10 8D44242C                lea eax, dword ptr [esp+2C]
:0040CA14 83C124                  add ecx, 00000024
:0040CA17 50                      push eax
:0040CA18 E803E91D00              call 005EB320
:0040CA1D 8B6C2448                mov ebp, dword ptr [esp+48]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C744(C)
|
:0040CA21 8B4C242C                mov ecx, dword ptr [esp+2C]
:0040CA25 C78424E0000000FFFFFFFF  mov dword ptr [esp+000000E0], FFFFFFFF
:0040CA30 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040CA33 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040CA36 49                      dec ecx
:0040CA37 8908                    mov dword ptr [eax], ecx
:0040CA39 7509                    jne 0040CA44
:0040CA3B 50                      push eax
:0040CA3C E8BF481D00              call 005E1300
:0040CA41 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CA39(C)
|
:0040CA44 8B542464                mov edx, dword ptr [esp+64]
:0040CA48 8B4C2420                mov ecx, dword ptr [esp+20]
:0040CA4C B804000000              mov eax, 00000004
:0040CA51 83C520                  add ebp, 00000020
:0040CA54 03D0                    add edx, eax
:0040CA56 03C8                    add ecx, eax
:0040CA58 81FD1B010000            cmp ebp, 0000011B
:0040CA5E 896C2448                mov dword ptr [esp+48], ebp
:0040CA62 89542464                mov dword ptr [esp+64], edx
:0040CA66 894C2420                mov dword ptr [esp+20], ecx
:0040CA6A 0F8C22F9FFFF            jl 0040C392
:0040CA70 8A87F4000000            mov al, byte ptr [edi+000000F4]
:0040CA76 84C0                    test al, al
:0040CA78 0F84CA020000            je 0040CD48
:0040CA7E 683F010000              push 0000013F
:0040CA83 E8F8471D00              call 005E1280
:0040CA88 8BF0                    mov esi, eax
:0040CA8A 83C404                  add esp, 00000004
:0040CA8D 89742428                mov dword ptr [esp+28], esi
:0040CA91 85F6                    test esi, esi
:0040CA93 C78424E000000020000000  mov dword ptr [esp+000000E0], 00000020
:0040CA9E 0F84ED000000            je 0040CB91
:0040CAA4 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040CAAA 8D4C2414                lea ecx, dword ptr [esp+14]
:0040CAAE 52                      push edx

* Possible StringData Ref from Data Obj ->"name_charPoints"
                                  |
:0040CAAF 683CB77800              push 0078B73C
:0040CAB4 E8F7E51D00              call 005EB0B0
:0040CAB9 80CF08                  or bh, 08
:0040CABC 8BAF9E130000            mov ebp, dword ptr [edi+0000139E]
:0040CAC2 8D442414                lea eax, dword ptr [esp+14]
:0040CAC6 8D4C2468                lea ecx, dword ptr [esp+68]
:0040CACA 50                      push eax
:0040CACB 80CF10                  or bh, 10
:0040CACE 51                      push ecx
:0040CACF B9D7AF7A00              mov ecx, 007AAFD7
:0040CAD4 C68424E800000021        mov byte ptr [esp+000000E8], 21
:0040CADC C7442438E0AF4000        mov [esp+38], 0040AFE0
:0040CAE4 83C505                  add ebp, 00000005
:0040CAE7 895C2418                mov dword ptr [esp+18], ebx
:0040CAEB E8B0CCFFFF              call 004097A0
:0040CAF0 89442418                mov dword ptr [esp+18], eax
:0040CAF4 8B542430                mov edx, dword ptr [esp+30]
:0040CAF8 33C0                    xor eax, eax
:0040CAFA 50                      push eax
:0040CAFB 8D442454                lea eax, dword ptr [esp+54]
:0040CAFF 80CF20                  or bh, 20
:0040CB02 52                      push edx
:0040CB03 50                      push eax
:0040CB04 8BCF                    mov ecx, edi
:0040CB06 C78424EC00000022000000  mov dword ptr [esp+000000EC], 00000022
:0040CB11 895C241C                mov dword ptr [esp+1C], ebx
:0040CB15 E826730000              call 00413E40
:0040CB1A 8D4D66                  lea ecx, dword ptr [ebp+66]
:0040CB1D 6A02                    push 00000002
:0040CB1F 894C2444                mov dword ptr [esp+44], ecx
:0040CB23 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040CB27 51                      push ecx
:0040CB28 8D542440                lea edx, dword ptr [esp+40]
:0040CB2C 50                      push eax
:0040CB2D 52                      push edx
:0040CB2E 57                      push edi
:0040CB2F 8BCE                    mov ecx, esi
:0040CB31 C78424F400000023000000  mov dword ptr [esp+000000F4], 00000023
:0040CB3C 896C244C                mov dword ptr [esp+4C], ebp
:0040CB40 C744245014010000        mov [esp+50], 00000114
:0040CB48 C74424582D010000        mov [esp+58], 0000012D
:0040CB50 E87B211800              call 0058ECD0
:0040CB55 8B86D4000000            mov eax, dword ptr [esi+000000D4]
:0040CB5B 8BCE                    mov ecx, esi
:0040CB5D 83C058                  add eax, 00000058
:0040CB60 C78424E000000024000000  mov dword ptr [esp+000000E0], 00000024
:0040CB6B 50                      push eax
:0040CB6C C7066C937000            mov dword ptr [esi], 0070936C
:0040CB72 C7460864937000          mov [esi+08], 00709364
:0040CB79 E8A2BE1F00              call 00608A20
:0040CB7E 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:0040CB84 8B512C                  mov edx, dword ptr [ecx+2C]
:0040CB87 8BCE                    mov ecx, esi
:0040CB89 52                      push edx
:0040CB8A E8F1BE1F00              call 00608A80
:0040CB8F EB02                    jmp 0040CB93

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CA9E(C)
|
:0040CB91 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CB8F(U)
|
:0040CB93 F6C720                  test bh, 20
:0040CB96 C78424E000000026000000  mov dword ptr [esp+000000E0], 00000026
:0040CBA1 7419                    je 0040CBBC
:0040CBA3 8B4C2450                mov ecx, dword ptr [esp+50]
:0040CBA7 80E7DF                  and bh, DF
:0040CBAA 85C9                    test ecx, ecx
:0040CBAC 895C2410                mov dword ptr [esp+10], ebx
:0040CBB0 740A                    je 0040CBBC
:0040CBB2 8D442450                lea eax, dword ptr [esp+50]
:0040CBB6 50                      push eax
:0040CBB7 E864171F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CBA1(C), :0040CBB0(C)
|
:0040CBBC F6C710                  test bh, 10
:0040CBBF C78424E000000025000000  mov dword ptr [esp+000000E0], 00000025
:0040CBCA 741F                    je 0040CBEB
:0040CBCC 8B4C2468                mov ecx, dword ptr [esp+68]
:0040CBD0 80E7EF                  and bh, EF
:0040CBD3 895C2410                mov dword ptr [esp+10], ebx
:0040CBD7 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040CBDA 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040CBDD 49                      dec ecx
:0040CBDE 8908                    mov dword ptr [eax], ecx
:0040CBE0 7509                    jne 0040CBEB
:0040CBE2 50                      push eax
:0040CBE3 E818471D00              call 005E1300
:0040CBE8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CBCA(C), :0040CBE0(C)
|
:0040CBEB 83CDFF                  or ebp, FFFFFFFF
:0040CBEE F6C708                  test bh, 08
:0040CBF1 89AC24E0000000          mov dword ptr [esp+000000E0], ebp
:0040CBF8 7418                    je 0040CC12
:0040CBFA 8B542414                mov edx, dword ptr [esp+14]
:0040CBFE 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040CC01 8D42F4                  lea eax, dword ptr [edx-0C]
:0040CC04 49                      dec ecx
:0040CC05 8908                    mov dword ptr [eax], ecx
:0040CC07 7509                    jne 0040CC12
:0040CC09 50                      push eax
:0040CC0A E8F1461D00              call 005E1300
:0040CC0F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CBF8(C), :0040CC07(C)
|
:0040CC12 A128FE7200              mov eax, dword ptr [0072FE28]
:0040CC17 8D4C2418                lea ecx, dword ptr [esp+18]
:0040CC1B 50                      push eax

* Possible StringData Ref from Data Obj ->"charPoints"
                                  |
:0040CC1C 6830B77800              push 0078B730
:0040CC21 E88AE41D00              call 005EB0B0
:0040CC26 50                      push eax
:0040CC27 8D4E24                  lea ecx, dword ptr [esi+24]
:0040CC2A C78424E400000028000000  mov dword ptr [esp+000000E4], 00000028
:0040CC35 E8E6E61D00              call 005EB320
:0040CC3A 8B4C2418                mov ecx, dword ptr [esp+18]
:0040CC3E 89AC24E0000000          mov dword ptr [esp+000000E0], ebp
:0040CC45 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040CC48 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040CC4B 49                      dec ecx
:0040CC4C 8908                    mov dword ptr [eax], ecx
:0040CC4E 7509                    jne 0040CC59
:0040CC50 50                      push eax
:0040CC51 E8AA461D00              call 005E1300
:0040CC56 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CC4E(C)
|
:0040CC59 6837010000              push 00000137
:0040CC5E E81D461D00              call 005E1280
:0040CC63 8BF0                    mov esi, eax
:0040CC65 83C404                  add esp, 00000004
:0040CC68 89742428                mov dword ptr [esp+28], esi
:0040CC6C 85F6                    test esi, esi
:0040CC6E C78424E000000029000000  mov dword ptr [esp+000000E0], 00000029
:0040CC79 7475                    je 0040CCF0
:0040CC7B 8B879E130000            mov eax, dword ptr [edi+0000139E]
:0040CC81 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040CC87 83C070                  add eax, 00000070
:0040CC8A 52                      push edx

* Possible StringData Ref from Data Obj ->"gui/font/spin_large"
                                  |
:0040CC8B 684CB77800              push 0078B74C
:0040CC90 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040CC94 89442438                mov dword ptr [esp+38], eax
:0040CC98 C744243C16010000        mov [esp+3C], 00000116
:0040CCA0 E80BE41D00              call 005EB0B0
:0040CCA5 8D442414                lea eax, dword ptr [esp+14]
:0040CCA9 8D4C2430                lea ecx, dword ptr [esp+30]
:0040CCAD 50                      push eax
:0040CCAE 6A02                    push 00000002
:0040CCB0 51                      push ecx
:0040CCB1 57                      push edi
:0040CCB2 8BCE                    mov ecx, esi
:0040CCB4 C68424F00000002A        mov byte ptr [esp+000000F0], 2A
:0040CCBC E8AF181800              call 0058E570
:0040CCC1 8B542414                mov edx, dword ptr [esp+14]
:0040CCC5 C68424E00000002C        mov byte ptr [esp+000000E0], 2C
:0040CCCD 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040CCD0 8D42F4                  lea eax, dword ptr [edx-0C]
:0040CCD3 49                      dec ecx
:0040CCD4 8908                    mov dword ptr [eax], ecx
:0040CCD6 7509                    jne 0040CCE1
:0040CCD8 50                      push eax
:0040CCD9 E822461D00              call 005E1300
:0040CCDE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CCD6(C)
|
:0040CCE1 C706F8917000            mov dword ptr [esi], 007091F8
:0040CCE7 C74608F0917000          mov [esi+08], 007091F0
:0040CCEE EB02                    jmp 0040CCF2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CC79(C)
|
:0040CCF0 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CCEE(U)
|
:0040CCF2 89B752140000            mov dword ptr [edi+00001452], esi
:0040CCF8 A128FE7200              mov eax, dword ptr [0072FE28]
:0040CCFD 50                      push eax

* Possible StringData Ref from Data Obj ->"charPoints"
                                  |
:0040CCFE 6830B77800              push 0078B730
:0040CD03 8D4C2420                lea ecx, dword ptr [esp+20]
:0040CD07 89AC24E8000000          mov dword ptr [esp+000000E8], ebp
:0040CD0E 83C624                  add esi, 00000024
:0040CD11 E89AE31D00              call 005EB0B0
:0040CD16 50                      push eax
:0040CD17 8BCE                    mov ecx, esi
:0040CD19 C78424E40000002D000000  mov dword ptr [esp+000000E4], 0000002D
:0040CD24 E8F7E51D00              call 005EB320
:0040CD29 8B4C2418                mov ecx, dword ptr [esp+18]
:0040CD2D 89AC24E0000000          mov dword ptr [esp+000000E0], ebp
:0040CD34 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040CD37 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040CD3A 49                      dec ecx
:0040CD3B 8908                    mov dword ptr [eax], ecx
:0040CD3D 0F85C5060000            jne 0040D408
:0040CD43 E9B7060000              jmp 0040D3FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CA78(C)
|
:0040CD48 8BB79E130000            mov esi, dword ptr [edi+0000139E]
:0040CD4E 683F010000              push 0000013F
:0040CD53 83C616                  add esi, 00000016
:0040CD56 E825451D00              call 005E1280
:0040CD5B 8BE8                    mov ebp, eax
:0040CD5D 83C404                  add esp, 00000004
:0040CD60 896C2428                mov dword ptr [esp+28], ebp
:0040CD64 85ED                    test ebp, ebp
:0040CD66 C78424E00000002E000000  mov dword ptr [esp+000000E0], 0000002E
:0040CD71 7479                    je 0040CDEC
:0040CD73 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040CD79 8D4C2414                lea ecx, dword ptr [esp+14]
:0040CD7D 52                      push edx
:0040CD7E 6868987A00              push 007A9868
:0040CD83 E828E31D00              call 005EB0B0
:0040CD88 80CF40                  or bh, 40
:0040CD8B 33C9                    xor ecx, ecx
:0040CD8D B8E0AF4000              mov eax, 0040AFE0
:0040CD92 51                      push ecx
:0040CD93 50                      push eax
:0040CD94 8D442458                lea eax, dword ptr [esp+58]
:0040CD98 80CF80                  or bh, 80
:0040CD9B 50                      push eax
:0040CD9C 8BCF                    mov ecx, edi
:0040CD9E C68424EC0000002F        mov byte ptr [esp+000000EC], 2F
:0040CDA6 895C241C                mov dword ptr [esp+1C], ebx
:0040CDAA E891700000              call 00413E40
:0040CDAF 8D4E78                  lea ecx, dword ptr [esi+78]
:0040CDB2 6A00                    push 00000000
:0040CDB4 894C2444                mov dword ptr [esp+44], ecx
:0040CDB8 8D4C2418                lea ecx, dword ptr [esp+18]
:0040CDBC 51                      push ecx
:0040CDBD 8D542440                lea edx, dword ptr [esp+40]
:0040CDC1 50                      push eax
:0040CDC2 52                      push edx
:0040CDC3 57                      push edi
:0040CDC4 8BCD                    mov ecx, ebp
:0040CDC6 C78424F400000030000000  mov dword ptr [esp+000000F4], 00000030
:0040CDD1 8974244C                mov dword ptr [esp+4C], esi
:0040CDD5 C744245013010000        mov [esp+50], 00000113
:0040CDDD C74424581D010000        mov [esp+58], 0000011D
:0040CDE5 E8E61E1800              call 0058ECD0
:0040CDEA EB02                    jmp 0040CDEE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CD71(C)
|
:0040CDEC 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CDEA(U)
|
:0040CDEE F6C780                  test bh, 80
:0040CDF1 898756140000            mov dword ptr [edi+00001456], eax
:0040CDF7 C78424E000000031000000  mov dword ptr [esp+000000E0], 00000031
:0040CE02 7419                    je 0040CE1D
:0040CE04 8B4C2450                mov ecx, dword ptr [esp+50]
:0040CE08 80E77F                  and bh, 7F
:0040CE0B 85C9                    test ecx, ecx
:0040CE0D 895C2410                mov dword ptr [esp+10], ebx
:0040CE11 740A                    je 0040CE1D
:0040CE13 8D442450                lea eax, dword ptr [esp+50]
:0040CE17 50                      push eax
:0040CE18 E803151F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CE02(C), :0040CE11(C)
|
:0040CE1D F6C740                  test bh, 40
:0040CE20 C78424E0000000FFFFFFFF  mov dword ptr [esp+000000E0], FFFFFFFF
:0040CE2B 741B                    je 0040CE48
:0040CE2D 8B4C2414                mov ecx, dword ptr [esp+14]
:0040CE31 80E7BF                  and bh, BF
:0040CE34 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040CE37 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040CE3A 49                      dec ecx
:0040CE3B 8908                    mov dword ptr [eax], ecx
:0040CE3D 7509                    jne 0040CE48
:0040CE3F 50                      push eax
:0040CE40 E8BB441D00              call 005E1300
:0040CE45 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CE2B(C), :0040CE3D(C)
|
:0040CE48 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040CE4E 8BAF56140000            mov ebp, dword ptr [edi+00001456]
:0040CE54 52                      push edx

* Possible StringData Ref from Data Obj ->"level"
                                  |
:0040CE55 6828B77800              push 0078B728
:0040CE5A 8D4C2420                lea ecx, dword ptr [esp+20]
:0040CE5E 83C524                  add ebp, 00000024
:0040CE61 E84AE21D00              call 005EB0B0
:0040CE66 50                      push eax
:0040CE67 8BCD                    mov ecx, ebp
:0040CE69 C78424E400000033000000  mov dword ptr [esp+000000E4], 00000033
:0040CE74 E8A7E41D00              call 005EB320
:0040CE79 8B442418                mov eax, dword ptr [esp+18]
:0040CE7D C78424E0000000FFFFFFFF  mov dword ptr [esp+000000E0], FFFFFFFF
:0040CE88 83C0F4                  add eax, FFFFFFF4
:0040CE8B 8B08                    mov ecx, dword ptr [eax]
:0040CE8D 49                      dec ecx
:0040CE8E 8908                    mov dword ptr [eax], ecx
:0040CE90 7509                    jne 0040CE9B
:0040CE92 50                      push eax
:0040CE93 E868441D00              call 005E1300
:0040CE98 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CE90(C)
|
:0040CE9B 8A87F3000000            mov al, byte ptr [edi+000000F3]
:0040CEA1 84C0                    test al, al
:0040CEA3 0F84B4020000            je 0040D15D
:0040CEA9 6833010000              push 00000133
:0040CEAE E8CD431D00              call 005E1280
:0040CEB3 83C404                  add esp, 00000004
:0040CEB6 89442418                mov dword ptr [esp+18], eax
:0040CEBA 85C0                    test eax, eax
:0040CEBC C78424E000000034000000  mov dword ptr [esp+000000E0], 00000034
:0040CEC7 0F84A2000000            je 0040CF6F
:0040CECD 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040CED3 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/btn/splus_dn"
                                  |
:0040CED4 686CB57800              push 0078B56C
:0040CED9 8D4C2424                lea ecx, dword ptr [esp+24]
:0040CEDD E8CEE11D00              call 005EB0B0
:0040CEE2 81CB00000100            or ebx, 00010000
:0040CEE8 895C2410                mov dword ptr [esp+10], ebx
:0040CEEC 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040CEF2 8D4C2414                lea ecx, dword ptr [esp+14]
:0040CEF6 52                      push edx

* Possible StringData Ref from Data Obj ->"gui/btn/splus_up"
                                  |
:0040CEF7 6858B57800              push 0078B558
:0040CEFC C68424E800000035        mov byte ptr [esp+000000E8], 35
:0040CF04 E8A7E11D00              call 005EB0B0
:0040CF09 81CB00000200            or ebx, 00020000
:0040CF0F 33C9                    xor ecx, ecx
:0040CF11 B820DA4000              mov eax, 0040DA20
:0040CF16 51                      push ecx
:0040CF17 50                      push eax
:0040CF18 8D442458                lea eax, dword ptr [esp+58]
:0040CF1C 81CB00000400            or ebx, 00040000
:0040CF22 50                      push eax
:0040CF23 8BCF                    mov ecx, edi
:0040CF25 C78424EC00000036000000  mov dword ptr [esp+000000EC], 00000036
:0040CF30 8D6E69                  lea ebp, dword ptr [esi+69]
:0040CF33 895C241C                mov dword ptr [esp+1C], ebx
:0040CF37 E8046F0000              call 00413E40
:0040CF3C 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040CF40 6A01                    push 00000001
:0040CF42 8D542418                lea edx, dword ptr [esp+18]
:0040CF46 51                      push ecx
:0040CF47 8B4C2420                mov ecx, dword ptr [esp+20]
:0040CF4B 52                      push edx
:0040CF4C 50                      push eax
:0040CF4D 8D442440                lea eax, dword ptr [esp+40]
:0040CF51 50                      push eax
:0040CF52 57                      push edi
:0040CF53 C78424F800000037000000  mov dword ptr [esp+000000F8], 00000037
:0040CF5E 896C2448                mov dword ptr [esp+48], ebp
:0040CF62 C744244C13010000        mov [esp+4C], 00000113
:0040CF6A E801241F00              call 005FF370

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CEC7(C)
|
:0040CF6F F7C300000400            test ebx, 00040000
:0040CF75 C78424E000000039000000  mov dword ptr [esp+000000E0], 00000039
:0040CF80 741C                    je 0040CF9E
:0040CF82 8B4C2450                mov ecx, dword ptr [esp+50]
:0040CF86 81E3FFFFFBFF            and ebx, FFFBFFFF
:0040CF8C 85C9                    test ecx, ecx
:0040CF8E 895C2410                mov dword ptr [esp+10], ebx
:0040CF92 740A                    je 0040CF9E
:0040CF94 8D542450                lea edx, dword ptr [esp+50]
:0040CF98 52                      push edx
:0040CF99 E882131F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CF80(C), :0040CF92(C)
|
:0040CF9E F7C300000200            test ebx, 00020000
:0040CFA4 C78424E000000038000000  mov dword ptr [esp+000000E0], 00000038
:0040CFAF 7421                    je 0040CFD2
:0040CFB1 8B442414                mov eax, dword ptr [esp+14]
:0040CFB5 81E3FFFFFDFF            and ebx, FFFDFFFF
:0040CFBB 83C0F4                  add eax, FFFFFFF4
:0040CFBE 895C2410                mov dword ptr [esp+10], ebx
:0040CFC2 8B08                    mov ecx, dword ptr [eax]
:0040CFC4 49                      dec ecx
:0040CFC5 8908                    mov dword ptr [eax], ecx
:0040CFC7 7509                    jne 0040CFD2
:0040CFC9 50                      push eax
:0040CFCA E831431D00              call 005E1300
:0040CFCF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CFAF(C), :0040CFC7(C)
|
:0040CFD2 F7C300000100            test ebx, 00010000
:0040CFD8 C78424E0000000FFFFFFFF  mov dword ptr [esp+000000E0], FFFFFFFF
:0040CFE3 741E                    je 0040D003
:0040CFE5 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040CFE9 81E3FFFFFEFF            and ebx, FFFEFFFF
:0040CFEF 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040CFF2 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040CFF5 49                      dec ecx
:0040CFF6 8908                    mov dword ptr [eax], ecx
:0040CFF8 7509                    jne 0040D003
:0040CFFA 50                      push eax
:0040CFFB E800431D00              call 005E1300
:0040D000 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CFE3(C), :0040CFF8(C)
|
:0040D003 6833010000              push 00000133
:0040D008 E873421D00              call 005E1280
:0040D00D 83C404                  add esp, 00000004
:0040D010 89442418                mov dword ptr [esp+18], eax
:0040D014 85C0                    test eax, eax
:0040D016 C78424E00000003B000000  mov dword ptr [esp+000000E0], 0000003B
:0040D021 0F84A1000000            je 0040D0C8
:0040D027 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040D02D 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040D031 52                      push edx

* Possible StringData Ref from Data Obj ->"gui/btn/sminus_dn"
                                  |
:0040D032 6844B57800              push 0078B544
:0040D037 E874E01D00              call 005EB0B0
:0040D03C 81CB00000800            or ebx, 00080000
:0040D042 895C2410                mov dword ptr [esp+10], ebx
:0040D046 A128FE7200              mov eax, dword ptr [0072FE28]
:0040D04B 8D4C2414                lea ecx, dword ptr [esp+14]
:0040D04F 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/sminus_up"
                                  |
:0040D050 6830B57800              push 0078B530
:0040D055 C68424E80000003C        mov byte ptr [esp+000000E8], 3C
:0040D05D E84EE01D00              call 005EB0B0
:0040D062 81CB00001000            or ebx, 00100000
:0040D068 33C9                    xor ecx, ecx
:0040D06A B8E0DC4000              mov eax, 0040DCE0
:0040D06F 51                      push ecx
:0040D070 8D4C2454                lea ecx, dword ptr [esp+54]
:0040D074 50                      push eax
:0040D075 81CB00002000            or ebx, 00200000
:0040D07B 51                      push ecx
:0040D07C 8BCF                    mov ecx, edi
:0040D07E C78424EC0000003D000000  mov dword ptr [esp+000000EC], 0000003D
:0040D089 8D6E5A                  lea ebp, dword ptr [esi+5A]
:0040D08C 895C241C                mov dword ptr [esp+1C], ebx
:0040D090 E8AB6D0000              call 00413E40
:0040D095 8D54241C                lea edx, dword ptr [esp+1C]
:0040D099 6A01                    push 00000001
:0040D09B 8D4C2418                lea ecx, dword ptr [esp+18]
:0040D09F 52                      push edx
:0040D0A0 51                      push ecx
:0040D0A1 8B4C2424                mov ecx, dword ptr [esp+24]
:0040D0A5 8D54243C                lea edx, dword ptr [esp+3C]
:0040D0A9 50                      push eax
:0040D0AA 52                      push edx
:0040D0AB 57                      push edi
:0040D0AC C78424F80000003E000000  mov dword ptr [esp+000000F8], 0000003E
:0040D0B7 896C2448                mov dword ptr [esp+48], ebp
:0040D0BB C744244C13010000        mov [esp+4C], 00000113
:0040D0C3 E8A8221F00              call 005FF370

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D021(C)
|
:0040D0C8 F7C300002000            test ebx, 00200000
:0040D0CE C78424E000000040000000  mov dword ptr [esp+000000E0], 00000040
:0040D0D9 741C                    je 0040D0F7
:0040D0DB 8B4C2450                mov ecx, dword ptr [esp+50]
:0040D0DF 81E3FFFFDFFF            and ebx, FFDFFFFF
:0040D0E5 85C9                    test ecx, ecx
:0040D0E7 895C2410                mov dword ptr [esp+10], ebx
:0040D0EB 740A                    je 0040D0F7
:0040D0ED 8D442450                lea eax, dword ptr [esp+50]
:0040D0F1 50                      push eax
:0040D0F2 E829121F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D0D9(C), :0040D0EB(C)
|
:0040D0F7 F7C300001000            test ebx, 00100000
:0040D0FD C78424E00000003F000000  mov dword ptr [esp+000000E0], 0000003F
:0040D108 7422                    je 0040D12C
:0040D10A 8B4C2414                mov ecx, dword ptr [esp+14]
:0040D10E 81E3FFFFEFFF            and ebx, FFEFFFFF
:0040D114 895C2410                mov dword ptr [esp+10], ebx
:0040D118 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040D11B 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040D11E 49                      dec ecx
:0040D11F 8908                    mov dword ptr [eax], ecx
:0040D121 7509                    jne 0040D12C
:0040D123 50                      push eax
:0040D124 E8D7411D00              call 005E1300
:0040D129 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D108(C), :0040D121(C)
|
:0040D12C F7C300000800            test ebx, 00080000
:0040D132 C78424E0000000FFFFFFFF  mov dword ptr [esp+000000E0], FFFFFFFF
:0040D13D 741E                    je 0040D15D
:0040D13F 8B54241C                mov edx, dword ptr [esp+1C]
:0040D143 81E3FFFFF7FF            and ebx, FFF7FFFF
:0040D149 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040D14C 8D42F4                  lea eax, dword ptr [edx-0C]
:0040D14F 49                      dec ecx
:0040D150 8908                    mov dword ptr [eax], ecx
:0040D152 7509                    jne 0040D15D
:0040D154 50                      push eax
:0040D155 E8A6411D00              call 005E1300
:0040D15A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CEA3(C), :0040D13D(C), :0040D152(C)
|
:0040D15D 683F010000              push 0000013F
:0040D162 E819411D00              call 005E1280
:0040D167 8BE8                    mov ebp, eax
:0040D169 83C404                  add esp, 00000004
:0040D16C 896C2428                mov dword ptr [esp+28], ebp
:0040D170 85ED                    test ebp, ebp
:0040D172 C78424E000000042000000  mov dword ptr [esp+000000E0], 00000042
:0040D17D 747E                    je 0040D1FD
:0040D17F A128FE7200              mov eax, dword ptr [0072FE28]
:0040D184 8D4C2414                lea ecx, dword ptr [esp+14]
:0040D188 50                      push eax
:0040D189 6868987A00              push 007A9868
:0040D18E E81DDF1D00              call 005EB0B0
:0040D193 81CB00004000            or ebx, 00400000
:0040D199 33C9                    xor ecx, ecx
:0040D19B B8E0AF4000              mov eax, 0040AFE0
:0040D1A0 51                      push ecx
:0040D1A1 8D4C2454                lea ecx, dword ptr [esp+54]
:0040D1A5 50                      push eax
:0040D1A6 81CB00008000            or ebx, 00800000
:0040D1AC 51                      push ecx
:0040D1AD 8BCF                    mov ecx, edi
:0040D1AF C68424EC00000043        mov byte ptr [esp+000000EC], 43
:0040D1B7 895C241C                mov dword ptr [esp+1C], ebx
:0040D1BB E8806C0000              call 00413E40
:0040D1C0 8D542414                lea edx, dword ptr [esp+14]
:0040D1C4 6A00                    push 00000000
:0040D1C6 52                      push edx
:0040D1C7 50                      push eax
:0040D1C8 8D4E78                  lea ecx, dword ptr [esi+78]
:0040D1CB 8D442444                lea eax, dword ptr [esp+44]
:0040D1CF 894C244C                mov dword ptr [esp+4C], ecx
:0040D1D3 50                      push eax
:0040D1D4 57                      push edi
:0040D1D5 8BCD                    mov ecx, ebp
:0040D1D7 C78424F400000044000000  mov dword ptr [esp+000000F4], 00000044
:0040D1E2 8974244C                mov dword ptr [esp+4C], esi
:0040D1E6 C74424501E010000        mov [esp+50], 0000011E
:0040D1EE C744245828010000        mov [esp+58], 00000128
:0040D1F6 E8D51A1800              call 0058ECD0
:0040D1FB EB02                    jmp 0040D1FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D17D(C)
|
:0040D1FD 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D1FB(U)
|
:0040D1FF F7C300008000            test ebx, 00800000
:0040D205 89875A140000            mov dword ptr [edi+0000145A], eax
:0040D20B C78424E000000045000000  mov dword ptr [esp+000000E0], 00000045
:0040D216 741C                    je 0040D234
:0040D218 8B4C2450                mov ecx, dword ptr [esp+50]
:0040D21C 81E3FFFF7FFF            and ebx, FF7FFFFF
:0040D222 85C9                    test ecx, ecx
:0040D224 895C2410                mov dword ptr [esp+10], ebx
:0040D228 740A                    je 0040D234
:0040D22A 8D542450                lea edx, dword ptr [esp+50]
:0040D22E 52                      push edx
:0040D22F E8EC101F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D216(C), :0040D228(C)
|
:0040D234 F7C300004000            test ebx, 00400000
:0040D23A C78424E0000000FFFFFFFF  mov dword ptr [esp+000000E0], FFFFFFFF
:0040D245 741D                    je 0040D264
:0040D247 8B442414                mov eax, dword ptr [esp+14]
:0040D24B 81E3FFFFBFFF            and ebx, FFBFFFFF
:0040D251 83C0F4                  add eax, FFFFFFF4
:0040D254 8B08                    mov ecx, dword ptr [eax]
:0040D256 49                      dec ecx
:0040D257 8908                    mov dword ptr [eax], ecx
:0040D259 7509                    jne 0040D264
:0040D25B 50                      push eax
:0040D25C E89F401D00              call 005E1300
:0040D261 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D245(C), :0040D259(C)
|
:0040D264 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040D26A 8BAF5A140000            mov ebp, dword ptr [edi+0000145A]
:0040D270 51                      push ecx

* Possible StringData Ref from Data Obj ->"experience"
                                  |
:0040D271 681CB77800              push 0078B71C
:0040D276 8D4C2420                lea ecx, dword ptr [esp+20]
:0040D27A 83C524                  add ebp, 00000024
:0040D27D E82EDE1D00              call 005EB0B0
:0040D282 50                      push eax
:0040D283 8BCD                    mov ecx, ebp
:0040D285 C78424E400000047000000  mov dword ptr [esp+000000E4], 00000047
:0040D290 E88BE01D00              call 005EB320
:0040D295 8B542418                mov edx, dword ptr [esp+18]
:0040D299 C78424E0000000FFFFFFFF  mov dword ptr [esp+000000E0], FFFFFFFF
:0040D2A4 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040D2A7 8D42F4                  lea eax, dword ptr [edx-0C]
:0040D2AA 49                      dec ecx
:0040D2AB 8908                    mov dword ptr [eax], ecx
:0040D2AD 7509                    jne 0040D2B8
:0040D2AF 50                      push eax
:0040D2B0 E84B401D00              call 005E1300
:0040D2B5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D2AD(C)
|
:0040D2B8 683F010000              push 0000013F
:0040D2BD E8BE3F1D00              call 005E1280
:0040D2C2 8BE8                    mov ebp, eax
:0040D2C4 83C404                  add esp, 00000004
:0040D2C7 896C2428                mov dword ptr [esp+28], ebp
:0040D2CB 85ED                    test ebp, ebp
:0040D2CD C78424E000000048000000  mov dword ptr [esp+000000E0], 00000048
:0040D2D8 747E                    je 0040D358
:0040D2DA A128FE7200              mov eax, dword ptr [0072FE28]
:0040D2DF 8D4C2414                lea ecx, dword ptr [esp+14]
:0040D2E3 50                      push eax
:0040D2E4 6868987A00              push 007A9868
:0040D2E9 E8C2DD1D00              call 005EB0B0
:0040D2EE 81CB00000001            or ebx, 01000000
:0040D2F4 33C9                    xor ecx, ecx
:0040D2F6 B8E0AF4000              mov eax, 0040AFE0
:0040D2FB 51                      push ecx
:0040D2FC 8D4C2454                lea ecx, dword ptr [esp+54]
:0040D300 50                      push eax
:0040D301 81CB00000002            or ebx, 02000000
:0040D307 51                      push ecx
:0040D308 8BCF                    mov ecx, edi
:0040D30A C68424EC00000049        mov byte ptr [esp+000000EC], 49
:0040D312 895C241C                mov dword ptr [esp+1C], ebx
:0040D316 E8256B0000              call 00413E40
:0040D31B 8D542414                lea edx, dword ptr [esp+14]
:0040D31F 6A00                    push 00000000
:0040D321 52                      push edx
:0040D322 50                      push eax
:0040D323 8D4E78                  lea ecx, dword ptr [esi+78]
:0040D326 8D442444                lea eax, dword ptr [esp+44]
:0040D32A 894C244C                mov dword ptr [esp+4C], ecx
:0040D32E 50                      push eax
:0040D32F 57                      push edi
:0040D330 8BCD                    mov ecx, ebp
:0040D332 C78424F40000004A000000  mov dword ptr [esp+000000F4], 0000004A
:0040D33D 8974244C                mov dword ptr [esp+4C], esi
:0040D341 C744245029010000        mov [esp+50], 00000129
:0040D349 C744245833010000        mov [esp+58], 00000133
:0040D351 E87A191800              call 0058ECD0
:0040D356 EB02                    jmp 0040D35A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D2D8(C)
|
:0040D358 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D356(U)
|
:0040D35A F7C300000002            test ebx, 02000000
:0040D360 89875E140000            mov dword ptr [edi+0000145E], eax
:0040D366 C78424E00000004B000000  mov dword ptr [esp+000000E0], 0000004B
:0040D371 741C                    je 0040D38F
:0040D373 8B4C2450                mov ecx, dword ptr [esp+50]
:0040D377 81E3FFFFFFFD            and ebx, FDFFFFFF
:0040D37D 85C9                    test ecx, ecx
:0040D37F 895C2410                mov dword ptr [esp+10], ebx
:0040D383 740A                    je 0040D38F
:0040D385 8D542450                lea edx, dword ptr [esp+50]
:0040D389 52                      push edx
:0040D38A E8910F1F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D371(C), :0040D383(C)
|
:0040D38F 83CEFF                  or esi, FFFFFFFF
:0040D392 F7C300000001            test ebx, 01000000
:0040D398 89B424E0000000          mov dword ptr [esp+000000E0], esi
:0040D39F 7417                    je 0040D3B8
:0040D3A1 8B442414                mov eax, dword ptr [esp+14]
:0040D3A5 83C0F4                  add eax, FFFFFFF4
:0040D3A8 8B08                    mov ecx, dword ptr [eax]
:0040D3AA 49                      dec ecx
:0040D3AB 8908                    mov dword ptr [eax], ecx
:0040D3AD 7509                    jne 0040D3B8
:0040D3AF 50                      push eax
:0040D3B0 E84B3F1D00              call 005E1300
:0040D3B5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D39F(C), :0040D3AD(C)
|
:0040D3B8 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040D3BE 8BBF5E140000            mov edi, dword ptr [edi+0000145E]
:0040D3C4 51                      push ecx

* Possible StringData Ref from Data Obj ->"nextLevel"
                                  |
:0040D3C5 6810B77800              push 0078B710
:0040D3CA 8D4C242C                lea ecx, dword ptr [esp+2C]
:0040D3CE 83C724                  add edi, 00000024
:0040D3D1 E8DADC1D00              call 005EB0B0
:0040D3D6 50                      push eax
:0040D3D7 8BCF                    mov ecx, edi
:0040D3D9 C78424E40000004D000000  mov dword ptr [esp+000000E4], 0000004D
:0040D3E4 E837DF1D00              call 005EB320
:0040D3E9 8B542424                mov edx, dword ptr [esp+24]
:0040D3ED 89B424E0000000          mov dword ptr [esp+000000E0], esi
:0040D3F4 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040D3F7 8D42F4                  lea eax, dword ptr [edx-0C]
:0040D3FA 49                      dec ecx
:0040D3FB 8908                    mov dword ptr [eax], ecx
:0040D3FD 7509                    jne 0040D408

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CD43(U)
|
:0040D3FF 50                      push eax
:0040D400 E8FB3E1D00              call 005E1300
:0040D405 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CD3D(C), :0040D3FD(C)
|
:0040D408 8B8C24D8000000          mov ecx, dword ptr [esp+000000D8]
:0040D40F 5F                      pop edi
:0040D410 5E                      pop esi
:0040D411 5D                      pop ebp
:0040D412 5B                      pop ebx
:0040D413 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040D41A 81C4D4000000            add esp, 000000D4
:0040D420 C3                      ret


:0040D421 90                      nop
:0040D422 90                      nop
:0040D423 90                      nop
:0040D424 90                      nop
:0040D425 90                      nop
:0040D426 90                      nop
:0040D427 90                      nop
:0040D428 90                      nop
:0040D429 90                      nop
:0040D42A 90                      nop
:0040D42B 90                      nop
:0040D42C 90                      nop
:0040D42D 90                      nop
:0040D42E 90                      nop
:0040D42F 90                      nop

* Referenced by a CALL at Address:
|:0040D5CD   
|
:0040D430 83EC08                  sub esp, 00000008
:0040D433 8B4C2410                mov ecx, dword ptr [esp+10]
:0040D437 B80A000000              mov eax, 0000000A
:0040D43C C744240400000000        mov [esp+04], 00000000
:0040D444 89442400                mov dword ptr [esp], eax
:0040D448 3BC8                    cmp ecx, eax
:0040D44A C744240401000000        mov [esp+04], 00000001
:0040D452 8D442410                lea eax, dword ptr [esp+10]
:0040D456 7C04                    jl 0040D45C
:0040D458 8D442400                lea eax, dword ptr [esp]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D456(C)
|
:0040D45C 833801                  cmp dword ptr [eax], 00000001
:0040D45F 7F04                    jg 0040D465
:0040D461 8D442404                lea eax, dword ptr [esp+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D45F(C)
|
:0040D465 8B00                    mov eax, dword ptr [eax]
:0040D467 56                      push esi
:0040D468 50                      push eax

* Possible StringData Ref from Data Obj ->"stat_rate%d"
                                  |
:0040D469 6868B77800              push 0078B768
:0040D46E E83DE91D00              call 005EBDB0
:0040D473 8B742418                mov esi, dword ptr [esp+18]
:0040D477 83C408                  add esp, 00000008
:0040D47A B9D7AF7A00              mov ecx, 007AAFD7
:0040D47F 50                      push eax
:0040D480 56                      push esi
:0040D481 E81AC3FFFF              call 004097A0
:0040D486 8BC6                    mov eax, esi
:0040D488 5E                      pop esi
:0040D489 83C408                  add esp, 00000008
:0040D48C C20800                  ret 0008


:0040D48F 90                      nop

* Referenced by a CALL at Addresses:
|:0040B00A   , :0040D946   
|
:0040D490 6AFF                    push FFFFFFFF
:0040D492 68F6016D00              push 006D01F6
:0040D497 64A100000000            mov eax, dword ptr fs:[00000000]
:0040D49D 50                      push eax
:0040D49E 64892500000000          mov dword ptr fs:[00000000], esp
:0040D4A5 83EC34                  sub esp, 00000034
:0040D4A8 53                      push ebx
:0040D4A9 55                      push ebp
:0040D4AA 56                      push esi
:0040D4AB 8BF1                    mov esi, ecx
:0040D4AD 57                      push edi
:0040D4AE C744241007000000        mov [esp+10], 00000007
:0040D4B6 8DBE39130000            lea edi, dword ptr [esi+00001339]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D612(C)
|
:0040D4BC 8B0D3CB67A00            mov ecx, dword ptr [007AB63C]
:0040D4C2 8BAFD3F6FFFF            mov ebp, dword ptr [edi+FFFFF6D3]
:0040D4C8 A138B67A00              mov eax, dword ptr [007AB638]
:0040D4CD 8B1540B67A00            mov edx, dword ptr [007AB640]
:0040D4D3 894C2424                mov dword ptr [esp+24], ecx
:0040D4D7 8B8FB5000000            mov ecx, dword ptr [edi+000000B5]
:0040D4DD 55                      push ebp
:0040D4DE 89442424                mov dword ptr [esp+24], eax
:0040D4E2 8954242C                mov dword ptr [esp+2C], edx
:0040D4E6 E885141800              call 0058E970
:0040D4EB 8B07                    mov eax, dword ptr [edi]
:0040D4ED 8B4F40                  mov ecx, dword ptr [edi+40]
:0040D4F0 8B542420                mov edx, dword ptr [esp+20]
:0040D4F4 89442414                mov dword ptr [esp+14], eax
:0040D4F8 8B87D6F9FFFF            mov eax, dword ptr [edi+FFFFF9D6]
:0040D4FE 894C2418                mov dword ptr [esp+18], ecx
:0040D502 8B4C2424                mov ecx, dword ptr [esp+24]
:0040D506 8954242C                mov dword ptr [esp+2C], edx
:0040D50A 8B542428                mov edx, dword ptr [esp+28]
:0040D50E 3BE8                    cmp ebp, eax
:0040D510 894C2430                mov dword ptr [esp+30], ecx
:0040D514 89542434                mov dword ptr [esp+34], edx
:0040D518 7E1E                    jle 0040D538
:0040D51A 8B0DD0987A00            mov ecx, dword ptr [007A98D0]
:0040D520 8B15D4987A00            mov edx, dword ptr [007A98D4]
:0040D526 894C242C                mov dword ptr [esp+2C], ecx
:0040D52A 8B0DD8987A00            mov ecx, dword ptr [007A98D8]
:0040D530 89542430                mov dword ptr [esp+30], edx
:0040D534 894C2434                mov dword ptr [esp+34], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D518(C)
|
:0040D538 A198987A00              mov eax, dword ptr [007A9898]
:0040D53D 8B0D94987A00            mov ecx, dword ptr [007A9894]
:0040D543 8B1590987A00            mov edx, dword ptr [007A9890]
:0040D549 7D0C                    jge 0040D557
:0040D54B 8954242C                mov dword ptr [esp+2C], edx
:0040D54F 894C2430                mov dword ptr [esp+30], ecx
:0040D553 89442434                mov dword ptr [esp+34], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D549(C)
|
:0040D557 8B5C242C                mov ebx, dword ptr [esp+2C]
:0040D55B 895C2438                mov dword ptr [esp+38], ebx
:0040D55F 8B5C2430                mov ebx, dword ptr [esp+30]
:0040D563 895C243C                mov dword ptr [esp+3C], ebx
:0040D567 8B5C2434                mov ebx, dword ptr [esp+34]
:0040D56B 895C2440                mov dword ptr [esp+40], ebx
:0040D56F 8B5C2438                mov ebx, dword ptr [esp+38]
:0040D573 895C2420                mov dword ptr [esp+20], ebx
:0040D577 8B5C243C                mov ebx, dword ptr [esp+3C]
:0040D57B 895C2424                mov dword ptr [esp+24], ebx
:0040D57F 8B5C2440                mov ebx, dword ptr [esp+40]
:0040D583 895C2428                mov dword ptr [esp+28], ebx
:0040D587 8A9EF4000000            mov bl, byte ptr [esi+000000F4]
:0040D58D 84DB                    test bl, bl
:0040D58F 7424                    je 0040D5B5
:0040D591 3B6C2414                cmp ebp, dword ptr [esp+14]
:0040D595 7D0C                    jge 0040D5A3
:0040D597 89542420                mov dword ptr [esp+20], edx
:0040D59B 894C2424                mov dword ptr [esp+24], ecx
:0040D59F 89442428                mov dword ptr [esp+28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D595(C)
|
:0040D5A3 3B6C2418                cmp ebp, dword ptr [esp+18]
:0040D5A7 7E0C                    jle 0040D5B5
:0040D5A9 89542420                mov dword ptr [esp+20], edx
:0040D5AD 894C2424                mov dword ptr [esp+24], ecx
:0040D5B1 89442428                mov dword ptr [esp+28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D58F(C), :0040D5A7(C)
|
:0040D5B5 8B8FB5000000            mov ecx, dword ptr [edi+000000B5]
:0040D5BB 8D542420                lea edx, dword ptr [esp+20]
:0040D5BF 52                      push edx
:0040D5C0 E81B151800              call 0058EAE0
:0040D5C5 8D44241C                lea eax, dword ptr [esp+1C]
:0040D5C9 55                      push ebp
:0040D5CA 50                      push eax
:0040D5CB 8BCE                    mov ecx, esi
:0040D5CD E85EFEFFFF              call 0040D430
:0040D5D2 8B8FD1000000            mov ecx, dword ptr [edi+000000D1]
:0040D5D8 50                      push eax
:0040D5D9 C744245000000000        mov [esp+50], 00000000
:0040D5E1 E8EAB31F00              call 006089D0
:0040D5E6 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040D5EA C744244CFFFFFFFF        mov [esp+4C], FFFFFFFF
:0040D5F2 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040D5F5 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040D5F8 49                      dec ecx
:0040D5F9 8908                    mov dword ptr [eax], ecx
:0040D5FB 7509                    jne 0040D606
:0040D5FD 50                      push eax
:0040D5FE E8FD3C1D00              call 005E1300
:0040D603 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D5FB(C)
|
:0040D606 8B442410                mov eax, dword ptr [esp+10]
:0040D60A 83C704                  add edi, 00000004
:0040D60D 48                      dec eax
:0040D60E 89442410                mov dword ptr [esp+10], eax
:0040D612 0F85A4FEFFFF            jne 0040D4BC
:0040D618 8A86F4000000            mov al, byte ptr [esi+000000F4]
:0040D61E 84C0                    test al, al
:0040D620 743F                    je 0040D661
:0040D622 8BBE2F010000            mov edi, dword ptr [esi+0000012F]
:0040D628 8B8E52140000            mov ecx, dword ptr [esi+00001452]
:0040D62E 57                      push edi
:0040D62F E83C131800              call 0058E970
:0040D634 85FF                    test edi, edi
:0040D636 B890987A00              mov eax, 007A9890
:0040D63B 7C05                    jl 0040D642
:0040D63D B8C0987A00              mov eax, 007A98C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D63B(C)
|
:0040D642 8B8E52140000            mov ecx, dword ptr [esi+00001452]
:0040D648 50                      push eax
:0040D649 E892141800              call 0058EAE0
:0040D64E 5F                      pop edi
:0040D64F 5E                      pop esi
:0040D650 5D                      pop ebp
:0040D651 5B                      pop ebx
:0040D652 8B4C2434                mov ecx, dword ptr [esp+34]
:0040D656 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040D65D 83C440                  add esp, 00000040
:0040D660 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D620(C)
|
:0040D661 8B962C0A0000            mov edx, dword ptr [esi+00000A2C]
:0040D667 52                      push edx
:0040D668 E8A3671400              call 00553E10
:0040D66D 8BF8                    mov edi, eax
:0040D66F 8B8656140000            mov eax, dword ptr [esi+00001456]
:0040D675 83C024                  add eax, 00000024
:0040D678 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040D67C 50                      push eax

* Possible StringData Ref from Data Obj ->"name_"
                                  |
:0040D67D 68C8B57800              push 0078B5C8
:0040D682 51                      push ecx
:0040D683 E8286F0000              call 004145B0
:0040D688 83C410                  add esp, 00000010
:0040D68B 8D54241C                lea edx, dword ptr [esp+1C]
:0040D68F BB01000000              mov ebx, 00000001
:0040D694 50                      push eax
:0040D695 52                      push edx
:0040D696 B9D7AF7A00              mov ecx, 007AAFD7
:0040D69B 895C2454                mov dword ptr [esp+54], ebx
:0040D69F E8FCC0FFFF              call 004097A0
:0040D6A4 8B00                    mov eax, dword ptr [eax]
:0040D6A6 57                      push edi
:0040D6A7 50                      push eax

* Possible StringData Ref from Data Obj ->"%s: %d"
                                  |
:0040D6A8 6880B77800              push 0078B780
:0040D6AD C644245802              mov [esp+58], 02
:0040D6B2 E8F9E61D00              call 005EBDB0
:0040D6B7 8B8E56140000            mov ecx, dword ptr [esi+00001456]
:0040D6BD 83C40C                  add esp, 0000000C
:0040D6C0 50                      push eax
:0040D6C1 E80AB31F00              call 006089D0
:0040D6C6 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040D6CA 885C244C                mov byte ptr [esp+4C], bl
:0040D6CE 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040D6D1 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040D6D4 49                      dec ecx
:0040D6D5 8908                    mov dword ptr [eax], ecx
:0040D6D7 7509                    jne 0040D6E2
:0040D6D9 50                      push eax
:0040D6DA E8213C1D00              call 005E1300
:0040D6DF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D6D7(C)
|
:0040D6E2 8B542418                mov edx, dword ptr [esp+18]
:0040D6E6 C744244CFFFFFFFF        mov [esp+4C], FFFFFFFF
:0040D6EE 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040D6F1 8D42F4                  lea eax, dword ptr [edx-0C]
:0040D6F4 49                      dec ecx
:0040D6F5 8908                    mov dword ptr [eax], ecx
:0040D6F7 7509                    jne 0040D702
:0040D6F9 50                      push eax
:0040D6FA E8013C1D00              call 005E1300
:0040D6FF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D6F7(C)
|
:0040D702 8BBE2C0A0000            mov edi, dword ptr [esi+00000A2C]
:0040D708 57                      push edi
:0040D709 E802671400              call 00553E10
:0040D70E 40                      inc eax
:0040D70F 50                      push eax
:0040D710 E83B681400              call 00553F50
:0040D715 8BE8                    mov ebp, eax
:0040D717 83C408                  add esp, 00000008
:0040D71A 32DB                    xor bl, bl
:0040D71C 81FD40420F00            cmp ebp, 000F4240
:0040D722 7C58                    jl 0040D77C
:0040D724 B8D34D6210              mov eax, 10624DD3
:0040D729 B34B                    mov bl, 4B
:0040D72B F7EF                    imul edi
:0040D72D C1FA06                  sar edx, 06
:0040D730 8BC2                    mov eax, edx
:0040D732 C1E81F                  shr eax, 1F
:0040D735 03D0                    add edx, eax
:0040D737 B8D34D6210              mov eax, 10624DD3
:0040D73C 8BFA                    mov edi, edx
:0040D73E F7ED                    imul ebp
:0040D740 C1FA06                  sar edx, 06
:0040D743 8BCA                    mov ecx, edx
:0040D745 C1E91F                  shr ecx, 1F
:0040D748 03D1                    add edx, ecx
:0040D74A 8BEA                    mov ebp, edx
:0040D74C 81FDA0860100            cmp ebp, 000186A0
:0040D752 7C28                    jl 0040D77C
:0040D754 B8D34D6210              mov eax, 10624DD3
:0040D759 B34D                    mov bl, 4D
:0040D75B F7EF                    imul edi
:0040D75D C1FA06                  sar edx, 06
:0040D760 8BC2                    mov eax, edx
:0040D762 C1E81F                  shr eax, 1F
:0040D765 03D0                    add edx, eax
:0040D767 B8D34D6210              mov eax, 10624DD3
:0040D76C 8BFA                    mov edi, edx
:0040D76E F7ED                    imul ebp
:0040D770 C1FA06                  sar edx, 06
:0040D773 8BCA                    mov ecx, edx
:0040D775 C1E91F                  shr ecx, 1F
:0040D778 03D1                    add edx, ecx
:0040D77A 8BEA                    mov ebp, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D722(C), :0040D752(C)
|
:0040D77C 8B965A140000            mov edx, dword ptr [esi+0000145A]
:0040D782 8D442418                lea eax, dword ptr [esp+18]
:0040D786 83C224                  add edx, 00000024
:0040D789 52                      push edx

* Possible StringData Ref from Data Obj ->"name_"
                                  |
:0040D78A 68C8B57800              push 0078B5C8
:0040D78F 50                      push eax
:0040D790 E81B6E0000              call 004145B0
:0040D795 83C40C                  add esp, 0000000C
:0040D798 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040D79C 50                      push eax
:0040D79D 51                      push ecx
:0040D79E B9D7AF7A00              mov ecx, 007AAFD7
:0040D7A3 C744245403000000        mov [esp+54], 00000003
:0040D7AB E8F0BFFFFF              call 004097A0
:0040D7B0 8B10                    mov edx, dword ptr [eax]
:0040D7B2 C644244C04              mov [esp+4C], 04
:0040D7B7 0FBEDB                  movsx ebx, bl
:0040D7BA 53                      push ebx
:0040D7BB 57                      push edi
:0040D7BC 52                      push edx

* Possible StringData Ref from Data Obj ->"%s: %d%c"
                                  |
:0040D7BD 6874B77800              push 0078B774
:0040D7C2 E8E9E51D00              call 005EBDB0
:0040D7C7 8B8E5A140000            mov ecx, dword ptr [esi+0000145A]
:0040D7CD 83C410                  add esp, 00000010
:0040D7D0 50                      push eax
:0040D7D1 E8FAB11F00              call 006089D0
:0040D7D6 8B44241C                mov eax, dword ptr [esp+1C]
:0040D7DA C644244C03              mov [esp+4C], 03
:0040D7DF 83C0F4                  add eax, FFFFFFF4
:0040D7E2 8B08                    mov ecx, dword ptr [eax]
:0040D7E4 49                      dec ecx
:0040D7E5 8908                    mov dword ptr [eax], ecx
:0040D7E7 7509                    jne 0040D7F2
:0040D7E9 50                      push eax
:0040D7EA E8113B1D00              call 005E1300
:0040D7EF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D7E7(C)
|
:0040D7F2 8B4C2418                mov ecx, dword ptr [esp+18]
:0040D7F6 83CFFF                  or edi, FFFFFFFF
:0040D7F9 897C244C                mov dword ptr [esp+4C], edi
:0040D7FD 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040D800 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040D803 49                      dec ecx
:0040D804 8908                    mov dword ptr [eax], ecx
:0040D806 7509                    jne 0040D811
:0040D808 50                      push eax
:0040D809 E8F23A1D00              call 005E1300
:0040D80E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D806(C)
|
:0040D811 8B965E140000            mov edx, dword ptr [esi+0000145E]
:0040D817 8D442410                lea eax, dword ptr [esp+10]
:0040D81B 83C224                  add edx, 00000024
:0040D81E 52                      push edx

* Possible StringData Ref from Data Obj ->"name_"
                                  |
:0040D81F 68C8B57800              push 0078B5C8
:0040D824 50                      push eax
:0040D825 E8866D0000              call 004145B0
:0040D82A 83C40C                  add esp, 0000000C
:0040D82D 8D4C2414                lea ecx, dword ptr [esp+14]
:0040D831 50                      push eax
:0040D832 51                      push ecx
:0040D833 B9D7AF7A00              mov ecx, 007AAFD7
:0040D838 C744245405000000        mov [esp+54], 00000005
:0040D840 E85BBFFFFF              call 004097A0
:0040D845 8B10                    mov edx, dword ptr [eax]
:0040D847 53                      push ebx
:0040D848 55                      push ebp
:0040D849 52                      push edx

* Possible StringData Ref from Data Obj ->"%s: %d%c"
                                  |
:0040D84A 6874B77800              push 0078B774
:0040D84F C644245C06              mov [esp+5C], 06
:0040D854 E857E51D00              call 005EBDB0
:0040D859 8B8E5E140000            mov ecx, dword ptr [esi+0000145E]
:0040D85F 83C410                  add esp, 00000010
:0040D862 50                      push eax
:0040D863 E868B11F00              call 006089D0
:0040D868 8B442414                mov eax, dword ptr [esp+14]
:0040D86C C644244C05              mov [esp+4C], 05
:0040D871 83C0F4                  add eax, FFFFFFF4
:0040D874 8B08                    mov ecx, dword ptr [eax]
:0040D876 49                      dec ecx
:0040D877 8908                    mov dword ptr [eax], ecx
:0040D879 7509                    jne 0040D884
:0040D87B 50                      push eax
:0040D87C E87F3A1D00              call 005E1300
:0040D881 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D879(C)
|
:0040D884 8B4C2410                mov ecx, dword ptr [esp+10]
:0040D888 897C244C                mov dword ptr [esp+4C], edi
:0040D88C 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040D88F 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040D892 49                      dec ecx
:0040D893 8908                    mov dword ptr [eax], ecx
:0040D895 7509                    jne 0040D8A0
:0040D897 50                      push eax
:0040D898 E8633A1D00              call 005E1300
:0040D89D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D895(C)
|
:0040D8A0 8B4C2444                mov ecx, dword ptr [esp+44]
:0040D8A4 5F                      pop edi
:0040D8A5 5E                      pop esi
:0040D8A6 5D                      pop ebp
:0040D8A7 5B                      pop ebx
:0040D8A8 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040D8AF 83C440                  add esp, 00000040
:0040D8B2 C3                      ret


:0040D8B3 90                      nop
:0040D8B4 90                      nop
:0040D8B5 90                      nop
:0040D8B6 90                      nop
:0040D8B7 90                      nop
:0040D8B8 90                      nop
:0040D8B9 90                      nop
:0040D8BA 90                      nop
:0040D8BB 90                      nop
:0040D8BC 90                      nop
:0040D8BD 90                      nop
:0040D8BE 90                      nop
:0040D8BF 90                      nop

* Referenced by a CALL at Addresses:
|:0040D971   , :0040D9D6   
|
:0040D8C0 8B442404                mov eax, dword ptr [esp+04]
:0040D8C4 53                      push ebx
:0040D8C5 56                      push esi
:0040D8C6 57                      push edi
:0040D8C7 8BF1                    mov esi, ecx
:0040D8C9 50                      push eax
:0040D8CA E8B1A71400              call 00558080
:0040D8CF 8B542418                mov edx, dword ptr [esp+18]
:0040D8D3 8B9C8639130000          mov ebx, dword ptr [esi+4*eax+00001339]
:0040D8DA 8BBC8603010000          mov edi, dword ptr [esi+4*eax+00000103]
:0040D8E1 8D8C8603010000          lea ecx, dword ptr [esi+4*eax+00000103]
:0040D8E8 83C404                  add esp, 00000004
:0040D8EB 85D2                    test edx, edx
:0040D8ED 7E1E                    jle 0040D90D
:0040D8EF 55                      push ebp
:0040D8F0 8BAC8606040000          mov ebp, dword ptr [esi+4*eax+00000406]
:0040D8F7 3BAC8679130000          cmp ebp, dword ptr [esi+4*eax+00001379]
:0040D8FE 5D                      pop ebp
:0040D8FF 7D0A                    jge 0040D90B
:0040D901 8B862F010000            mov eax, dword ptr [esi+0000012F]
:0040D907 85C0                    test eax, eax
:0040D909 7F12                    jg 0040D91D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D8FF(C)
|
:0040D90B 85D2                    test edx, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D8ED(C)
|
:0040D90D 7D04                    jge 0040D913
:0040D90F 3BFB                    cmp edi, ebx
:0040D911 7F0A                    jg 0040D91D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D90D(C)
|
:0040D913 8A86F3000000            mov al, byte ptr [esi+000000F3]
:0040D919 84C0                    test al, al
:0040D91B 7412                    je 0040D92F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D909(C), :0040D911(C)
|
:0040D91D 03FA                    add edi, edx
:0040D91F 8939                    mov dword ptr [ecx], edi
:0040D921 8B862F010000            mov eax, dword ptr [esi+0000012F]
:0040D927 2BC2                    sub eax, edx
:0040D929 89862F010000            mov dword ptr [esi+0000012F], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D91B(C)
|
:0040D92F 8BCE                    mov ecx, esi
:0040D931 E8EAD3FFFF              call 0040AD20
:0040D936 8BCE                    mov ecx, esi
:0040D938 E8532A0000              call 00410390
:0040D93D 8BCE                    mov ecx, esi
:0040D93F E8DC090000              call 0040E320
:0040D944 8BCE                    mov ecx, esi
:0040D946 E845FBFFFF              call 0040D490
:0040D94B 5F                      pop edi
:0040D94C 5E                      pop esi
:0040D94D 5B                      pop ebx
:0040D94E C20800                  ret 0008


:0040D951 90                      nop
:0040D952 90                      nop
:0040D953 90                      nop
:0040D954 90                      nop
:0040D955 90                      nop
:0040D956 90                      nop
:0040D957 90                      nop
:0040D958 90                      nop
:0040D959 90                      nop
:0040D95A 90                      nop
:0040D95B 90                      nop
:0040D95C 90                      nop
:0040D95D 90                      nop
:0040D95E 90                      nop
:0040D95F 90                      nop
:0040D960 8B442404                mov eax, dword ptr [esp+04]
:0040D964 56                      push esi
:0040D965 57                      push edi
:0040D966 6A01                    push 00000001
:0040D968 8B4004                  mov eax, dword ptr [eax+04]
:0040D96B 8BF1                    mov esi, ecx
:0040D96D 8D7824                  lea edi, dword ptr [eax+24]
:0040D970 57                      push edi
:0040D971 E84AFFFFFF              call 0040D8C0
:0040D976 8B8EB2160000            mov ecx, dword ptr [esi+000016B2]
:0040D97C 57                      push edi
:0040D97D E84EEA0400              call 0045C3D0
:0040D982 5F                      pop edi
:0040D983 5E                      pop esi
:0040D984 C20400                  ret 0004


:0040D987 90                      nop
:0040D988 90                      nop
:0040D989 90                      nop
:0040D98A 90                      nop
:0040D98B 90                      nop
:0040D98C 90                      nop
:0040D98D 90                      nop
:0040D98E 90                      nop
:0040D98F 90                      nop
:0040D990 6AFF                    push FFFFFFFF
:0040D992 6808026D00              push 006D0208
:0040D997 64A100000000            mov eax, dword ptr fs:[00000000]
:0040D99D 50                      push eax
:0040D99E 64892500000000          mov dword ptr fs:[00000000], esp
:0040D9A5 51                      push ecx
:0040D9A6 56                      push esi
:0040D9A7 8BF1                    mov esi, ecx
:0040D9A9 8B0D88DA7900            mov ecx, dword ptr [0079DA88]
:0040D9AF 57                      push edi
:0040D9B0 41                      inc ecx
:0040D9B1 C744240894DA7900        mov [esp+08], 0079DA94
:0040D9B9 890D88DA7900            mov dword ptr [0079DA88], ecx
:0040D9BF 8B44241C                mov eax, dword ptr [esp+1C]
:0040D9C3 6AFF                    push FFFFFFFF
:0040D9C5 8BCE                    mov ecx, esi
:0040D9C7 C744241800000000        mov [esp+18], 00000000
:0040D9CF 8B4004                  mov eax, dword ptr [eax+04]
:0040D9D2 8D7824                  lea edi, dword ptr [eax+24]
:0040D9D5 57                      push edi
:0040D9D6 E8E5FEFFFF              call 0040D8C0
:0040D9DB 8B8EB2160000            mov ecx, dword ptr [esi+000016B2]
:0040D9E1 57                      push edi
:0040D9E2 E8E9E90400              call 0045C3D0
:0040D9E7 A188DA7900              mov eax, dword ptr [0079DA88]
:0040D9EC 5F                      pop edi
:0040D9ED 48                      dec eax
:0040D9EE C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:0040D9F6 A388DA7900              mov dword ptr [0079DA88], eax
:0040D9FB 5E                      pop esi
:0040D9FC 750D                    jne 0040DA0B
:0040D9FE 6888DA7900              push 0079DA88
:0040DA03 E8F8381D00              call 005E1300
:0040DA08 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D9FC(C)
|
:0040DA0B 8B4C2404                mov ecx, dword ptr [esp+04]
:0040DA0F 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040DA16 83C410                  add esp, 00000010
:0040DA19 C20400                  ret 0004


:0040DA1C 90                      nop
:0040DA1D 90                      nop
:0040DA1E 90                      nop
:0040DA1F 90                      nop
:0040DA20 83EC08                  sub esp, 00000008
:0040DA23 53                      push ebx
:0040DA24 55                      push ebp
:0040DA25 56                      push esi
:0040DA26 8BF1                    mov esi, ecx
:0040DA28 57                      push edi
:0040DA29 8DBEFA000000            lea edi, dword ptr [esi+000000FA]
:0040DA2F 8DAE96130000            lea ebp, dword ptr [esi+00001396]
:0040DA35 57                      push edi
:0040DA36 51                      push ecx
:0040DA37 54                      push esp
:0040DA38 8BCD                    mov ecx, ebp
:0040DA3A E8F1790000              call 00415430
:0040DA3F 8D442418                lea eax, dword ptr [esp+18]
:0040DA43 8BCD                    mov ecx, ebp
:0040DA45 50                      push eax
:0040DA46 E8F5790000              call 00415440
:0040DA4B 8A4F04                  mov cl, byte ptr [edi+04]
:0040DA4E 8D5705                  lea edx, dword ptr [edi+05]
:0040DA51 888E0D100000            mov byte ptr [esi+0000100D], cl
:0040DA57 52                      push edx
:0040DA58 8D8E0E100000            lea ecx, dword ptr [esi+0000100E]
:0040DA5E E80D6B0000              call 00414570
:0040DA63 8D4725                  lea eax, dword ptr [edi+25]
:0040DA66 8D8E2E100000            lea ecx, dword ptr [esi+0000102E]
:0040DA6C 50                      push eax
:0040DA6D E82E640000              call 00413EA0
:0040DA72 8D4F55                  lea ecx, dword ptr [edi+55]
:0040DA75 51                      push ecx
:0040DA76 8D8E5E100000            lea ecx, dword ptr [esi+0000105E]
:0040DA7C E86F640000              call 00413EF0
:0040DA81 8D97C1000000            lea edx, dword ptr [edi+000000C1]
:0040DA87 8D8ECA100000            lea ecx, dword ptr [esi+000010CA]
:0040DA8D 52                      push edx
:0040DA8E E80D650000              call 00413FA0
:0040DA93 8D871F010000            lea eax, dword ptr [edi+0000011F]
:0040DA99 8D8E28110000            lea ecx, dword ptr [esi+00001128]
:0040DA9F 50                      push eax
:0040DAA0 E89B650000              call 00414040
:0040DAA5 8D8F47010000            lea ecx, dword ptr [edi+00000147]
:0040DAAB 51                      push ecx
:0040DAAC 8D8E50110000            lea ecx, dword ptr [esi+00001150]
:0040DAB2 E879660000              call 00414130
:0040DAB7 8D97D3020000            lea edx, dword ptr [edi+000002D3]
:0040DABD 8D8EDC120000            lea ecx, dword ptr [esi+000012DC]
:0040DAC3 52                      push edx
:0040DAC4 E8576A0000              call 00414520
:0040DAC9 8B87FF020000            mov eax, dword ptr [edi+000002FF]
:0040DACF 898608130000            mov dword ptr [esi+00001308], eax
:0040DAD5 8B8E2C0A0000            mov ecx, dword ptr [esi+00000A2C]
:0040DADB 51                      push ecx
:0040DADC E82F631400              call 00553E10
:0040DAE1 40                      inc eax
:0040DAE2 50                      push eax
:0040DAE3 E868641400              call 00553F50
:0040DAE8 8B8E2C0A0000            mov ecx, dword ptr [esi+00000A2C]
:0040DAEE 83C408                  add esp, 00000008
:0040DAF1 2BC1                    sub eax, ecx
:0040DAF3 8BCF                    mov ecx, edi
:0040DAF5 6A00                    push 00000000
:0040DAF7 50                      push eax
:0040DAF8 E8F3641400              call 00553FF0
:0040DAFD 84C0                    test al, al
:0040DAFF 0F8596010000            jne 0040DC9B
:0040DB05 8B4500                  mov eax, dword ptr [ebp+00]
:0040DB08 8D542410                lea edx, dword ptr [esp+10]
:0040DB0C C744241000000000        mov [esp+10], 00000000
:0040DB14 52                      push edx
:0040DB15 8B08                    mov ecx, dword ptr [eax]
:0040DB17 50                      push eax
:0040DB18 51                      push ecx
:0040DB19 E8327C0000              call 00415750
:0040DB1E 8B44241C                mov eax, dword ptr [esp+1C]
:0040DB22 83C40C                  add esp, 0000000C
:0040DB25 83F802                  cmp eax, 00000002
:0040DB28 0F826D010000            jb 0040DC9B
:0040DB2E 8B4500                  mov eax, dword ptr [ebp+00]
:0040DB31 8B5804                  mov ebx, dword ptr [eax+04]
:0040DB34 83C308                  add ebx, 00000008
:0040DB37 8A4B04                  mov cl, byte ptr [ebx+04]
:0040DB3A 8D5305                  lea edx, dword ptr [ebx+05]
:0040DB3D 884F04                  mov byte ptr [edi+04], cl
:0040DB40 52                      push edx
:0040DB41 8D4F05                  lea ecx, dword ptr [edi+05]
:0040DB44 E8276A0000              call 00414570
:0040DB49 8D4325                  lea eax, dword ptr [ebx+25]
:0040DB4C 8D4F25                  lea ecx, dword ptr [edi+25]
:0040DB4F 50                      push eax
:0040DB50 E84B630000              call 00413EA0
:0040DB55 8D4B55                  lea ecx, dword ptr [ebx+55]
:0040DB58 51                      push ecx
:0040DB59 8D4F55                  lea ecx, dword ptr [edi+55]
:0040DB5C E88F630000              call 00413EF0
:0040DB61 8D93C1000000            lea edx, dword ptr [ebx+000000C1]
:0040DB67 8D8FC1000000            lea ecx, dword ptr [edi+000000C1]
:0040DB6D 52                      push edx
:0040DB6E E82D640000              call 00413FA0
:0040DB73 8D831F010000            lea eax, dword ptr [ebx+0000011F]
:0040DB79 8D8F1F010000            lea ecx, dword ptr [edi+0000011F]
:0040DB7F 50                      push eax
:0040DB80 E8BB640000              call 00414040
:0040DB85 8D8B47010000            lea ecx, dword ptr [ebx+00000147]
:0040DB8B 51                      push ecx
:0040DB8C 8D8F47010000            lea ecx, dword ptr [edi+00000147]
:0040DB92 E899650000              call 00414130
:0040DB97 8D93D3020000            lea edx, dword ptr [ebx+000002D3]
:0040DB9D 8D8FD3020000            lea ecx, dword ptr [edi+000002D3]
:0040DBA3 52                      push edx
:0040DBA4 E877690000              call 00414520
:0040DBA9 8B83FF020000            mov eax, dword ptr [ebx+000002FF]
:0040DBAF 8987FF020000            mov dword ptr [edi+000002FF], eax
:0040DBB5 8B4D00                  mov ecx, dword ptr [ebp+00]
:0040DBB8 894C2410                mov dword ptr [esp+10], ecx
:0040DBBC 8D4C2410                lea ecx, dword ptr [esp+10]
:0040DBC0 E83B790000              call 00415500
:0040DBC5 8B10                    mov edx, dword ptr [eax]
:0040DBC7 51                      push ecx
:0040DBC8 8BCC                    mov ecx, esp
:0040DBCA 8D442418                lea eax, dword ptr [esp+18]
:0040DBCE 50                      push eax
:0040DBCF 8911                    mov dword ptr [ecx], edx
:0040DBD1 8BCD                    mov ecx, ebp
:0040DBD3 E898780000              call 00415470
:0040DBD8 8B4D00                  mov ecx, dword ptr [ebp+00]
:0040DBDB 8B7904                  mov edi, dword ptr [ecx+04]
:0040DBDE 83C708                  add edi, 00000008
:0040DBE1 8A5704                  mov dl, byte ptr [edi+04]
:0040DBE4 88960D100000            mov byte ptr [esi+0000100D], dl
:0040DBEA 8B4709                  mov eax, dword ptr [edi+09]
:0040DBED 898612100000            mov dword ptr [esi+00001012], eax
:0040DBF3 8B4F0D                  mov ecx, dword ptr [edi+0D]
:0040DBF6 898E16100000            mov dword ptr [esi+00001016], ecx
:0040DBFC 8B5711                  mov edx, dword ptr [edi+11]
:0040DBFF 89961A100000            mov dword ptr [esi+0000101A], edx
:0040DC05 8B4715                  mov eax, dword ptr [edi+15]
:0040DC08 89861E100000            mov dword ptr [esi+0000101E], eax
:0040DC0E 8B4F19                  mov ecx, dword ptr [edi+19]
:0040DC11 898E22100000            mov dword ptr [esi+00001022], ecx
:0040DC17 8B571D                  mov edx, dword ptr [edi+1D]
:0040DC1A 8D4F25                  lea ecx, dword ptr [edi+25]
:0040DC1D 899626100000            mov dword ptr [esi+00001026], edx
:0040DC23 8B4721                  mov eax, dword ptr [edi+21]
:0040DC26 51                      push ecx
:0040DC27 8D8E2E100000            lea ecx, dword ptr [esi+0000102E]
:0040DC2D 89862A100000            mov dword ptr [esi+0000102A], eax
:0040DC33 E868620000              call 00413EA0
:0040DC38 8D5755                  lea edx, dword ptr [edi+55]
:0040DC3B 8D8E5E100000            lea ecx, dword ptr [esi+0000105E]
:0040DC41 52                      push edx
:0040DC42 E8A9620000              call 00413EF0
:0040DC47 8D87C1000000            lea eax, dword ptr [edi+000000C1]
:0040DC4D 8D8ECA100000            lea ecx, dword ptr [esi+000010CA]
:0040DC53 50                      push eax
:0040DC54 E847630000              call 00413FA0
:0040DC59 8D8F1F010000            lea ecx, dword ptr [edi+0000011F]
:0040DC5F 51                      push ecx
:0040DC60 8D8E28110000            lea ecx, dword ptr [esi+00001128]
:0040DC66 E8D5630000              call 00414040
:0040DC6B 8D9747010000            lea edx, dword ptr [edi+00000147]
:0040DC71 8D8E50110000            lea ecx, dword ptr [esi+00001150]
:0040DC77 52                      push edx
:0040DC78 E8B3640000              call 00414130
:0040DC7D 8D87D3020000            lea eax, dword ptr [edi+000002D3]
:0040DC83 8D8EDC120000            lea ecx, dword ptr [esi+000012DC]
:0040DC89 50                      push eax
:0040DC8A E891680000              call 00414520
:0040DC8F 8B8FFF020000            mov ecx, dword ptr [edi+000002FF]
:0040DC95 898E08130000            mov dword ptr [esi+00001308], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DAFF(C), :0040DB28(C)
|
:0040DC9B 8BCE                    mov ecx, esi
:0040DC9D E87ED0FFFF              call 0040AD20
:0040DCA2 8BCE                    mov ecx, esi
:0040DCA4 E857D3FFFF              call 0040B000
:0040DCA9 8A8695130000            mov al, byte ptr [esi+00001395]
:0040DCAF 84C0                    test al, al
:0040DCB1 7512                    jne 0040DCC5
:0040DCB3 8BCE                    mov ecx, esi
:0040DCB5 E8D6C8FFFF              call 0040A590
:0040DCBA 84C0                    test al, al
:0040DCBC 7507                    jne 0040DCC5
:0040DCBE C6869513000001          mov byte ptr [esi+00001395], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DCB1(C), :0040DCBC(C)
|
:0040DCC5 8BCE                    mov ecx, esi
:0040DCC7 E8A4DBFFFF              call 0040B870
:0040DCCC 5F                      pop edi
:0040DCCD 5E                      pop esi
:0040DCCE 5D                      pop ebp
:0040DCCF 5B                      pop ebx
:0040DCD0 83C408                  add esp, 00000008
:0040DCD3 C20400                  ret 0004


:0040DCD6 90                      nop
:0040DCD7 90                      nop
:0040DCD8 90                      nop
:0040DCD9 90                      nop
:0040DCDA 90                      nop
:0040DCDB 90                      nop
:0040DCDC 90                      nop
:0040DCDD 90                      nop
:0040DCDE 90                      nop
:0040DCDF 90                      nop
:0040DCE0 83EC28                  sub esp, 00000028
:0040DCE3 53                      push ebx
:0040DCE4 55                      push ebp
:0040DCE5 56                      push esi
:0040DCE6 8BF1                    mov esi, ecx
:0040DCE8 8D54240C                lea edx, dword ptr [esp+0C]
:0040DCEC 57                      push edi
:0040DCED 8B8696130000            mov eax, dword ptr [esi+00001396]
:0040DCF3 8D9E96130000            lea ebx, dword ptr [esi+00001396]
:0040DCF9 C744241000000000        mov [esp+10], 00000000
:0040DD01 52                      push edx
:0040DD02 8B08                    mov ecx, dword ptr [eax]
:0040DD04 50                      push eax
:0040DD05 51                      push ecx
:0040DD06 E8457A0000              call 00415750
:0040DD0B 8B44241C                mov eax, dword ptr [esp+1C]
:0040DD0F 83C40C                  add esp, 0000000C
:0040DD12 83F802                  cmp eax, 00000002
:0040DD15 0F827B010000            jb 0040DE96
:0040DD1B 8B03                    mov eax, dword ptr [ebx]
:0040DD1D 8B7804                  mov edi, dword ptr [eax+04]
:0040DD20 83C708                  add edi, 00000008
:0040DD23 8A4F04                  mov cl, byte ptr [edi+04]
:0040DD26 8D5705                  lea edx, dword ptr [edi+05]
:0040DD29 888EFE000000            mov byte ptr [esi+000000FE], cl
:0040DD2F 52                      push edx
:0040DD30 8D8EFF000000            lea ecx, dword ptr [esi+000000FF]
:0040DD36 E835680000              call 00414570
:0040DD3B 8D4725                  lea eax, dword ptr [edi+25]
:0040DD3E 8D8E1F010000            lea ecx, dword ptr [esi+0000011F]
:0040DD44 50                      push eax
:0040DD45 E856610000              call 00413EA0
:0040DD4A 8D4F55                  lea ecx, dword ptr [edi+55]
:0040DD4D 51                      push ecx
:0040DD4E 8D8E4F010000            lea ecx, dword ptr [esi+0000014F]
:0040DD54 E897610000              call 00413EF0
:0040DD59 8D97C1000000            lea edx, dword ptr [edi+000000C1]
:0040DD5F 8D8EBB010000            lea ecx, dword ptr [esi+000001BB]
:0040DD65 52                      push edx
:0040DD66 E835620000              call 00413FA0
:0040DD6B 8D871F010000            lea eax, dword ptr [edi+0000011F]
:0040DD71 8D8E19020000            lea ecx, dword ptr [esi+00000219]
:0040DD77 50                      push eax
:0040DD78 E8C3620000              call 00414040
:0040DD7D 8D8F47010000            lea ecx, dword ptr [edi+00000147]
:0040DD83 51                      push ecx
:0040DD84 8D8E41020000            lea ecx, dword ptr [esi+00000241]
:0040DD8A E8A1630000              call 00414130
:0040DD8F 8D97D3020000            lea edx, dword ptr [edi+000002D3]
:0040DD95 8D8ECD030000            lea ecx, dword ptr [esi+000003CD]
:0040DD9B 52                      push edx
:0040DD9C E87F670000              call 00414520
:0040DDA1 8B87FF020000            mov eax, dword ptr [edi+000002FF]
:0040DDA7 8986F9030000            mov dword ptr [esi+000003F9], eax
:0040DDAD 8B0B                    mov ecx, dword ptr [ebx]
:0040DDAF 894C2410                mov dword ptr [esp+10], ecx
:0040DDB3 8D4C2410                lea ecx, dword ptr [esp+10]
:0040DDB7 E844770000              call 00415500
:0040DDBC 8B10                    mov edx, dword ptr [eax]
:0040DDBE 51                      push ecx
:0040DDBF 8BCC                    mov ecx, esp
:0040DDC1 8D442418                lea eax, dword ptr [esp+18]
:0040DDC5 50                      push eax
:0040DDC6 8911                    mov dword ptr [ecx], edx
:0040DDC8 8BCB                    mov ecx, ebx
:0040DDCA E8A1760000              call 00415470
:0040DDCF 8B0B                    mov ecx, dword ptr [ebx]
:0040DDD1 8B7904                  mov edi, dword ptr [ecx+04]
:0040DDD4 83C708                  add edi, 00000008
:0040DDD7 8A5704                  mov dl, byte ptr [edi+04]
:0040DDDA 88960D100000            mov byte ptr [esi+0000100D], dl
:0040DDE0 8B4709                  mov eax, dword ptr [edi+09]
:0040DDE3 898612100000            mov dword ptr [esi+00001012], eax
:0040DDE9 8B4F0D                  mov ecx, dword ptr [edi+0D]
:0040DDEC 898E16100000            mov dword ptr [esi+00001016], ecx
:0040DDF2 8B5711                  mov edx, dword ptr [edi+11]
:0040DDF5 89961A100000            mov dword ptr [esi+0000101A], edx
:0040DDFB 8B4715                  mov eax, dword ptr [edi+15]
:0040DDFE 89861E100000            mov dword ptr [esi+0000101E], eax
:0040DE04 8B4F19                  mov ecx, dword ptr [edi+19]
:0040DE07 898E22100000            mov dword ptr [esi+00001022], ecx
:0040DE0D 8B571D                  mov edx, dword ptr [edi+1D]
:0040DE10 8D4F25                  lea ecx, dword ptr [edi+25]
:0040DE13 899626100000            mov dword ptr [esi+00001026], edx
:0040DE19 8B4721                  mov eax, dword ptr [edi+21]
:0040DE1C 51                      push ecx
:0040DE1D 8D8E2E100000            lea ecx, dword ptr [esi+0000102E]
:0040DE23 89862A100000            mov dword ptr [esi+0000102A], eax
:0040DE29 E872600000              call 00413EA0
:0040DE2E 8D5755                  lea edx, dword ptr [edi+55]
:0040DE31 8D8E5E100000            lea ecx, dword ptr [esi+0000105E]
:0040DE37 52                      push edx
:0040DE38 E8B3600000              call 00413EF0
:0040DE3D 8D87C1000000            lea eax, dword ptr [edi+000000C1]
:0040DE43 8D8ECA100000            lea ecx, dword ptr [esi+000010CA]
:0040DE49 50                      push eax
:0040DE4A E851610000              call 00413FA0
:0040DE4F 8D8F1F010000            lea ecx, dword ptr [edi+0000011F]
:0040DE55 51                      push ecx
:0040DE56 8D8E28110000            lea ecx, dword ptr [esi+00001128]
:0040DE5C E8DF610000              call 00414040
:0040DE61 8D9747010000            lea edx, dword ptr [edi+00000147]
:0040DE67 8D8E50110000            lea ecx, dword ptr [esi+00001150]
:0040DE6D 52                      push edx
:0040DE6E E8BD620000              call 00414130
:0040DE73 8D87D3020000            lea eax, dword ptr [edi+000002D3]
:0040DE79 8D8EDC120000            lea ecx, dword ptr [esi+000012DC]
:0040DE7F 50                      push eax
:0040DE80 E89B660000              call 00414520
:0040DE85 8B8FFF020000            mov ecx, dword ptr [edi+000002FF]
:0040DE8B 898E08130000            mov dword ptr [esi+00001308], ecx
:0040DE91 E986000000              jmp 0040DF1C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DD15(C)
|
:0040DE96 8B8613010000            mov eax, dword ptr [esi+00000113]
:0040DE9C 8B960F010000            mov edx, dword ptr [esi+0000010F]
:0040DEA2 8B8E17010000            mov ecx, dword ptr [esi+00000117]
:0040DEA8 8BBE03010000            mov edi, dword ptr [esi+00000103]
:0040DEAE 8B9E07010000            mov ebx, dword ptr [esi+00000107]
:0040DEB4 8BAE0B010000            mov ebp, dword ptr [esi+0000010B]
:0040DEBA 8944242C                mov dword ptr [esp+2C], eax
:0040DEBE 89542428                mov dword ptr [esp+28], edx
:0040DEC2 8B961B010000            mov edx, dword ptr [esi+0000011B]
:0040DEC8 8D8631130000            lea eax, dword ptr [esi+00001331]
:0040DECE 894C2430                mov dword ptr [esp+30], ecx
:0040DED2 50                      push eax
:0040DED3 8D8EFA000000            lea ecx, dword ptr [esi+000000FA]
:0040DED9 89542438                mov dword ptr [esp+38], edx
:0040DEDD E82E641400              call 00554310
:0040DEE2 8B4C2428                mov ecx, dword ptr [esp+28]
:0040DEE6 8B54242C                mov edx, dword ptr [esp+2C]
:0040DEEA 8B442430                mov eax, dword ptr [esp+30]
:0040DEEE 898E0F010000            mov dword ptr [esi+0000010F], ecx
:0040DEF4 8B4C2434                mov ecx, dword ptr [esp+34]
:0040DEF8 89BE03010000            mov dword ptr [esi+00000103], edi
:0040DEFE 899E07010000            mov dword ptr [esi+00000107], ebx
:0040DF04 89AE0B010000            mov dword ptr [esi+0000010B], ebp
:0040DF0A 899613010000            mov dword ptr [esi+00000113], edx
:0040DF10 898617010000            mov dword ptr [esi+00000117], eax
:0040DF16 898E1B010000            mov dword ptr [esi+0000011B], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DE91(U)
|
:0040DF1C 8BCE                    mov ecx, esi
:0040DF1E E8FDCDFFFF              call 0040AD20
:0040DF23 8BCE                    mov ecx, esi
:0040DF25 E8D6D0FFFF              call 0040B000
:0040DF2A 5F                      pop edi
:0040DF2B 5E                      pop esi
:0040DF2C 5D                      pop ebp
:0040DF2D 5B                      pop ebx
:0040DF2E 83C428                  add esp, 00000028
:0040DF31 C20400                  ret 0004


:0040DF34 90                      nop
:0040DF35 90                      nop
:0040DF36 90                      nop
:0040DF37 90                      nop
:0040DF38 90                      nop
:0040DF39 90                      nop
:0040DF3A 90                      nop
:0040DF3B 90                      nop
:0040DF3C 90                      nop
:0040DF3D 90                      nop
:0040DF3E 90                      nop
:0040DF3F 90                      nop

* Referenced by a CALL at Address:
|:0040A345   
|
:0040DF40 6AFF                    push FFFFFFFF
:0040DF42 68AB026D00              push 006D02AB
:0040DF47 64A100000000            mov eax, dword ptr fs:[00000000]
:0040DF4D 50                      push eax
:0040DF4E 64892500000000          mov dword ptr fs:[00000000], esp
:0040DF55 83EC74                  sub esp, 00000074
:0040DF58 53                      push ebx
:0040DF59 55                      push ebp
:0040DF5A 56                      push esi
:0040DF5B 57                      push edi
:0040DF5C 8BF9                    mov edi, ecx
:0040DF5E 33DB                    xor ebx, ebx
:0040DF60 BE2F000000              mov esi, 0000002F
:0040DF65 897C2420                mov dword ptr [esp+20], edi
:0040DF69 8BAF9E130000            mov ebp, dword ptr [edi+0000139E]
:0040DF6F 8D8762140000            lea eax, dword ptr [edi+00001462]
:0040DF75 81C5AA000000            add ebp, 000000AA
:0040DF7B 895C2410                mov dword ptr [esp+10], ebx
:0040DF7F 896C242C                mov dword ptr [esp+2C], ebp
:0040DF83 89742438                mov dword ptr [esp+38], esi
:0040DF87 89442414                mov dword ptr [esp+14], eax
:0040DF8B C744241C09000000        mov [esp+1C], 00000009
:0040DF93 EB04                    jmp 0040DF99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E0F9(C)
|
:0040DF95 8B742438                mov esi, dword ptr [esp+38]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DF93(U)
|
:0040DF99 683F010000              push 0000013F
:0040DF9E E8DD321D00              call 005E1280
:0040DFA3 83C404                  add esp, 00000004
:0040DFA6 89442424                mov dword ptr [esp+24], eax
:0040DFAA 85C0                    test eax, eax
:0040DFAC C784248C00000000000000  mov dword ptr [esp+0000008C], 00000000
:0040DFB7 7476                    je 0040E02F
:0040DFB9 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040DFBF 51                      push ecx
:0040DFC0 6868987A00              push 007A9868
:0040DFC5 8D4C2420                lea ecx, dword ptr [esp+20]
:0040DFC9 E8E2D01D00              call 005EB0B0
:0040DFCE 83CB01                  or ebx, 00000001
:0040DFD1 33C9                    xor ecx, ecx
:0040DFD3 B8E0AF4000              mov eax, 0040AFE0
:0040DFD8 51                      push ecx
:0040DFD9 8D542460                lea edx, dword ptr [esp+60]
:0040DFDD 83CB02                  or ebx, 00000002
:0040DFE0 50                      push eax
:0040DFE1 52                      push edx
:0040DFE2 8BCF                    mov ecx, edi
:0040DFE4 C684249800000001        mov byte ptr [esp+00000098], 01
:0040DFEC 895C241C                mov dword ptr [esp+1C], ebx
:0040DFF0 E84B5E0000              call 00413E40
:0040DFF5 8D4E0B                  lea ecx, dword ptr [esi+0B]
:0040DFF8 8D5576                  lea edx, dword ptr [ebp+76]
:0040DFFB 894C2448                mov dword ptr [esp+48], ecx
:0040DFFF 8D4C2418                lea ecx, dword ptr [esp+18]
:0040E003 89542444                mov dword ptr [esp+44], edx
:0040E007 6A00                    push 00000000
:0040E009 51                      push ecx
:0040E00A 8B4C242C                mov ecx, dword ptr [esp+2C]
:0040E00E 8D542444                lea edx, dword ptr [esp+44]
:0040E012 50                      push eax
:0040E013 52                      push edx
:0040E014 57                      push edi
:0040E015 C78424A000000002000000  mov dword ptr [esp+000000A0], 00000002
:0040E020 896C2450                mov dword ptr [esp+50], ebp
:0040E024 89742454                mov dword ptr [esp+54], esi
:0040E028 E8A30C1800              call 0058ECD0
:0040E02D EB02                    jmp 0040E031

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DFB7(C)
|
:0040E02F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E02D(U)
|
:0040E031 8B742414                mov esi, dword ptr [esp+14]
:0040E035 C784248C00000003000000  mov dword ptr [esp+0000008C], 00000003
:0040E040 F6C302                  test bl, 02
:0040E043 8906                    mov dword ptr [esi], eax
:0040E045 7419                    je 0040E060
:0040E047 8B4C245C                mov ecx, dword ptr [esp+5C]
:0040E04B 83E3FD                  and ebx, FFFFFFFD
:0040E04E 85C9                    test ecx, ecx
:0040E050 895C2410                mov dword ptr [esp+10], ebx
:0040E054 740A                    je 0040E060
:0040E056 8D44245C                lea eax, dword ptr [esp+5C]
:0040E05A 50                      push eax
:0040E05B E8C0021F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E045(C), :0040E054(C)
|
:0040E060 F6C301                  test bl, 01
:0040E063 C784248C000000FFFFFFFF  mov dword ptr [esp+0000008C], FFFFFFFF
:0040E06E 741B                    je 0040E08B
:0040E070 8B4C2418                mov ecx, dword ptr [esp+18]
:0040E074 83E3FE                  and ebx, FFFFFFFE
:0040E077 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040E07A 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040E07D 49                      dec ecx
:0040E07E 8908                    mov dword ptr [eax], ecx
:0040E080 7509                    jne 0040E08B
:0040E082 50                      push eax
:0040E083 E878321D00              call 005E1300
:0040E088 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E06E(C), :0040E080(C)
|
:0040E08B 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040E091 8B36                    mov esi, dword ptr [esi]
:0040E093 52                      push edx
:0040E094 6868987A00              push 007A9868
:0040E099 8D4C2430                lea ecx, dword ptr [esp+30]
:0040E09D 83C624                  add esi, 00000024
:0040E0A0 E80BD01D00              call 005EB0B0
:0040E0A5 50                      push eax
:0040E0A6 8BCE                    mov ecx, esi
:0040E0A8 C784249000000005000000  mov dword ptr [esp+00000090], 00000005
:0040E0B3 E868D21D00              call 005EB320
:0040E0B8 8B442428                mov eax, dword ptr [esp+28]
:0040E0BC C784248C000000FFFFFFFF  mov dword ptr [esp+0000008C], FFFFFFFF
:0040E0C7 83C0F4                  add eax, FFFFFFF4
:0040E0CA 8B08                    mov ecx, dword ptr [eax]
:0040E0CC 49                      dec ecx
:0040E0CD 8908                    mov dword ptr [eax], ecx
:0040E0CF 7509                    jne 0040E0DA
:0040E0D1 50                      push eax
:0040E0D2 E829321D00              call 005E1300
:0040E0D7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E0CF(C)
|
:0040E0DA 8B542438                mov edx, dword ptr [esp+38]
:0040E0DE 8B4C2414                mov ecx, dword ptr [esp+14]
:0040E0E2 8B44241C                mov eax, dword ptr [esp+1C]
:0040E0E6 83C20B                  add edx, 0000000B
:0040E0E9 83C104                  add ecx, 00000004
:0040E0EC 48                      dec eax
:0040E0ED 89542438                mov dword ptr [esp+38], edx
:0040E0F1 894C2414                mov dword ptr [esp+14], ecx
:0040E0F5 8944241C                mov dword ptr [esp+1C], eax
:0040E0F9 0F8596FEFFFF            jne 0040DF95

* Possible StringData Ref from Data Obj ->"armorClass"
                                  |
:0040E0FF 8B0D68B37800            mov ecx, dword ptr [0078B368]
:0040E105 C7442438AE000000        mov [esp+38], 000000AE
:0040E10D 803900                  cmp byte ptr [ecx], 00
:0040E110 0F84EE010000            je 0040E304

* Possible Indirect StringData Ref from Data Obj ->"armorClass"
                                  |
:0040E116 B868B37800              mov eax, 0078B368
:0040E11B 81C786140000            add edi, 00001486
:0040E121 8BF0                    mov esi, eax
:0040E123 897C241C                mov dword ptr [esp+1C], edi
:0040E127 89742418                mov dword ptr [esp+18], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E2FE(C)
|
:0040E12B 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040E131 8B00                    mov eax, dword ptr [eax]
:0040E133 52                      push edx
:0040E134 50                      push eax
:0040E135 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040E139 E872CF1D00              call 005EB0B0
:0040E13E 683F010000              push 0000013F
:0040E143 C784249000000006000000  mov dword ptr [esp+00000090], 00000006
:0040E14E E82D311D00              call 005E1280
:0040E153 83C404                  add esp, 00000004
:0040E156 89442428                mov dword ptr [esp+28], eax
:0040E15A 85C0                    test eax, eax
:0040E15C C684248C00000007        mov byte ptr [esp+0000008C], 07
:0040E164 0F84AE000000            je 0040E218
:0040E16A 8D4C2414                lea ecx, dword ptr [esp+14]
:0040E16E 8D542430                lea edx, dword ptr [esp+30]
:0040E172 51                      push ecx

* Possible StringData Ref from Data Obj ->"short_"
                                  |
:0040E173 6860B77800              push 0078B760
:0040E178 52                      push edx
:0040E179 BEE0AF4000              mov esi, 0040AFE0
:0040E17E 33FF                    xor edi, edi
:0040E180 83CB04                  or ebx, 00000004
:0040E183 E828640000              call 004145B0
:0040E188 83C40C                  add esp, 0000000C
:0040E18B 50                      push eax
:0040E18C 8D442428                lea eax, dword ptr [esp+28]
:0040E190 83CB08                  or ebx, 00000008
:0040E193 50                      push eax
:0040E194 B9D7AF7A00              mov ecx, 007AAFD7
:0040E199 C684249400000008        mov byte ptr [esp+00000094], 08
:0040E1A1 895C2418                mov dword ptr [esp+18], ebx
:0040E1A5 E8F6B5FFFF              call 004097A0
:0040E1AA 8BE8                    mov ebp, eax
:0040E1AC 57                      push edi
:0040E1AD 8D4C2474                lea ecx, dword ptr [esp+74]
:0040E1B1 56                      push esi
:0040E1B2 83CB10                  or ebx, 00000010
:0040E1B5 51                      push ecx
:0040E1B6 8B4C242C                mov ecx, dword ptr [esp+2C]
:0040E1BA C784249800000009000000  mov dword ptr [esp+00000098], 00000009
:0040E1C5 895C241C                mov dword ptr [esp+1C], ebx
:0040E1C9 E8725C0000              call 00413E40
:0040E1CE 8B7C242C                mov edi, dword ptr [esp+2C]
:0040E1D2 8B742438                mov esi, dword ptr [esp+38]
:0040E1D6 6A00                    push 00000000
:0040E1D8 55                      push ebp
:0040E1D9 8D5776                  lea edx, dword ptr [edi+76]
:0040E1DC 8D4E0B                  lea ecx, dword ptr [esi+0B]
:0040E1DF 8954245C                mov dword ptr [esp+5C], edx
:0040E1E3 50                      push eax
:0040E1E4 8B44242C                mov eax, dword ptr [esp+2C]
:0040E1E8 8D542458                lea edx, dword ptr [esp+58]
:0040E1EC 894C2464                mov dword ptr [esp+64], ecx
:0040E1F0 8B4C2434                mov ecx, dword ptr [esp+34]
:0040E1F4 52                      push edx
:0040E1F5 50                      push eax
:0040E1F6 C78424A00000000A000000  mov dword ptr [esp+000000A0], 0000000A
:0040E201 897C2460                mov dword ptr [esp+60], edi
:0040E205 89742464                mov dword ptr [esp+64], esi
:0040E209 E8C20A1800              call 0058ECD0
:0040E20E 8B7C241C                mov edi, dword ptr [esp+1C]
:0040E212 8B742418                mov esi, dword ptr [esp+18]
:0040E216 EB02                    jmp 0040E21A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E164(C)
|
:0040E218 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E216(U)
|
:0040E21A F6C310                  test bl, 10
:0040E21D 8907                    mov dword ptr [edi], eax
:0040E21F C784248C0000000C000000  mov dword ptr [esp+0000008C], 0000000C
:0040E22A 7419                    je 0040E245
:0040E22C 8B4C2470                mov ecx, dword ptr [esp+70]
:0040E230 83E3EF                  and ebx, FFFFFFEF
:0040E233 85C9                    test ecx, ecx
:0040E235 895C2410                mov dword ptr [esp+10], ebx
:0040E239 740A                    je 0040E245
:0040E23B 8D542470                lea edx, dword ptr [esp+70]
:0040E23F 52                      push edx
:0040E240 E8DB001F00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E22A(C), :0040E239(C)
|
:0040E245 BD0B000000              mov ebp, 0000000B
:0040E24A F6C308                  test bl, 08
:0040E24D 89AC248C000000          mov dword ptr [esp+0000008C], ebp
:0040E254 741E                    je 0040E274
:0040E256 8B442424                mov eax, dword ptr [esp+24]
:0040E25A 83E3F7                  and ebx, FFFFFFF7
:0040E25D 83C0F4                  add eax, FFFFFFF4
:0040E260 895C2410                mov dword ptr [esp+10], ebx
:0040E264 8B08                    mov ecx, dword ptr [eax]
:0040E266 49                      dec ecx
:0040E267 8908                    mov dword ptr [eax], ecx
:0040E269 7509                    jne 0040E274
:0040E26B 50                      push eax
:0040E26C E88F301D00              call 005E1300
:0040E271 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E254(C), :0040E269(C)
|
:0040E274 F6C304                  test bl, 04
:0040E277 C784248C00000006000000  mov dword ptr [esp+0000008C], 00000006
:0040E282 741B                    je 0040E29F
:0040E284 8B4C2430                mov ecx, dword ptr [esp+30]
:0040E288 83E3FB                  and ebx, FFFFFFFB
:0040E28B 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040E28E 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040E291 49                      dec ecx
:0040E292 8908                    mov dword ptr [eax], ecx
:0040E294 7509                    jne 0040E29F
:0040E296 50                      push eax
:0040E297 E864301D00              call 005E1300
:0040E29C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E282(C), :0040E294(C)
|
:0040E29F 8B0F                    mov ecx, dword ptr [edi]
:0040E2A1 8D542414                lea edx, dword ptr [esp+14]
:0040E2A5 83C124                  add ecx, 00000024
:0040E2A8 52                      push edx
:0040E2A9 E872D01D00              call 005EB320
:0040E2AE 8B07                    mov eax, dword ptr [edi]
:0040E2B0 8B542438                mov edx, dword ptr [esp+38]
:0040E2B4 03D5                    add edx, ebp
:0040E2B6 C784248C000000FFFFFFFF  mov dword ptr [esp+0000008C], FFFFFFFF
:0040E2C1 C7800A01000057000000    mov dword ptr [ebx+0000010A], 00000057
:0040E2CB 8B4C2414                mov ecx, dword ptr [esp+14]
:0040E2CF 89542438                mov dword ptr [esp+38], edx
:0040E2D3 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040E2D6 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040E2D9 49                      dec ecx
:0040E2DA 8908                    mov dword ptr [eax], ecx
:0040E2DC 7509                    jne 0040E2E7
:0040E2DE 50                      push eax
:0040E2DF E81C301D00              call 005E1300
:0040E2E4 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E2DC(C)
|
:0040E2E7 8B5604                  mov edx, dword ptr [esi+04]
:0040E2EA 83C604                  add esi, 00000004
:0040E2ED 83C704                  add edi, 00000004
:0040E2F0 89742418                mov dword ptr [esp+18], esi
:0040E2F4 8A0A                    mov cl, byte ptr [edx]
:0040E2F6 897C241C                mov dword ptr [esp+1C], edi
:0040E2FA 84C9                    test cl, cl
:0040E2FC 8BC6                    mov eax, esi
:0040E2FE 0F8527FEFFFF            jne 0040E12B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E110(C)
|
:0040E304 8B8C2484000000          mov ecx, dword ptr [esp+00000084]
:0040E30B 5F                      pop edi
:0040E30C 5E                      pop esi
:0040E30D 5D                      pop ebp
:0040E30E 5B                      pop ebx
:0040E30F 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040E316 81C480000000            add esp, 00000080
:0040E31C C3                      ret


:0040E31D 90                      nop
:0040E31E 90                      nop
:0040E31F 90                      nop

* Referenced by a CALL at Addresses:
|:0040B018   , :0040D93F   , :0041092B   , :004109B9   
|
:0040E320 6AFF                    push FFFFFFFF
:0040E322 68B5036D00              push 006D03B5
:0040E327 64A100000000            mov eax, dword ptr fs:[00000000]
:0040E32D 50                      push eax
:0040E32E 64892500000000          mov dword ptr fs:[00000000], esp
:0040E335 83EC44                  sub esp, 00000044
:0040E338 53                      push ebx
:0040E339 55                      push ebp
:0040E33A 56                      push esi
:0040E33B 57                      push edi
:0040E33C 8B3D88DA7900            mov edi, dword ptr [0079DA88]
:0040E342 8BF1                    mov esi, ecx
:0040E344 47                      inc edi
:0040E345 C744241894DA7900        mov [esp+18], 0079DA94
:0040E34D 893D88DA7900            mov dword ptr [0079DA88], edi
:0040E353 8B1500997A00            mov edx, dword ptr [007A9900]
:0040E359 8B8E5F0D0000            mov ecx, dword ptr [esi+00000D5F]
:0040E35F 8B865C0A0000            mov eax, dword ptr [esi+00000A5C]
:0040E365 8954243C                mov dword ptr [esp+3C], edx
:0040E369 8B1504997A00            mov edx, dword ptr [007A9904]
:0040E36F 3BC1                    cmp eax, ecx
:0040E371 89542440                mov dword ptr [esp+40], edx
:0040E375 8B1508997A00            mov edx, dword ptr [007A9908]
:0040E37B C744245C00000000        mov [esp+5C], 00000000
:0040E383 89542444                mov dword ptr [esp+44], edx
:0040E387 7E1E                    jle 0040E3A7
:0040E389 8B15D0987A00            mov edx, dword ptr [007A98D0]
:0040E38F 8954243C                mov dword ptr [esp+3C], edx
:0040E393 8B15D4987A00            mov edx, dword ptr [007A98D4]
:0040E399 89542440                mov dword ptr [esp+40], edx
:0040E39D 8B15D8987A00            mov edx, dword ptr [007A98D8]
:0040E3A3 89542444                mov dword ptr [esp+44], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E387(C)
|
:0040E3A7 7D1E                    jge 0040E3C7
:0040E3A9 8B0D90987A00            mov ecx, dword ptr [007A9890]
:0040E3AF 8B1594987A00            mov edx, dword ptr [007A9894]
:0040E3B5 894C243C                mov dword ptr [esp+3C], ecx
:0040E3B9 8B0D98987A00            mov ecx, dword ptr [007A9898]
:0040E3BF 89542440                mov dword ptr [esp+40], edx
:0040E3C3 894C2444                mov dword ptr [esp+44], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E3A7(C)
|
:0040E3C7 8B4C2440                mov ecx, dword ptr [esp+40]
:0040E3CB 8B54243C                mov edx, dword ptr [esp+3C]
:0040E3CF 8BBE62140000            mov edi, dword ptr [esi+00001462]
:0040E3D5 894C2434                mov dword ptr [esp+34], ecx
:0040E3D9 8A8EF4000000            mov cl, byte ptr [esi+000000F4]
:0040E3DF 89542430                mov dword ptr [esp+30], edx
:0040E3E3 8B542444                mov edx, dword ptr [esp+44]
:0040E3E7 84C9                    test cl, cl
:0040E3E9 89542438                mov dword ptr [esp+38], edx
:0040E3ED 7406                    je 0040E3F5
:0040E3EF 898610130000            mov dword ptr [esi+00001310], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E3ED(C)
|
:0040E3F5 A128FE7200              mov eax, dword ptr [0072FE28]
:0040E3FA 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040E3FE 50                      push eax

* Possible StringData Ref from Data Obj ->"maxHitPoints"
                                  |
:0040E3FF 6854B87800              push 0078B854
:0040E404 E8A7CC1D00              call 005EB0B0
:0040E409 8D6F24                  lea ebp, dword ptr [edi+24]
:0040E40C 50                      push eax
:0040E40D 8BCD                    mov ecx, ebp
:0040E40F C644246001              mov [esp+60], 01
:0040E414 E807CF1D00              call 005EB320
:0040E419 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040E41D C644245C00              mov [esp+5C], 00
:0040E422 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040E425 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040E428 49                      dec ecx
:0040E429 8908                    mov dword ptr [eax], ecx
:0040E42B 7509                    jne 0040E436
:0040E42D 50                      push eax
:0040E42E E8CD2E1D00              call 005E1300
:0040E433 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E42B(C)
|
:0040E436 55                      push ebp
:0040E437 8D542424                lea edx, dword ptr [esp+24]

* Possible StringData Ref from Data Obj ->"name_"
                                  |
:0040E43B 68C8B57800              push 0078B5C8
:0040E440 52                      push edx
:0040E441 E86A610000              call 004145B0
:0040E446 83C40C                  add esp, 0000000C
:0040E449 50                      push eax
:0040E44A 8D442420                lea eax, dword ptr [esp+20]
:0040E44E B302                    mov bl, 02
:0040E450 50                      push eax
:0040E451 B9D7AF7A00              mov ecx, 007AAFD7
:0040E456 885C2464                mov byte ptr [esp+64], bl
:0040E45A E841B3FFFF              call 004097A0
:0040E45F 50                      push eax
:0040E460 8BCF                    mov ecx, edi
:0040E462 C644246003              mov [esp+60], 03
:0040E467 E864A51F00              call 006089D0
:0040E46C 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040E470 885C245C                mov byte ptr [esp+5C], bl
:0040E474 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040E477 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040E47A 49                      dec ecx
:0040E47B 8908                    mov dword ptr [eax], ecx
:0040E47D 7509                    jne 0040E488
:0040E47F 50                      push eax
:0040E480 E87B2E1D00              call 005E1300
:0040E485 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E47D(C)
|
:0040E488 8B542420                mov edx, dword ptr [esp+20]
:0040E48C C644245C00              mov [esp+5C], 00
:0040E491 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040E494 8D42F4                  lea eax, dword ptr [edx-0C]
:0040E497 49                      dec ecx
:0040E498 8908                    mov dword ptr [eax], ecx
:0040E49A 7509                    jne 0040E4A5
:0040E49C 50                      push eax
:0040E49D E85E2E1D00              call 005E1300
:0040E4A2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E49A(C)
|
:0040E4A5 8B865C0A0000            mov eax, dword ptr [esi+00000A5C]
:0040E4AB 8B8E10130000            mov ecx, dword ptr [esi+00001310]
:0040E4B1 50                      push eax
:0040E4B2 51                      push ecx
:0040E4B3 8D542420                lea edx, dword ptr [esp+20]

* Possible StringData Ref from Data Obj ->"%d/%d"
                                  |
:0040E4B7 684CB87800              push 0078B84C
:0040E4BC 52                      push edx
:0040E4BD E80ED81D00              call 005EBCD0
:0040E4C2 83C410                  add esp, 00000010
:0040E4C5 8D442418                lea eax, dword ptr [esp+18]
:0040E4C9 8BCF                    mov ecx, edi
:0040E4CB C7870A01000049000000    mov dword ptr [edi+0000010A], 00000049
:0040E4D5 50                      push eax
:0040E4D6 E8550A1800              call 0058EF30
:0040E4DB 8D4C2430                lea ecx, dword ptr [esp+30]
:0040E4DF 51                      push ecx
:0040E4E0 8BCF                    mov ecx, edi
:0040E4E2 E8E9091800              call 0058EED0
:0040E4E7 8B0D98987A00            mov ecx, dword ptr [007A9898]
:0040E4ED 8B1590987A00            mov edx, dword ptr [007A9890]
:0040E4F3 A194987A00              mov eax, dword ptr [007A9894]
:0040E4F8 8BBE66140000            mov edi, dword ptr [esi+00001466]
:0040E4FE 894C2438                mov dword ptr [esp+38], ecx
:0040E502 8B8E24130000            mov ecx, dword ptr [esi+00001324]
:0040E508 85C9                    test ecx, ecx
:0040E50A 89542430                mov dword ptr [esp+30], edx
:0040E50E 89442434                mov dword ptr [esp+34], eax
:0040E512 0F8EE7000000            jle 0040E5FF
:0040E518 B81F85EB51              mov eax, 51EB851F
:0040E51D F7E9                    imul ecx
:0040E51F C1FA05                  sar edx, 05
:0040E522 8BC2                    mov eax, edx
:0040E524 8D4C2430                lea ecx, dword ptr [esp+30]
:0040E528 C1E81F                  shr eax, 1F
:0040E52B 03D0                    add edx, eax
:0040E52D 51                      push ecx
:0040E52E 89542424                mov dword ptr [esp+24], edx
:0040E532 8BCF                    mov ecx, edi
:0040E534 DB442424                fild dword ptr [esp+24]
:0040E538 D805D4947000            fadd dword ptr [007094D4]
:0040E53E D95C2434                fstp dword ptr [esp+34]
:0040E542 E8D9A41F00              call 00608A20
:0040E547 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040E54D 8D4C2420                lea ecx, dword ptr [esp+20]
:0040E551 52                      push edx

* Possible StringData Ref from Data Obj ->"poisoned"
                                  |
:0040E552 6840B87800              push 0078B840
:0040E557 E854CB1D00              call 005EB0B0
:0040E55C 8D6F24                  lea ebp, dword ptr [edi+24]
:0040E55F 50                      push eax
:0040E560 8BCD                    mov ecx, ebp
:0040E562 C644246004              mov [esp+60], 04
:0040E567 E8B4CD1D00              call 005EB320
:0040E56C 8B442420                mov eax, dword ptr [esp+20]
:0040E570 C644245C00              mov [esp+5C], 00
:0040E575 83C0F4                  add eax, FFFFFFF4
:0040E578 8B08                    mov ecx, dword ptr [eax]
:0040E57A 49                      dec ecx
:0040E57B 8908                    mov dword ptr [eax], ecx
:0040E57D 7509                    jne 0040E588
:0040E57F 50                      push eax
:0040E580 E87B2D1D00              call 005E1300
:0040E585 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E57D(C)
|
:0040E588 55                      push ebp
:0040E589 8D4C2420                lea ecx, dword ptr [esp+20]

* Possible StringData Ref from Data Obj ->"name_"
                                  |
:0040E58D 68C8B57800              push 0078B5C8
:0040E592 51                      push ecx
:0040E593 E818600000              call 004145B0
:0040E598 83C40C                  add esp, 0000000C
:0040E59B 8D542420                lea edx, dword ptr [esp+20]
:0040E59F B305                    mov bl, 05
:0040E5A1 50                      push eax
:0040E5A2 52                      push edx
:0040E5A3 B9D7AF7A00              mov ecx, 007AAFD7
:0040E5A8 885C2464                mov byte ptr [esp+64], bl
:0040E5AC E8EFB1FFFF              call 004097A0
:0040E5B1 50                      push eax
:0040E5B2 8BCF                    mov ecx, edi
:0040E5B4 C644246006              mov [esp+60], 06
:0040E5B9 E812A41F00              call 006089D0
:0040E5BE 8B442420                mov eax, dword ptr [esp+20]
:0040E5C2 885C245C                mov byte ptr [esp+5C], bl
:0040E5C6 83C0F4                  add eax, FFFFFFF4
:0040E5C9 8B08                    mov ecx, dword ptr [eax]
:0040E5CB 49                      dec ecx
:0040E5CC 8908                    mov dword ptr [eax], ecx
:0040E5CE 7509                    jne 0040E5D9
:0040E5D0 50                      push eax
:0040E5D1 E82A2D1D00              call 005E1300
:0040E5D6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E5CE(C)
|
:0040E5D9 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040E5DD C644245C00              mov [esp+5C], 00
:0040E5E2 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040E5E5 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040E5E8 49                      dec ecx
:0040E5E9 8908                    mov dword ptr [eax], ecx
:0040E5EB 7509                    jne 0040E5F6
:0040E5ED 50                      push eax
:0040E5EE E80D2D1D00              call 005E1300
:0040E5F3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E5EB(C)
|
:0040E5F6 8B17                    mov edx, dword ptr [edi]
:0040E5F8 8BCF                    mov ecx, edi
:0040E5FA FF5224                  call [edx+24]
:0040E5FD EB07                    jmp 0040E606

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E512(C)
|
:0040E5FF 8B07                    mov eax, dword ptr [edi]
:0040E601 8BCF                    mov ecx, edi
:0040E603 FF5020                  call [eax+20]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E5FD(U)
|
:0040E606 8B8E20130000            mov ecx, dword ptr [esi+00001320]
:0040E60C 8BBE6A140000            mov edi, dword ptr [esi+0000146A]
:0040E612 85C9                    test ecx, ecx
:0040E614 0F8EE5000000            jle 0040E6FF
:0040E61A B8ABAAAA2A              mov eax, 2AAAAAAB
:0040E61F F7E9                    imul ecx
:0040E621 8BCA                    mov ecx, edx
:0040E623 C1E91F                  shr ecx, 1F
:0040E626 03D1                    add edx, ecx
:0040E628 8BCF                    mov ecx, edi
:0040E62A 89542420                mov dword ptr [esp+20], edx
:0040E62E 8D542430                lea edx, dword ptr [esp+30]
:0040E632 DB442420                fild dword ptr [esp+20]
:0040E636 52                      push edx
:0040E637 D805D4947000            fadd dword ptr [007094D4]
:0040E63D D95C2434                fstp dword ptr [esp+34]
:0040E641 E8DAA31F00              call 00608A20
:0040E646 A128FE7200              mov eax, dword ptr [0072FE28]
:0040E64B 8D4C2420                lea ecx, dword ptr [esp+20]
:0040E64F 50                      push eax

* Possible StringData Ref from Data Obj ->"radiated"
                                  |
:0040E650 6834B87800              push 0078B834
:0040E655 E856CA1D00              call 005EB0B0
:0040E65A 8D6F24                  lea ebp, dword ptr [edi+24]
:0040E65D 50                      push eax
:0040E65E 8BCD                    mov ecx, ebp
:0040E660 C644246007              mov [esp+60], 07
:0040E665 E8B6CC1D00              call 005EB320
:0040E66A 8B4C2420                mov ecx, dword ptr [esp+20]
:0040E66E C644245C00              mov [esp+5C], 00
:0040E673 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040E676 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040E679 49                      dec ecx
:0040E67A 8908                    mov dword ptr [eax], ecx
:0040E67C 7509                    jne 0040E687
:0040E67E 50                      push eax
:0040E67F E87C2C1D00              call 005E1300
:0040E684 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E67C(C)
|
:0040E687 55                      push ebp
:0040E688 8D542420                lea edx, dword ptr [esp+20]

* Possible StringData Ref from Data Obj ->"name_"
                                  |
:0040E68C 68C8B57800              push 0078B5C8
:0040E691 52                      push edx
:0040E692 E8195F0000              call 004145B0
:0040E697 83C40C                  add esp, 0000000C
:0040E69A 50                      push eax
:0040E69B 8D442424                lea eax, dword ptr [esp+24]
:0040E69F B308                    mov bl, 08
:0040E6A1 50                      push eax
:0040E6A2 B9D7AF7A00              mov ecx, 007AAFD7
:0040E6A7 885C2464                mov byte ptr [esp+64], bl
:0040E6AB E8F0B0FFFF              call 004097A0
:0040E6B0 50                      push eax
:0040E6B1 8BCF                    mov ecx, edi
:0040E6B3 C644246009              mov [esp+60], 09
:0040E6B8 E813A31F00              call 006089D0
:0040E6BD 8B4C2420                mov ecx, dword ptr [esp+20]
:0040E6C1 885C245C                mov byte ptr [esp+5C], bl
:0040E6C5 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040E6C8 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040E6CB 49                      dec ecx
:0040E6CC 8908                    mov dword ptr [eax], ecx
:0040E6CE 7509                    jne 0040E6D9
:0040E6D0 50                      push eax
:0040E6D1 E82A2C1D00              call 005E1300
:0040E6D6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E6CE(C)
|
:0040E6D9 8B54241C                mov edx, dword ptr [esp+1C]
:0040E6DD C644245C00              mov [esp+5C], 00
:0040E6E2 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040E6E5 8D42F4                  lea eax, dword ptr [edx-0C]
:0040E6E8 49                      dec ecx
:0040E6E9 8908                    mov dword ptr [eax], ecx
:0040E6EB 7509                    jne 0040E6F6
:0040E6ED 50                      push eax
:0040E6EE E80D2C1D00              call 005E1300
:0040E6F3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E6EB(C)
|
:0040E6F6 8B07                    mov eax, dword ptr [edi]
:0040E6F8 8BCF                    mov ecx, edi
:0040E6FA FF5024                  call [eax+24]
:0040E6FD EB07                    jmp 0040E706

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E614(C)
|
:0040E6FF 8B17                    mov edx, dword ptr [edi]
:0040E701 8BCF                    mov ecx, edi
:0040E703 FF5220                  call [edx+20]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E6FD(U)
|
:0040E706 33FF                    xor edi, edi
:0040E708 8D442413                lea eax, dword ptr [esp+13]
:0040E70C 8D4C2414                lea ecx, dword ptr [esp+14]
:0040E710 50                      push eax
:0040E711 C64424600A              mov [esp+60], 0A
:0040E716 E8656B0000              call 00415280
:0040E71B 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040E721 33D2                    xor edx, edx
:0040E723 668B96F8000000          mov dx, word ptr [esi+000000F8]
:0040E72A C644245C0C              mov [esp+5C], 0C
:0040E72F 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:0040E735 668B4CD006              mov cx, word ptr [eax+8*edx+06]
:0040E73A 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040E741 8D04D0                  lea eax, dword ptr [eax+8*edx]
:0040E744 741A                    je 0040E760
:0040E746 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040E74D 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040E754 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040E75A 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E744(C)
|
:0040E760 8B00                    mov eax, dword ptr [eax]
:0040E762 8BC8                    mov ecx, eax
:0040E764 8B10                    mov edx, dword ptr [eax]
:0040E766 FF92A8030000            call dword ptr [edx+000003A8]
:0040E76C 84C0                    test al, al
:0040E76E 7453                    je 0040E7C3
:0040E770 A128FE7200              mov eax, dword ptr [0072FE28]
:0040E775 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040E779 50                      push eax

* Possible StringData Ref from Data Obj ->"unconcious"
                                  |
:0040E77A 6828B87800              push 0078B828
:0040E77F E82CC91D00              call 005EB0B0
:0040E784 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040E788 C644245C0D              mov [esp+5C], 0D
:0040E78D 51                      push ecx
:0040E78E 51                      push ecx
:0040E78F 54                      push esp
:0040E790 8D4C2420                lea ecx, dword ptr [esp+20]
:0040E794 E8576A0000              call 004151F0
:0040E799 8D542430                lea edx, dword ptr [esp+30]
:0040E79D 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040E7A1 52                      push edx
:0040E7A2 E8596A0000              call 00415200
:0040E7A7 8B44241C                mov eax, dword ptr [esp+1C]
:0040E7AB C644245C0C              mov [esp+5C], 0C
:0040E7B0 83C0F4                  add eax, FFFFFFF4
:0040E7B3 8B08                    mov ecx, dword ptr [eax]
:0040E7B5 49                      dec ecx
:0040E7B6 8908                    mov dword ptr [eax], ecx
:0040E7B8 7509                    jne 0040E7C3
:0040E7BA 50                      push eax
:0040E7BB E8402B1D00              call 005E1300
:0040E7C0 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E76E(C), :0040E7B8(C)
|
:0040E7C3 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040E7C9 33D2                    xor edx, edx
:0040E7CB 668B96F8000000          mov dx, word ptr [esi+000000F8]
:0040E7D2 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:0040E7D8 668B4CD006              mov cx, word ptr [eax+8*edx+06]
:0040E7DD 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040E7E4 8D04D0                  lea eax, dword ptr [eax+8*edx]
:0040E7E7 741A                    je 0040E803
:0040E7E9 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040E7F0 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040E7F7 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040E7FD 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E7E7(C)
|
:0040E803 8B08                    mov ecx, dword ptr [eax]
:0040E805 6A01                    push 00000001
:0040E807 8B01                    mov eax, dword ptr [ecx]
:0040E809 FF9094030000            call dword ptr [eax+00000394]
:0040E80F 84C0                    test al, al
:0040E811 7455                    je 0040E868
:0040E813 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040E819 51                      push ecx

* Possible StringData Ref from Data Obj ->"blind"
                                  |
:0040E81A 6820B87800              push 0078B820
:0040E81F 8D4C2424                lea ecx, dword ptr [esp+24]
:0040E823 E888C81D00              call 005EB0B0
:0040E828 8D54241C                lea edx, dword ptr [esp+1C]
:0040E82C C644245C0E              mov [esp+5C], 0E
:0040E831 52                      push edx
:0040E832 51                      push ecx
:0040E833 54                      push esp
:0040E834 8D4C2420                lea ecx, dword ptr [esp+20]
:0040E838 E8B3690000              call 004151F0
:0040E83D 8D442430                lea eax, dword ptr [esp+30]
:0040E841 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040E845 50                      push eax
:0040E846 E8B5690000              call 00415200
:0040E84B 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040E84F C644245C0C              mov [esp+5C], 0C
:0040E854 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040E857 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040E85A 49                      dec ecx
:0040E85B 8908                    mov dword ptr [eax], ecx
:0040E85D 7509                    jne 0040E868
:0040E85F 50                      push eax
:0040E860 E89B2A1D00              call 005E1300
:0040E865 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E811(C), :0040E85D(C)
|
:0040E868 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040E86E 33C9                    xor ecx, ecx
:0040E870 668B8EF8000000          mov cx, word ptr [esi+000000F8]
:0040E877 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:0040E87D 668B54C806              mov dx, word ptr [eax+8*ecx+06]
:0040E882 663B96F6000000          cmp dx, word ptr [esi+000000F6]
:0040E889 8D04C8                  lea eax, dword ptr [eax+8*ecx]
:0040E88C 7419                    je 0040E8A7
:0040E88E 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040E895 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040E89C A1089C7A00              mov eax, dword ptr [007A9C08]
:0040E8A1 8B80CD050000            mov eax, dword ptr [eax+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E88C(C)
|
:0040E8A7 8B08                    mov ecx, dword ptr [eax]
:0040E8A9 6A01                    push 00000001
:0040E8AB 8B11                    mov edx, dword ptr [ecx]
:0040E8AD FF929C030000            call dword ptr [edx+0000039C]
:0040E8B3 84C0                    test al, al
:0040E8B5 7453                    je 0040E90A
:0040E8B7 A128FE7200              mov eax, dword ptr [0072FE28]
:0040E8BC 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040E8C0 50                      push eax

* Possible StringData Ref from Data Obj ->"immobile"
                                  |
:0040E8C1 6814B87800              push 0078B814
:0040E8C6 E8E5C71D00              call 005EB0B0
:0040E8CB 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040E8CF C644245C0F              mov [esp+5C], 0F
:0040E8D4 51                      push ecx
:0040E8D5 51                      push ecx
:0040E8D6 54                      push esp
:0040E8D7 8D4C2420                lea ecx, dword ptr [esp+20]
:0040E8DB E810690000              call 004151F0
:0040E8E0 8D542430                lea edx, dword ptr [esp+30]
:0040E8E4 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040E8E8 52                      push edx
:0040E8E9 E812690000              call 00415200
:0040E8EE 8B44241C                mov eax, dword ptr [esp+1C]
:0040E8F2 C644245C0C              mov [esp+5C], 0C
:0040E8F7 83C0F4                  add eax, FFFFFFF4
:0040E8FA 8B08                    mov ecx, dword ptr [eax]
:0040E8FC 49                      dec ecx
:0040E8FD 8908                    mov dword ptr [eax], ecx
:0040E8FF 7509                    jne 0040E90A
:0040E901 50                      push eax
:0040E902 E8F9291D00              call 005E1300
:0040E907 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E8B5(C), :0040E8FF(C)
|
:0040E90A 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040E910 33D2                    xor edx, edx
:0040E912 668B96F8000000          mov dx, word ptr [esi+000000F8]
:0040E919 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:0040E91F 668B4CD006              mov cx, word ptr [eax+8*edx+06]
:0040E924 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040E92B 8D04D0                  lea eax, dword ptr [eax+8*edx]
:0040E92E 741A                    je 0040E94A
:0040E930 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040E937 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040E93E 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040E944 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E92E(C)
|
:0040E94A 8B08                    mov ecx, dword ptr [eax]
:0040E94C 57                      push edi
:0040E94D 8B01                    mov eax, dword ptr [ecx]
:0040E94F FF90A0030000            call dword ptr [eax+000003A0]
:0040E955 84C0                    test al, al
:0040E957 7455                    je 0040E9AE
:0040E959 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040E95F 51                      push ecx

* Possible StringData Ref from Data Obj ->"concussed"
                                  |
:0040E960 6808B87800              push 0078B808
:0040E965 8D4C2424                lea ecx, dword ptr [esp+24]
:0040E969 E842C71D00              call 005EB0B0
:0040E96E 8D54241C                lea edx, dword ptr [esp+1C]
:0040E972 C644245C10              mov [esp+5C], 10
:0040E977 52                      push edx
:0040E978 51                      push ecx
:0040E979 54                      push esp
:0040E97A 8D4C2420                lea ecx, dword ptr [esp+20]
:0040E97E E86D680000              call 004151F0
:0040E983 8D442430                lea eax, dword ptr [esp+30]
:0040E987 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040E98B 50                      push eax
:0040E98C E86F680000              call 00415200
:0040E991 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040E995 C644245C0C              mov [esp+5C], 0C
:0040E99A 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040E99D 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040E9A0 49                      dec ecx
:0040E9A1 8908                    mov dword ptr [eax], ecx
:0040E9A3 7509                    jne 0040E9AE
:0040E9A5 50                      push eax
:0040E9A6 E855291D00              call 005E1300
:0040E9AB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E957(C), :0040E9A3(C)
|
:0040E9AE 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040E9B4 33C9                    xor ecx, ecx
:0040E9B6 668B8EF8000000          mov cx, word ptr [esi+000000F8]
:0040E9BD 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:0040E9C3 668B54C806              mov dx, word ptr [eax+8*ecx+06]
:0040E9C8 663B96F6000000          cmp dx, word ptr [esi+000000F6]
:0040E9CF 8D04C8                  lea eax, dword ptr [eax+8*ecx]
:0040E9D2 7419                    je 0040E9ED
:0040E9D4 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040E9DB 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040E9E2 A1089C7A00              mov eax, dword ptr [007A9C08]
:0040E9E7 8B80CD050000            mov eax, dword ptr [eax+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E9D2(C)
|
:0040E9ED 8B08                    mov ecx, dword ptr [eax]
:0040E9EF 57                      push edi
:0040E9F0 8B11                    mov edx, dword ptr [ecx]
:0040E9F2 FF92A4030000            call dword ptr [edx+000003A4]
:0040E9F8 84C0                    test al, al
:0040E9FA 7453                    je 0040EA4F
:0040E9FC A128FE7200              mov eax, dword ptr [0072FE28]
:0040EA01 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EA05 50                      push eax

* Possible StringData Ref from Data Obj ->"stunned"
                                  |
:0040EA06 6800B87800              push 0078B800
:0040EA0B E8A0C61D00              call 005EB0B0
:0040EA10 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EA14 C644245C11              mov [esp+5C], 11
:0040EA19 51                      push ecx
:0040EA1A 51                      push ecx
:0040EA1B 54                      push esp
:0040EA1C 8D4C2420                lea ecx, dword ptr [esp+20]
:0040EA20 E8CB670000              call 004151F0
:0040EA25 8D542430                lea edx, dword ptr [esp+30]
:0040EA29 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EA2D 52                      push edx
:0040EA2E E8CD670000              call 00415200
:0040EA33 8B44241C                mov eax, dword ptr [esp+1C]
:0040EA37 C644245C0C              mov [esp+5C], 0C
:0040EA3C 83C0F4                  add eax, FFFFFFF4
:0040EA3F 8B08                    mov ecx, dword ptr [eax]
:0040EA41 49                      dec ecx
:0040EA42 8908                    mov dword ptr [eax], ecx
:0040EA44 7509                    jne 0040EA4F
:0040EA46 50                      push eax
:0040EA47 E8B4281D00              call 005E1300
:0040EA4C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E9FA(C), :0040EA44(C)
|
:0040EA4F 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040EA55 33D2                    xor edx, edx
:0040EA57 668B96F8000000          mov dx, word ptr [esi+000000F8]
:0040EA5E 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:0040EA64 668B4CD006              mov cx, word ptr [eax+8*edx+06]
:0040EA69 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040EA70 8D04D0                  lea eax, dword ptr [eax+8*edx]
:0040EA73 741A                    je 0040EA8F
:0040EA75 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040EA7C 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040EA83 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040EA89 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EA73(C)
|
:0040EA8F 8B08                    mov ecx, dword ptr [eax]
:0040EA91 8B01                    mov eax, dword ptr [ecx]
:0040EA93 FF9008030000            call dword ptr [eax+00000308]
:0040EA99 84C0                    test al, al
:0040EA9B 7455                    je 0040EAF2
:0040EA9D 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040EAA3 51                      push ecx

* Possible StringData Ref from Data Obj ->"encumbered"
                                  |
:0040EAA4 68F4B77800              push 0078B7F4
:0040EAA9 8D4C2424                lea ecx, dword ptr [esp+24]
:0040EAAD E8FEC51D00              call 005EB0B0
:0040EAB2 8D54241C                lea edx, dword ptr [esp+1C]
:0040EAB6 C644245C12              mov [esp+5C], 12
:0040EABB 52                      push edx
:0040EABC 51                      push ecx
:0040EABD 54                      push esp
:0040EABE 8D4C2420                lea ecx, dword ptr [esp+20]
:0040EAC2 E829670000              call 004151F0
:0040EAC7 8D442430                lea eax, dword ptr [esp+30]
:0040EACB 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EACF 50                      push eax
:0040EAD0 E82B670000              call 00415200
:0040EAD5 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040EAD9 C644245C0C              mov [esp+5C], 0C
:0040EADE 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040EAE1 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040EAE4 49                      dec ecx
:0040EAE5 8908                    mov dword ptr [eax], ecx
:0040EAE7 7509                    jne 0040EAF2
:0040EAE9 50                      push eax
:0040EAEA E811281D00              call 005E1300
:0040EAEF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040EA9B(C), :0040EAE7(C)
|
:0040EAF2 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040EAF8 33C9                    xor ecx, ecx
:0040EAFA 668B8EF8000000          mov cx, word ptr [esi+000000F8]
:0040EB01 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:0040EB07 668B54C806              mov dx, word ptr [eax+8*ecx+06]
:0040EB0C 663B96F6000000          cmp dx, word ptr [esi+000000F6]
:0040EB13 8D04C8                  lea eax, dword ptr [eax+8*ecx]
:0040EB16 7419                    je 0040EB31
:0040EB18 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040EB1F 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040EB26 A1089C7A00              mov eax, dword ptr [007A9C08]
:0040EB2B 8B80CD050000            mov eax, dword ptr [eax+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EB16(C)
|
:0040EB31 8B08                    mov ecx, dword ptr [eax]
:0040EB33 6A01                    push 00000001
:0040EB35 8B11                    mov edx, dword ptr [ecx]
:0040EB37 FF9298030000            call dword ptr [edx+00000398]
:0040EB3D 84C0                    test al, al
:0040EB3F 7453                    je 0040EB94
:0040EB41 A128FE7200              mov eax, dword ptr [0072FE28]
:0040EB46 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EB4A 50                      push eax

* Possible StringData Ref from Data Obj ->"winded"
                                  |
:0040EB4B 68ECB77800              push 0078B7EC
:0040EB50 E85BC51D00              call 005EB0B0
:0040EB55 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EB59 C644245C13              mov [esp+5C], 13
:0040EB5E 51                      push ecx
:0040EB5F 51                      push ecx
:0040EB60 54                      push esp
:0040EB61 8D4C2420                lea ecx, dword ptr [esp+20]
:0040EB65 E886660000              call 004151F0
:0040EB6A 8D542430                lea edx, dword ptr [esp+30]
:0040EB6E 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EB72 52                      push edx
:0040EB73 E888660000              call 00415200
:0040EB78 8B44241C                mov eax, dword ptr [esp+1C]
:0040EB7C C644245C0C              mov [esp+5C], 0C
:0040EB81 83C0F4                  add eax, FFFFFFF4
:0040EB84 8B08                    mov ecx, dword ptr [eax]
:0040EB86 49                      dec ecx
:0040EB87 8908                    mov dword ptr [eax], ecx
:0040EB89 7509                    jne 0040EB94
:0040EB8B 50                      push eax
:0040EB8C E86F271D00              call 005E1300
:0040EB91 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040EB3F(C), :0040EB89(C)
|
:0040EB94 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040EB9A 33D2                    xor edx, edx
:0040EB9C 668B96F8000000          mov dx, word ptr [esi+000000F8]
:0040EBA3 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:0040EBA9 668B4CD006              mov cx, word ptr [eax+8*edx+06]
:0040EBAE 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040EBB5 8D04D0                  lea eax, dword ptr [eax+8*edx]
:0040EBB8 741A                    je 0040EBD4
:0040EBBA 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040EBC1 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040EBC8 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040EBCE 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EBB8(C)
|
:0040EBD4 8B08                    mov ecx, dword ptr [eax]
:0040EBD6 6A01                    push 00000001
:0040EBD8 8B01                    mov eax, dword ptr [ecx]
:0040EBDA FF908C030000            call dword ptr [eax+0000038C]
:0040EBE0 84C0                    test al, al
:0040EBE2 7455                    je 0040EC39
:0040EBE4 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040EBEA 51                      push ecx

* Possible StringData Ref from Data Obj ->"cripRArm"
                                  |
:0040EBEB 68E0B77800              push 0078B7E0
:0040EBF0 8D4C2424                lea ecx, dword ptr [esp+24]
:0040EBF4 E8B7C41D00              call 005EB0B0
:0040EBF9 8D54241C                lea edx, dword ptr [esp+1C]
:0040EBFD C644245C14              mov [esp+5C], 14
:0040EC02 52                      push edx
:0040EC03 51                      push ecx
:0040EC04 54                      push esp
:0040EC05 8D4C2420                lea ecx, dword ptr [esp+20]
:0040EC09 E8E2650000              call 004151F0
:0040EC0E 8D442430                lea eax, dword ptr [esp+30]
:0040EC12 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EC16 50                      push eax
:0040EC17 E8E4650000              call 00415200
:0040EC1C 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040EC20 C644245C0C              mov [esp+5C], 0C
:0040EC25 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040EC28 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040EC2B 49                      dec ecx
:0040EC2C 8908                    mov dword ptr [eax], ecx
:0040EC2E 7509                    jne 0040EC39
:0040EC30 50                      push eax
:0040EC31 E8CA261D00              call 005E1300
:0040EC36 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040EBE2(C), :0040EC2E(C)
|
:0040EC39 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040EC3F 33C9                    xor ecx, ecx
:0040EC41 668B8EF8000000          mov cx, word ptr [esi+000000F8]
:0040EC48 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:0040EC4E 668B54C806              mov dx, word ptr [eax+8*ecx+06]
:0040EC53 663B96F6000000          cmp dx, word ptr [esi+000000F6]
:0040EC5A 8D04C8                  lea eax, dword ptr [eax+8*ecx]
:0040EC5D 7419                    je 0040EC78
:0040EC5F 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040EC66 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040EC6D A1089C7A00              mov eax, dword ptr [007A9C08]
:0040EC72 8B80CD050000            mov eax, dword ptr [eax+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EC5D(C)
|
:0040EC78 8B08                    mov ecx, dword ptr [eax]
:0040EC7A 6A01                    push 00000001
:0040EC7C 8B11                    mov edx, dword ptr [ecx]
:0040EC7E FF9290030000            call dword ptr [edx+00000390]
:0040EC84 84C0                    test al, al
:0040EC86 7453                    je 0040ECDB
:0040EC88 A128FE7200              mov eax, dword ptr [0072FE28]
:0040EC8D 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EC91 50                      push eax

* Possible StringData Ref from Data Obj ->"cripLArm"
                                  |
:0040EC92 68D4B77800              push 0078B7D4
:0040EC97 E814C41D00              call 005EB0B0
:0040EC9C 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040ECA0 C644245C15              mov [esp+5C], 15
:0040ECA5 51                      push ecx
:0040ECA6 51                      push ecx
:0040ECA7 54                      push esp
:0040ECA8 8D4C2420                lea ecx, dword ptr [esp+20]
:0040ECAC E83F650000              call 004151F0
:0040ECB1 8D542430                lea edx, dword ptr [esp+30]
:0040ECB5 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040ECB9 52                      push edx
:0040ECBA E841650000              call 00415200
:0040ECBF 8B44241C                mov eax, dword ptr [esp+1C]
:0040ECC3 C644245C0C              mov [esp+5C], 0C
:0040ECC8 83C0F4                  add eax, FFFFFFF4
:0040ECCB 8B08                    mov ecx, dword ptr [eax]
:0040ECCD 49                      dec ecx
:0040ECCE 8908                    mov dword ptr [eax], ecx
:0040ECD0 7509                    jne 0040ECDB
:0040ECD2 50                      push eax
:0040ECD3 E828261D00              call 005E1300
:0040ECD8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040EC86(C), :0040ECD0(C)
|
:0040ECDB 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040ECE1 33D2                    xor edx, edx
:0040ECE3 668B96F8000000          mov dx, word ptr [esi+000000F8]
:0040ECEA 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:0040ECF0 668B4CD006              mov cx, word ptr [eax+8*edx+06]
:0040ECF5 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040ECFC 8D04D0                  lea eax, dword ptr [eax+8*edx]
:0040ECFF 741A                    je 0040ED1B
:0040ED01 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040ED08 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040ED0F 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040ED15 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ECFF(C)
|
:0040ED1B 8B08                    mov ecx, dword ptr [eax]
:0040ED1D 6A01                    push 00000001
:0040ED1F 8B01                    mov eax, dword ptr [ecx]
:0040ED21 FF9084030000            call dword ptr [eax+00000384]
:0040ED27 84C0                    test al, al
:0040ED29 7455                    je 0040ED80
:0040ED2B 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040ED31 51                      push ecx

* Possible StringData Ref from Data Obj ->"cripRLeg"
                                  |
:0040ED32 68C8B77800              push 0078B7C8
:0040ED37 8D4C2424                lea ecx, dword ptr [esp+24]
:0040ED3B E870C31D00              call 005EB0B0
:0040ED40 8D54241C                lea edx, dword ptr [esp+1C]
:0040ED44 C644245C16              mov [esp+5C], 16
:0040ED49 52                      push edx
:0040ED4A 51                      push ecx
:0040ED4B 54                      push esp
:0040ED4C 8D4C2420                lea ecx, dword ptr [esp+20]
:0040ED50 E89B640000              call 004151F0
:0040ED55 8D442430                lea eax, dword ptr [esp+30]
:0040ED59 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040ED5D 50                      push eax
:0040ED5E E89D640000              call 00415200
:0040ED63 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040ED67 C644245C0C              mov [esp+5C], 0C
:0040ED6C 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040ED6F 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040ED72 49                      dec ecx
:0040ED73 8908                    mov dword ptr [eax], ecx
:0040ED75 7509                    jne 0040ED80
:0040ED77 50                      push eax
:0040ED78 E883251D00              call 005E1300
:0040ED7D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040ED29(C), :0040ED75(C)
|
:0040ED80 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040ED86 33C9                    xor ecx, ecx
:0040ED88 668B8EF8000000          mov cx, word ptr [esi+000000F8]
:0040ED8F 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:0040ED95 668B54C806              mov dx, word ptr [eax+8*ecx+06]
:0040ED9A 663B96F6000000          cmp dx, word ptr [esi+000000F6]
:0040EDA1 8D04C8                  lea eax, dword ptr [eax+8*ecx]
:0040EDA4 7419                    je 0040EDBF
:0040EDA6 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040EDAD 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040EDB4 A1089C7A00              mov eax, dword ptr [007A9C08]
:0040EDB9 8B80CD050000            mov eax, dword ptr [eax+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EDA4(C)
|
:0040EDBF 8B08                    mov ecx, dword ptr [eax]
:0040EDC1 6A01                    push 00000001
:0040EDC3 8B11                    mov edx, dword ptr [ecx]
:0040EDC5 FF9288030000            call dword ptr [edx+00000388]
:0040EDCB 84C0                    test al, al
:0040EDCD 7453                    je 0040EE22
:0040EDCF A128FE7200              mov eax, dword ptr [0072FE28]
:0040EDD4 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EDD8 50                      push eax

* Possible StringData Ref from Data Obj ->"cripLLeg"
                                  |
:0040EDD9 68BCB77800              push 0078B7BC
:0040EDDE E8CDC21D00              call 005EB0B0
:0040EDE3 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EDE7 C644245C17              mov [esp+5C], 17
:0040EDEC 51                      push ecx
:0040EDED 51                      push ecx
:0040EDEE 54                      push esp
:0040EDEF 8D4C2420                lea ecx, dword ptr [esp+20]
:0040EDF3 E8F8630000              call 004151F0
:0040EDF8 8D542430                lea edx, dword ptr [esp+30]
:0040EDFC 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EE00 52                      push edx
:0040EE01 E8FA630000              call 00415200
:0040EE06 8B44241C                mov eax, dword ptr [esp+1C]
:0040EE0A C644245C0C              mov [esp+5C], 0C
:0040EE0F 83C0F4                  add eax, FFFFFFF4
:0040EE12 8B08                    mov ecx, dword ptr [eax]
:0040EE14 49                      dec ecx
:0040EE15 8908                    mov dword ptr [eax], ecx
:0040EE17 7509                    jne 0040EE22
:0040EE19 50                      push eax
:0040EE1A E8E1241D00              call 005E1300
:0040EE1F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040EDCD(C), :0040EE17(C)
|
:0040EE22 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040EE28 33D2                    xor edx, edx
:0040EE2A 668B96F8000000          mov dx, word ptr [esi+000000F8]
:0040EE31 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:0040EE37 668B4CD006              mov cx, word ptr [eax+8*edx+06]
:0040EE3C 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040EE43 8D04D0                  lea eax, dword ptr [eax+8*edx]
:0040EE46 741A                    je 0040EE62
:0040EE48 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040EE4F 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040EE56 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040EE5C 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EE46(C)
|
:0040EE62 8B08                    mov ecx, dword ptr [eax]
:0040EE64 8B01                    mov eax, dword ptr [ecx]
:0040EE66 FF9024050000            call dword ptr [eax+00000524]
:0040EE6C 84C0                    test al, al
:0040EE6E 7455                    je 0040EEC5
:0040EE70 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040EE76 51                      push ecx

* Possible StringData Ref from Data Obj ->"addicted"
                                  |
:0040EE77 68B0B77800              push 0078B7B0
:0040EE7C 8D4C2424                lea ecx, dword ptr [esp+24]
:0040EE80 E82BC21D00              call 005EB0B0
:0040EE85 8D54241C                lea edx, dword ptr [esp+1C]
:0040EE89 C644245C18              mov [esp+5C], 18
:0040EE8E 52                      push edx
:0040EE8F 51                      push ecx
:0040EE90 54                      push esp
:0040EE91 8D4C2420                lea ecx, dword ptr [esp+20]
:0040EE95 E856630000              call 004151F0
:0040EE9A 8D442430                lea eax, dword ptr [esp+30]
:0040EE9E 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EEA2 50                      push eax
:0040EEA3 E858630000              call 00415200
:0040EEA8 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040EEAC C644245C0C              mov [esp+5C], 0C
:0040EEB1 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040EEB4 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040EEB7 49                      dec ecx
:0040EEB8 8908                    mov dword ptr [eax], ecx
:0040EEBA 7509                    jne 0040EEC5
:0040EEBC 50                      push eax
:0040EEBD E83E241D00              call 005E1300
:0040EEC2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040EE6E(C), :0040EEBA(C)
|
:0040EEC5 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040EECB 33C9                    xor ecx, ecx
:0040EECD 668B8EF8000000          mov cx, word ptr [esi+000000F8]
:0040EED4 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:0040EEDA 668B54C806              mov dx, word ptr [eax+8*ecx+06]
:0040EEDF 663B96F6000000          cmp dx, word ptr [esi+000000F6]
:0040EEE6 8D04C8                  lea eax, dword ptr [eax+8*ecx]
:0040EEE9 7419                    je 0040EF04
:0040EEEB 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040EEF2 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040EEF9 A1089C7A00              mov eax, dword ptr [007A9C08]
:0040EEFE 8B80CD050000            mov eax, dword ptr [eax+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EEE9(C)
|
:0040EF04 8B08                    mov ecx, dword ptr [eax]
:0040EF06 8B11                    mov edx, dword ptr [ecx]
:0040EF08 FF9228050000            call dword ptr [edx+00000528]
:0040EF0E 84C0                    test al, al
:0040EF10 7453                    je 0040EF65
:0040EF12 A128FE7200              mov eax, dword ptr [0072FE28]
:0040EF17 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EF1B 50                      push eax

* Possible StringData Ref from Data Obj ->"overdosed"
                                  |
:0040EF1C 68A4B77800              push 0078B7A4
:0040EF21 E88AC11D00              call 005EB0B0
:0040EF26 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EF2A C644245C19              mov [esp+5C], 19
:0040EF2F 51                      push ecx
:0040EF30 51                      push ecx
:0040EF31 54                      push esp
:0040EF32 8D4C2420                lea ecx, dword ptr [esp+20]
:0040EF36 E8B5620000              call 004151F0
:0040EF3B 8D542430                lea edx, dword ptr [esp+30]
:0040EF3F 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EF43 52                      push edx
:0040EF44 E8B7620000              call 00415200
:0040EF49 8B44241C                mov eax, dword ptr [esp+1C]
:0040EF4D C644245C0C              mov [esp+5C], 0C
:0040EF52 83C0F4                  add eax, FFFFFFF4
:0040EF55 8B08                    mov ecx, dword ptr [eax]
:0040EF57 49                      dec ecx
:0040EF58 8908                    mov dword ptr [eax], ecx
:0040EF5A 7509                    jne 0040EF65
:0040EF5C 50                      push eax
:0040EF5D E89E231D00              call 005E1300
:0040EF62 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040EF10(C), :0040EF5A(C)
|
:0040EF65 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0040EF6B 33D2                    xor edx, edx
:0040EF6D 668B96F8000000          mov dx, word ptr [esi+000000F8]
:0040EF74 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:0040EF7A 668B4CD006              mov cx, word ptr [eax+8*edx+06]
:0040EF7F 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:0040EF86 8D04D0                  lea eax, dword ptr [eax+8*edx]
:0040EF89 741A                    je 0040EFA5
:0040EF8B 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040EF92 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040EF99 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040EF9F 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EF89(C)
|
:0040EFA5 8B08                    mov ecx, dword ptr [eax]
:0040EFA7 8B01                    mov eax, dword ptr [ecx]
:0040EFA9 FF902C050000            call dword ptr [eax+0000052C]
:0040EFAF 84C0                    test al, al
:0040EFB1 7455                    je 0040F008
:0040EFB3 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040EFB9 51                      push ecx

* Possible StringData Ref from Data Obj ->"withdrawl"
                                  |
:0040EFBA 6898B77800              push 0078B798
:0040EFBF 8D4C2424                lea ecx, dword ptr [esp+24]
:0040EFC3 E8E8C01D00              call 005EB0B0
:0040EFC8 8D54241C                lea edx, dword ptr [esp+1C]
:0040EFCC C644245C1A              mov [esp+5C], 1A
:0040EFD1 52                      push edx
:0040EFD2 51                      push ecx
:0040EFD3 54                      push esp
:0040EFD4 8D4C2420                lea ecx, dword ptr [esp+20]
:0040EFD8 E813620000              call 004151F0
:0040EFDD 8D442430                lea eax, dword ptr [esp+30]
:0040EFE1 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040EFE5 50                      push eax
:0040EFE6 E815620000              call 00415200
:0040EFEB 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040EFEF C644245C0C              mov [esp+5C], 0C
:0040EFF4 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040EFF7 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040EFFA 49                      dec ecx
:0040EFFB 8908                    mov dword ptr [eax], ecx
:0040EFFD 7509                    jne 0040F008
:0040EFFF 50                      push eax
:0040F000 E8FB221D00              call 005E1300
:0040F005 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040EFB1(C), :0040EFFD(C)
|
:0040F008 8B15089C7A00            mov edx, dword ptr [007A9C08]
:0040F00E 33C9                    xor ecx, ecx
:0040F010 668B8EF8000000          mov cx, word ptr [esi+000000F8]
:0040F017 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:0040F01D 668B54C806              mov dx, word ptr [eax+8*ecx+06]
:0040F022 663B96F6000000          cmp dx, word ptr [esi+000000F6]
:0040F029 8D04C8                  lea eax, dword ptr [eax+8*ecx]
:0040F02C 7419                    je 0040F047
:0040F02E 6689BEF6000000          mov word ptr [esi+000000F6], di
:0040F035 6689BEF8000000          mov word ptr [esi+000000F8], di
:0040F03C A1089C7A00              mov eax, dword ptr [007A9C08]
:0040F041 8B80CD050000            mov eax, dword ptr [eax+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F02C(C)
|
:0040F047 8B08                    mov ecx, dword ptr [eax]
:0040F049 8B11                    mov edx, dword ptr [ecx]
:0040F04B FF92AC030000            call dword ptr [edx+000003AC]
:0040F051 84C0                    test al, al
:0040F053 7453                    je 0040F0A8
:0040F055 A128FE7200              mov eax, dword ptr [0072FE28]
:0040F05A 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040F05E 50                      push eax

* Possible StringData Ref from Data Obj ->"bandaged"
                                  |
:0040F05F 688CB77800              push 0078B78C
:0040F064 E847C01D00              call 005EB0B0
:0040F069 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040F06D C644245C1B              mov [esp+5C], 1B
:0040F072 51                      push ecx
:0040F073 51                      push ecx
:0040F074 54                      push esp
:0040F075 8D4C2420                lea ecx, dword ptr [esp+20]
:0040F079 E872610000              call 004151F0
:0040F07E 8D542430                lea edx, dword ptr [esp+30]
:0040F082 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040F086 52                      push edx
:0040F087 E874610000              call 00415200
:0040F08C 8B44241C                mov eax, dword ptr [esp+1C]
:0040F090 C644245C0C              mov [esp+5C], 0C
:0040F095 83C0F4                  add eax, FFFFFFF4
:0040F098 8B08                    mov ecx, dword ptr [eax]
:0040F09A 49                      dec ecx
:0040F09B 8908                    mov dword ptr [eax], ecx
:0040F09D 7509                    jne 0040F0A8
:0040F09F 50                      push eax
:0040F0A0 E85B221D00              call 005E1300
:0040F0A5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F053(C), :0040F09D(C)
|
:0040F0A8 C74424300000803F        mov [esp+30], 3F800000
:0040F0B0 8DAE6E140000            lea ebp, dword ptr [esi+0000146E]
:0040F0B6 C744241C06000000        mov [esp+1C], 00000006
:0040F0BE B31D                    mov bl, 1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F1DF(C)
|
:0040F0C0 8B442414                mov eax, dword ptr [esp+14]
:0040F0C4 8B7D00                  mov edi, dword ptr [ebp+00]
:0040F0C7 3900                    cmp dword ptr [eax], eax
:0040F0C9 754C                    jne 0040F117
:0040F0CB 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040F0D1 51                      push ecx
:0040F0D2 6868987A00              push 007A9868
:0040F0D7 8D4C2428                lea ecx, dword ptr [esp+28]
:0040F0DB E8D0BF1D00              call 005EB0B0
:0040F0E0 50                      push eax
:0040F0E1 8D4F24                  lea ecx, dword ptr [edi+24]
:0040F0E4 C64424601C              mov [esp+60], 1C
:0040F0E9 E832C21D00              call 005EB320
:0040F0EE 8B542420                mov edx, dword ptr [esp+20]
:0040F0F2 C644245C0C              mov [esp+5C], 0C
:0040F0F7 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040F0FA 8D42F4                  lea eax, dword ptr [edx-0C]
:0040F0FD 49                      dec ecx
:0040F0FE 8908                    mov dword ptr [eax], ecx
:0040F100 7509                    jne 0040F10B
:0040F102 50                      push eax
:0040F103 E8F8211D00              call 005E1300
:0040F108 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F100(C)
|
:0040F10B 8B07                    mov eax, dword ptr [edi]
:0040F10D 8BCF                    mov ecx, edi
:0040F10F FF5020                  call [eax+20]
:0040F112 E9BC000000              jmp 0040F1D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F0C9(C)
|
:0040F117 8D4C2430                lea ecx, dword ptr [esp+30]
:0040F11B 51                      push ecx
:0040F11C 8BCF                    mov ecx, edi
:0040F11E E8FD981F00              call 00608A20
:0040F123 8B542414                mov edx, dword ptr [esp+14]
:0040F127 8B02                    mov eax, dword ptr [edx]
:0040F129 83C008                  add eax, 00000008
:0040F12C 50                      push eax
:0040F12D 8D44242C                lea eax, dword ptr [esp+2C]

* Possible StringData Ref from Data Obj ->"name_"
                                  |
:0040F131 68C8B57800              push 0078B5C8
:0040F136 50                      push eax
:0040F137 E874540000              call 004145B0
:0040F13C 83C40C                  add esp, 0000000C
:0040F13F 8D4C2424                lea ecx, dword ptr [esp+24]
:0040F143 50                      push eax
:0040F144 51                      push ecx
:0040F145 B9D7AF7A00              mov ecx, 007AAFD7
:0040F14A 885C2464                mov byte ptr [esp+64], bl
:0040F14E E84DA6FFFF              call 004097A0
:0040F153 50                      push eax
:0040F154 8BCF                    mov ecx, edi
:0040F156 C64424601E              mov [esp+60], 1E
:0040F15B E870981F00              call 006089D0
:0040F160 8B542424                mov edx, dword ptr [esp+24]
:0040F164 885C245C                mov byte ptr [esp+5C], bl
:0040F168 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040F16B 8D42F4                  lea eax, dword ptr [edx-0C]
:0040F16E 49                      dec ecx
:0040F16F 8908                    mov dword ptr [eax], ecx
:0040F171 7509                    jne 0040F17C
:0040F173 50                      push eax
:0040F174 E887211D00              call 005E1300
:0040F179 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F171(C)
|
:0040F17C 8B442428                mov eax, dword ptr [esp+28]
:0040F180 C644245C0C              mov [esp+5C], 0C
:0040F185 83C0F4                  add eax, FFFFFFF4
:0040F188 8B08                    mov ecx, dword ptr [eax]
:0040F18A 49                      dec ecx
:0040F18B 8908                    mov dword ptr [eax], ecx
:0040F18D 7509                    jne 0040F198
:0040F18F 50                      push eax
:0040F190 E86B211D00              call 005E1300
:0040F195 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F18D(C)
|
:0040F198 6A00                    push 00000000
:0040F19A 8BCF                    mov ecx, edi
:0040F19C E8AFFC1700              call 0058EE50
:0040F1A1 8B4C2414                mov ecx, dword ptr [esp+14]
:0040F1A5 8B01                    mov eax, dword ptr [ecx]
:0040F1A7 8D4F24                  lea ecx, dword ptr [edi+24]
:0040F1AA 83C008                  add eax, 00000008
:0040F1AD 50                      push eax
:0040F1AE E86DC11D00              call 005EB320
:0040F1B3 8B17                    mov edx, dword ptr [edi]
:0040F1B5 8BCF                    mov ecx, edi
:0040F1B7 FF5224                  call [edx+24]
:0040F1BA 51                      push ecx
:0040F1BB 8B4C2418                mov ecx, dword ptr [esp+18]
:0040F1BF 8BC4                    mov eax, esp
:0040F1C1 8D542430                lea edx, dword ptr [esp+30]
:0040F1C5 8B09                    mov ecx, dword ptr [ecx]
:0040F1C7 52                      push edx
:0040F1C8 8908                    mov dword ptr [eax], ecx
:0040F1CA 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040F1CE E85D600000              call 00415230

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F112(U)
|
:0040F1D3 8B44241C                mov eax, dword ptr [esp+1C]
:0040F1D7 83C504                  add ebp, 00000004
:0040F1DA 48                      dec eax
:0040F1DB 8944241C                mov dword ptr [esp+1C], eax
:0040F1DF 0F85DBFEFFFF            jne 0040F0C0

* Possible StringData Ref from Data Obj ->"armorClass"
                                  |
:0040F1E5 A168B37800              mov eax, dword ptr [0078B368]
:0040F1EA 803800                  cmp byte ptr [eax], 00
:0040F1ED 0F8450010000            je 0040F343

* Possible Indirect StringData Ref from Data Obj ->"armorClass"
                                  |
:0040F1F3 B868B37800              mov eax, 0078B368
:0040F1F8 8D8E580A0000            lea ecx, dword ptr [esi+00000A58]
:0040F1FE 8D965B0D0000            lea edx, dword ptr [esi+00000D5B]
:0040F204 894C2428                mov dword ptr [esp+28], ecx
:0040F208 89542424                mov dword ptr [esp+24], edx
:0040F20C BB9CB37800              mov ebx, 0078B39C
:0040F211 8BF8                    mov edi, eax
:0040F213 8DAE86140000            lea ebp, dword ptr [esi+00001486]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F33D(C)
|
:0040F219 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040F21F 8B10                    mov edx, dword ptr [eax]
:0040F221 51                      push ecx
:0040F222 52                      push edx
:0040F223 8D4C2424                lea ecx, dword ptr [esp+24]
:0040F227 E884BE1D00              call 005EB0B0
:0040F22C 8B4C2428                mov ecx, dword ptr [esp+28]
:0040F230 8D44241C                lea eax, dword ptr [esp+1C]
:0040F234 50                      push eax
:0040F235 C64424601F              mov [esp+60], 1F
:0040F23A E801731400              call 00556540
:0040F23F 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040F243 8BF0                    mov esi, eax
:0040F245 51                      push ecx
:0040F246 8B4C2428                mov ecx, dword ptr [esp+28]
:0040F24A E8F1721400              call 00556540
:0040F24F 8B1500997A00            mov edx, dword ptr [007A9900]
:0040F255 8B0D04997A00            mov ecx, dword ptr [007A9904]
:0040F25B 8954243C                mov dword ptr [esp+3C], edx
:0040F25F 8B1508997A00            mov edx, dword ptr [007A9908]
:0040F265 3BF0                    cmp esi, eax
:0040F267 894C2440                mov dword ptr [esp+40], ecx
:0040F26B 89542444                mov dword ptr [esp+44], edx
:0040F26F 7E1E                    jle 0040F28F
:0040F271 8B0DD0987A00            mov ecx, dword ptr [007A98D0]
:0040F277 8B15D4987A00            mov edx, dword ptr [007A98D4]
:0040F27D 894C243C                mov dword ptr [esp+3C], ecx
:0040F281 8B0DD8987A00            mov ecx, dword ptr [007A98D8]
:0040F287 89542440                mov dword ptr [esp+40], edx
:0040F28B 894C2444                mov dword ptr [esp+44], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F26F(C)
|
:0040F28F 7D1D                    jge 0040F2AE
:0040F291 8B1590987A00            mov edx, dword ptr [007A9890]
:0040F297 A194987A00              mov eax, dword ptr [007A9894]
:0040F29C 8B0D98987A00            mov ecx, dword ptr [007A9898]
:0040F2A2 8954243C                mov dword ptr [esp+3C], edx
:0040F2A6 89442440                mov dword ptr [esp+40], eax
:0040F2AA 894C2444                mov dword ptr [esp+44], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F28F(C)
|
:0040F2AE 8B442440                mov eax, dword ptr [esp+40]
:0040F2B2 8B54243C                mov edx, dword ptr [esp+3C]
:0040F2B6 8B4C2444                mov ecx, dword ptr [esp+44]
:0040F2BA 8944244C                mov dword ptr [esp+4C], eax
:0040F2BE 89442434                mov dword ptr [esp+34], eax
:0040F2C2 8A03                    mov al, byte ptr [ebx]
:0040F2C4 84C0                    test al, al
:0040F2C6 89542448                mov dword ptr [esp+48], edx
:0040F2CA 894C2450                mov dword ptr [esp+50], ecx
:0040F2CE 89542430                mov dword ptr [esp+30], edx
:0040F2D2 894C2438                mov dword ptr [esp+38], ecx
:0040F2D6 56                      push esi
:0040F2D7 740C                    je 0040F2E5
:0040F2D9 8D54241C                lea edx, dword ptr [esp+1C]

* Possible StringData Ref from Data Obj ->"%d%%"
                                  |
:0040F2DD 6878B27800              push 0078B278
:0040F2E2 52                      push edx
:0040F2E3 EB0A                    jmp 0040F2EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F2D7(C)
|
:0040F2E5 8D44241C                lea eax, dword ptr [esp+1C]

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:0040F2E9 6888B77800              push 0078B788
:0040F2EE 50                      push eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F2E3(U)
|
:0040F2EF E8DCC91D00              call 005EBCD0
:0040F2F4 83C40C                  add esp, 0000000C
:0040F2F7 8D4C2418                lea ecx, dword ptr [esp+18]
:0040F2FB 51                      push ecx
:0040F2FC 8B4D00                  mov ecx, dword ptr [ebp+00]
:0040F2FF E82CFC1700              call 0058EF30
:0040F304 8B4D00                  mov ecx, dword ptr [ebp+00]
:0040F307 8D542430                lea edx, dword ptr [esp+30]
:0040F30B 52                      push edx
:0040F30C E8BFFB1700              call 0058EED0
:0040F311 8B44241C                mov eax, dword ptr [esp+1C]
:0040F315 C644245C0C              mov [esp+5C], 0C
:0040F31A 83C0F4                  add eax, FFFFFFF4
:0040F31D 8B08                    mov ecx, dword ptr [eax]
:0040F31F 49                      dec ecx
:0040F320 8908                    mov dword ptr [eax], ecx
:0040F322 7509                    jne 0040F32D
:0040F324 50                      push eax
:0040F325 E8D61F1D00              call 005E1300
:0040F32A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F322(C)
|
:0040F32D 8B4F04                  mov ecx, dword ptr [edi+04]
:0040F330 83C704                  add edi, 00000004
:0040F333 43                      inc ebx
:0040F334 83C504                  add ebp, 00000004
:0040F337 8A11                    mov dl, byte ptr [ecx]
:0040F339 8BC7                    mov eax, edi
:0040F33B 84D2                    test dl, dl
:0040F33D 0F85D6FEFFFF            jne 0040F219

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F1ED(C)
|
:0040F343 8B442414                mov eax, dword ptr [esp+14]
:0040F347 C644245C20              mov [esp+5C], 20
:0040F34C 8B30                    mov esi, dword ptr [eax]
:0040F34E 3BF0                    cmp esi, eax
:0040F350 7434                    je 0040F386

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F384(C)
|
:0040F352 8BFE                    mov edi, esi
:0040F354 8B36                    mov esi, dword ptr [esi]
:0040F356 8B4708                  mov eax, dword ptr [edi+08]
:0040F359 83E80C                  sub eax, 0000000C
:0040F35C 8B08                    mov ecx, dword ptr [eax]
:0040F35E 49                      dec ecx
:0040F35F 8908                    mov dword ptr [eax], ecx
:0040F361 7509                    jne 0040F36C
:0040F363 50                      push eax
:0040F364 E8971F1D00              call 005E1300
:0040F369 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F361(C)
|
:0040F36C 85FF                    test edi, edi
:0040F36E 740E                    je 0040F37E
:0040F370 8B1500987A00            mov edx, dword ptr [007A9800]
:0040F376 8917                    mov dword ptr [edi], edx
:0040F378 893D00987A00            mov dword ptr [007A9800], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F36E(C)
|
:0040F37E 8B442414                mov eax, dword ptr [esp+14]
:0040F382 3BF0                    cmp esi, eax
:0040F384 75CC                    jne 0040F352

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F350(C)
|
:0040F386 8900                    mov dword ptr [eax], eax
:0040F388 8B442414                mov eax, dword ptr [esp+14]
:0040F38C 894004                  mov dword ptr [eax+04], eax
:0040F38F 8B442414                mov eax, dword ptr [esp+14]
:0040F393 85C0                    test eax, eax
:0040F395 740D                    je 0040F3A4
:0040F397 8B0D00987A00            mov ecx, dword ptr [007A9800]
:0040F39D 8908                    mov dword ptr [eax], ecx
:0040F39F A300987A00              mov dword ptr [007A9800], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F395(C)
|
:0040F3A4 8B542418                mov edx, dword ptr [esp+18]
:0040F3A8 C744245CFFFFFFFF        mov [esp+5C], FFFFFFFF
:0040F3B0 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040F3B3 8D42F4                  lea eax, dword ptr [edx-0C]
:0040F3B6 49                      dec ecx
:0040F3B7 8908                    mov dword ptr [eax], ecx
:0040F3B9 7509                    jne 0040F3C4
:0040F3BB 50                      push eax
:0040F3BC E83F1F1D00              call 005E1300
:0040F3C1 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F3B9(C)
|
:0040F3C4 8B4C2454                mov ecx, dword ptr [esp+54]
:0040F3C8 5F                      pop edi
:0040F3C9 5E                      pop esi
:0040F3CA 5D                      pop ebp
:0040F3CB 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040F3D2 5B                      pop ebx
:0040F3D3 83C450                  add esp, 00000050
:0040F3D6 C3                      ret


:0040F3D7 90                      nop
:0040F3D8 90                      nop
:0040F3D9 90                      nop
:0040F3DA 90                      nop
:0040F3DB 90                      nop
:0040F3DC 90                      nop
:0040F3DD 90                      nop
:0040F3DE 90                      nop
:0040F3DF 90                      nop

* Referenced by a CALL at Address:
|:0040A33E   
|
:0040F3E0 6AFF                    push FFFFFFFF
:0040F3E2 6875076D00              push 006D0775
:0040F3E7 64A100000000            mov eax, dword ptr fs:[00000000]
:0040F3ED 50                      push eax
:0040F3EE 64892500000000          mov dword ptr fs:[00000000], esp
:0040F3F5 81EC8C000000            sub esp, 0000008C
:0040F3FB 53                      push ebx
:0040F3FC 55                      push ebp
:0040F3FD 56                      push esi
:0040F3FE 8BF1                    mov esi, ecx
:0040F400 57                      push edi
:0040F401 33DB                    xor ebx, ebx
:0040F403 8B869A130000            mov eax, dword ptr [esi+0000139A]
:0040F409 683F010000              push 0000013F
:0040F40E 895C2414                mov dword ptr [esp+14], ebx
:0040F412 89442418                mov dword ptr [esp+18], eax
:0040F416 C784248800000044000000  mov dword ptr [esp+00000088], 00000044
:0040F421 E85A1E1D00              call 005E1280
:0040F426 8BF8                    mov edi, eax
:0040F428 83C404                  add esp, 00000004
:0040F42B 897C2418                mov dword ptr [esp+18], edi
:0040F42F 3BFB                    cmp edi, ebx
:0040F431 899C24A4000000          mov dword ptr [esp+000000A4], ebx
:0040F438 0F84E9000000            je 0040F527
:0040F43E 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040F444 51                      push ecx

* Possible StringData Ref from Data Obj ->"name_skills"
                                  |
:0040F445 68DCB87800              push 0078B8DC
:0040F44A 8D4C242C                lea ecx, dword ptr [esp+2C]
:0040F44E E85DBC1D00              call 005EB0B0
:0040F453 8BAE9A130000            mov ebp, dword ptr [esi+0000139A]
:0040F459 8D542424                lea edx, dword ptr [esp+24]
:0040F45D 8D442420                lea eax, dword ptr [esp+20]
:0040F461 52                      push edx
:0040F462 50                      push eax
:0040F463 B9D7AF7A00              mov ecx, 007AAFD7
:0040F468 C68424AC00000001        mov byte ptr [esp+000000AC], 01
:0040F470 83C519                  add ebp, 00000019
:0040F473 C744241803000000        mov [esp+18], 00000003
:0040F47B E820A3FFFF              call 004097A0
:0040F480 8944241C                mov dword ptr [esp+1C], eax
:0040F484 33C0                    xor eax, eax
:0040F486 8D4C2450                lea ecx, dword ptr [esp+50]
:0040F48A 50                      push eax
:0040F48B B8E0AF4000              mov eax, 0040AFE0
:0040F490 50                      push eax
:0040F491 BB07000000              mov ebx, 00000007
:0040F496 51                      push ecx
:0040F497 8BCE                    mov ecx, esi
:0040F499 C78424B000000002000000  mov dword ptr [esp+000000B0], 00000002
:0040F4A4 895C241C                mov dword ptr [esp+1C], ebx
:0040F4A8 E893490000              call 00413E40
:0040F4AD 8B54241C                mov edx, dword ptr [esp+1C]
:0040F4B1 6A00                    push 00000000
:0040F4B3 52                      push edx
:0040F4B4 50                      push eax
:0040F4B5 8D8D80000000            lea ecx, dword ptr [ebp+00000080]
:0040F4BB 8D442440                lea eax, dword ptr [esp+40]
:0040F4BF 894C2448                mov dword ptr [esp+48], ecx
:0040F4C3 50                      push eax
:0040F4C4 56                      push esi
:0040F4C5 8BCF                    mov ecx, edi
:0040F4C7 C78424B800000003000000  mov dword ptr [esp+000000B8], 00000003
:0040F4D2 896C2448                mov dword ptr [esp+48], ebp
:0040F4D6 C744244C24000000        mov [esp+4C], 00000024
:0040F4DE C74424543F000000        mov [esp+54], 0000003F
:0040F4E6 E8E5F71700              call 0058ECD0
:0040F4EB 8B8FD4000000            mov ecx, dword ptr [edi+000000D4]
:0040F4F1 C78424A400000004000000  mov dword ptr [esp+000000A4], 00000004
:0040F4FC 83C158                  add ecx, 00000058
:0040F4FF C7076C937000            mov dword ptr [edi], 0070936C
:0040F505 51                      push ecx
:0040F506 8BCF                    mov ecx, edi
:0040F508 C7470864937000          mov [edi+08], 00709364
:0040F50F E80C951F00              call 00608A20
:0040F514 8B97D4000000            mov edx, dword ptr [edi+000000D4]
:0040F51A 8BCF                    mov ecx, edi
:0040F51C 8B422C                  mov eax, dword ptr [edx+2C]
:0040F51F 50                      push eax
:0040F520 E85B951F00              call 00608A80
:0040F525 EB02                    jmp 0040F529

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F438(C)
|
:0040F527 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F525(U)
|
:0040F529 F6C304                  test bl, 04
:0040F52C C78424A400000006000000  mov dword ptr [esp+000000A4], 00000006
:0040F537 7419                    je 0040F552
:0040F539 8B4C2450                mov ecx, dword ptr [esp+50]
:0040F53D 83E3FB                  and ebx, FFFFFFFB
:0040F540 85C9                    test ecx, ecx
:0040F542 895C2410                mov dword ptr [esp+10], ebx
:0040F546 740A                    je 0040F552
:0040F548 8D542450                lea edx, dword ptr [esp+50]
:0040F54C 52                      push edx
:0040F54D E8CEED1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F537(C), :0040F546(C)
|
:0040F552 F6C302                  test bl, 02
:0040F555 C78424A400000005000000  mov dword ptr [esp+000000A4], 00000005
:0040F560 741E                    je 0040F580
:0040F562 8B442420                mov eax, dword ptr [esp+20]
:0040F566 83E3FD                  and ebx, FFFFFFFD
:0040F569 83C0F4                  add eax, FFFFFFF4
:0040F56C 895C2410                mov dword ptr [esp+10], ebx
:0040F570 8B08                    mov ecx, dword ptr [eax]
:0040F572 49                      dec ecx
:0040F573 8908                    mov dword ptr [eax], ecx
:0040F575 7509                    jne 0040F580
:0040F577 50                      push eax
:0040F578 E8831D1D00              call 005E1300
:0040F57D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F560(C), :0040F575(C)
|
:0040F580 83CDFF                  or ebp, FFFFFFFF
:0040F583 F6C301                  test bl, 01
:0040F586 89AC24A4000000          mov dword ptr [esp+000000A4], ebp
:0040F58D 741B                    je 0040F5AA
:0040F58F 8B4C2424                mov ecx, dword ptr [esp+24]
:0040F593 83E3FE                  and ebx, FFFFFFFE
:0040F596 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040F599 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040F59C 49                      dec ecx
:0040F59D 8908                    mov dword ptr [eax], ecx
:0040F59F 7509                    jne 0040F5AA
:0040F5A1 50                      push eax
:0040F5A2 E8591D1D00              call 005E1300
:0040F5A7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F58D(C), :0040F59F(C)
|
:0040F5AA 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040F5B0 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040F5B4 52                      push edx

* Possible StringData Ref from Data Obj ->"skills"
                                  |
:0040F5B5 68D4B87800              push 0078B8D4
:0040F5BA E8F1BA1D00              call 005EB0B0
:0040F5BF 50                      push eax
:0040F5C0 8D4F24                  lea ecx, dword ptr [edi+24]
:0040F5C3 C78424A800000008000000  mov dword ptr [esp+000000A8], 00000008
:0040F5CE E84DBD1D00              call 005EB320
:0040F5D3 8B44241C                mov eax, dword ptr [esp+1C]
:0040F5D7 89AC24A4000000          mov dword ptr [esp+000000A4], ebp
:0040F5DE 83C0F4                  add eax, FFFFFFF4
:0040F5E1 8B08                    mov ecx, dword ptr [eax]
:0040F5E3 49                      dec ecx
:0040F5E4 8908                    mov dword ptr [eax], ecx
:0040F5E6 7509                    jne 0040F5F1
:0040F5E8 50                      push eax
:0040F5E9 E8121D1D00              call 005E1300
:0040F5EE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F5E6(C)
|
:0040F5F1 8D8E36150000            lea ecx, dword ptr [esi+00001536]
:0040F5F7 C744242800000000        mov [esp+28], 00000000

* Possible Indirect StringData Ref from Data Obj ->"smallGuns"
                                  |
:0040F5FF C7442424E0667900        mov [esp+24], 007966E0
:0040F607 894C2420                mov dword ptr [esp+20], ecx
:0040F60B 8BF9                    mov edi, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F979(C)
|
:0040F60D 8B442424                mov eax, dword ptr [esp+24]
:0040F611 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040F617 52                      push edx
:0040F618 8B08                    mov ecx, dword ptr [eax]
:0040F61A 51                      push ecx
:0040F61B 8D4C244C                lea ecx, dword ptr [esp+4C]
:0040F61F E88CBA1D00              call 005EB0B0
:0040F624 681C010000              push 0000011C
:0040F629 C78424A800000009000000  mov dword ptr [esp+000000A8], 00000009
:0040F634 E8471C1D00              call 005E1280
:0040F639 8BE8                    mov ebp, eax
:0040F63B 83C404                  add esp, 00000004
:0040F63E 896C2448                mov dword ptr [esp+48], ebp
:0040F642 85ED                    test ebp, ebp
:0040F644 C68424A40000000A        mov byte ptr [esp+000000A4], 0A
:0040F64C 0F84A6000000            je 0040F6F8
:0040F652 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040F658 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040F65C 52                      push edx

* Possible StringData Ref from Data Obj ->"gui/btn/tag_dn"
                                  |
:0040F65D 68C4B87800              push 0078B8C4
:0040F662 E849BA1D00              call 005EB0B0
:0040F667 83CB08                  or ebx, 00000008
:0040F66A 895C2410                mov dword ptr [esp+10], ebx
:0040F66E A128FE7200              mov eax, dword ptr [0072FE28]
:0040F673 8D4C242C                lea ecx, dword ptr [esp+2C]
:0040F677 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/tag_up"
                                  |
:0040F678 68B4B87800              push 0078B8B4
:0040F67D C68424AC0000000B        mov byte ptr [esp+000000AC], 0B
:0040F685 E826BA1D00              call 005EB0B0
:0040F68A 83CB10                  or ebx, 00000010
:0040F68D 8B542414                mov edx, dword ptr [esp+14]
:0040F691 33C9                    xor ecx, ecx
:0040F693 B8E0094100              mov eax, 004109E0
:0040F698 51                      push ecx
:0040F699 50                      push eax
:0040F69A 8D842490000000          lea eax, dword ptr [esp+00000090]
:0040F6A1 83CB20                  or ebx, 00000020
:0040F6A4 50                      push eax
:0040F6A5 8BCE                    mov ecx, esi
:0040F6A7 C78424B00000000C000000  mov dword ptr [esp+000000B0], 0000000C
:0040F6B2 8D7A08                  lea edi, dword ptr [edx+08]
:0040F6B5 895C241C                mov dword ptr [esp+1C], ebx
:0040F6B9 E882470000              call 00413E40
:0040F6BE 8B8C2484000000          mov ecx, dword ptr [esp+00000084]
:0040F6C5 8D54241C                lea edx, dword ptr [esp+1C]
:0040F6C9 894C2438                mov dword ptr [esp+38], ecx
:0040F6CD 6A00                    push 00000000
:0040F6CF 8D4C2430                lea ecx, dword ptr [esp+30]
:0040F6D3 52                      push edx
:0040F6D4 51                      push ecx
:0040F6D5 8D542440                lea edx, dword ptr [esp+40]
:0040F6D9 50                      push eax
:0040F6DA 52                      push edx
:0040F6DB 56                      push esi
:0040F6DC 8BCD                    mov ecx, ebp
:0040F6DE C78424BC0000000D000000  mov dword ptr [esp+000000BC], 0000000D
:0040F6E9 897C244C                mov dword ptr [esp+4C], edi
:0040F6ED E8FEA71F00              call 00609EF0
:0040F6F2 8B7C2420                mov edi, dword ptr [esp+20]
:0040F6F6 EB02                    jmp 0040F6FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F64C(C)
|
:0040F6F8 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F6F6(U)
|
:0040F6FA F6C320                  test bl, 20
:0040F6FD 8947B8                  mov dword ptr [edi-48], eax
:0040F700 C78424A40000000F000000  mov dword ptr [esp+000000A4], 0000000F
:0040F70B 741F                    je 0040F72C
:0040F70D 8B8C2488000000          mov ecx, dword ptr [esp+00000088]
:0040F714 83E3DF                  and ebx, FFFFFFDF
:0040F717 85C9                    test ecx, ecx
:0040F719 895C2410                mov dword ptr [esp+10], ebx
:0040F71D 740D                    je 0040F72C
:0040F71F 8D842488000000          lea eax, dword ptr [esp+00000088]
:0040F726 50                      push eax
:0040F727 E8F4EB1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F70B(C), :0040F71D(C)
|
:0040F72C F6C310                  test bl, 10
:0040F72F C78424A40000000E000000  mov dword ptr [esp+000000A4], 0000000E
:0040F73A 741F                    je 0040F75B
:0040F73C 8B4C242C                mov ecx, dword ptr [esp+2C]
:0040F740 83E3EF                  and ebx, FFFFFFEF
:0040F743 895C2410                mov dword ptr [esp+10], ebx
:0040F747 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040F74A 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040F74D 49                      dec ecx
:0040F74E 8908                    mov dword ptr [eax], ecx
:0040F750 7509                    jne 0040F75B
:0040F752 50                      push eax
:0040F753 E8A81B1D00              call 005E1300
:0040F758 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F73A(C), :0040F750(C)
|
:0040F75B F6C308                  test bl, 08
:0040F75E C78424A400000009000000  mov dword ptr [esp+000000A4], 00000009
:0040F769 741B                    je 0040F786
:0040F76B 8B54241C                mov edx, dword ptr [esp+1C]
:0040F76F 83E3F7                  and ebx, FFFFFFF7
:0040F772 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040F775 8D42F4                  lea eax, dword ptr [edx-0C]
:0040F778 49                      dec ecx
:0040F779 8908                    mov dword ptr [eax], ecx
:0040F77B 7509                    jne 0040F786
:0040F77D 50                      push eax
:0040F77E E87D1B1D00              call 005E1300
:0040F783 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F769(C), :0040F77B(C)
|
:0040F786 8B4FB8                  mov ecx, dword ptr [edi-48]
:0040F789 8D442444                lea eax, dword ptr [esp+44]
:0040F78D 83C124                  add ecx, 00000024
:0040F790 50                      push eax
:0040F791 E88ABB1D00              call 005EB320
:0040F796 8A86F4000000            mov al, byte ptr [esi+000000F4]
:0040F79C 84C0                    test al, al
:0040F79E 7508                    jne 0040F7A8
:0040F7A0 8B4FB8                  mov ecx, dword ptr [edi-48]
:0040F7A3 8B11                    mov edx, dword ptr [ecx]
:0040F7A5 FF5220                  call [edx+20]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F79E(C)
|
:0040F7A8 683F010000              push 0000013F
:0040F7AD E8CE1A1D00              call 005E1280
:0040F7B2 83C404                  add esp, 00000004
:0040F7B5 89442448                mov dword ptr [esp+48], eax
:0040F7B9 85C0                    test eax, eax
:0040F7BB C68424A400000011        mov byte ptr [esp+000000A4], 11
:0040F7C3 0F84B3000000            je 0040F87C
:0040F7C9 8B442414                mov eax, dword ptr [esp+14]
:0040F7CD 8D4C2444                lea ecx, dword ptr [esp+44]
:0040F7D1 51                      push ecx
:0040F7D2 8D54241C                lea edx, dword ptr [esp+1C]

* Possible StringData Ref from Data Obj ->"name_"
                                  |
:0040F7D6 68C8B57800              push 0078B5C8
:0040F7DB 52                      push edx
:0040F7DC BD500B4100              mov ebp, 00410B50
:0040F7E1 8D7828                  lea edi, dword ptr [eax+28]
:0040F7E4 83CB40                  or ebx, 00000040
:0040F7E7 E8C44D0000              call 004145B0
:0040F7EC 83C40C                  add esp, 0000000C
:0040F7EF 50                      push eax
:0040F7F0 8D442434                lea eax, dword ptr [esp+34]
:0040F7F4 80CB80                  or bl, 80
:0040F7F7 50                      push eax
:0040F7F8 B9D7AF7A00              mov ecx, 007AAFD7
:0040F7FD C68424AC00000012        mov byte ptr [esp+000000AC], 12
:0040F805 895C2418                mov dword ptr [esp+18], ebx
:0040F809 E8929FFFFF              call 004097A0
:0040F80E 89442478                mov dword ptr [esp+78], eax
:0040F812 33C0                    xor eax, eax
:0040F814 8D4C2464                lea ecx, dword ptr [esp+64]
:0040F818 50                      push eax
:0040F819 55                      push ebp
:0040F81A 80CF01                  or bh, 01
:0040F81D 51                      push ecx
:0040F81E 8BCE                    mov ecx, esi
:0040F820 C78424B000000013000000  mov dword ptr [esp+000000B0], 00000013
:0040F82B 895C241C                mov dword ptr [esp+1C], ebx
:0040F82F E80C460000              call 00413E40
:0040F834 8B8C2484000000          mov ecx, dword ptr [esp+00000084]
:0040F83B 6A00                    push 00000000
:0040F83D 8DAFEB000000            lea ebp, dword ptr [edi+000000EB]
:0040F843 894C2458                mov dword ptr [esp+58], ecx
:0040F847 8D510A                  lea edx, dword ptr [ecx+0A]
:0040F84A 8B4C244C                mov ecx, dword ptr [esp+4C]
:0040F84E 89542460                mov dword ptr [esp+60], edx
:0040F852 8B54247C                mov edx, dword ptr [esp+7C]
:0040F856 52                      push edx
:0040F857 50                      push eax
:0040F858 8D44245C                lea eax, dword ptr [esp+5C]
:0040F85C C78424B000000014000000  mov dword ptr [esp+000000B0], 00000014
:0040F867 50                      push eax
:0040F868 56                      push esi
:0040F869 897C2464                mov dword ptr [esp+64], edi
:0040F86D 896C246C                mov dword ptr [esp+6C], ebp
:0040F871 E85AF41700              call 0058ECD0
:0040F876 8B7C2420                mov edi, dword ptr [esp+20]
:0040F87A EB02                    jmp 0040F87E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F7C3(C)
|
:0040F87C 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F87A(U)
|
:0040F87E F6C701                  test bh, 01
:0040F881 8907                    mov dword ptr [edi], eax
:0040F883 C78424A400000016000000  mov dword ptr [esp+000000A4], 00000016
:0040F88E 7419                    je 0040F8A9
:0040F890 8B4C2464                mov ecx, dword ptr [esp+64]
:0040F894 80E7FE                  and bh, FE
:0040F897 85C9                    test ecx, ecx
:0040F899 895C2410                mov dword ptr [esp+10], ebx
:0040F89D 740A                    je 0040F8A9
:0040F89F 8D542464                lea edx, dword ptr [esp+64]
:0040F8A3 52                      push edx
:0040F8A4 E877EA1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F88E(C), :0040F89D(C)
|
:0040F8A9 F6C380                  test bl, 80
:0040F8AC C78424A400000015000000  mov dword ptr [esp+000000A4], 00000015
:0040F8B7 741E                    je 0040F8D7
:0040F8B9 8B442430                mov eax, dword ptr [esp+30]
:0040F8BD 80E37F                  and bl, 7F
:0040F8C0 83C0F4                  add eax, FFFFFFF4
:0040F8C3 895C2410                mov dword ptr [esp+10], ebx
:0040F8C7 8B08                    mov ecx, dword ptr [eax]
:0040F8C9 49                      dec ecx
:0040F8CA 8908                    mov dword ptr [eax], ecx
:0040F8CC 7509                    jne 0040F8D7
:0040F8CE 50                      push eax
:0040F8CF E82C1A1D00              call 005E1300
:0040F8D4 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F8B7(C), :0040F8CC(C)
|
:0040F8D7 F6C340                  test bl, 40
:0040F8DA C78424A400000009000000  mov dword ptr [esp+000000A4], 00000009
:0040F8E5 741B                    je 0040F902
:0040F8E7 8B4C2418                mov ecx, dword ptr [esp+18]
:0040F8EB 83E3BF                  and ebx, FFFFFFBF
:0040F8EE 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040F8F1 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040F8F4 49                      dec ecx
:0040F8F5 8908                    mov dword ptr [eax], ecx
:0040F8F7 7509                    jne 0040F902
:0040F8F9 50                      push eax
:0040F8FA E8011A1D00              call 005E1300
:0040F8FF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F8E5(C), :0040F8F7(C)
|
:0040F902 8B0F                    mov ecx, dword ptr [edi]
:0040F904 8D542444                lea edx, dword ptr [esp+44]
:0040F908 83C124                  add ecx, 00000024
:0040F90B 52                      push edx
:0040F90C E80FBA1D00              call 005EB320
:0040F911 8B07                    mov eax, dword ptr [edi]
:0040F913 8B4C2428                mov ecx, dword ptr [esp+28]
:0040F917 C78424A4000000FFFFFFFF  mov dword ptr [esp+000000A4], FFFFFFFF
:0040F922 894820                  mov dword ptr [eax+20], ecx
:0040F925 8B17                    mov edx, dword ptr [edi]
:0040F927 C7820A010000C8000000    mov dword ptr [ebx+0000010A], 000000C8
:0040F931 8B442444                mov eax, dword ptr [esp+44]
:0040F935 8B942484000000          mov edx, dword ptr [esp+00000084]
:0040F93C 83C0F4                  add eax, FFFFFFF4
:0040F93F 83C20A                  add edx, 0000000A
:0040F942 8B08                    mov ecx, dword ptr [eax]
:0040F944 89942484000000          mov dword ptr [esp+00000084], edx
:0040F94B 49                      dec ecx
:0040F94C 8908                    mov dword ptr [eax], ecx
:0040F94E 7509                    jne 0040F959
:0040F950 50                      push eax
:0040F951 E8AA191D00              call 005E1300
:0040F956 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F94E(C)
|
:0040F959 8B442428                mov eax, dword ptr [esp+28]
:0040F95D 83C704                  add edi, 00000004
:0040F960 40                      inc eax
:0040F961 897C2420                mov dword ptr [esp+20], edi
:0040F965 89442428                mov dword ptr [esp+28], eax
:0040F969 8B442424                mov eax, dword ptr [esp+24]
:0040F96D 83C004                  add eax, 00000004
:0040F970 3D28677900              cmp eax, 00796728
:0040F975 89442424                mov dword ptr [esp+24], eax
:0040F979 0F8C8EFCFFFF            jl 0040F60D
:0040F97F 8A86F4000000            mov al, byte ptr [esi+000000F4]
:0040F985 683F010000              push 0000013F
:0040F98A 84C0                    test al, al
:0040F98C 0F84CF020000            je 0040FC61
:0040F992 E8E9181D00              call 005E1280
:0040F997 8BF8                    mov edi, eax
:0040F999 83C404                  add esp, 00000004
:0040F99C 897C2448                mov dword ptr [esp+48], edi
:0040F9A0 85FF                    test edi, edi
:0040F9A2 C78424A400000018000000  mov dword ptr [esp+000000A4], 00000018
:0040F9AD 0F84F0000000            je 0040FAA3
:0040F9B3 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0040F9B9 51                      push ecx

* Possible StringData Ref from Data Obj ->"short_tagSkills"
                                  |
:0040F9BA 68A4B87800              push 0078B8A4
:0040F9BF 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040F9C3 E8E8B61D00              call 005EB0B0
:0040F9C8 80CF02                  or bh, 02
:0040F9CB 8BAE9A130000            mov ebp, dword ptr [esi+0000139A]
:0040F9D1 8D542414                lea edx, dword ptr [esp+14]
:0040F9D5 8D442430                lea eax, dword ptr [esp+30]
:0040F9D9 80CF04                  or bh, 04
:0040F9DC 52                      push edx
:0040F9DD 50                      push eax
:0040F9DE B9D7AF7A00              mov ecx, 007AAFD7
:0040F9E3 C68424AC00000019        mov byte ptr [esp+000000AC], 19
:0040F9EB C744243CE0AF4000        mov [esp+3C], 0040AFE0
:0040F9F3 81C5E6000000            add ebp, 000000E6
:0040F9F9 895C2418                mov dword ptr [esp+18], ebx
:0040F9FD E89E9DFFFF              call 004097A0
:0040FA02 89442418                mov dword ptr [esp+18], eax
:0040FA06 8B4C2434                mov ecx, dword ptr [esp+34]
:0040FA0A 33C0                    xor eax, eax
:0040FA0C 50                      push eax
:0040FA0D 8D542468                lea edx, dword ptr [esp+68]
:0040FA11 80CF08                  or bh, 08
:0040FA14 51                      push ecx
:0040FA15 52                      push edx
:0040FA16 8BCE                    mov ecx, esi
:0040FA18 C78424B00000001A000000  mov dword ptr [esp+000000B0], 0000001A
:0040FA23 895C241C                mov dword ptr [esp+1C], ebx
:0040FA27 E814440000              call 00413E40
:0040FA2C 8D4D33                  lea ecx, dword ptr [ebp+33]
:0040FA2F 6A00                    push 00000000
:0040FA31 894C245C                mov dword ptr [esp+5C], ecx
:0040FA35 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040FA39 51                      push ecx
:0040FA3A 8D542458                lea edx, dword ptr [esp+58]
:0040FA3E 50                      push eax
:0040FA3F 52                      push edx
:0040FA40 56                      push esi
:0040FA41 8BCF                    mov ecx, edi
:0040FA43 C78424B80000001B000000  mov dword ptr [esp+000000B8], 0000001B
:0040FA4E 896C2464                mov dword ptr [esp+64], ebp
:0040FA52 C744246824000000        mov [esp+68], 00000024
:0040FA5A C74424703F000000        mov [esp+70], 0000003F
:0040FA62 E869F21700              call 0058ECD0
:0040FA67 8B87D4000000            mov eax, dword ptr [edi+000000D4]
:0040FA6D 8BCF                    mov ecx, edi
:0040FA6F 83C058                  add eax, 00000058
:0040FA72 C78424A40000001C000000  mov dword ptr [esp+000000A4], 0000001C
:0040FA7D 50                      push eax
:0040FA7E C7076C937000            mov dword ptr [edi], 0070936C
:0040FA84 C7470864937000          mov [edi+08], 00709364
:0040FA8B E8908F1F00              call 00608A20
:0040FA90 8B8FD4000000            mov ecx, dword ptr [edi+000000D4]
:0040FA96 8B512C                  mov edx, dword ptr [ecx+2C]
:0040FA99 8BCF                    mov ecx, edi
:0040FA9B 52                      push edx
:0040FA9C E8DF8F1F00              call 00608A80
:0040FAA1 EB02                    jmp 0040FAA5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F9AD(C)
|
:0040FAA3 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FAA1(U)
|
:0040FAA5 F6C708                  test bh, 08
:0040FAA8 C78424A40000001E000000  mov dword ptr [esp+000000A4], 0000001E
:0040FAB3 7419                    je 0040FACE
:0040FAB5 8B4C2464                mov ecx, dword ptr [esp+64]
:0040FAB9 80E7F7                  and bh, F7
:0040FABC 85C9                    test ecx, ecx
:0040FABE 895C2410                mov dword ptr [esp+10], ebx
:0040FAC2 740A                    je 0040FACE
:0040FAC4 8D442464                lea eax, dword ptr [esp+64]
:0040FAC8 50                      push eax
:0040FAC9 E852E81E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FAB3(C), :0040FAC2(C)
|
:0040FACE F6C704                  test bh, 04
:0040FAD1 C78424A40000001D000000  mov dword ptr [esp+000000A4], 0000001D
:0040FADC 741F                    je 0040FAFD
:0040FADE 8B4C2430                mov ecx, dword ptr [esp+30]
:0040FAE2 80E7FB                  and bh, FB
:0040FAE5 895C2410                mov dword ptr [esp+10], ebx
:0040FAE9 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040FAEC 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040FAEF 49                      dec ecx
:0040FAF0 8908                    mov dword ptr [eax], ecx
:0040FAF2 7509                    jne 0040FAFD
:0040FAF4 50                      push eax
:0040FAF5 E806181D00              call 005E1300
:0040FAFA 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FADC(C), :0040FAF2(C)
|
:0040FAFD 83CDFF                  or ebp, FFFFFFFF
:0040FB00 F6C702                  test bh, 02
:0040FB03 89AC24A4000000          mov dword ptr [esp+000000A4], ebp
:0040FB0A 741B                    je 0040FB27
:0040FB0C 8B542414                mov edx, dword ptr [esp+14]
:0040FB10 80E7FD                  and bh, FD
:0040FB13 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040FB16 8D42F4                  lea eax, dword ptr [edx-0C]
:0040FB19 49                      dec ecx
:0040FB1A 8908                    mov dword ptr [eax], ecx
:0040FB1C 7509                    jne 0040FB27
:0040FB1E 50                      push eax
:0040FB1F E8DC171D00              call 005E1300
:0040FB24 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FB0A(C), :0040FB1C(C)
|
:0040FB27 A128FE7200              mov eax, dword ptr [0072FE28]
:0040FB2C 8D4C2418                lea ecx, dword ptr [esp+18]
:0040FB30 50                      push eax

* Possible StringData Ref from Data Obj ->"tagSkills"
                                  |
:0040FB31 6898B87800              push 0078B898
:0040FB36 E875B51D00              call 005EB0B0
:0040FB3B 50                      push eax
:0040FB3C 8D4F24                  lea ecx, dword ptr [edi+24]
:0040FB3F C78424A800000020000000  mov dword ptr [esp+000000A8], 00000020
:0040FB4A E8D1B71D00              call 005EB320
:0040FB4F 8B4C2418                mov ecx, dword ptr [esp+18]
:0040FB53 89AC24A4000000          mov dword ptr [esp+000000A4], ebp
:0040FB5A 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040FB5D 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040FB60 49                      dec ecx
:0040FB61 8908                    mov dword ptr [eax], ecx
:0040FB63 7509                    jne 0040FB6E
:0040FB65 50                      push eax
:0040FB66 E895171D00              call 005E1300
:0040FB6B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FB63(C)
|
:0040FB6E 6837010000              push 00000137
:0040FB73 E808171D00              call 005E1280
:0040FB78 8BF8                    mov edi, eax
:0040FB7A 83C404                  add esp, 00000004
:0040FB7D 897C2418                mov dword ptr [esp+18], edi
:0040FB81 85FF                    test edi, edi
:0040FB83 C78424A400000021000000  mov dword ptr [esp+000000A4], 00000021
:0040FB8E 7479                    je 0040FC09
:0040FB90 8B869A130000            mov eax, dword ptr [esi+0000139A]
:0040FB96 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040FB9C 05BF000000              add eax, 000000BF
:0040FBA1 52                      push edx

* Possible StringData Ref from Data Obj ->"gui/font/spin_large"
                                  |
:0040FBA2 684CB77800              push 0078B74C
:0040FBA7 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040FBAB 8944243C                mov dword ptr [esp+3C], eax
:0040FBAF C744244028000000        mov [esp+40], 00000028
:0040FBB7 E8F4B41D00              call 005EB0B0
:0040FBBC 8D442414                lea eax, dword ptr [esp+14]
:0040FBC0 8D4C2434                lea ecx, dword ptr [esp+34]
:0040FBC4 50                      push eax
:0040FBC5 6A02                    push 00000002
:0040FBC7 51                      push ecx
:0040FBC8 56                      push esi
:0040FBC9 8BCF                    mov ecx, edi
:0040FBCB C68424B400000022        mov byte ptr [esp+000000B4], 22
:0040FBD3 E898E91700              call 0058E570
:0040FBD8 8B542414                mov edx, dword ptr [esp+14]
:0040FBDC C68424A400000024        mov byte ptr [esp+000000A4], 24
:0040FBE4 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040FBE7 8D42F4                  lea eax, dword ptr [edx-0C]
:0040FBEA 49                      dec ecx
:0040FBEB 8908                    mov dword ptr [eax], ecx
:0040FBED 7509                    jne 0040FBF8
:0040FBEF 50                      push eax
:0040FBF0 E80B171D00              call 005E1300
:0040FBF5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FBED(C)
|
:0040FBF8 C707F8917000            mov dword ptr [edi], 007091F8
:0040FBFE C74708F0917000          mov [edi+08], 007091F0
:0040FC05 8BC7                    mov eax, edi
:0040FC07 EB02                    jmp 0040FC0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FB8E(C)
|
:0040FC09 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FC07(U)
|
:0040FC0B 89867E150000            mov dword ptr [esi+0000157E], eax
:0040FC11 8D7824                  lea edi, dword ptr [eax+24]
:0040FC14 A128FE7200              mov eax, dword ptr [0072FE28]
:0040FC19 8D4C2418                lea ecx, dword ptr [esp+18]
:0040FC1D 50                      push eax

* Possible StringData Ref from Data Obj ->"tagSkills"
                                  |
:0040FC1E 6898B87800              push 0078B898
:0040FC23 89AC24AC000000          mov dword ptr [esp+000000AC], ebp
:0040FC2A E881B41D00              call 005EB0B0
:0040FC2F 50                      push eax
:0040FC30 8BCF                    mov ecx, edi
:0040FC32 C78424A800000025000000  mov dword ptr [esp+000000A8], 00000025
:0040FC3D E8DEB61D00              call 005EB320
:0040FC42 8B4C2418                mov ecx, dword ptr [esp+18]
:0040FC46 89AC24A4000000          mov dword ptr [esp+000000A4], ebp
:0040FC4D 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040FC50 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040FC53 49                      dec ecx
:0040FC54 8908                    mov dword ptr [eax], ecx
:0040FC56 0F85D4020000            jne 0040FF30
:0040FC5C E9C6020000              jmp 0040FF27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F98C(C)
|
:0040FC61 E81A161D00              call 005E1280
:0040FC66 8BF8                    mov edi, eax
:0040FC68 83C404                  add esp, 00000004
:0040FC6B 897C2448                mov dword ptr [esp+48], edi
:0040FC6F 85FF                    test edi, edi
:0040FC71 C78424A400000026000000  mov dword ptr [esp+000000A4], 00000026
:0040FC7C 0F84F0000000            je 0040FD72
:0040FC82 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040FC88 8D4C2414                lea ecx, dword ptr [esp+14]
:0040FC8C 52                      push edx

* Possible StringData Ref from Data Obj ->"short_skillPoints"
                                  |
:0040FC8D 6884B87800              push 0078B884
:0040FC92 E819B41D00              call 005EB0B0
:0040FC97 80CF10                  or bh, 10
:0040FC9A 8BAE9A130000            mov ebp, dword ptr [esi+0000139A]
:0040FCA0 8D442414                lea eax, dword ptr [esp+14]
:0040FCA4 8D4C2430                lea ecx, dword ptr [esp+30]
:0040FCA8 50                      push eax
:0040FCA9 80CF20                  or bh, 20
:0040FCAC 51                      push ecx
:0040FCAD B9D7AF7A00              mov ecx, 007AAFD7
:0040FCB2 C68424AC00000027        mov byte ptr [esp+000000AC], 27
:0040FCBA C744243CE0AF4000        mov [esp+3C], 0040AFE0
:0040FCC2 81C5E6000000            add ebp, 000000E6
:0040FCC8 895C2418                mov dword ptr [esp+18], ebx
:0040FCCC E8CF9AFFFF              call 004097A0
:0040FCD1 89442418                mov dword ptr [esp+18], eax
:0040FCD5 8B542434                mov edx, dword ptr [esp+34]
:0040FCD9 33C0                    xor eax, eax
:0040FCDB 50                      push eax
:0040FCDC 8D442468                lea eax, dword ptr [esp+68]
:0040FCE0 80CF40                  or bh, 40
:0040FCE3 52                      push edx
:0040FCE4 50                      push eax
:0040FCE5 8BCE                    mov ecx, esi
:0040FCE7 C78424B000000028000000  mov dword ptr [esp+000000B0], 00000028
:0040FCF2 895C241C                mov dword ptr [esp+1C], ebx
:0040FCF6 E845410000              call 00413E40
:0040FCFB 8D4D33                  lea ecx, dword ptr [ebp+33]
:0040FCFE 6A00                    push 00000000
:0040FD00 894C245C                mov dword ptr [esp+5C], ecx
:0040FD04 8B4C241C                mov ecx, dword ptr [esp+1C]
:0040FD08 51                      push ecx
:0040FD09 8D542458                lea edx, dword ptr [esp+58]
:0040FD0D 50                      push eax
:0040FD0E 52                      push edx
:0040FD0F 56                      push esi
:0040FD10 8BCF                    mov ecx, edi
:0040FD12 C78424B800000029000000  mov dword ptr [esp+000000B8], 00000029
:0040FD1D 896C2464                mov dword ptr [esp+64], ebp
:0040FD21 C744246824000000        mov [esp+68], 00000024
:0040FD29 C74424703F000000        mov [esp+70], 0000003F
:0040FD31 E89AEF1700              call 0058ECD0
:0040FD36 8B87D4000000            mov eax, dword ptr [edi+000000D4]
:0040FD3C 8BCF                    mov ecx, edi
:0040FD3E 83C058                  add eax, 00000058
:0040FD41 C78424A40000002A000000  mov dword ptr [esp+000000A4], 0000002A
:0040FD4C 50                      push eax
:0040FD4D C7076C937000            mov dword ptr [edi], 0070936C
:0040FD53 C7470864937000          mov [edi+08], 00709364
:0040FD5A E8C18C1F00              call 00608A20
:0040FD5F 8B8FD4000000            mov ecx, dword ptr [edi+000000D4]
:0040FD65 8B512C                  mov edx, dword ptr [ecx+2C]
:0040FD68 8BCF                    mov ecx, edi
:0040FD6A 52                      push edx
:0040FD6B E8108D1F00              call 00608A80
:0040FD70 EB02                    jmp 0040FD74

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FC7C(C)
|
:0040FD72 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FD70(U)
|
:0040FD74 F6C740                  test bh, 40
:0040FD77 C78424A40000002C000000  mov dword ptr [esp+000000A4], 0000002C
:0040FD82 7419                    je 0040FD9D
:0040FD84 8B4C2464                mov ecx, dword ptr [esp+64]
:0040FD88 80E7BF                  and bh, BF
:0040FD8B 85C9                    test ecx, ecx
:0040FD8D 895C2410                mov dword ptr [esp+10], ebx
:0040FD91 740A                    je 0040FD9D
:0040FD93 8D442464                lea eax, dword ptr [esp+64]
:0040FD97 50                      push eax
:0040FD98 E883E51E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FD82(C), :0040FD91(C)
|
:0040FD9D F6C720                  test bh, 20
:0040FDA0 C78424A40000002B000000  mov dword ptr [esp+000000A4], 0000002B
:0040FDAB 741F                    je 0040FDCC
:0040FDAD 8B4C2430                mov ecx, dword ptr [esp+30]
:0040FDB1 80E7DF                  and bh, DF
:0040FDB4 895C2410                mov dword ptr [esp+10], ebx
:0040FDB8 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040FDBB 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040FDBE 49                      dec ecx
:0040FDBF 8908                    mov dword ptr [eax], ecx
:0040FDC1 7509                    jne 0040FDCC
:0040FDC3 50                      push eax
:0040FDC4 E837151D00              call 005E1300
:0040FDC9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FDAB(C), :0040FDC1(C)
|
:0040FDCC 83CDFF                  or ebp, FFFFFFFF
:0040FDCF F6C710                  test bh, 10
:0040FDD2 89AC24A4000000          mov dword ptr [esp+000000A4], ebp
:0040FDD9 741B                    je 0040FDF6
:0040FDDB 8B542414                mov edx, dword ptr [esp+14]
:0040FDDF 80E7EF                  and bh, EF
:0040FDE2 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040FDE5 8D42F4                  lea eax, dword ptr [edx-0C]
:0040FDE8 49                      dec ecx
:0040FDE9 8908                    mov dword ptr [eax], ecx
:0040FDEB 7509                    jne 0040FDF6
:0040FDED 50                      push eax
:0040FDEE E80D151D00              call 005E1300
:0040FDF3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FDD9(C), :0040FDEB(C)
|
:0040FDF6 A128FE7200              mov eax, dword ptr [0072FE28]
:0040FDFB 8D4C2418                lea ecx, dword ptr [esp+18]
:0040FDFF 50                      push eax

* Possible StringData Ref from Data Obj ->"skillPoints"
                                  |
:0040FE00 6878B87800              push 0078B878
:0040FE05 E8A6B21D00              call 005EB0B0
:0040FE0A 50                      push eax
:0040FE0B 8D4F24                  lea ecx, dword ptr [edi+24]
:0040FE0E C78424A80000002E000000  mov dword ptr [esp+000000A8], 0000002E
:0040FE19 E802B51D00              call 005EB320
:0040FE1E 8B4C2418                mov ecx, dword ptr [esp+18]
:0040FE22 89AC24A4000000          mov dword ptr [esp+000000A4], ebp
:0040FE29 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040FE2C 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040FE2F 49                      dec ecx
:0040FE30 8908                    mov dword ptr [eax], ecx
:0040FE32 7509                    jne 0040FE3D
:0040FE34 50                      push eax
:0040FE35 E8C6141D00              call 005E1300
:0040FE3A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FE32(C)
|
:0040FE3D 6837010000              push 00000137
:0040FE42 E839141D00              call 005E1280
:0040FE47 8BF8                    mov edi, eax
:0040FE49 83C404                  add esp, 00000004
:0040FE4C 897C2418                mov dword ptr [esp+18], edi
:0040FE50 85FF                    test edi, edi
:0040FE52 C78424A40000002F000000  mov dword ptr [esp+000000A4], 0000002F
:0040FE5D 7479                    je 0040FED8
:0040FE5F 8B869A130000            mov eax, dword ptr [esi+0000139A]
:0040FE65 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040FE6B 05BF000000              add eax, 000000BF
:0040FE70 52                      push edx

* Possible StringData Ref from Data Obj ->"gui/font/spin_large"
                                  |
:0040FE71 684CB77800              push 0078B74C
:0040FE76 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040FE7A 8944243C                mov dword ptr [esp+3C], eax
:0040FE7E C744244028000000        mov [esp+40], 00000028
:0040FE86 E825B21D00              call 005EB0B0
:0040FE8B 8D442414                lea eax, dword ptr [esp+14]
:0040FE8F 8D4C2434                lea ecx, dword ptr [esp+34]
:0040FE93 50                      push eax
:0040FE94 6A02                    push 00000002
:0040FE96 51                      push ecx
:0040FE97 56                      push esi
:0040FE98 8BCF                    mov ecx, edi
:0040FE9A C68424B400000030        mov byte ptr [esp+000000B4], 30
:0040FEA2 E8C9E61700              call 0058E570
:0040FEA7 8B542414                mov edx, dword ptr [esp+14]
:0040FEAB C68424A400000032        mov byte ptr [esp+000000A4], 32
:0040FEB3 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0040FEB6 8D42F4                  lea eax, dword ptr [edx-0C]
:0040FEB9 49                      dec ecx
:0040FEBA 8908                    mov dword ptr [eax], ecx
:0040FEBC 7509                    jne 0040FEC7
:0040FEBE 50                      push eax
:0040FEBF E83C141D00              call 005E1300
:0040FEC4 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FEBC(C)
|
:0040FEC7 C707F8917000            mov dword ptr [edi], 007091F8
:0040FECD C74708F0917000          mov [edi+08], 007091F0
:0040FED4 8BC7                    mov eax, edi
:0040FED6 EB02                    jmp 0040FEDA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FE5D(C)
|
:0040FED8 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FED6(U)
|
:0040FEDA 8986B6160000            mov dword ptr [esi+000016B6], eax
:0040FEE0 8D7824                  lea edi, dword ptr [eax+24]
:0040FEE3 A128FE7200              mov eax, dword ptr [0072FE28]
:0040FEE8 8D4C2418                lea ecx, dword ptr [esp+18]
:0040FEEC 50                      push eax

* Possible StringData Ref from Data Obj ->"skillPoints"
                                  |
:0040FEED 6878B87800              push 0078B878
:0040FEF2 89AC24AC000000          mov dword ptr [esp+000000AC], ebp
:0040FEF9 E8B2B11D00              call 005EB0B0
:0040FEFE 50                      push eax
:0040FEFF 8BCF                    mov ecx, edi
:0040FF01 C78424A800000033000000  mov dword ptr [esp+000000A8], 00000033
:0040FF0C E80FB41D00              call 005EB320
:0040FF11 8B4C2418                mov ecx, dword ptr [esp+18]
:0040FF15 89AC24A4000000          mov dword ptr [esp+000000A4], ebp
:0040FF1C 8D41F4                  lea eax, dword ptr [ecx-0C]
:0040FF1F 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0040FF22 49                      dec ecx
:0040FF23 8908                    mov dword ptr [eax], ecx
:0040FF25 7509                    jne 0040FF30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FC5C(U)
|
:0040FF27 50                      push eax
:0040FF28 E8D3131D00              call 005E1300
:0040FF2D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FC56(C), :0040FF25(C)
|
:0040FF30 8A86F4000000            mov al, byte ptr [esi+000000F4]
:0040FF36 C7868615000000000000    mov dword ptr [esi+00001586], 00000000
:0040FF40 84C0                    test al, al
:0040FF42 0F8527040000            jne 0041036F
:0040FF48 8B869A130000            mov eax, dword ptr [esi+0000139A]
:0040FF4E 6833010000              push 00000133
:0040FF53 05FE000000              add eax, 000000FE
:0040FF58 C74424503A000000        mov [esp+50], 0000003A
:0040FF60 8944244C                mov dword ptr [esp+4C], eax
:0040FF64 E817131D00              call 005E1280
:0040FF69 8BF8                    mov edi, eax
:0040FF6B 83C404                  add esp, 00000004
:0040FF6E 897C2418                mov dword ptr [esp+18], edi
:0040FF72 85FF                    test edi, edi
:0040FF74 C78424A400000034000000  mov dword ptr [esp+000000A4], 00000034
:0040FF7F 0F8490000000            je 00410015
:0040FF85 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0040FF8B 8D4C241C                lea ecx, dword ptr [esp+1C]
:0040FF8F 52                      push edx

* Possible StringData Ref from Data Obj ->"gui/btn/sk_slider"
                                  |
:0040FF90 6864B87800              push 0078B864
:0040FF95 E816B11D00              call 005EB0B0
:0040FF9A 80CF80                  or bh, 80
:0040FF9D 895C2410                mov dword ptr [esp+10], ebx
:0040FFA1 A128FE7200              mov eax, dword ptr [0072FE28]
:0040FFA6 8D4C2414                lea ecx, dword ptr [esp+14]
:0040FFAA 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/sk_slider"
                                  |
:0040FFAB 6864B87800              push 0078B864
:0040FFB0 C68424AC00000035        mov byte ptr [esp+000000AC], 35
:0040FFB8 E8F3B01D00              call 005EB0B0
:0040FFBD 81CB00000100            or ebx, 00010000
:0040FFC3 895C2410                mov dword ptr [esp+10], ebx
:0040FFC7 33C9                    xor ecx, ecx
:0040FFC9 33C0                    xor eax, eax
:0040FFCB 51                      push ecx
:0040FFCC 8D4C2468                lea ecx, dword ptr [esp+68]
:0040FFD0 50                      push eax
:0040FFD1 51                      push ecx
:0040FFD2 8BCE                    mov ecx, esi
:0040FFD4 C78424B000000036000000  mov dword ptr [esp+000000B0], 00000036
:0040FFDF E85C3E0000              call 00413E40
:0040FFE4 81CB00000200            or ebx, 00020000
:0040FFEA 895C2410                mov dword ptr [esp+10], ebx
:0040FFEE 8D54241C                lea edx, dword ptr [esp+1C]
:0040FFF2 6A01                    push 00000001
:0040FFF4 8D4C2418                lea ecx, dword ptr [esp+18]
:0040FFF8 52                      push edx
:0040FFF9 51                      push ecx
:0040FFFA 8D542454                lea edx, dword ptr [esp+54]
:0040FFFE 50                      push eax
:0040FFFF 52                      push edx
:00410000 56                      push esi
:00410001 8BCF                    mov ecx, edi
:00410003 C78424BC00000037000000  mov dword ptr [esp+000000BC], 00000037
:0041000E E85DF31E00              call 005FF370
:00410013 EB02                    jmp 00410017

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FF7F(C)
|
:00410015 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410013(U)
|
:00410017 F7C300000200            test ebx, 00020000
:0041001D 898682150000            mov dword ptr [esi+00001582], eax
:00410023 C78424A400000039000000  mov dword ptr [esp+000000A4], 00000039
:0041002E 741C                    je 0041004C
:00410030 8B4C2464                mov ecx, dword ptr [esp+64]
:00410034 81E3FFFFFDFF            and ebx, FFFDFFFF
:0041003A 85C9                    test ecx, ecx
:0041003C 895C2410                mov dword ptr [esp+10], ebx
:00410040 740A                    je 0041004C
:00410042 8D442464                lea eax, dword ptr [esp+64]
:00410046 50                      push eax
:00410047 E8D4E21E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041002E(C), :00410040(C)
|
:0041004C F7C300000100            test ebx, 00010000
:00410052 C78424A400000038000000  mov dword ptr [esp+000000A4], 00000038
:0041005D 7422                    je 00410081
:0041005F 8B4C2414                mov ecx, dword ptr [esp+14]
:00410063 81E3FFFFFEFF            and ebx, FFFEFFFF
:00410069 895C2410                mov dword ptr [esp+10], ebx
:0041006D 8D41F4                  lea eax, dword ptr [ecx-0C]
:00410070 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00410073 49                      dec ecx
:00410074 8908                    mov dword ptr [eax], ecx
:00410076 7509                    jne 00410081
:00410078 50                      push eax
:00410079 E882121D00              call 005E1300
:0041007E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041005D(C), :00410076(C)
|
:00410081 83CDFF                  or ebp, FFFFFFFF
:00410084 F6C780                  test bh, 80
:00410087 89AC24A4000000          mov dword ptr [esp+000000A4], ebp
:0041008E 741B                    je 004100AB
:00410090 8B54241C                mov edx, dword ptr [esp+1C]
:00410094 80E77F                  and bh, 7F
:00410097 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0041009A 8D42F4                  lea eax, dword ptr [edx-0C]
:0041009D 49                      dec ecx
:0041009E 8908                    mov dword ptr [eax], ecx
:004100A0 7509                    jne 004100AB
:004100A2 50                      push eax
:004100A3 E858121D00              call 005E1300
:004100A8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041008E(C), :004100A0(C)
|
:004100AB 6833010000              push 00000133
:004100B0 E8CB111D00              call 005E1280
:004100B5 8BF8                    mov edi, eax
:004100B7 83C404                  add esp, 00000004
:004100BA 897C2418                mov dword ptr [esp+18], edi
:004100BE 85FF                    test edi, edi
:004100C0 C78424A40000003B000000  mov dword ptr [esp+000000A4], 0000003B
:004100CB 0F84A6000000            je 00410177
:004100D1 A128FE7200              mov eax, dword ptr [0072FE28]
:004100D6 8D4C241C                lea ecx, dword ptr [esp+1C]
:004100DA 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/splus_dn"
                                  |
:004100DB 686CB57800              push 0078B56C
:004100E0 E8CBAF1D00              call 005EB0B0
:004100E5 81CB00000400            or ebx, 00040000
:004100EB 895C2410                mov dword ptr [esp+10], ebx
:004100EF 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:004100F5 C68424A40000003C        mov byte ptr [esp+000000A4], 3C
:004100FD 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/btn/splus_up"
                                  |
:004100FE 6858B57800              push 0078B558
:00410103 8D4C241C                lea ecx, dword ptr [esp+1C]
:00410107 E8A4AF1D00              call 005EB0B0
:0041010C 81CB00000800            or ebx, 00080000
:00410112 33C9                    xor ecx, ecx
:00410114 B870094100              mov eax, 00410970
:00410119 51                      push ecx
:0041011A 8D542468                lea edx, dword ptr [esp+68]
:0041011E 81CB00001000            or ebx, 00100000
:00410124 50                      push eax
:00410125 52                      push edx
:00410126 8BCE                    mov ecx, esi
:00410128 C78424B00000003D000000  mov dword ptr [esp+000000B0], 0000003D
:00410133 895C241C                mov dword ptr [esp+1C], ebx
:00410137 E8043D0000              call 00413E40
:0041013C 8D4C241C                lea ecx, dword ptr [esp+1C]
:00410140 6A01                    push 00000001
:00410142 8D542418                lea edx, dword ptr [esp+18]
:00410146 51                      push ecx
:00410147 8B8E82150000            mov ecx, dword ptr [esi+00001582]
:0041014D 52                      push edx
:0041014E 50                      push eax
:0041014F 8D442444                lea eax, dword ptr [esp+44]
:00410153 50                      push eax
:00410154 51                      push ecx
:00410155 8BCF                    mov ecx, edi
:00410157 C78424BC0000003E000000  mov dword ptr [esp+000000BC], 0000003E
:00410162 C744244C18000000        mov [esp+4C], 00000018
:0041016A C744245004000000        mov [esp+50], 00000004
:00410172 E8F9F11E00              call 005FF370

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004100CB(C)
|
:00410177 F7C300001000            test ebx, 00100000
:0041017D C78424A400000040000000  mov dword ptr [esp+000000A4], 00000040
:00410188 741C                    je 004101A6
:0041018A 8B4C2464                mov ecx, dword ptr [esp+64]
:0041018E 81E3FFFFEFFF            and ebx, FFEFFFFF
:00410194 85C9                    test ecx, ecx
:00410196 895C2410                mov dword ptr [esp+10], ebx
:0041019A 740A                    je 004101A6
:0041019C 8D542464                lea edx, dword ptr [esp+64]
:004101A0 52                      push edx
:004101A1 E87AE11E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410188(C), :0041019A(C)
|
:004101A6 F7C300000800            test ebx, 00080000
:004101AC C78424A40000003F000000  mov dword ptr [esp+000000A4], 0000003F
:004101B7 7421                    je 004101DA
:004101B9 8B442414                mov eax, dword ptr [esp+14]
:004101BD 81E3FFFFF7FF            and ebx, FFF7FFFF
:004101C3 83C0F4                  add eax, FFFFFFF4
:004101C6 895C2410                mov dword ptr [esp+10], ebx
:004101CA 8B08                    mov ecx, dword ptr [eax]
:004101CC 49                      dec ecx
:004101CD 8908                    mov dword ptr [eax], ecx
:004101CF 7509                    jne 004101DA
:004101D1 50                      push eax
:004101D2 E829111D00              call 005E1300
:004101D7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004101B7(C), :004101CF(C)
|
:004101DA F7C300000400            test ebx, 00040000
:004101E0 89AC24A4000000          mov dword ptr [esp+000000A4], ebp
:004101E7 741E                    je 00410207
:004101E9 8B4C241C                mov ecx, dword ptr [esp+1C]
:004101ED 81E3FFFFFBFF            and ebx, FFFBFFFF
:004101F3 8D41F4                  lea eax, dword ptr [ecx-0C]
:004101F6 8B49F4                  mov ecx, dword ptr [ecx-0C]
:004101F9 49                      dec ecx
:004101FA 8908                    mov dword ptr [eax], ecx
:004101FC 7509                    jne 00410207
:004101FE 50                      push eax
:004101FF E8FC101D00              call 005E1300
:00410204 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004101E7(C), :004101FC(C)
|
:00410207 6833010000              push 00000133
:0041020C E86F101D00              call 005E1280
:00410211 8BF8                    mov edi, eax
:00410213 83C404                  add esp, 00000004
:00410216 897C2418                mov dword ptr [esp+18], edi
:0041021A 85FF                    test edi, edi
:0041021C C78424A400000042000000  mov dword ptr [esp+000000A4], 00000042
:00410227 0F84B2000000            je 004102DF
:0041022D 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00410233 8D4C2428                lea ecx, dword ptr [esp+28]
:00410237 52                      push edx

* Possible StringData Ref from Data Obj ->"gui/btn/sminus_dn"
                                  |
:00410238 6844B57800              push 0078B544
:0041023D E86EAE1D00              call 005EB0B0
:00410242 81CB00002000            or ebx, 00200000
:00410248 895C2410                mov dword ptr [esp+10], ebx
:0041024C A128FE7200              mov eax, dword ptr [0072FE28]
:00410251 8D4C242C                lea ecx, dword ptr [esp+2C]
:00410255 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/sminus_up"
                                  |
:00410256 6830B57800              push 0078B530
:0041025B C68424AC00000043        mov byte ptr [esp+000000AC], 43
:00410263 E848AE1D00              call 005EB0B0
:00410268 81CB00004000            or ebx, 00400000
:0041026E 33C9                    xor ecx, ecx
:00410270 B8D0094100              mov eax, 004109D0
:00410275 51                      push ecx
:00410276 8D8C248C000000          lea ecx, dword ptr [esp+0000008C]
:0041027D 50                      push eax
:0041027E 81CB00008000            or ebx, 00800000
:00410284 51                      push ecx
:00410285 8BCE                    mov ecx, esi
:00410287 C78424B000000044000000  mov dword ptr [esp+000000B0], 00000044
:00410292 895C241C                mov dword ptr [esp+1C], ebx
:00410296 E8A53B0000              call 00413E40
:0041029B 8D542428                lea edx, dword ptr [esp+28]
:0041029F 6A01                    push 00000001
:004102A1 8D4C2430                lea ecx, dword ptr [esp+30]
:004102A5 52                      push edx
:004102A6 51                      push ecx
:004102A7 50                      push eax
:004102A8 8B8682150000            mov eax, dword ptr [esi+00001582]
:004102AE 8D942488000000          lea edx, dword ptr [esp+00000088]
:004102B5 52                      push edx
:004102B6 50                      push eax
:004102B7 8BCF                    mov ecx, edi
:004102B9 C78424BC00000045000000  mov dword ptr [esp+000000BC], 00000045
:004102C4 C784249000000018000000  mov dword ptr [esp+00000090], 00000018
:004102CF C78424940000000F000000  mov dword ptr [esp+00000094], 0000000F
:004102DA E891F01E00              call 005FF370

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410227(C)
|
:004102DF F7C300008000            test ebx, 00800000
:004102E5 C78424A400000047000000  mov dword ptr [esp+000000A4], 00000047
:004102F0 7422                    je 00410314
:004102F2 8B8C2488000000          mov ecx, dword ptr [esp+00000088]
:004102F9 81E3FFFF7FFF            and ebx, FF7FFFFF
:004102FF 85C9                    test ecx, ecx
:00410301 895C2410                mov dword ptr [esp+10], ebx
:00410305 740D                    je 00410314
:00410307 8D942488000000          lea edx, dword ptr [esp+00000088]
:0041030E 52                      push edx
:0041030F E80CE01E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004102F0(C), :00410305(C)
|
:00410314 F7C300004000            test ebx, 00400000
:0041031A C78424A400000046000000  mov dword ptr [esp+000000A4], 00000046
:00410325 7421                    je 00410348
:00410327 8B44242C                mov eax, dword ptr [esp+2C]
:0041032B 81E3FFFFBFFF            and ebx, FFBFFFFF
:00410331 83C0F4                  add eax, FFFFFFF4
:00410334 895C2410                mov dword ptr [esp+10], ebx
:00410338 8B08                    mov ecx, dword ptr [eax]
:0041033A 49                      dec ecx
:0041033B 8908                    mov dword ptr [eax], ecx
:0041033D 7509                    jne 00410348
:0041033F 50                      push eax
:00410340 E8BB0F1D00              call 005E1300
:00410345 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410325(C), :0041033D(C)
|
:00410348 F7C300002000            test ebx, 00200000
:0041034E 89AC24A4000000          mov dword ptr [esp+000000A4], ebp
:00410355 7418                    je 0041036F
:00410357 8B4C2428                mov ecx, dword ptr [esp+28]
:0041035B 8D41F4                  lea eax, dword ptr [ecx-0C]
:0041035E 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00410361 49                      dec ecx
:00410362 8908                    mov dword ptr [eax], ecx
:00410364 7509                    jne 0041036F
:00410366 50                      push eax
:00410367 E8940F1D00              call 005E1300
:0041036C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FF42(C), :00410355(C), :00410364(C)
|
:0041036F 8B8C249C000000          mov ecx, dword ptr [esp+0000009C]
:00410376 5F                      pop edi
:00410377 5E                      pop esi
:00410378 5D                      pop ebp
:00410379 5B                      pop ebx
:0041037A 64890D00000000          mov dword ptr fs:[00000000], ecx
:00410381 81C498000000            add esp, 00000098
:00410387 C3                      ret


:00410388 90                      nop
:00410389 90                      nop
:0041038A 90                      nop
:0041038B 90                      nop
:0041038C 90                      nop
:0041038D 90                      nop
:0041038E 90                      nop
:0041038F 90                      nop

* Referenced by a CALL at Addresses:
|:0040B011   , :0040D938   , :00410924   , :004109B2   , :00410B04   
|
:00410390 6AFF                    push FFFFFFFF
:00410392 688F076D00              push 006D078F
:00410397 64A100000000            mov eax, dword ptr fs:[00000000]
:0041039D 50                      push eax
:0041039E 64892500000000          mov dword ptr fs:[00000000], esp
:004103A5 83EC48                  sub esp, 00000048
:004103A8 8B1588DA7900            mov edx, dword ptr [0079DA88]
:004103AE 53                      push ebx
:004103AF 55                      push ebp
:004103B0 42                      inc edx
:004103B1 56                      push esi
:004103B2 57                      push edi
:004103B3 8BE9                    mov ebp, ecx
:004103B5 891588DA7900            mov dword ptr [0079DA88], edx
:004103BB C744241094DA7900        mov [esp+10], 0079DA94
:004103C3 B8F0F4FFFF              mov eax, FFFFF4F0
:004103C8 C744246000000000        mov [esp+60], 00000000
:004103D0 2BC5                    sub eax, ebp
:004103D2 8DBD100B0000            lea edi, dword ptr [ebp+00000B10]

* Possible Indirect StringData Ref from Data Obj ->"smallGuns"
                                  |
:004103D8 BBE0667900              mov ebx, 007966E0
:004103DD 8DB5CB0D0000            lea esi, dword ptr [ebp+00000DCB]
:004103E3 89442418                mov dword ptr [esp+18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410693(C)
|
:004103E7 8A07                    mov al, byte ptr [edi]
:004103E9 8B8E23070000            mov ecx, dword ptr [esi+00000723]
:004103EF 6A00                    push 00000000
:004103F1 50                      push eax
:004103F2 E8C9931F00              call 006097C0
:004103F7 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:004103FD 8B13                    mov edx, dword ptr [ebx]
:004103FF 51                      push ecx
:00410400 52                      push edx
:00410401 8D4C241C                lea ecx, dword ptr [esp+1C]
:00410405 E8A6AC1D00              call 005EB0B0
:0041040A 8A07                    mov al, byte ptr [edi]
:0041040C C644246001              mov [esp+60], 01
:00410411 84C0                    test al, al
:00410413 7438                    je 0041044D
:00410415 A110997A00              mov eax, dword ptr [007A9910]
:0041041A 8B0D14997A00            mov ecx, dword ptr [007A9914]
:00410420 8B1518997A00            mov edx, dword ptr [007A9918]
:00410426 8944241C                mov dword ptr [esp+1C], eax
:0041042A A138B67A00              mov eax, dword ptr [007AB638]
:0041042F 894C2420                mov dword ptr [esp+20], ecx
:00410433 8B0D3CB67A00            mov ecx, dword ptr [007AB63C]
:00410439 89542424                mov dword ptr [esp+24], edx
:0041043D 8B1540B67A00            mov edx, dword ptr [007AB640]
:00410443 89442428                mov dword ptr [esp+28], eax
:00410447 894C242C                mov dword ptr [esp+2C], ecx
:0041044B EB36                    jmp 00410483

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410413(C)
|
:0041044D A100997A00              mov eax, dword ptr [007A9900]
:00410452 8B0D04997A00            mov ecx, dword ptr [007A9904]
:00410458 8B1508997A00            mov edx, dword ptr [007A9908]
:0041045E 8944241C                mov dword ptr [esp+1C], eax
:00410462 A170987A00              mov eax, dword ptr [007A9870]
:00410467 894C2420                mov dword ptr [esp+20], ecx
:0041046B 8B0D74987A00            mov ecx, dword ptr [007A9874]
:00410471 89542424                mov dword ptr [esp+24], edx
:00410475 8B1578987A00            mov edx, dword ptr [007A9878]
:0041047B 89442428                mov dword ptr [esp+28], eax
:0041047F 894C242C                mov dword ptr [esp+2C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041044B(U)
|
:00410483 8B0E                    mov ecx, dword ptr [esi]
:00410485 8B86FDFCFFFF            mov eax, dword ptr [esi+FFFFFCFD]
:0041048B 89542430                mov dword ptr [esp+30], edx
:0041048F 8B54241C                mov edx, dword ptr [esp+1C]
:00410493 89542434                mov dword ptr [esp+34], edx
:00410497 8B542420                mov edx, dword ptr [esp+20]
:0041049B 89542438                mov dword ptr [esp+38], edx
:0041049F 8B542424                mov edx, dword ptr [esp+24]
:004104A3 3BC1                    cmp eax, ecx
:004104A5 8954243C                mov dword ptr [esp+3C], edx
:004104A9 7E1E                    jle 004104C9
:004104AB 8B15D0987A00            mov edx, dword ptr [007A98D0]
:004104B1 89542434                mov dword ptr [esp+34], edx
:004104B5 8B15D4987A00            mov edx, dword ptr [007A98D4]
:004104BB 89542438                mov dword ptr [esp+38], edx
:004104BF 8B15D8987A00            mov edx, dword ptr [007A98D8]
:004104C5 8954243C                mov dword ptr [esp+3C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004104A9(C)
|
:004104C9 7D1E                    jge 004104E9
:004104CB 8B0D90987A00            mov ecx, dword ptr [007A9890]
:004104D1 8B1594987A00            mov edx, dword ptr [007A9894]
:004104D7 894C2434                mov dword ptr [esp+34], ecx
:004104DB 8B0D98987A00            mov ecx, dword ptr [007A9898]
:004104E1 89542438                mov dword ptr [esp+38], edx
:004104E5 894C243C                mov dword ptr [esp+3C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004104C9(C)
|
:004104E9 8B542434                mov edx, dword ptr [esp+34]
:004104ED 8B4C2438                mov ecx, dword ptr [esp+38]
:004104F1 8954244C                mov dword ptr [esp+4C], edx
:004104F5 8B54243C                mov edx, dword ptr [esp+3C]
:004104F9 894C2450                mov dword ptr [esp+50], ecx
:004104FD 8B4C244C                mov ecx, dword ptr [esp+4C]
:00410501 89542454                mov dword ptr [esp+54], edx
:00410505 8B542450                mov edx, dword ptr [esp+50]
:00410509 894C2440                mov dword ptr [esp+40], ecx
:0041050D 8B4C2454                mov ecx, dword ptr [esp+54]
:00410511 894C2448                mov dword ptr [esp+48], ecx
:00410515 8A8DF4000000            mov cl, byte ptr [ebp+000000F4]
:0041051B 84C9                    test cl, cl
:0041051D 89542444                mov dword ptr [esp+44], edx
:00410521 0F85EC000000            jne 00410613
:00410527 8B96F4F3FFFF            mov edx, dword ptr [esi+FFFFF3F4]
:0041052D 8B8E03030000            mov ecx, dword ptr [esi+00000303]
:00410533 3BD1                    cmp edx, ecx
:00410535 0F84D8000000            je 00410613
:0041053B D905C0987A00            fld dword ptr [007A98C0]
:00410541 D864241C                fsub dword ptr [esp+1C]
:00410545 D80DD4947000            fmul dword ptr [007094D4]
:0041054B D844241C                fadd dword ptr [esp+1C]
:0041054F D95C241C                fstp dword ptr [esp+1C]
:00410553 D905C4987A00            fld dword ptr [007A98C4]
:00410559 D8642420                fsub dword ptr [esp+20]
:0041055D D80DD4947000            fmul dword ptr [007094D4]
:00410563 D8442420                fadd dword ptr [esp+20]
:00410567 D95C2420                fstp dword ptr [esp+20]
:0041056B D905C8987A00            fld dword ptr [007A98C8]
:00410571 D8642424                fsub dword ptr [esp+24]
:00410575 D80DD4947000            fmul dword ptr [007094D4]
:0041057B D8442424                fadd dword ptr [esp+24]
:0041057F D95C2424                fstp dword ptr [esp+24]
:00410583 D905C0987A00            fld dword ptr [007A98C0]
:00410589 D8642428                fsub dword ptr [esp+28]
:0041058D D80DD4947000            fmul dword ptr [007094D4]
:00410593 D8442428                fadd dword ptr [esp+28]
:00410597 D95C2428                fstp dword ptr [esp+28]
:0041059B D905C4987A00            fld dword ptr [007A98C4]
:004105A1 D864242C                fsub dword ptr [esp+2C]
:004105A5 D80DD4947000            fmul dword ptr [007094D4]
:004105AB D844242C                fadd dword ptr [esp+2C]
:004105AF D95C242C                fstp dword ptr [esp+2C]
:004105B3 D905C8987A00            fld dword ptr [007A98C8]
:004105B9 D8642430                fsub dword ptr [esp+30]
:004105BD D80DD4947000            fmul dword ptr [007094D4]
:004105C3 D8442430                fadd dword ptr [esp+30]
:004105C7 D95C2430                fstp dword ptr [esp+30]
:004105CB D905C0987A00            fld dword ptr [007A98C0]
:004105D1 D8642434                fsub dword ptr [esp+34]
:004105D5 D80DD4947000            fmul dword ptr [007094D4]
:004105DB D8442434                fadd dword ptr [esp+34]
:004105DF D95C2440                fstp dword ptr [esp+40]
:004105E3 D905C4987A00            fld dword ptr [007A98C4]
:004105E9 D8642444                fsub dword ptr [esp+44]
:004105ED D80DD4947000            fmul dword ptr [007094D4]
:004105F3 D8442444                fadd dword ptr [esp+44]
:004105F7 D95C2444                fstp dword ptr [esp+44]
:004105FB D905C8987A00            fld dword ptr [007A98C8]
:00410601 D8642448                fsub dword ptr [esp+48]
:00410605 D80DD4947000            fmul dword ptr [007094D4]
:0041060B D8442448                fadd dword ptr [esp+48]
:0041060F D95C2448                fstp dword ptr [esp+48]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410521(C), :00410535(C)
|
:00410613 50                      push eax
:00410614 8D442414                lea eax, dword ptr [esp+14]

* Possible StringData Ref from Data Obj ->"%d%%"
                                  |
:00410618 6878B27800              push 0078B278
:0041061D 50                      push eax
:0041061E E8ADB61D00              call 005EBCD0
:00410623 83C40C                  add esp, 0000000C
:00410626 8D4C241C                lea ecx, dword ptr [esp+1C]
:0041062A 51                      push ecx
:0041062B 8B8E6B070000            mov ecx, dword ptr [esi+0000076B]
:00410631 E8EA831F00              call 00608A20
:00410636 8B8E6B070000            mov ecx, dword ptr [esi+0000076B]
:0041063C 8D542428                lea edx, dword ptr [esp+28]
:00410640 52                      push edx
:00410641 E82AE81700              call 0058EE70
:00410646 8B8E6B070000            mov ecx, dword ptr [esi+0000076B]
:0041064C 8D442440                lea eax, dword ptr [esp+40]
:00410650 50                      push eax
:00410651 E87AE81700              call 0058EED0
:00410656 8D4C2410                lea ecx, dword ptr [esp+10]
:0041065A 51                      push ecx
:0041065B 8B8E6B070000            mov ecx, dword ptr [esi+0000076B]
:00410661 E8CAE81700              call 0058EF30
:00410666 8B542414                mov edx, dword ptr [esp+14]
:0041066A C644246000              mov [esp+60], 00
:0041066F 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00410672 8D42F4                  lea eax, dword ptr [edx-0C]
:00410675 49                      dec ecx
:00410676 8908                    mov dword ptr [eax], ecx
:00410678 7509                    jne 00410683
:0041067A 50                      push eax
:0041067B E8800C1D00              call 005E1300
:00410680 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410678(C)
|
:00410683 8B442418                mov eax, dword ptr [esp+18]
:00410687 47                      inc edi
:00410688 03C7                    add eax, edi
:0041068A 83C304                  add ebx, 00000004
:0041068D 83C604                  add esi, 00000004
:00410690 83F812                  cmp eax, 00000012
:00410693 0F8C4EFDFFFF            jl 004103E7
:00410699 8A85F4000000            mov al, byte ptr [ebp+000000F4]
:0041069F 84C0                    test al, al
:004106A1 7429                    je 004106CC
:004106A3 8BB52B010000            mov esi, dword ptr [ebp+0000012B]
:004106A9 8B8D7E150000            mov ecx, dword ptr [ebp+0000157E]
:004106AF 56                      push esi
:004106B0 E8BBE21700              call 0058E970
:004106B5 85F6                    test esi, esi
:004106B7 B890987A00              mov eax, 007A9890
:004106BC 7C05                    jl 004106C3
:004106BE B8C0987A00              mov eax, 007A98C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004106BC(C)
|
:004106C3 8B8D7E150000            mov ecx, dword ptr [ebp+0000157E]
:004106C9 50                      push eax
:004106CA EB27                    jmp 004106F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004106A1(C)
|
:004106CC 8BB527010000            mov esi, dword ptr [ebp+00000127]
:004106D2 8B8DB6160000            mov ecx, dword ptr [ebp+000016B6]
:004106D8 56                      push esi
:004106D9 E892E21700              call 0058E970
:004106DE 85F6                    test esi, esi
:004106E0 B890987A00              mov eax, 007A9890
:004106E5 7C05                    jl 004106EC
:004106E7 B8C0987A00              mov eax, 007A98C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004106E5(C)
|
:004106EC 8B8DB6160000            mov ecx, dword ptr [ebp+000016B6]
:004106F2 50                      push eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004106CA(U)
|
:004106F3 E8E8E31700              call 0058EAE0
:004106F8 8B4C2410                mov ecx, dword ptr [esp+10]
:004106FC 5F                      pop edi
:004106FD 5E                      pop esi
:004106FE 5D                      pop ebp
:004106FF 8D41F4                  lea eax, dword ptr [ecx-0C]
:00410702 C7442454FFFFFFFF        mov [esp+54], FFFFFFFF
:0041070A 5B                      pop ebx
:0041070B 8B08                    mov ecx, dword ptr [eax]
:0041070D 49                      dec ecx
:0041070E 8908                    mov dword ptr [eax], ecx
:00410710 7509                    jne 0041071B
:00410712 50                      push eax
:00410713 E8E80B1D00              call 005E1300
:00410718 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410710(C)
|
:0041071B 8B4C2448                mov ecx, dword ptr [esp+48]
:0041071F 64890D00000000          mov dword ptr fs:[00000000], ecx
:00410726 83C454                  add esp, 00000054
:00410729 C3                      ret


:0041072A 90                      nop
:0041072B 90                      nop
:0041072C 90                      nop
:0041072D 90                      nop
:0041072E 90                      nop
:0041072F 90                      nop

* Referenced by a CALL at Addresses:
|:00410987   , :004109D2   
|
:00410730 64A100000000            mov eax, dword ptr fs:[00000000]
:00410736 6AFF                    push FFFFFFFF
:00410738 68A4076D00              push 006D07A4
:0041073D 50                      push eax
:0041073E 64892500000000          mov dword ptr fs:[00000000], esp
:00410745 81EC140C0000            sub esp, 00000C14
:0041074B 53                      push ebx
:0041074C 55                      push ebp
:0041074D 56                      push esi
:0041074E 8BF1                    mov esi, ecx
:00410750 57                      push edi
:00410751 8B8686150000            mov eax, dword ptr [esi+00001586]
:00410757 85C0                    test eax, eax
:00410759 0F8CF4010000            jl 00410953
:0041075F 83F812                  cmp eax, 00000012
:00410762 0F8DEB010000            jnl 00410953
:00410768 8D9EFA000000            lea ebx, dword ptr [esi+000000FA]
:0041076E 8D8C2418030000          lea ecx, dword ptr [esp+00000318]
:00410775 53                      push ebx
:00410776 E855491400              call 005550D0
:0041077B 6A00                    push 00000000
:0041077D 8D8C2420060000          lea ecx, dword ptr [esp+00000620]
:00410784 8DBEFD030000            lea edi, dword ptr [esi+000003FD]
:0041078A E8D1481400              call 00555060
:0041078F 50                      push eax
:00410790 57                      push edi
:00410791 8D8C2424030000          lea ecx, dword ptr [esp+00000324]
:00410798 E8C3441400              call 00554C60
:0041079D 8B8E86150000            mov ecx, dword ptr [esi+00001586]
:004107A3 A128FE7200              mov eax, dword ptr [0072FE28]
:004107A8 50                      push eax
:004107A9 8B148DE0667900          mov edx, dword ptr [4*ecx+007966E0]
:004107B0 8D4C2414                lea ecx, dword ptr [esp+14]
:004107B4 52                      push edx
:004107B5 E8F6A81D00              call 005EB0B0
:004107BA 8B8686150000            mov eax, dword ptr [esi+00001586]
:004107C0 8BAC24340C0000          mov ebp, dword ptr [esp+00000C34]
:004107C7 C784242C0C000000000000  mov dword ptr [esp+00000C2C], 00000000
:004107D2 8BFD                    mov edi, ebp
:004107D4 8A8C3007020000          mov cl, byte ptr [eax+esi+00000207]
:004107DB 84C9                    test cl, cl
:004107DD 7404                    je 004107E3
:004107DF 8D7C2D00                lea edi, dword ptr [ebp+ebp]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004107DD(C)
|
:004107E3 8B8484DD030000          mov eax, dword ptr [esp+4*eax+000003DD]
:004107EA 50                      push eax
:004107EB E8C0711400              call 005579B0
:004107F0 0FAFC5                  imul eax, ebp
:004107F3 8A8EF3000000            mov cl, byte ptr [esi+000000F3]
:004107F9 83C404                  add esp, 00000004
:004107FC 84C9                    test cl, cl
:004107FE 0F8596000000            jne 0041089A
:00410804 8B8E86150000            mov ecx, dword ptr [esi+00001586]
:0041080A 8B948EBF010000          mov edx, dword ptr [esi+4*ecx+000001BF]
:00410811 8D0C8E                  lea ecx, dword ptr [esi+4*ecx]
:00410814 03D7                    add edx, edi
:00410816 81FA2C010000            cmp edx, 0000012C
:0041081C 7E22                    jle 00410840
:0041081E 8B442410                mov eax, dword ptr [esp+10]
:00410822 C784242C0C0000FFFFFFFF  mov dword ptr [esp+00000C2C], FFFFFFFF
:0041082D 83C0F4                  add eax, FFFFFFF4
:00410830 8B08                    mov ecx, dword ptr [eax]
:00410832 49                      dec ecx
:00410833 8908                    mov dword ptr [eax], ecx
:00410835 0F8518010000            jne 00410953
:0041083B E90A010000              jmp 0041094A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041081C(C)
|
:00410840 3B91CE100000            cmp edx, dword ptr [ecx+000010CE]
:00410846 7D23                    jge 0041086B
:00410848 8B4C2410                mov ecx, dword ptr [esp+10]
:0041084C C784242C0C0000FFFFFFFF  mov dword ptr [esp+00000C2C], FFFFFFFF
:00410857 8D41F4                  lea eax, dword ptr [ecx-0C]
:0041085A 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0041085D 49                      dec ecx
:0041085E 8908                    mov dword ptr [eax], ecx
:00410860 0F85ED000000            jne 00410953
:00410866 E9DF000000              jmp 0041094A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410846(C)
|
:0041086B 85FF                    test edi, edi
:0041086D 7E2B                    jle 0041089A
:0041086F 398627010000            cmp dword ptr [esi+00000127], eax
:00410875 7D23                    jge 0041089A
:00410877 8B542410                mov edx, dword ptr [esp+10]
:0041087B C784242C0C0000FFFFFFFF  mov dword ptr [esp+00000C2C], FFFFFFFF
:00410886 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00410889 8D42F4                  lea eax, dword ptr [edx-0C]
:0041088C 49                      dec ecx
:0041088D 8908                    mov dword ptr [eax], ecx
:0041088F 0F85BE000000            jne 00410953
:00410895 E9B0000000              jmp 0041094A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004107FE(C), :0041086D(C), :00410875(C)
|
:0041089A 8B8E86150000            mov ecx, dword ptr [esi+00001586]
:004108A0 8B948EBF010000          mov edx, dword ptr [esi+4*ecx+000001BF]
:004108A7 8D8C8EBF010000          lea ecx, dword ptr [esi+4*ecx+000001BF]
:004108AE 03D7                    add edx, edi
:004108B0 85FF                    test edi, edi
:004108B2 8911                    mov dword ptr [ecx], edx
:004108B4 7E0A                    jle 004108C0
:004108B6 8B8E27010000            mov ecx, dword ptr [esi+00000127]
:004108BC 2BC8                    sub ecx, eax
:004108BE EB55                    jmp 00410915

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004108B4(C)
|
:004108C0 7D59                    jge 0041091B
:004108C2 8BCB                    mov ecx, ebx
:004108C4 E837471400              call 00555000
:004108C9 53                      push ebx
:004108CA 8D4C2418                lea ecx, dword ptr [esp+18]
:004108CE E8FD471400              call 005550D0
:004108D3 6A00                    push 00000000
:004108D5 8D8C2424090000          lea ecx, dword ptr [esp+00000924]
:004108DC E87F471400              call 00555060
:004108E1 50                      push eax
:004108E2 8D86FD030000            lea eax, dword ptr [esi+000003FD]
:004108E8 50                      push eax
:004108E9 8D4C2420                lea ecx, dword ptr [esp+20]
:004108ED E86E431400              call 00554C60
:004108F2 8B9686150000            mov edx, dword ptr [esi+00001586]
:004108F8 8B8494D9000000          mov eax, dword ptr [esp+4*edx+000000D9]
:004108FF 50                      push eax
:00410900 E8AB701400              call 005579B0
:00410905 0FAFC5                  imul eax, ebp
:00410908 8B8E27010000            mov ecx, dword ptr [esi+00000127]
:0041090E 83C404                  add esp, 00000004
:00410911 F7D8                    neg eax
:00410913 03C8                    add ecx, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004108BE(U)
|
:00410915 898E27010000            mov dword ptr [esi+00000127], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004108C0(C)
|
:0041091B 8BCE                    mov ecx, esi
:0041091D E8FEA3FFFF              call 0040AD20
:00410922 8BCE                    mov ecx, esi
:00410924 E867FAFFFF              call 00410390
:00410929 8BCE                    mov ecx, esi
:0041092B E8F0D9FFFF              call 0040E320
:00410930 8B4C2410                mov ecx, dword ptr [esp+10]
:00410934 C784242C0C0000FFFFFFFF  mov dword ptr [esp+00000C2C], FFFFFFFF
:0041093F 8D41F4                  lea eax, dword ptr [ecx-0C]
:00410942 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00410945 49                      dec ecx
:00410946 8908                    mov dword ptr [eax], ecx
:00410948 7509                    jne 00410953

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041083B(U), :00410866(U), :00410895(U)
|
:0041094A 50                      push eax
:0041094B E8B0091D00              call 005E1300
:00410950 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410759(C), :00410762(C), :00410835(C), :00410860(C), :0041088F(C)
|:00410948(C)
|
:00410953 8B8C24240C0000          mov ecx, dword ptr [esp+00000C24]
:0041095A 5F                      pop edi
:0041095B 5E                      pop esi
:0041095C 5D                      pop ebp
:0041095D 5B                      pop ebx
:0041095E 64890D00000000          mov dword ptr fs:[00000000], ecx
:00410965 81C4200C0000            add esp, 00000C20
:0041096B C20400                  ret 0004


:0041096E 90                      nop
:0041096F 90                      nop
:00410970 A03EB77A00              mov al, byte ptr [007AB73E]
:00410975 56                      push esi
:00410976 84C0                    test al, al
:00410978 8BF1                    mov esi, ecx
:0041097A 7514                    jne 00410990
:0041097C A03FB77A00              mov al, byte ptr [007AB73F]
:00410981 84C0                    test al, al
:00410983 750B                    jne 00410990
:00410985 6A01                    push 00000001
:00410987 E8A4FDFFFF              call 00410730
:0041098C 5E                      pop esi
:0041098D C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041097A(C), :00410983(C)
|
:00410990 8B8627010000            mov eax, dword ptr [esi+00000127]
:00410996 8B8E86150000            mov ecx, dword ptr [esi+00001586]
:0041099C 50                      push eax
:0041099D 51                      push ecx
:0041099E 8D8EFA000000            lea ecx, dword ptr [esi+000000FA]
:004109A4 E867701400              call 00557A10
:004109A9 8BCE                    mov ecx, esi
:004109AB E870A3FFFF              call 0040AD20
:004109B0 8BCE                    mov ecx, esi
:004109B2 E8D9F9FFFF              call 00410390
:004109B7 8BCE                    mov ecx, esi
:004109B9 E862D9FFFF              call 0040E320
:004109BE 5E                      pop esi
:004109BF C20400                  ret 0004


:004109C2 90                      nop
:004109C3 90                      nop
:004109C4 90                      nop
:004109C5 90                      nop
:004109C6 90                      nop
:004109C7 90                      nop
:004109C8 90                      nop
:004109C9 90                      nop
:004109CA 90                      nop
:004109CB 90                      nop
:004109CC 90                      nop
:004109CD 90                      nop
:004109CE 90                      nop
:004109CF 90                      nop
:004109D0 6AFF                    push FFFFFFFF
:004109D2 E859FDFFFF              call 00410730
:004109D7 C20400                  ret 0004


:004109DA 90                      nop
:004109DB 90                      nop
:004109DC 90                      nop
:004109DD 90                      nop
:004109DE 90                      nop
:004109DF 90                      nop
:004109E0 6AFF                    push FFFFFFFF
:004109E2 68C6076D00              push 006D07C6
:004109E7 64A100000000            mov eax, dword ptr fs:[00000000]
:004109ED 50                      push eax
:004109EE 64892500000000          mov dword ptr fs:[00000000], esp
:004109F5 83EC10                  sub esp, 00000010
:004109F8 8B442420                mov eax, dword ptr [esp+20]
:004109FC 53                      push ebx
:004109FD 56                      push esi
:004109FE 57                      push edi
:004109FF 8B4004                  mov eax, dword ptr [eax+04]
:00410A02 8BF1                    mov esi, ecx
:00410A04 8B4024                  mov eax, dword ptr [eax+24]
:00410A07 8944242C                mov dword ptr [esp+2C], eax
:00410A0B FF40F4                  inc [eax-0C]
:00410A0E 8D4C242C                lea ecx, dword ptr [esp+2C]
:00410A12 8DBEBB010000            lea edi, dword ptr [esi+000001BB]
:00410A18 33DB                    xor ebx, ebx
:00410A1A 51                      push ecx
:00410A1B 8BCF                    mov ecx, edi
:00410A1D 895C2428                mov dword ptr [esp+28], ebx
:00410A21 E86A6D1400              call 00557790
:00410A26 84C0                    test al, al
:00410A28 7419                    je 00410A43
:00410A2A 8D54242C                lea edx, dword ptr [esp+2C]
:00410A2E 53                      push ebx
:00410A2F 52                      push edx
:00410A30 8BCF                    mov ecx, edi
:00410A32 E8996D1400              call 005577D0
:00410A37 8B862B010000            mov eax, dword ptr [esi+0000012B]
:00410A3D 40                      inc eax
:00410A3E E9B2000000              jmp 00410AF5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410A28(C)
|
:00410A43 399E2B010000            cmp dword ptr [esi+0000012B], ebx
:00410A49 0F8F91000000            jg 00410AE0
:00410A4F 389EF3000000            cmp byte ptr [esi+000000F3], bl
:00410A55 0F8585000000            jne 00410AE0
:00410A5B A128FE7200              mov eax, dword ptr [0072FE28]
:00410A60 8D4C240C                lea ecx, dword ptr [esp+0C]
:00410A64 50                      push eax

* Possible StringData Ref from Data Obj ->"char_tagserr"
                                  |
:00410A65 68E8B87800              push 0078B8E8
:00410A6A E841A61D00              call 005EB0B0
:00410A6F 8D4C240C                lea ecx, dword ptr [esp+0C]
:00410A73 8D542410                lea edx, dword ptr [esp+10]
:00410A77 51                      push ecx
:00410A78 52                      push edx
:00410A79 B9B0AF7A00              mov ecx, 007AAFB0
:00410A7E C644242C01              mov [esp+2C], 01
:00410A83 895C241C                mov dword ptr [esp+1C], ebx
:00410A87 895C2420                mov dword ptr [esp+20], ebx
:00410A8B E8108DFFFF              call 004097A0
:00410A90 8D4C2414                lea ecx, dword ptr [esp+14]
:00410A94 C644242402              mov [esp+24], 02
:00410A99 51                      push ecx
:00410A9A 6A04                    push 00000004
:00410A9C 50                      push eax
:00410A9D 56                      push esi
:00410A9E E86DFC1700              call 00590710
:00410AA3 8B542420                mov edx, dword ptr [esp+20]
:00410AA7 83C410                  add esp, 00000010
:00410AAA C644242401              mov [esp+24], 01
:00410AAF 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00410AB2 8D42F4                  lea eax, dword ptr [edx-0C]
:00410AB5 49                      dec ecx
:00410AB6 8908                    mov dword ptr [eax], ecx
:00410AB8 7509                    jne 00410AC3
:00410ABA 50                      push eax
:00410ABB E840081D00              call 005E1300
:00410AC0 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410AB8(C)
|
:00410AC3 8B44240C                mov eax, dword ptr [esp+0C]
:00410AC7 885C2424                mov byte ptr [esp+24], bl
:00410ACB 83C0F4                  add eax, FFFFFFF4
:00410ACE 8B08                    mov ecx, dword ptr [eax]
:00410AD0 49                      dec ecx
:00410AD1 8908                    mov dword ptr [eax], ecx
:00410AD3 7526                    jne 00410AFB
:00410AD5 50                      push eax
:00410AD6 E825081D00              call 005E1300
:00410ADB 83C404                  add esp, 00000004
:00410ADE EB1B                    jmp 00410AFB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410A49(C), :00410A55(C)
|
:00410AE0 8D4C242C                lea ecx, dword ptr [esp+2C]
:00410AE4 6A01                    push 00000001
:00410AE6 51                      push ecx
:00410AE7 8BCF                    mov ecx, edi
:00410AE9 E8E26C1400              call 005577D0
:00410AEE 8B862B010000            mov eax, dword ptr [esi+0000012B]
:00410AF4 48                      dec eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410A3E(U)
|
:00410AF5 89862B010000            mov dword ptr [esi+0000012B], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410AD3(C), :00410ADE(U)
|
:00410AFB 8BCE                    mov ecx, esi
:00410AFD E81EA2FFFF              call 0040AD20
:00410B02 8BCE                    mov ecx, esi
:00410B04 E887F8FFFF              call 00410390
:00410B09 8B8EB2160000            mov ecx, dword ptr [esi+000016B2]
:00410B0F 8D54242C                lea edx, dword ptr [esp+2C]
:00410B13 52                      push edx
:00410B14 E8B7B80400              call 0045C3D0
:00410B19 8B44242C                mov eax, dword ptr [esp+2C]
:00410B1D 5F                      pop edi
:00410B1E 83C0F4                  add eax, FFFFFFF4
:00410B21 5E                      pop esi
:00410B22 C744241CFFFFFFFF        mov [esp+1C], FFFFFFFF
:00410B2A 5B                      pop ebx
:00410B2B 8B08                    mov ecx, dword ptr [eax]
:00410B2D 49                      dec ecx
:00410B2E 8908                    mov dword ptr [eax], ecx
:00410B30 7509                    jne 00410B3B
:00410B32 50                      push eax
:00410B33 E8C8071D00              call 005E1300
:00410B38 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410B30(C)
|
:00410B3B 8B4C2410                mov ecx, dword ptr [esp+10]
:00410B3F 64890D00000000          mov dword ptr fs:[00000000], ecx
:00410B46 83C41C                  add esp, 0000001C
:00410B49 C20400                  ret 0004


:00410B4C 90                      nop
:00410B4D 90                      nop
:00410B4E 90                      nop
:00410B4F 90                      nop
:00410B50 64A100000000            mov eax, dword ptr fs:[00000000]
:00410B56 6AFF                    push FFFFFFFF
:00410B58 68D8076D00              push 006D07D8
:00410B5D 50                      push eax
:00410B5E 8B442410                mov eax, dword ptr [esp+10]
:00410B62 64892500000000          mov dword ptr fs:[00000000], esp
:00410B69 56                      push esi
:00410B6A 8BF1                    mov esi, ecx
:00410B6C 8B4004                  mov eax, dword ptr [eax+04]
:00410B6F 57                      push edi
:00410B70 8B4824                  mov ecx, dword ptr [eax+24]
:00410B73 894C2418                mov dword ptr [esp+18], ecx
:00410B77 FF41F4                  inc [ecx-0C]
:00410B7A 8B7820                  mov edi, dword ptr [eax+20]
:00410B7D 8D4C2418                lea ecx, dword ptr [esp+18]
:00410B81 51                      push ecx
:00410B82 8B8EB2160000            mov ecx, dword ptr [esi+000016B2]
:00410B88 C744241400000000        mov [esp+14], 00000000
:00410B90 E83BB80400              call 0045C3D0
:00410B95 8A86F4000000            mov al, byte ptr [esi+000000F4]
:00410B9B 84C0                    test al, al
:00410B9D 7519                    jne 00410BB8
:00410B9F 8B8E82150000            mov ecx, dword ptr [esi+00001582]
:00410BA5 8D14BF                  lea edx, dword ptr [edi+4*edi]
:00410BA8 8D44123A                lea eax, dword ptr [edx+edx+3A]
:00410BAC 8B11                    mov edx, dword ptr [ecx]
:00410BAE 50                      push eax
:00410BAF FF5258                  call [edx+58]
:00410BB2 89BE86150000            mov dword ptr [esi+00001586], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410B9D(C)
|
:00410BB8 8B442418                mov eax, dword ptr [esp+18]
:00410BBC C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00410BC4 83C0F4                  add eax, FFFFFFF4
:00410BC7 8B08                    mov ecx, dword ptr [eax]
:00410BC9 49                      dec ecx
:00410BCA 8908                    mov dword ptr [eax], ecx
:00410BCC 7509                    jne 00410BD7
:00410BCE 50                      push eax
:00410BCF E82C071D00              call 005E1300
:00410BD4 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410BCC(C)
|
:00410BD7 8B4C2408                mov ecx, dword ptr [esp+08]
:00410BDB 5F                      pop edi
:00410BDC 64890D00000000          mov dword ptr fs:[00000000], ecx
:00410BE3 5E                      pop esi
:00410BE4 83C40C                  add esp, 0000000C
:00410BE7 C20400                  ret 0004


:00410BEA 90                      nop
:00410BEB 90                      nop
:00410BEC 90                      nop
:00410BED 90                      nop
:00410BEE 90                      nop
:00410BEF 90                      nop

* Referenced by a CALL at Address:
|:0040A385   
|
:00410BF0 6AFF                    push FFFFFFFF
:00410BF2 68CD086D00              push 006D08CD
:00410BF7 64A100000000            mov eax, dword ptr fs:[00000000]
:00410BFD 50                      push eax
:00410BFE 64892500000000          mov dword ptr fs:[00000000], esp
:00410C05 83EC70                  sub esp, 00000070
:00410C08 53                      push ebx
:00410C09 55                      push ebp
:00410C0A 56                      push esi
:00410C0B 57                      push edi
:00410C0C 33DB                    xor ebx, ebx
:00410C0E 8BF9                    mov edi, ecx
:00410C10 683F010000              push 0000013F
:00410C15 33ED                    xor ebp, ebp
:00410C17 895C2414                mov dword ptr [esp+14], ebx
:00410C1B E860061D00              call 005E1280
:00410C20 8BF0                    mov esi, eax
:00410C22 83C404                  add esp, 00000004
:00410C25 89742428                mov dword ptr [esp+28], esi
:00410C29 3BF5                    cmp esi, ebp
:00410C2B 89AC2488000000          mov dword ptr [esp+00000088], ebp
:00410C32 0F84E1000000            je 00410D19
:00410C38 A128FE7200              mov eax, dword ptr [0072FE28]
:00410C3D 8D4C2414                lea ecx, dword ptr [esp+14]
:00410C41 50                      push eax

* Possible StringData Ref from Data Obj ->"name_otraits"
                                  |
:00410C42 6800B97800              push 0078B900
:00410C47 E864A41D00              call 005EB0B0
:00410C4C 8D4C2414                lea ecx, dword ptr [esp+14]
:00410C50 8D542418                lea edx, dword ptr [esp+18]
:00410C54 51                      push ecx
:00410C55 52                      push edx
:00410C56 B9D7AF7A00              mov ecx, 007AAFD7
:00410C5B C684249000000001        mov byte ptr [esp+00000090], 01
:00410C63 BDE0AF4000              mov ebp, 0040AFE0
:00410C68 C744241803000000        mov [esp+18], 00000003
:00410C70 E82B8BFFFF              call 004097A0
:00410C75 89442424                mov dword ptr [esp+24], eax
:00410C79 33C0                    xor eax, eax
:00410C7B BB07000000              mov ebx, 00000007
:00410C80 50                      push eax
:00410C81 8D442448                lea eax, dword ptr [esp+48]
:00410C85 55                      push ebp
:00410C86 50                      push eax
:00410C87 8BCF                    mov ecx, edi
:00410C89 C784249400000002000000  mov dword ptr [esp+00000094], 00000002
:00410C94 895C241C                mov dword ptr [esp+1C], ebx
:00410C98 E8A3310000              call 00413E40
:00410C9D 8B4C2424                mov ecx, dword ptr [esp+24]
:00410CA1 6A00                    push 00000000
:00410CA3 51                      push ecx
:00410CA4 8D542434                lea edx, dword ptr [esp+34]
:00410CA8 50                      push eax
:00410CA9 52                      push edx
:00410CAA 57                      push edi
:00410CAB 8BCE                    mov ecx, esi
:00410CAD C784249C00000003000000  mov dword ptr [esp+0000009C], 00000003
:00410CB8 C74424402D000000        mov [esp+40], 0000002D
:00410CC0 C74424443D010000        mov [esp+44], 0000013D
:00410CC8 C7442448E1000000        mov [esp+48], 000000E1
:00410CD0 C744244C58010000        mov [esp+4C], 00000158
:00410CD8 E8F3DF1700              call 0058ECD0
:00410CDD 8B86D4000000            mov eax, dword ptr [esi+000000D4]
:00410CE3 8BCE                    mov ecx, esi
:00410CE5 83C058                  add eax, 00000058
:00410CE8 C784248800000004000000  mov dword ptr [esp+00000088], 00000004
:00410CF3 50                      push eax
:00410CF4 C7066C937000            mov dword ptr [esi], 0070936C
:00410CFA C7460864937000          mov [esi+08], 00709364
:00410D01 E81A7D1F00              call 00608A20
:00410D06 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00410D0C 8B512C                  mov edx, dword ptr [ecx+2C]
:00410D0F 8BCE                    mov ecx, esi
:00410D11 52                      push edx
:00410D12 E8697D1F00              call 00608A80
:00410D17 8BEE                    mov ebp, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410C32(C)
|
:00410D19 BE06000000              mov esi, 00000006
:00410D1E F6C304                  test bl, 04
:00410D21 89B42488000000          mov dword ptr [esp+00000088], esi
:00410D28 7419                    je 00410D43
:00410D2A 8B4C2444                mov ecx, dword ptr [esp+44]
:00410D2E 83E3FB                  and ebx, FFFFFFFB
:00410D31 85C9                    test ecx, ecx
:00410D33 895C2410                mov dword ptr [esp+10], ebx
:00410D37 740A                    je 00410D43
:00410D39 8D442444                lea eax, dword ptr [esp+44]
:00410D3D 50                      push eax
:00410D3E E8DDD51E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410D28(C), :00410D37(C)
|
:00410D43 F6C302                  test bl, 02
:00410D46 C784248800000005000000  mov dword ptr [esp+00000088], 00000005
:00410D51 741F                    je 00410D72
:00410D53 8B4C2418                mov ecx, dword ptr [esp+18]
:00410D57 83E3FD                  and ebx, FFFFFFFD
:00410D5A 895C2410                mov dword ptr [esp+10], ebx
:00410D5E 8D41F4                  lea eax, dword ptr [ecx-0C]
:00410D61 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00410D64 49                      dec ecx
:00410D65 8908                    mov dword ptr [eax], ecx
:00410D67 7509                    jne 00410D72
:00410D69 50                      push eax
:00410D6A E891051D00              call 005E1300
:00410D6F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410D51(C), :00410D67(C)
|
:00410D72 F6C301                  test bl, 01
:00410D75 C7842488000000FFFFFFFF  mov dword ptr [esp+00000088], FFFFFFFF
:00410D80 741B                    je 00410D9D
:00410D82 8B542414                mov edx, dword ptr [esp+14]
:00410D86 83E3FE                  and ebx, FFFFFFFE
:00410D89 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00410D8C 8D42F4                  lea eax, dword ptr [edx-0C]
:00410D8F 49                      dec ecx
:00410D90 8908                    mov dword ptr [eax], ecx
:00410D92 7509                    jne 00410D9D
:00410D94 50                      push eax
:00410D95 E866051D00              call 005E1300
:00410D9A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410D80(C), :00410D92(C)
|
:00410D9D A128FE7200              mov eax, dword ptr [0072FE28]
:00410DA2 8D4C2424                lea ecx, dword ptr [esp+24]
:00410DA6 50                      push eax

* Possible StringData Ref from Data Obj ->"otraits"
                                  |
:00410DA7 68F8B87800              push 0078B8F8
:00410DAC E8FFA21D00              call 005EB0B0
:00410DB1 50                      push eax
:00410DB2 8D4D24                  lea ecx, dword ptr [ebp+24]
:00410DB5 C784248C00000008000000  mov dword ptr [esp+0000008C], 00000008
:00410DC0 E85BA51D00              call 005EB320
:00410DC5 8B4C2424                mov ecx, dword ptr [esp+24]
:00410DC9 C7842488000000FFFFFFFF  mov dword ptr [esp+00000088], FFFFFFFF
:00410DD4 8D41F4                  lea eax, dword ptr [ecx-0C]
:00410DD7 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00410DDA 49                      dec ecx
:00410DDB 8908                    mov dword ptr [eax], ecx
:00410DDD 7509                    jne 00410DE8
:00410DDF 50                      push eax
:00410DE0 E81B051D00              call 005E1300
:00410DE5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410DDD(C)
|
:00410DE8 BD23000000              mov ebp, 00000023
:00410DED C74424305A010000        mov [esp+30], 0000015A
:00410DF5 896C242C                mov dword ptr [esp+2C], ebp
:00410DF9 89742424                mov dword ptr [esp+24], esi
:00410DFD C744241400000000        mov [esp+14], 00000000
:00410E05 EB04                    jmp 00410E0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041108D(C)
|
:00410E07 8B6C242C                mov ebp, dword ptr [esp+2C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410E05(U)
|
:00410E0B 683F010000              push 0000013F
:00410E10 E86B041D00              call 005E1280
:00410E15 83C404                  add esp, 00000004
:00410E18 89442428                mov dword ptr [esp+28], eax
:00410E1C 85C0                    test eax, eax
:00410E1E C784248800000009000000  mov dword ptr [esp+00000088], 00000009
:00410E29 747D                    je 00410EA8
:00410E2B 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00410E31 8D4C2418                lea ecx, dword ptr [esp+18]
:00410E35 52                      push edx
:00410E36 6868987A00              push 007A9868
:00410E3B E870A21D00              call 005EB0B0
:00410E40 83CB08                  or ebx, 00000008
:00410E43 8B542430                mov edx, dword ptr [esp+30]
:00410E47 33C9                    xor ecx, ecx
:00410E49 B8E0AF4000              mov eax, 0040AFE0
:00410E4E 51                      push ecx
:00410E4F 50                      push eax
:00410E50 8D442460                lea eax, dword ptr [esp+60]
:00410E54 83CB10                  or ebx, 00000010
:00410E57 50                      push eax
:00410E58 8BCF                    mov ecx, edi
:00410E5A C68424940000000A        mov byte ptr [esp+00000094], 0A
:00410E62 8D72FF                  lea esi, dword ptr [edx-01]
:00410E65 895C241C                mov dword ptr [esp+1C], ebx
:00410E69 E8D22F0000              call 00413E40
:00410E6E 8D4E0D                  lea ecx, dword ptr [esi+0D]
:00410E71 8D556E                  lea edx, dword ptr [ebp+6E]
:00410E74 894C2450                mov dword ptr [esp+50], ecx
:00410E78 8D4C2418                lea ecx, dword ptr [esp+18]
:00410E7C 8954244C                mov dword ptr [esp+4C], edx
:00410E80 6A00                    push 00000000
:00410E82 51                      push ecx
:00410E83 8B4C2430                mov ecx, dword ptr [esp+30]
:00410E87 8D54244C                lea edx, dword ptr [esp+4C]
:00410E8B 50                      push eax
:00410E8C 52                      push edx
:00410E8D 57                      push edi
:00410E8E C784249C0000000B000000  mov dword ptr [esp+0000009C], 0000000B
:00410E99 896C2458                mov dword ptr [esp+58], ebp
:00410E9D 8974245C                mov dword ptr [esp+5C], esi
:00410EA1 E82ADE1700              call 0058ECD0
:00410EA6 EB02                    jmp 00410EAA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410E29(C)
|
:00410EA8 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410EA6(U)
|
:00410EAA 8B4C2414                mov ecx, dword ptr [esp+14]
:00410EAE C78424880000000C000000  mov dword ptr [esp+00000088], 0000000C
:00410EB9 F6C310                  test bl, 10
:00410EBC 89848F1A160000          mov dword ptr [edi+4*ecx+0000161A], eax
:00410EC3 7419                    je 00410EDE
:00410EC5 8B4C2458                mov ecx, dword ptr [esp+58]
:00410EC9 83E3EF                  and ebx, FFFFFFEF
:00410ECC 85C9                    test ecx, ecx
:00410ECE 895C2410                mov dword ptr [esp+10], ebx
:00410ED2 740A                    je 00410EDE
:00410ED4 8D542458                lea edx, dword ptr [esp+58]
:00410ED8 52                      push edx
:00410ED9 E842D41E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410EC3(C), :00410ED2(C)
|
:00410EDE F6C308                  test bl, 08
:00410EE1 C7842488000000FFFFFFFF  mov dword ptr [esp+00000088], FFFFFFFF
:00410EEC 741A                    je 00410F08
:00410EEE 8B442418                mov eax, dword ptr [esp+18]
:00410EF2 83E3F7                  and ebx, FFFFFFF7
:00410EF5 83C0F4                  add eax, FFFFFFF4
:00410EF8 8B08                    mov ecx, dword ptr [eax]
:00410EFA 49                      dec ecx
:00410EFB 8908                    mov dword ptr [eax], ecx
:00410EFD 7509                    jne 00410F08
:00410EFF 50                      push eax
:00410F00 E8FB031D00              call 005E1300
:00410F05 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410EEC(C), :00410EFD(C)
|
:00410F08 681C010000              push 0000011C
:00410F0D E86E031D00              call 005E1280
:00410F12 8BE8                    mov ebp, eax
:00410F14 83C404                  add esp, 00000004
:00410F17 896C2428                mov dword ptr [esp+28], ebp
:00410F1B 85ED                    test ebp, ebp
:00410F1D C78424880000000E000000  mov dword ptr [esp+00000088], 0000000E
:00410F28 0F849D000000            je 00410FCB
:00410F2E 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:00410F34 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/btn/tag_dn"
                                  |
:00410F35 68C4B87800              push 0078B8C4
:00410F3A 8D4C2428                lea ecx, dword ptr [esp+28]
:00410F3E E86DA11D00              call 005EB0B0
:00410F43 83CB20                  or ebx, 00000020
:00410F46 895C2410                mov dword ptr [esp+10], ebx
:00410F4A 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00410F50 8D4C241C                lea ecx, dword ptr [esp+1C]
:00410F54 52                      push edx

* Possible StringData Ref from Data Obj ->"gui/btn/tag_up"
                                  |
:00410F55 68B4B87800              push 0078B8B4
:00410F5A C68424900000000F        mov byte ptr [esp+00000090], 0F
:00410F62 E849A11D00              call 005EB0B0
:00410F67 83CB40                  or ebx, 00000040
:00410F6A 8B542430                mov edx, dword ptr [esp+30]
:00410F6E 33C9                    xor ecx, ecx
:00410F70 B860144100              mov eax, 00411460
:00410F75 51                      push ecx
:00410F76 50                      push eax
:00410F77 8D442474                lea eax, dword ptr [esp+74]
:00410F7B 80CB80                  or bl, 80
:00410F7E 50                      push eax
:00410F7F 8BCF                    mov ecx, edi
:00410F81 C784249400000010000000  mov dword ptr [esp+00000094], 00000010
:00410F8C 8D7201                  lea esi, dword ptr [edx+01]
:00410F8F 895C241C                mov dword ptr [esp+1C], ebx
:00410F93 E8A82E0000              call 00413E40
:00410F98 8B4C2424                mov ecx, dword ptr [esp+24]
:00410F9C 8D542420                lea edx, dword ptr [esp+20]
:00410FA0 894C243C                mov dword ptr [esp+3C], ecx
:00410FA4 6A00                    push 00000000
:00410FA6 8D4C2420                lea ecx, dword ptr [esp+20]
:00410FAA 52                      push edx
:00410FAB 51                      push ecx
:00410FAC 8D542448                lea edx, dword ptr [esp+48]
:00410FB0 50                      push eax
:00410FB1 52                      push edx
:00410FB2 57                      push edi
:00410FB3 8BCD                    mov ecx, ebp
:00410FB5 C78424A000000011000000  mov dword ptr [esp+000000A0], 00000011
:00410FC0 89742458                mov dword ptr [esp+58], esi
:00410FC4 E8278F1F00              call 00609EF0
:00410FC9 EB02                    jmp 00410FCD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410F28(C)
|
:00410FCB 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410FC9(U)
|
:00410FCD 8B742414                mov esi, dword ptr [esp+14]
:00410FD1 C784248800000013000000  mov dword ptr [esp+00000088], 00000013
:00410FDC F6C380                  test bl, 80
:00410FDF 8984B78A150000          mov dword ptr [edi+4*esi+0000158A], eax
:00410FE6 7419                    je 00411001
:00410FE8 8B4C246C                mov ecx, dword ptr [esp+6C]
:00410FEC 80E37F                  and bl, 7F
:00410FEF 85C9                    test ecx, ecx
:00410FF1 895C2410                mov dword ptr [esp+10], ebx
:00410FF5 740A                    je 00411001
:00410FF7 8D44246C                lea eax, dword ptr [esp+6C]
:00410FFB 50                      push eax
:00410FFC E81FD31E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410FE6(C), :00410FF5(C)
|
:00411001 F6C340                  test bl, 40
:00411004 C784248800000012000000  mov dword ptr [esp+00000088], 00000012
:0041100F 741F                    je 00411030
:00411011 8B4C241C                mov ecx, dword ptr [esp+1C]
:00411015 83E3BF                  and ebx, FFFFFFBF
:00411018 895C2410                mov dword ptr [esp+10], ebx
:0041101C 8D41F4                  lea eax, dword ptr [ecx-0C]
:0041101F 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00411022 49                      dec ecx
:00411023 8908                    mov dword ptr [eax], ecx
:00411025 7509                    jne 00411030
:00411027 50                      push eax
:00411028 E8D3021D00              call 005E1300
:0041102D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041100F(C), :00411025(C)
|
:00411030 F6C320                  test bl, 20
:00411033 C7842488000000FFFFFFFF  mov dword ptr [esp+00000088], FFFFFFFF
:0041103E 741B                    je 0041105B
:00411040 8B542420                mov edx, dword ptr [esp+20]
:00411044 83E3DF                  and ebx, FFFFFFDF
:00411047 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0041104A 8D42F4                  lea eax, dword ptr [edx-0C]
:0041104D 49                      dec ecx
:0041104E 8908                    mov dword ptr [eax], ecx
:00411050 7509                    jne 0041105B
:00411052 50                      push eax
:00411053 E8A8021D00              call 005E1300
:00411058 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041103E(C), :00411050(C)
|
:0041105B 8B542430                mov edx, dword ptr [esp+30]
:0041105F 8D4601                  lea eax, dword ptr [esi+01]
:00411062 83C20D                  add edx, 0000000D
:00411065 83F808                  cmp eax, 00000008
:00411068 89542430                mov dword ptr [esp+30], edx
:0041106C 7518                    jne 00411086
:0041106E C74424305A010000        mov [esp+30], 0000015A
:00411076 C744242CA0000000        mov [esp+2C], 000000A0
:0041107E C744242417010000        mov [esp+24], 00000117

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041106C(C)
|
:00411086 83F810                  cmp eax, 00000010
:00411089 89442414                mov dword ptr [esp+14], eax
:0041108D 0F8C74FDFFFF            jl 00410E07
:00411093 8B8C2480000000          mov ecx, dword ptr [esp+00000080]
:0041109A 5F                      pop edi
:0041109B 5E                      pop esi
:0041109C 5D                      pop ebp
:0041109D 5B                      pop ebx
:0041109E 64890D00000000          mov dword ptr fs:[00000000], ecx
:004110A5 83C47C                  add esp, 0000007C
:004110A8 C3                      ret


:004110A9 90                      nop
:004110AA 90                      nop
:004110AB 90                      nop
:004110AC 90                      nop
:004110AD 90                      nop
:004110AE 90                      nop
:004110AF 90                      nop

* Referenced by a CALL at Address:
|:0040B029   
|
:004110B0 6AFF                    push FFFFFFFF
:004110B2 680F096D00              push 006D090F
:004110B7 64A100000000            mov eax, dword ptr fs:[00000000]
:004110BD 50                      push eax
:004110BE 64892500000000          mov dword ptr fs:[00000000], esp
:004110C5 83EC38                  sub esp, 00000038
:004110C8 A128FE7200              mov eax, dword ptr [0072FE28]
:004110CD 53                      push ebx
:004110CE 55                      push ebp
:004110CF 56                      push esi
:004110D0 57                      push edi
:004110D1 894C241C                mov dword ptr [esp+1C], ecx
:004110D5 33FF                    xor edi, edi
:004110D7 8DB131130000            lea esi, dword ptr [ecx+00001331]
:004110DD 50                      push eax

* Possible StringData Ref from Data Obj ->"Mutant"
                                  |
:004110DE 6834B97800              push 0078B934
:004110E3 8D4C2428                lea ecx, dword ptr [esp+28]
:004110E7 897C241C                mov dword ptr [esp+1C], edi
:004110EB 897C2418                mov dword ptr [esp+18], edi
:004110EF E8BC9F1D00              call 005EB0B0
:004110F4 8B0E                    mov ecx, dword ptr [esi]
:004110F6 8B10                    mov edx, dword ptr [eax]
:004110F8 3BCA                    cmp ecx, edx
:004110FA 897C2450                mov dword ptr [esp+50], edi
:004110FE 7504                    jne 00411104
:00411100 33C0                    xor eax, eax
:00411102 EB12                    jmp 00411116

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004110FE(C)
|
:00411104 8B52FC                  mov edx, dword ptr [edx-04]
:00411107 8B49FC                  mov ecx, dword ptr [ecx-04]
:0041110A 52                      push edx
:0041110B 57                      push edi
:0041110C 50                      push eax
:0041110D 51                      push ecx
:0041110E 57                      push edi
:0041110F 8BCE                    mov ecx, esi
:00411111 E8BAA61D00              call 005EB7D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411102(U)
|
:00411116 8B4C2420                mov ecx, dword ptr [esp+20]
:0041111A 3BC7                    cmp eax, edi
:0041111C 0F94C3                  sete bl
:0041111F 8D41F4                  lea eax, dword ptr [ecx-0C]
:00411122 83CDFF                  or ebp, FFFFFFFF
:00411125 896C2450                mov dword ptr [esp+50], ebp
:00411129 8B08                    mov ecx, dword ptr [eax]
:0041112B 49                      dec ecx
:0041112C 8908                    mov dword ptr [eax], ecx
:0041112E 7509                    jne 00411139
:00411130 50                      push eax
:00411131 E8CA011D00              call 005E1300
:00411136 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041112E(C)
|
:00411139 84DB                    test bl, bl
:0041113B 7408                    je 00411145
:0041113D C744241008A87A00        mov [esp+10], 007AA808

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041113B(C)
|
:00411145 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0041114B 8D4C2420                lea ecx, dword ptr [esp+20]
:0041114F 52                      push edx

* Possible StringData Ref from Data Obj ->"Deathclaw"
                                  |
:00411150 6828B97800              push 0078B928
:00411155 E8569F1D00              call 005EB0B0
:0041115A 8B0E                    mov ecx, dword ptr [esi]
:0041115C 8B10                    mov edx, dword ptr [eax]
:0041115E 3BCA                    cmp ecx, edx
:00411160 C744245001000000        mov [esp+50], 00000001
:00411168 7504                    jne 0041116E
:0041116A 33C0                    xor eax, eax
:0041116C EB12                    jmp 00411180

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411168(C)
|
:0041116E 8B52FC                  mov edx, dword ptr [edx-04]
:00411171 8B49FC                  mov ecx, dword ptr [ecx-04]
:00411174 52                      push edx
:00411175 57                      push edi
:00411176 50                      push eax
:00411177 51                      push ecx
:00411178 57                      push edi
:00411179 8BCE                    mov ecx, esi
:0041117B E850A61D00              call 005EB7D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041116C(U)
|
:00411180 3BC7                    cmp eax, edi
:00411182 8B442420                mov eax, dword ptr [esp+20]
:00411186 0F94C3                  sete bl
:00411189 8B48F4                  mov ecx, dword ptr [eax-0C]
:0041118C 83C0F4                  add eax, FFFFFFF4
:0041118F 49                      dec ecx
:00411190 896C2450                mov dword ptr [esp+50], ebp
:00411194 8908                    mov dword ptr [eax], ecx
:00411196 7509                    jne 004111A1
:00411198 50                      push eax
:00411199 E862011D00              call 005E1300
:0041119E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411196(C)
|
:004111A1 84DB                    test bl, bl
:004111A3 7408                    je 004111AD
:004111A5 C744241060A87A00        mov [esp+10], 007AA860

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004111A3(C)
|
:004111AD 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:004111B3 51                      push ecx

* Possible StringData Ref from Data Obj ->"Ghoul"
                                  |
:004111B4 6820B97800              push 0078B920
:004111B9 8D4C2428                lea ecx, dword ptr [esp+28]
:004111BD E8EE9E1D00              call 005EB0B0
:004111C2 8B16                    mov edx, dword ptr [esi]
:004111C4 8B08                    mov ecx, dword ptr [eax]
:004111C6 3BD1                    cmp edx, ecx
:004111C8 C744245002000000        mov [esp+50], 00000002
:004111D0 7504                    jne 004111D6
:004111D2 33C0                    xor eax, eax
:004111D4 EB12                    jmp 004111E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004111D0(C)
|
:004111D6 8B49FC                  mov ecx, dword ptr [ecx-04]
:004111D9 8B52FC                  mov edx, dword ptr [edx-04]
:004111DC 51                      push ecx
:004111DD 57                      push edi
:004111DE 50                      push eax
:004111DF 52                      push edx
:004111E0 57                      push edi
:004111E1 8BCE                    mov ecx, esi
:004111E3 E8E8A51D00              call 005EB7D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004111D4(U)
|
:004111E8 8B542420                mov edx, dword ptr [esp+20]
:004111EC 3BC7                    cmp eax, edi
:004111EE 0F94C3                  sete bl
:004111F1 8B4AF4                  mov ecx, dword ptr [edx-0C]
:004111F4 8D42F4                  lea eax, dword ptr [edx-0C]
:004111F7 49                      dec ecx
:004111F8 896C2450                mov dword ptr [esp+50], ebp
:004111FC 8908                    mov dword ptr [eax], ecx
:004111FE 7509                    jne 00411209
:00411200 50                      push eax
:00411201 E8FA001D00              call 005E1300
:00411206 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004111FE(C)
|
:00411209 84DB                    test bl, bl
:0041120B 7408                    je 00411215
:0041120D C7442410E0A77A00        mov [esp+10], 007AA7E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041120B(C)
|
:00411215 A128FE7200              mov eax, dword ptr [0072FE28]
:0041121A 8D4C2420                lea ecx, dword ptr [esp+20]
:0041121E 50                      push eax

* Possible StringData Ref from Data Obj ->"RobotHumanoid"
                                  |
:0041121F 6810B97800              push 0078B910
:00411224 E8879E1D00              call 005EB0B0
:00411229 8B16                    mov edx, dword ptr [esi]
:0041122B 8B08                    mov ecx, dword ptr [eax]
:0041122D 3BD1                    cmp edx, ecx
:0041122F C744245003000000        mov [esp+50], 00000003
:00411237 7504                    jne 0041123D
:00411239 33C0                    xor eax, eax
:0041123B EB12                    jmp 0041124F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411237(C)
|
:0041123D 8B49FC                  mov ecx, dword ptr [ecx-04]
:00411240 8B52FC                  mov edx, dword ptr [edx-04]
:00411243 51                      push ecx
:00411244 57                      push edi
:00411245 50                      push eax
:00411246 52                      push edx
:00411247 57                      push edi
:00411248 8BCE                    mov ecx, esi
:0041124A E881A51D00              call 005EB7D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041123B(U)
|
:0041124F 8B4C2420                mov ecx, dword ptr [esp+20]
:00411253 3BC7                    cmp eax, edi
:00411255 0F94C3                  sete bl
:00411258 8D41F4                  lea eax, dword ptr [ecx-0C]
:0041125B 896C2450                mov dword ptr [esp+50], ebp
:0041125F 8B08                    mov ecx, dword ptr [eax]
:00411261 49                      dec ecx
:00411262 8908                    mov dword ptr [eax], ecx
:00411264 7509                    jne 0041126F
:00411266 50                      push eax
:00411267 E894001D00              call 005E1300
:0041126C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411264(C)
|
:0041126F 84DB                    test bl, bl
:00411271 7408                    je 0041127B
:00411273 C744241030A87A00        mov [esp+10], 007AA830

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411271(C)
|
:0041127B 8B54241C                mov edx, dword ptr [esp+1C]

* Possible Indirect StringData Ref from Data Obj ->"fastMetabolism"
                                  |
:0041127F B994427900              mov ecx, 00794294
:00411284 894C2420                mov dword ptr [esp+20], ecx
:00411288 8DAA1A160000            lea ebp, dword ptr [edx+0000161A]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041143D(C)
|
:0041128E 837C241410              cmp dword ptr [esp+14], 00000010
:00411293 0F8DAA010000            jnl 00411443
:00411299 8B442410                mov eax, dword ptr [esp+10]
:0041129D 85C0                    test eax, eax
:0041129F 740B                    je 004112AC
:004112A1 807C070401              cmp byte ptr [edi+eax+04], 01
:004112A6 0F857F010000            jne 0041142B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041129F(C)
|
:004112AC 8B44241C                mov eax, dword ptr [esp+1C]
:004112B0 8B1528FE7200            mov edx, dword ptr [0072FE28]
:004112B6 52                      push edx
:004112B7 8A9C07260B0000          mov bl, byte ptr [edi+eax+00000B26]
:004112BE 8B01                    mov eax, dword ptr [ecx]
:004112C0 50                      push eax
:004112C1 8D4C2420                lea ecx, dword ptr [esp+20]
:004112C5 885C242C                mov byte ptr [esp+2C], bl
:004112C9 E8E29D1D00              call 005EB0B0
:004112CE 84DB                    test bl, bl
:004112D0 C744245004000000        mov [esp+50], 00000004
:004112D8 7438                    je 00411312
:004112DA 8B0D10997A00            mov ecx, dword ptr [007A9910]
:004112E0 8B1514997A00            mov edx, dword ptr [007A9914]
:004112E6 A118997A00              mov eax, dword ptr [007A9918]
:004112EB 894C243C                mov dword ptr [esp+3C], ecx
:004112EF 8B0D38B67A00            mov ecx, dword ptr [007AB638]
:004112F5 89542440                mov dword ptr [esp+40], edx
:004112F9 8B153CB67A00            mov edx, dword ptr [007AB63C]
:004112FF 89442444                mov dword ptr [esp+44], eax
:00411303 A140B67A00              mov eax, dword ptr [007AB640]
:00411308 894C2430                mov dword ptr [esp+30], ecx
:0041130C 89542434                mov dword ptr [esp+34], edx
:00411310 EB36                    jmp 00411348

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004112D8(C)
|
:00411312 8B0D00997A00            mov ecx, dword ptr [007A9900]
:00411318 8B1504997A00            mov edx, dword ptr [007A9904]
:0041131E A108997A00              mov eax, dword ptr [007A9908]
:00411323 894C243C                mov dword ptr [esp+3C], ecx
:00411327 8B0D70987A00            mov ecx, dword ptr [007A9870]
:0041132D 89542440                mov dword ptr [esp+40], edx
:00411331 8B1574987A00            mov edx, dword ptr [007A9874]
:00411337 89442444                mov dword ptr [esp+44], eax
:0041133B A178987A00              mov eax, dword ptr [007A9878]
:00411340 894C2430                mov dword ptr [esp+30], ecx
:00411344 89542434                mov dword ptr [esp+34], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411310(U)
|
:00411348 8B4C2424                mov ecx, dword ptr [esp+24]
:0041134C 8BB570FFFFFF            mov esi, dword ptr [ebp+FFFFFF70]
:00411352 6A00                    push 00000000
:00411354 51                      push ecx
:00411355 8BCE                    mov ecx, esi
:00411357 89442440                mov dword ptr [esp+40], eax
:0041135B E860841F00              call 006097C0
:00411360 897E20                  mov dword ptr [esi+20], edi
:00411363 8B7500                  mov esi, dword ptr [ebp+00]
:00411366 8D542430                lea edx, dword ptr [esp+30]
:0041136A 8BCE                    mov ecx, esi
:0041136C 52                      push edx
:0041136D E8FEDA1700              call 0058EE70
:00411372 8D44243C                lea eax, dword ptr [esp+3C]
:00411376 8BCE                    mov ecx, esi
:00411378 50                      push eax
:00411379 E8A2761F00              call 00608A20
:0041137E 8D4C2418                lea ecx, dword ptr [esp+18]
:00411382 897E20                  mov dword ptr [esi+20], edi
:00411385 51                      push ecx
:00411386 8D4E24                  lea ecx, dword ptr [esi+24]
:00411389 E8929F1D00              call 005EB320
:0041138E 8D542418                lea edx, dword ptr [esp+18]
:00411392 8D44242C                lea eax, dword ptr [esp+2C]
:00411396 52                      push edx

* Possible StringData Ref from Data Obj ->"short_"
                                  |
:00411397 6860B77800              push 0078B760
:0041139C 50                      push eax
:0041139D E80E320000              call 004145B0
:004113A2 83C40C                  add esp, 0000000C
:004113A5 8D4C2428                lea ecx, dword ptr [esp+28]
:004113A9 50                      push eax
:004113AA 51                      push ecx
:004113AB B9D7AF7A00              mov ecx, 007AAFD7
:004113B0 C644245805              mov [esp+58], 05
:004113B5 E8E683FFFF              call 004097A0
:004113BA 50                      push eax
:004113BB 8BCE                    mov ecx, esi
:004113BD C644245406              mov [esp+54], 06
:004113C2 E809761F00              call 006089D0
:004113C7 8B542428                mov edx, dword ptr [esp+28]
:004113CB C644245005              mov [esp+50], 05
:004113D0 8B4AF4                  mov ecx, dword ptr [edx-0C]
:004113D3 8D42F4                  lea eax, dword ptr [edx-0C]
:004113D6 49                      dec ecx
:004113D7 8908                    mov dword ptr [eax], ecx
:004113D9 7509                    jne 004113E4
:004113DB 50                      push eax
:004113DC E81FFF1C00              call 005E1300
:004113E1 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004113D9(C)
|
:004113E4 8B44242C                mov eax, dword ptr [esp+2C]
:004113E8 C644245004              mov [esp+50], 04
:004113ED 83C0F4                  add eax, FFFFFFF4
:004113F0 8B08                    mov ecx, dword ptr [eax]
:004113F2 49                      dec ecx
:004113F3 8908                    mov dword ptr [eax], ecx
:004113F5 7509                    jne 00411400
:004113F7 50                      push eax
:004113F8 E803FF1C00              call 005E1300
:004113FD 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004113F5(C)
|
:00411400 8B4C2418                mov ecx, dword ptr [esp+18]
:00411404 8B742414                mov esi, dword ptr [esp+14]
:00411408 46                      inc esi
:00411409 83C504                  add ebp, 00000004
:0041140C 8D41F4                  lea eax, dword ptr [ecx-0C]
:0041140F 89742414                mov dword ptr [esp+14], esi
:00411413 C7442450FFFFFFFF        mov [esp+50], FFFFFFFF
:0041141B 8B08                    mov ecx, dword ptr [eax]
:0041141D 49                      dec ecx
:0041141E 8908                    mov dword ptr [eax], ecx
:00411420 7509                    jne 0041142B
:00411422 50                      push eax
:00411423 E8D8FE1C00              call 005E1300
:00411428 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004112A6(C), :00411420(C)
|
:0041142B 8B4C2420                mov ecx, dword ptr [esp+20]
:0041142F 47                      inc edi
:00411430 83C104                  add ecx, 00000004
:00411433 81F924437900            cmp ecx, 00794324
:00411439 894C2420                mov dword ptr [esp+20], ecx
:0041143D 0F8C4BFEFFFF            jl 0041128E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411293(C)
|
:00411443 8B4C2448                mov ecx, dword ptr [esp+48]
:00411447 5F                      pop edi
:00411448 5E                      pop esi
:00411449 5D                      pop ebp
:0041144A 5B                      pop ebx
:0041144B 64890D00000000          mov dword ptr fs:[00000000], ecx
:00411452 83C444                  add esp, 00000044
:00411455 C3                      ret


:00411456 90                      nop
:00411457 90                      nop
:00411458 90                      nop
:00411459 90                      nop
:0041145A 90                      nop
:0041145B 90                      nop
:0041145C 90                      nop
:0041145D 90                      nop
:0041145E 90                      nop
:0041145F 90                      nop
:00411460 6AFF                    push FFFFFFFF
:00411462 6831096D00              push 006D0931
:00411467 64A100000000            mov eax, dword ptr fs:[00000000]
:0041146D 50                      push eax
:0041146E 64892500000000          mov dword ptr fs:[00000000], esp
:00411475 83EC10                  sub esp, 00000010
:00411478 8B442420                mov eax, dword ptr [esp+20]
:0041147C 53                      push ebx
:0041147D 56                      push esi
:0041147E 57                      push edi
:0041147F 8B4004                  mov eax, dword ptr [eax+04]
:00411482 8BF1                    mov esi, ecx
:00411484 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0041148A 8B7820                  mov edi, dword ptr [eax+20]
:0041148D 51                      push ecx
:0041148E 8D4C2410                lea ecx, dword ptr [esp+10]
:00411492 8B14BD94427900          mov edx, dword ptr [4*edi+00794294]
:00411499 52                      push edx
:0041149A E8119C1D00              call 005EB0B0
:0041149F 8A84371D020000          mov al, byte ptr [edi+esi+0000021D]
:004114A6 33DB                    xor ebx, ebx
:004114A8 3AC3                    cmp al, bl
:004114AA 895C2424                mov dword ptr [esp+24], ebx
:004114AE 740C                    je 004114BC
:004114B0 889C371D020000          mov byte ptr [edi+esi+0000021D], bl
:004114B7 E99F000000              jmp 0041155B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004114AE(C)
|
:004114BC 8D8E19020000            lea ecx, dword ptr [esi+00000219]
:004114C2 E8E9521400              call 005567B0
:004114C7 85C0                    test eax, eax
:004114C9 740D                    je 004114D8
:004114CB C684371D02000001        mov byte ptr [edi+esi+0000021D], 01
:004114D3 E983000000              jmp 0041155B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004114C9(C)
|
:004114D8 A128FE7200              mov eax, dword ptr [0072FE28]
:004114DD 8D4C242C                lea ecx, dword ptr [esp+2C]
:004114E1 50                      push eax

* Possible StringData Ref from Data Obj ->"char_traitserr"
                                  |
:004114E2 683CB97800              push 0078B93C
:004114E7 E8C49B1D00              call 005EB0B0
:004114EC 8D4C242C                lea ecx, dword ptr [esp+2C]
:004114F0 8D542410                lea edx, dword ptr [esp+10]
:004114F4 51                      push ecx
:004114F5 52                      push edx
:004114F6 B9B0AF7A00              mov ecx, 007AAFB0
:004114FB C644242C01              mov [esp+2C], 01
:00411500 895C241C                mov dword ptr [esp+1C], ebx
:00411504 895C2420                mov dword ptr [esp+20], ebx
:00411508 E89382FFFF              call 004097A0
:0041150D 8D4C2414                lea ecx, dword ptr [esp+14]
:00411511 C644242402              mov [esp+24], 02
:00411516 51                      push ecx
:00411517 6A04                    push 00000004
:00411519 50                      push eax
:0041151A 56                      push esi
:0041151B E8F0F11700              call 00590710
:00411520 8B542420                mov edx, dword ptr [esp+20]
:00411524 83C410                  add esp, 00000010
:00411527 C644242401              mov [esp+24], 01
:0041152C 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0041152F 8D42F4                  lea eax, dword ptr [edx-0C]
:00411532 49                      dec ecx
:00411533 8908                    mov dword ptr [eax], ecx
:00411535 7509                    jne 00411540
:00411537 50                      push eax
:00411538 E8C3FD1C00              call 005E1300
:0041153D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411535(C)
|
:00411540 8B44242C                mov eax, dword ptr [esp+2C]
:00411544 885C2424                mov byte ptr [esp+24], bl
:00411548 83C0F4                  add eax, FFFFFFF4
:0041154B 8B08                    mov ecx, dword ptr [eax]
:0041154D 49                      dec ecx
:0041154E 8908                    mov dword ptr [eax], ecx
:00411550 7509                    jne 0041155B
:00411552 50                      push eax
:00411553 E8A8FD1C00              call 005E1300
:00411558 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004114B7(U), :004114D3(U), :00411550(C)
|
:0041155B 8BCE                    mov ecx, esi
:0041155D E8BE97FFFF              call 0040AD20
:00411562 8B964B010000            mov edx, dword ptr [esi+0000014B]
:00411568 8D8E220B0000            lea ecx, dword ptr [esi+00000B22]
:0041156E 51                      push ecx
:0041156F 52                      push edx
:00411570 E88B9C1500              call 0056B200
:00411575 8B4804                  mov ecx, dword ptr [eax+04]
:00411578 83C408                  add esp, 00000008
:0041157B 898E39130000            mov dword ptr [esi+00001339], ecx
:00411581 8B5008                  mov edx, dword ptr [eax+08]
:00411584 89963D130000            mov dword ptr [esi+0000133D], edx
:0041158A 8B480C                  mov ecx, dword ptr [eax+0C]
:0041158D 898E41130000            mov dword ptr [esi+00001341], ecx
:00411593 8B5010                  mov edx, dword ptr [eax+10]
:00411596 899645130000            mov dword ptr [esi+00001345], edx
:0041159C 8B4814                  mov ecx, dword ptr [eax+14]
:0041159F 898E49130000            mov dword ptr [esi+00001349], ecx
:004115A5 8B5018                  mov edx, dword ptr [eax+18]
:004115A8 89964D130000            mov dword ptr [esi+0000134D], edx
:004115AE 8B481C                  mov ecx, dword ptr [eax+1C]
:004115B1 898E51130000            mov dword ptr [esi+00001351], ecx
:004115B7 8B5024                  mov edx, dword ptr [eax+24]
:004115BA 899659130000            mov dword ptr [esi+00001359], edx
:004115C0 8B4828                  mov ecx, dword ptr [eax+28]
:004115C3 898E5D130000            mov dword ptr [esi+0000135D], ecx
:004115C9 8B502C                  mov edx, dword ptr [eax+2C]
:004115CC 899661130000            mov dword ptr [esi+00001361], edx
:004115D2 8B4830                  mov ecx, dword ptr [eax+30]
:004115D5 898E65130000            mov dword ptr [esi+00001365], ecx
:004115DB 8B5034                  mov edx, dword ptr [eax+34]
:004115DE 899669130000            mov dword ptr [esi+00001369], edx
:004115E4 8B4838                  mov ecx, dword ptr [eax+38]
:004115E7 898E6D130000            mov dword ptr [esi+0000136D], ecx
:004115ED 8B503C                  mov edx, dword ptr [eax+3C]
:004115F0 899671130000            mov dword ptr [esi+00001371], edx
:004115F6 8B4844                  mov ecx, dword ptr [eax+44]
:004115F9 898E79130000            mov dword ptr [esi+00001379], ecx
:004115FF 8B5048                  mov edx, dword ptr [eax+48]
:00411602 89967D130000            mov dword ptr [esi+0000137D], edx
:00411608 8B484C                  mov ecx, dword ptr [eax+4C]
:0041160B 898E81130000            mov dword ptr [esi+00001381], ecx
:00411611 8B5050                  mov edx, dword ptr [eax+50]
:00411614 899685130000            mov dword ptr [esi+00001385], edx
:0041161A 8B4854                  mov ecx, dword ptr [eax+54]
:0041161D 898E89130000            mov dword ptr [esi+00001389], ecx
:00411623 8B5058                  mov edx, dword ptr [eax+58]
:00411626 89968D130000            mov dword ptr [esi+0000138D], edx
:0041162C 8B405C                  mov eax, dword ptr [eax+5C]
:0041162F 8D4C240C                lea ecx, dword ptr [esp+0C]
:00411633 898691130000            mov dword ptr [esi+00001391], eax
:00411639 51                      push ecx
:0041163A 8B8EB2160000            mov ecx, dword ptr [esi+000016B2]
:00411640 E88BAD0400              call 0045C3D0
:00411645 8BCE                    mov ecx, esi
:00411647 E8B499FFFF              call 0040B000
:0041164C 8B54240C                mov edx, dword ptr [esp+0C]
:00411650 5F                      pop edi
:00411651 5E                      pop esi
:00411652 C744241CFFFFFFFF        mov [esp+1C], FFFFFFFF
:0041165A 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0041165D 8D42F4                  lea eax, dword ptr [edx-0C]
:00411660 49                      dec ecx
:00411661 5B                      pop ebx
:00411662 8908                    mov dword ptr [eax], ecx
:00411664 7509                    jne 0041166F
:00411666 50                      push eax
:00411667 E894FC1C00              call 005E1300
:0041166C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411664(C)
|
:0041166F 8B4C2410                mov ecx, dword ptr [esp+10]
:00411673 64890D00000000          mov dword ptr fs:[00000000], ecx
:0041167A 83C41C                  add esp, 0000001C
:0041167D C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040A38C   
|
:00411680 6AFF                    push FFFFFFFF
:00411682 68E90A6D00              push 006D0AE9
:00411687 64A100000000            mov eax, dword ptr fs:[00000000]
:0041168D 50                      push eax
:0041168E 64892500000000          mov dword ptr fs:[00000000], esp
:00411695 83EC64                  sub esp, 00000064
:00411698 53                      push ebx
:00411699 55                      push ebp
:0041169A 56                      push esi
:0041169B 57                      push edi
:0041169C 8BF9                    mov edi, ecx
:0041169E 33DB                    xor ebx, ebx
:004116A0 68F6000000              push 000000F6
:004116A5 897C2420                mov dword ptr [esp+20], edi
:004116A9 33ED                    xor ebp, ebp
:004116AB 895C2414                mov dword ptr [esp+14], ebx
:004116AF E8CCFB1C00              call 005E1280
:004116B4 83C404                  add esp, 00000004
:004116B7 89442428                mov dword ptr [esp+28], eax
:004116BB 3BC5                    cmp eax, ebp
:004116BD 896C247C                mov dword ptr [esp+7C], ebp
:004116C1 7433                    je 004116F6
:004116C3 8D4C2430                lea ecx, dword ptr [esp+30]
:004116C7 C744243002000000        mov [esp+30], 00000002
:004116CF 51                      push ecx
:004116D0 57                      push edi
:004116D1 8BC8                    mov ecx, eax
:004116D3 C744243C3E010000        mov [esp+3C], 0000013E
:004116DB C744244026010000        mov [esp+40], 00000126
:004116E3 C744244462010000        mov [esp+44], 00000162
:004116EB E8D0CC1700              call 0058E3C0
:004116F0 89442418                mov dword ptr [esp+18], eax
:004116F4 EB04                    jmp 004116FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004116C1(C)
|
:004116F6 896C2418                mov dword ptr [esp+18], ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004116F4(U)
|
:004116FA 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00411700 8D4C2414                lea ecx, dword ptr [esp+14]
:00411704 52                      push edx

* Possible StringData Ref from Data Obj ->"perks"
                                  |
:00411705 68F0B97800              push 0078B9F0
:0041170A C7842484000000FFFFFFFF  mov dword ptr [esp+00000084], FFFFFFFF
:00411715 E896991D00              call 005EB0B0
:0041171A 6818010000              push 00000118
:0041171F C784248000000001000000  mov dword ptr [esp+00000080], 00000001
:0041172A E851FB1C00              call 005E1280
:0041172F 8BF0                    mov esi, eax
:00411731 83C404                  add esp, 00000004
:00411734 89742428                mov dword ptr [esp+28], esi
:00411738 3BF5                    cmp esi, ebp
:0041173A C644247C02              mov [esp+7C], 02
:0041173F 747A                    je 004117BB
:00411741 A128FE7200              mov eax, dword ptr [0072FE28]
:00411746 8D4C2420                lea ecx, dword ptr [esp+20]
:0041174A 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/statustab1"
                                  |
:0041174B 68DCB97800              push 0078B9DC
:00411750 E85B991D00              call 005EB0B0
:00411755 B8501F4100              mov eax, 00411F50
:0041175A 55                      push ebp
:0041175B 8D4C2464                lea ecx, dword ptr [esp+64]
:0041175F 50                      push eax
:00411760 BB03000000              mov ebx, 00000003
:00411765 51                      push ecx
:00411766 8BCF                    mov ecx, edi
:00411768 889C2488000000          mov byte ptr [esp+00000088], bl
:0041176F 895C241C                mov dword ptr [esp+1C], ebx
:00411773 E8C8260000              call 00413E40
:00411778 8B4C2418                mov ecx, dword ptr [esp+18]
:0041177C 8D542420                lea edx, dword ptr [esp+20]
:00411780 55                      push ebp
:00411781 52                      push edx
:00411782 50                      push eax
:00411783 8D44244C                lea eax, dword ptr [esp+4C]
:00411787 50                      push eax
:00411788 51                      push ecx
:00411789 8BCE                    mov ecx, esi
:0041178B C784249000000004000000  mov dword ptr [esp+00000090], 00000004
:00411796 C744245406000000        mov [esp+54], 00000006
:0041179E 896C2458                mov dword ptr [esp+58], ebp
:004117A2 C744245C66000000        mov [esp+5C], 00000066
:004117AA C744246024000000        mov [esp+60], 00000024
:004117B2 E8A9CC1700              call 0058E460
:004117B7 8BF8                    mov edi, eax
:004117B9 EB02                    jmp 004117BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041173F(C)
|
:004117BB 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004117B9(U)
|
:004117BD F6C302                  test bl, 02
:004117C0 C744247C05000000        mov [esp+7C], 00000005
:004117C8 7419                    je 004117E3
:004117CA 8B4C2460                mov ecx, dword ptr [esp+60]
:004117CE 83E3FD                  and ebx, FFFFFFFD
:004117D1 3BCD                    cmp ecx, ebp
:004117D3 895C2410                mov dword ptr [esp+10], ebx
:004117D7 740A                    je 004117E3
:004117D9 8D542460                lea edx, dword ptr [esp+60]
:004117DD 52                      push edx
:004117DE E83DCB1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004117C8(C), :004117D7(C)
|
:004117E3 F6C301                  test bl, 01
:004117E6 C744247C01000000        mov [esp+7C], 00000001
:004117EE 741A                    je 0041180A
:004117F0 8B442420                mov eax, dword ptr [esp+20]
:004117F4 83E3FE                  and ebx, FFFFFFFE
:004117F7 83C0F4                  add eax, FFFFFFF4
:004117FA 8B08                    mov ecx, dword ptr [eax]
:004117FC 49                      dec ecx
:004117FD 8908                    mov dword ptr [eax], ecx
:004117FF 7509                    jne 0041180A
:00411801 50                      push eax
:00411802 E8F9FA1C00              call 005E1300
:00411807 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004117EE(C), :004117FF(C)
|
:0041180A 8D4C2414                lea ecx, dword ptr [esp+14]
:0041180E 51                      push ecx
:0041180F 8D4F24                  lea ecx, dword ptr [edi+24]
:00411812 E8099B1D00              call 005EB320
:00411817 680A010000              push 0000010A
:0041181C E85FFA1C00              call 005E1280
:00411821 8BF0                    mov esi, eax
:00411823 83C404                  add esp, 00000004
:00411826 8974242C                mov dword ptr [esp+2C], esi
:0041182A 3BF5                    cmp esi, ebp
:0041182C C644247C07              mov [esp+7C], 07
:00411831 0F84B5000000            je 004118EC
:00411837 8D542414                lea edx, dword ptr [esp+14]
:0041183B 8D442428                lea eax, dword ptr [esp+28]
:0041183F 52                      push edx

* Possible StringData Ref from Data Obj ->"name_"
                                  |
:00411840 68C8B57800              push 0078B5C8
:00411845 50                      push eax
:00411846 83CB04                  or ebx, 00000004
:00411849 E8622D0000              call 004145B0
:0041184E 83C40C                  add esp, 0000000C
:00411851 8D4C2424                lea ecx, dword ptr [esp+24]
:00411855 50                      push eax
:00411856 83CB08                  or ebx, 00000008
:00411859 51                      push ecx
:0041185A B9D7AF7A00              mov ecx, 007AAFD7
:0041185F C684248400000008        mov byte ptr [esp+00000084], 08
:00411867 895C2418                mov dword ptr [esp+18], ebx
:0041186B E8307FFFFF              call 004097A0
:00411870 8B8FCC000000            mov ecx, dword ptr [edi+000000CC]
:00411876 8B97C4000000            mov edx, dword ptr [edi+000000C4]
:0041187C 2BCA                    sub ecx, edx
:0041187E 8B97C8000000            mov edx, dword ptr [edi+000000C8]
:00411884 2B97C0000000            sub edx, dword ptr [edi+000000C0]
:0041188A 6A02                    push 00000002
:0041188C 50                      push eax
:0041188D 894C2464                mov dword ptr [esp+64], ecx
:00411891 89542460                mov dword ptr [esp+60], edx
:00411895 8D542458                lea edx, dword ptr [esp+58]
:00411899 52                      push edx
:0041189A 57                      push edi
:0041189B 8BCE                    mov ecx, esi
:0041189D C784248C00000009000000  mov dword ptr [esp+0000008C], 00000009
:004118A8 896C2460                mov dword ptr [esp+60], ebp
:004118AC 896C2464                mov dword ptr [esp+64], ebp
:004118B0 E8BB330000              call 00414C70
:004118B5 8B86D4000000            mov eax, dword ptr [esi+000000D4]
:004118BB 8BCE                    mov ecx, esi
:004118BD 83C058                  add eax, 00000058
:004118C0 C744247C0A000000        mov [esp+7C], 0000000A
:004118C8 50                      push eax
:004118C9 C706CC977000            mov dword ptr [esi], 007097CC
:004118CF C74608C4977000          mov [esi+08], 007097C4
:004118D6 E845711F00              call 00608A20
:004118DB 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:004118E1 8B512C                  mov edx, dword ptr [ecx+2C]
:004118E4 8BCE                    mov ecx, esi
:004118E6 52                      push edx
:004118E7 E894711F00              call 00608A80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411831(C)
|
:004118EC F6C308                  test bl, 08
:004118EF C744247C0B000000        mov [esp+7C], 0000000B
:004118F7 741E                    je 00411917
:004118F9 8B442424                mov eax, dword ptr [esp+24]
:004118FD 83E3F7                  and ebx, FFFFFFF7
:00411900 83C0F4                  add eax, FFFFFFF4
:00411903 895C2410                mov dword ptr [esp+10], ebx
:00411907 8B08                    mov ecx, dword ptr [eax]
:00411909 49                      dec ecx
:0041190A 8908                    mov dword ptr [eax], ecx
:0041190C 7509                    jne 00411917
:0041190E 50                      push eax
:0041190F E8ECF91C00              call 005E1300
:00411914 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004118F7(C), :0041190C(C)
|
:00411917 F6C304                  test bl, 04
:0041191A C744247C01000000        mov [esp+7C], 00000001
:00411922 741B                    je 0041193F
:00411924 8B4C2428                mov ecx, dword ptr [esp+28]
:00411928 83E3FB                  and ebx, FFFFFFFB
:0041192B 8D41F4                  lea eax, dword ptr [ecx-0C]
:0041192E 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00411931 49                      dec ecx
:00411932 8908                    mov dword ptr [eax], ecx
:00411934 7509                    jne 0041193F
:00411936 50                      push eax
:00411937 E8C4F91C00              call 005E1300
:0041193C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411922(C), :00411934(C)
|
:0041193F 8B4C2418                mov ecx, dword ptr [esp+18]
:00411943 57                      push edi
:00411944 8B11                    mov edx, dword ptr [ecx]
:00411946 FF9268010000            call dword ptr [edx+00000168]
:0041194C 8B7C241C                mov edi, dword ptr [esp+1C]
:00411950 8D442414                lea eax, dword ptr [esp+14]
:00411954 50                      push eax
:00411955 8D8FAA160000            lea ecx, dword ptr [edi+000016AA]
:0041195B E8C0991D00              call 005EB320
:00411960 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:00411966 51                      push ecx

* Possible StringData Ref from Data Obj ->"status"
                                  |
:00411967 68D4B97800              push 0078B9D4
:0041196C 8D4C2430                lea ecx, dword ptr [esp+30]
:00411970 E83B971D00              call 005EB0B0
:00411975 50                      push eax
:00411976 8D4C2418                lea ecx, dword ptr [esp+18]
:0041197A C68424800000000D        mov byte ptr [esp+00000080], 0D
:00411982 E899991D00              call 005EB320
:00411987 8B542428                mov edx, dword ptr [esp+28]
:0041198B C644247C01              mov [esp+7C], 01
:00411990 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00411993 8D42F4                  lea eax, dword ptr [edx-0C]
:00411996 49                      dec ecx
:00411997 8908                    mov dword ptr [eax], ecx
:00411999 7509                    jne 004119A4
:0041199B 50                      push eax
:0041199C E85FF91C00              call 005E1300
:004119A1 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411999(C)
|
:004119A4 6818010000              push 00000118
:004119A9 E8D2F81C00              call 005E1280
:004119AE 8BF0                    mov esi, eax
:004119B0 83C404                  add esp, 00000004
:004119B3 8974242C                mov dword ptr [esp+2C], esi
:004119B7 3BF5                    cmp esi, ebp
:004119B9 C644247C0E              mov [esp+7C], 0E
:004119BE 747C                    je 00411A3C
:004119C0 A128FE7200              mov eax, dword ptr [0072FE28]
:004119C5 8D4C2420                lea ecx, dword ptr [esp+20]
:004119C9 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/statustab2"
                                  |
:004119CA 68C0B97800              push 0078B9C0
:004119CF E8DC961D00              call 005EB0B0
:004119D4 83CB10                  or ebx, 00000010
:004119D7 B8501F4100              mov eax, 00411F50
:004119DC 55                      push ebp
:004119DD 8D4C2464                lea ecx, dword ptr [esp+64]
:004119E1 50                      push eax
:004119E2 83CB20                  or ebx, 00000020
:004119E5 51                      push ecx
:004119E6 8BCF                    mov ecx, edi
:004119E8 C68424880000000F        mov byte ptr [esp+00000088], 0F
:004119F0 895C241C                mov dword ptr [esp+1C], ebx
:004119F4 E847240000              call 00413E40
:004119F9 8B4C2418                mov ecx, dword ptr [esp+18]
:004119FD 8D542420                lea edx, dword ptr [esp+20]
:00411A01 55                      push ebp
:00411A02 52                      push edx
:00411A03 50                      push eax
:00411A04 8D44245C                lea eax, dword ptr [esp+5C]
:00411A08 50                      push eax
:00411A09 51                      push ecx
:00411A0A 8BCE                    mov ecx, esi
:00411A0C C784249000000010000000  mov dword ptr [esp+00000090], 00000010
:00411A17 C744246464000000        mov [esp+64], 00000064
:00411A1F 896C2468                mov dword ptr [esp+68], ebp
:00411A23 C744246CC2000000        mov [esp+6C], 000000C2
:00411A2B C744247024000000        mov [esp+70], 00000024
:00411A33 E828CA1700              call 0058E460
:00411A38 8BF8                    mov edi, eax
:00411A3A EB02                    jmp 00411A3E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004119BE(C)
|
:00411A3C 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411A3A(U)
|
:00411A3E F6C320                  test bl, 20
:00411A41 C744247C11000000        mov [esp+7C], 00000011
:00411A49 7419                    je 00411A64
:00411A4B 8B4C2460                mov ecx, dword ptr [esp+60]
:00411A4F 83E3DF                  and ebx, FFFFFFDF
:00411A52 3BCD                    cmp ecx, ebp
:00411A54 895C2410                mov dword ptr [esp+10], ebx
:00411A58 740A                    je 00411A64
:00411A5A 8D542460                lea edx, dword ptr [esp+60]
:00411A5E 52                      push edx
:00411A5F E8BCC81E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411A49(C), :00411A58(C)
|
:00411A64 F6C310                  test bl, 10
:00411A67 C744247C01000000        mov [esp+7C], 00000001
:00411A6F 741A                    je 00411A8B
:00411A71 8B442420                mov eax, dword ptr [esp+20]
:00411A75 83E3EF                  and ebx, FFFFFFEF
:00411A78 83C0F4                  add eax, FFFFFFF4
:00411A7B 8B08                    mov ecx, dword ptr [eax]
:00411A7D 49                      dec ecx
:00411A7E 8908                    mov dword ptr [eax], ecx
:00411A80 7509                    jne 00411A8B
:00411A82 50                      push eax
:00411A83 E878F81C00              call 005E1300
:00411A88 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411A6F(C), :00411A80(C)
|
:00411A8B 8D4C2414                lea ecx, dword ptr [esp+14]
:00411A8F 51                      push ecx
:00411A90 8D4F24                  lea ecx, dword ptr [edi+24]
:00411A93 E888981D00              call 005EB320
:00411A98 680A010000              push 0000010A
:00411A9D E8DEF71C00              call 005E1280
:00411AA2 8BF0                    mov esi, eax
:00411AA4 83C404                  add esp, 00000004
:00411AA7 8974242C                mov dword ptr [esp+2C], esi
:00411AAB 3BF5                    cmp esi, ebp
:00411AAD C644247C13              mov [esp+7C], 13
:00411AB2 0F84B5000000            je 00411B6D
:00411AB8 8D542414                lea edx, dword ptr [esp+14]
:00411ABC 8D442424                lea eax, dword ptr [esp+24]
:00411AC0 52                      push edx

* Possible StringData Ref from Data Obj ->"name_"
                                  |
:00411AC1 68C8B57800              push 0078B5C8
:00411AC6 50                      push eax
:00411AC7 83CB40                  or ebx, 00000040
:00411ACA E8E12A0000              call 004145B0
:00411ACF 83C40C                  add esp, 0000000C
:00411AD2 8D4C2428                lea ecx, dword ptr [esp+28]
:00411AD6 50                      push eax
:00411AD7 80CB80                  or bl, 80
:00411ADA 51                      push ecx
:00411ADB B9D7AF7A00              mov ecx, 007AAFD7
:00411AE0 C684248400000014        mov byte ptr [esp+00000084], 14
:00411AE8 895C2418                mov dword ptr [esp+18], ebx
:00411AEC E8AF7CFFFF              call 004097A0
:00411AF1 8B8FCC000000            mov ecx, dword ptr [edi+000000CC]
:00411AF7 8B97C4000000            mov edx, dword ptr [edi+000000C4]
:00411AFD 2BCA                    sub ecx, edx
:00411AFF 8B97C8000000            mov edx, dword ptr [edi+000000C8]
:00411B05 2B97C0000000            sub edx, dword ptr [edi+000000C0]
:00411B0B 6A02                    push 00000002
:00411B0D 50                      push eax
:00411B0E 894C2454                mov dword ptr [esp+54], ecx
:00411B12 89542450                mov dword ptr [esp+50], edx
:00411B16 8D542448                lea edx, dword ptr [esp+48]
:00411B1A 52                      push edx
:00411B1B 57                      push edi
:00411B1C 8BCE                    mov ecx, esi
:00411B1E C784248C00000015000000  mov dword ptr [esp+0000008C], 00000015
:00411B29 896C2450                mov dword ptr [esp+50], ebp
:00411B2D 896C2454                mov dword ptr [esp+54], ebp
:00411B31 E83A310000              call 00414C70
:00411B36 8B86D4000000            mov eax, dword ptr [esi+000000D4]
:00411B3C 8BCE                    mov ecx, esi
:00411B3E 83C058                  add eax, 00000058
:00411B41 C744247C16000000        mov [esp+7C], 00000016
:00411B49 50                      push eax
:00411B4A C706CC977000            mov dword ptr [esi], 007097CC
:00411B50 C74608C4977000          mov [esi+08], 007097C4
:00411B57 E8C46E1F00              call 00608A20
:00411B5C 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00411B62 8B512C                  mov edx, dword ptr [ecx+2C]
:00411B65 8BCE                    mov ecx, esi
:00411B67 52                      push edx
:00411B68 E8136F1F00              call 00608A80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411AB2(C)
|
:00411B6D F6C380                  test bl, 80
:00411B70 C744247C17000000        mov [esp+7C], 00000017
:00411B78 741E                    je 00411B98
:00411B7A 8B442428                mov eax, dword ptr [esp+28]
:00411B7E 80E37F                  and bl, 7F
:00411B81 83C0F4                  add eax, FFFFFFF4
:00411B84 895C2410                mov dword ptr [esp+10], ebx
:00411B88 8B08                    mov ecx, dword ptr [eax]
:00411B8A 49                      dec ecx
:00411B8B 8908                    mov dword ptr [eax], ecx
:00411B8D 7509                    jne 00411B98
:00411B8F 50                      push eax
:00411B90 E86BF71C00              call 005E1300
:00411B95 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411B78(C), :00411B8D(C)
|
:00411B98 BE01000000              mov esi, 00000001
:00411B9D F6C340                  test bl, 40
:00411BA0 8974247C                mov dword ptr [esp+7C], esi
:00411BA4 741B                    je 00411BC1
:00411BA6 8B4C2424                mov ecx, dword ptr [esp+24]
:00411BAA 83E3BF                  and ebx, FFFFFFBF
:00411BAD 8D41F4                  lea eax, dword ptr [ecx-0C]
:00411BB0 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00411BB3 49                      dec ecx
:00411BB4 8908                    mov dword ptr [eax], ecx
:00411BB6 7509                    jne 00411BC1
:00411BB8 50                      push eax
:00411BB9 E842F71C00              call 005E1300
:00411BBE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411BA4(C), :00411BB6(C)
|
:00411BC1 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00411BC7 8D4C2428                lea ecx, dword ptr [esp+28]
:00411BCB 52                      push edx

* Possible StringData Ref from Data Obj ->"kills"
                                  |
:00411BCC 68B8B97800              push 0078B9B8
:00411BD1 E8DA941D00              call 005EB0B0
:00411BD6 50                      push eax
:00411BD7 8D4C2418                lea ecx, dword ptr [esp+18]
:00411BDB C684248000000019        mov byte ptr [esp+00000080], 19
:00411BE3 E838971D00              call 005EB320
:00411BE8 8B442428                mov eax, dword ptr [esp+28]
:00411BEC C644247C01              mov [esp+7C], 01
:00411BF1 83C0F4                  add eax, FFFFFFF4
:00411BF4 8B08                    mov ecx, dword ptr [eax]
:00411BF6 49                      dec ecx
:00411BF7 8908                    mov dword ptr [eax], ecx
:00411BF9 7509                    jne 00411C04
:00411BFB 50                      push eax
:00411BFC E8FFF61C00              call 005E1300
:00411C01 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411BF9(C)
|
:00411C04 6818010000              push 00000118
:00411C09 E872F61C00              call 005E1280
:00411C0E 8BF8                    mov edi, eax
:00411C10 83C404                  add esp, 00000004
:00411C13 897C242C                mov dword ptr [esp+2C], edi
:00411C17 3BFD                    cmp edi, ebp
:00411C19 C644247C1A              mov [esp+7C], 1A
:00411C1E 747F                    je 00411C9F
:00411C20 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:00411C26 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/btn/statustab3"
                                  |
:00411C27 68A4B97800              push 0078B9A4
:00411C2C 8D4C2428                lea ecx, dword ptr [esp+28]
:00411C30 E87B941D00              call 005EB0B0
:00411C35 80CF01                  or bh, 01
:00411C38 8B4C241C                mov ecx, dword ptr [esp+1C]
:00411C3C B8501F4100              mov eax, 00411F50
:00411C41 55                      push ebp
:00411C42 8D542464                lea edx, dword ptr [esp+64]
:00411C46 80CF02                  or bh, 02
:00411C49 50                      push eax
:00411C4A 52                      push edx
:00411C4B C68424880000001B        mov byte ptr [esp+00000088], 1B
:00411C53 895C241C                mov dword ptr [esp+1C], ebx
:00411C57 E8E4210000              call 00413E40
:00411C5C 8D4C2420                lea ecx, dword ptr [esp+20]
:00411C60 55                      push ebp
:00411C61 51                      push ecx
:00411C62 50                      push eax
:00411C63 8B442424                mov eax, dword ptr [esp+24]
:00411C67 8D54245C                lea edx, dword ptr [esp+5C]
:00411C6B 52                      push edx
:00411C6C 50                      push eax
:00411C6D 8BCF                    mov ecx, edi
:00411C6F C78424900000001C000000  mov dword ptr [esp+00000090], 0000001C
:00411C7A C7442464C2000000        mov [esp+64], 000000C2
:00411C82 896C2468                mov dword ptr [esp+68], ebp
:00411C86 C744246C1F010000        mov [esp+6C], 0000011F
:00411C8E C744247024000000        mov [esp+70], 00000024
:00411C96 E8C5C71700              call 0058E460
:00411C9B 8BF8                    mov edi, eax
:00411C9D EB02                    jmp 00411CA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411C1E(C)
|
:00411C9F 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411C9D(U)
|
:00411CA1 F6C702                  test bh, 02
:00411CA4 C744247C1D000000        mov [esp+7C], 0000001D
:00411CAC 7419                    je 00411CC7
:00411CAE 8B4C2460                mov ecx, dword ptr [esp+60]
:00411CB2 80E7FD                  and bh, FD
:00411CB5 3BCD                    cmp ecx, ebp
:00411CB7 895C2410                mov dword ptr [esp+10], ebx
:00411CBB 740A                    je 00411CC7
:00411CBD 8D542460                lea edx, dword ptr [esp+60]
:00411CC1 52                      push edx
:00411CC2 E859C61E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411CAC(C), :00411CBB(C)
|
:00411CC7 F6C701                  test bh, 01
:00411CCA 8974247C                mov dword ptr [esp+7C], esi
:00411CCE 741A                    je 00411CEA
:00411CD0 8B442420                mov eax, dword ptr [esp+20]
:00411CD4 80E7FE                  and bh, FE
:00411CD7 83C0F4                  add eax, FFFFFFF4
:00411CDA 8B08                    mov ecx, dword ptr [eax]
:00411CDC 49                      dec ecx
:00411CDD 8908                    mov dword ptr [eax], ecx
:00411CDF 7509                    jne 00411CEA
:00411CE1 50                      push eax
:00411CE2 E819F61C00              call 005E1300
:00411CE7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411CCE(C), :00411CDF(C)
|
:00411CEA 8D4C2414                lea ecx, dword ptr [esp+14]
:00411CEE 51                      push ecx
:00411CEF 8D4F24                  lea ecx, dword ptr [edi+24]
:00411CF2 E829961D00              call 005EB320
:00411CF7 680A010000              push 0000010A
:00411CFC E87FF51C00              call 005E1280
:00411D01 8BF0                    mov esi, eax
:00411D03 83C404                  add esp, 00000004
:00411D06 8974242C                mov dword ptr [esp+2C], esi
:00411D0A 3BF5                    cmp esi, ebp
:00411D0C C644247C1F              mov [esp+7C], 1F
:00411D11 0F84EC000000            je 00411E03
:00411D17 8D542414                lea edx, dword ptr [esp+14]
:00411D1B 8D442424                lea eax, dword ptr [esp+24]
:00411D1F 52                      push edx

* Possible StringData Ref from Data Obj ->"name_"
                                  |
:00411D20 68C8B57800              push 0078B5C8
:00411D25 50                      push eax
:00411D26 80CF04                  or bh, 04
:00411D29 E882280000              call 004145B0
:00411D2E 83C40C                  add esp, 0000000C
:00411D31 8D4C2428                lea ecx, dword ptr [esp+28]
:00411D35 50                      push eax
:00411D36 80CF08                  or bh, 08
:00411D39 51                      push ecx
:00411D3A B9D7AF7A00              mov ecx, 007AAFD7
:00411D3F C684248400000020        mov byte ptr [esp+00000084], 20
:00411D47 895C2418                mov dword ptr [esp+18], ebx
:00411D4B E8507AFFFF              call 004097A0
:00411D50 8B8FCC000000            mov ecx, dword ptr [edi+000000CC]
:00411D56 8B97C4000000            mov edx, dword ptr [edi+000000C4]
:00411D5C 2BCA                    sub ecx, edx
:00411D5E 8B97C8000000            mov edx, dword ptr [edi+000000C8]
:00411D64 2B97C0000000            sub edx, dword ptr [edi+000000C0]
:00411D6A 6A02                    push 00000002
:00411D6C 50                      push eax
:00411D6D 894C2454                mov dword ptr [esp+54], ecx
:00411D71 89542450                mov dword ptr [esp+50], edx
:00411D75 8D542448                lea edx, dword ptr [esp+48]
:00411D79 52                      push edx
:00411D7A 57                      push edi
:00411D7B 8BCE                    mov ecx, esi
:00411D7D C784248C00000021000000  mov dword ptr [esp+0000008C], 00000021
:00411D88 896C2450                mov dword ptr [esp+50], ebp
:00411D8C 896C2454                mov dword ptr [esp+54], ebp
:00411D90 E8EB671F00              call 00608580
:00411D95 8B86D4000000            mov eax, dword ptr [esi+000000D4]
:00411D9B 8BCE                    mov ecx, esi
:00411D9D 83C064                  add eax, 00000064
:00411DA0 C744247C22000000        mov [esp+7C], 00000022
:00411DA8 50                      push eax
:00411DA9 C70658967000            mov dword ptr [esi], 00709658
:00411DAF C7460850967000          mov [esi+08], 00709650
:00411DB6 E8656C1F00              call 00608A20
:00411DBB 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00411DC1 8B5118                  mov edx, dword ptr [ecx+18]
:00411DC4 8BCE                    mov ecx, esi
:00411DC6 52                      push edx
:00411DC7 E8B46C1F00              call 00608A80
:00411DCC 8B86D4000000            mov eax, dword ptr [esi+000000D4]
:00411DD2 8BCE                    mov ecx, esi
:00411DD4 83C058                  add eax, 00000058
:00411DD7 C744247C23000000        mov [esp+7C], 00000023
:00411DDF 50                      push eax
:00411DE0 C706CC977000            mov dword ptr [esi], 007097CC
:00411DE6 C74608C4977000          mov [esi+08], 007097C4
:00411DED E82E6C1F00              call 00608A20
:00411DF2 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00411DF8 8B512C                  mov edx, dword ptr [ecx+2C]
:00411DFB 8BCE                    mov ecx, esi
:00411DFD 52                      push edx
:00411DFE E87D6C1F00              call 00608A80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411D11(C)
|
:00411E03 F6C708                  test bh, 08
:00411E06 C744247C24000000        mov [esp+7C], 00000024
:00411E0E 741E                    je 00411E2E
:00411E10 8B442428                mov eax, dword ptr [esp+28]
:00411E14 80E7F7                  and bh, F7
:00411E17 83C0F4                  add eax, FFFFFFF4
:00411E1A 895C2410                mov dword ptr [esp+10], ebx
:00411E1E 8B08                    mov ecx, dword ptr [eax]
:00411E20 49                      dec ecx
:00411E21 8908                    mov dword ptr [eax], ecx
:00411E23 7509                    jne 00411E2E
:00411E25 50                      push eax
:00411E26 E8D5F41C00              call 005E1300
:00411E2B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411E0E(C), :00411E23(C)
|
:00411E2E F6C704                  test bh, 04
:00411E31 C744247C01000000        mov [esp+7C], 00000001
:00411E39 7418                    je 00411E53
:00411E3B 8B4C2424                mov ecx, dword ptr [esp+24]
:00411E3F 8D41F4                  lea eax, dword ptr [ecx-0C]
:00411E42 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00411E45 49                      dec ecx
:00411E46 8908                    mov dword ptr [eax], ecx
:00411E48 7509                    jne 00411E53
:00411E4A 50                      push eax
:00411E4B E8B0F41C00              call 005E1300
:00411E50 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411E39(C), :00411E48(C)
|
:00411E53 680B010000              push 0000010B
:00411E58 E823F41C00              call 005E1280
:00411E5D 8BF0                    mov esi, eax
:00411E5F 83C404                  add esp, 00000004
:00411E62 8974242C                mov dword ptr [esp+2C], esi
:00411E66 3BF5                    cmp esi, ebp
:00411E68 C644247C26              mov [esp+7C], 26
:00411E6D 7440                    je 00411EAF
:00411E6F 8B44241C                mov eax, dword ptr [esp+1C]
:00411E73 8D542450                lea edx, dword ptr [esp+50]
:00411E77 52                      push edx
:00411E78 50                      push eax
:00411E79 8BCE                    mov ecx, esi
:00411E7B C74424580E000000        mov [esp+58], 0000000E
:00411E83 C744245C68010000        mov [esp+5C], 00000168
:00411E8B C744246020010000        mov [esp+60], 00000120
:00411E93 C7442464CD010000        mov [esp+64], 000001CD
:00411E9B E8C0F91E00              call 00601860
:00411EA0 C706E4947000            mov dword ptr [esi], 007094E4
:00411EA6 C74608DC947000          mov [esi+08], 007094DC
:00411EAD 8BEE                    mov ebp, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411E6D(C)
|
:00411EAF 8B542414                mov edx, dword ptr [esp+14]
:00411EB3 8B4C241C                mov ecx, dword ptr [esp+1C]
:00411EB7 5F                      pop edi
:00411EB8 5E                      pop esi
:00411EB9 8D42F4                  lea eax, dword ptr [edx-0C]
:00411EBC 89A9AE160000            mov dword ptr [ecx+000016AE], ebp
:00411EC2 5D                      pop ebp
:00411EC3 C7442470FFFFFFFF        mov [esp+70], FFFFFFFF
:00411ECB 8B08                    mov ecx, dword ptr [eax]
:00411ECD 5B                      pop ebx
:00411ECE 49                      dec ecx
:00411ECF 8908                    mov dword ptr [eax], ecx
:00411ED1 7509                    jne 00411EDC
:00411ED3 50                      push eax
:00411ED4 E827F41C00              call 005E1300
:00411ED9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411ED1(C)
|
:00411EDC 8B4C2464                mov ecx, dword ptr [esp+64]
:00411EE0 64890D00000000          mov dword ptr fs:[00000000], ecx
:00411EE7 83C470                  add esp, 00000070
:00411EEA C3                      ret


:00411EEB 90                      nop
:00411EEC 90                      nop
:00411EED 90                      nop
:00411EEE 90                      nop
:00411EEF 90                      nop

* Referenced by a CALL at Addresses:
|:0040B030   , :00411FE8   
|
:00411EF0 56                      push esi
:00411EF1 8BF1                    mov esi, ecx
:00411EF3 57                      push edi

* Possible StringData Ref from Data Obj ->"perks"
                                  |
:00411EF4 68F0B97800              push 0078B9F0
:00411EF9 8DBEAA160000            lea edi, dword ptr [esi+000016AA]
:00411EFF 57                      push edi
:00411F00 E8FB2E0000              call 00414E00
:00411F05 83C408                  add esp, 00000008
:00411F08 84C0                    test al, al
:00411F0A 740A                    je 00411F16
:00411F0C 8BCE                    mov ecx, esi
:00411F0E E80D010000              call 00412020
:00411F13 5F                      pop edi
:00411F14 5E                      pop esi
:00411F15 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411F0A(C)
|

* Possible StringData Ref from Data Obj ->"status"
                                  |
:00411F16 68D4B97800              push 0078B9D4
:00411F1B 57                      push edi
:00411F1C E8DF2E0000              call 00414E00
:00411F21 83C408                  add esp, 00000008
:00411F24 84C0                    test al, al
:00411F26 740A                    je 00411F32
:00411F28 8BCE                    mov ecx, esi
:00411F2A E8410C0000              call 00412B70
:00411F2F 5F                      pop edi
:00411F30 5E                      pop esi
:00411F31 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411F26(C)
|

* Possible StringData Ref from Data Obj ->"kills"
                                  |
:00411F32 68B8B97800              push 0078B9B8
:00411F37 57                      push edi
:00411F38 E8C32E0000              call 00414E00
:00411F3D 83C408                  add esp, 00000008
:00411F40 84C0                    test al, al
:00411F42 7407                    je 00411F4B
:00411F44 8BCE                    mov ecx, esi
:00411F46 E805170000              call 00413650

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411F42(C)
|
:00411F4B 5F                      pop edi
:00411F4C 5E                      pop esi
:00411F4D C3                      ret


:00411F4E 90                      nop
:00411F4F 90                      nop
:00411F50 64A100000000            mov eax, dword ptr fs:[00000000]
:00411F56 6AFF                    push FFFFFFFF
:00411F58 68FB0A6D00              push 006D0AFB
:00411F5D 50                      push eax
:00411F5E 8B442410                mov eax, dword ptr [esp+10]
:00411F62 64892500000000          mov dword ptr fs:[00000000], esp
:00411F69 56                      push esi
:00411F6A 57                      push edi
:00411F6B 8B4004                  mov eax, dword ptr [eax+04]
:00411F6E 8BF9                    mov edi, ecx
:00411F70 8B4024                  mov eax, dword ptr [eax+24]
:00411F73 89442418                mov dword ptr [esp+18], eax
:00411F77 FF40F4                  inc [eax-0C]
:00411F7A 8D4C2418                lea ecx, dword ptr [esp+18]
:00411F7E C744241000000000        mov [esp+10], 00000000
:00411F86 51                      push ecx
:00411F87 8B8FB2160000            mov ecx, dword ptr [edi+000016B2]
:00411F8D E83EA40400              call 0045C3D0
:00411F92 8B87AA160000            mov eax, dword ptr [edi+000016AA]
:00411F98 8B4C2418                mov ecx, dword ptr [esp+18]
:00411F9C 8DB7AA160000            lea esi, dword ptr [edi+000016AA]
:00411FA2 3BC1                    cmp eax, ecx
:00411FA4 7420                    je 00411FC6
:00411FA6 8B49FC                  mov ecx, dword ptr [ecx-04]
:00411FA9 8B40FC                  mov eax, dword ptr [eax-04]
:00411FAC 51                      push ecx
:00411FAD 8D54241C                lea edx, dword ptr [esp+1C]
:00411FB1 6A00                    push 00000000
:00411FB3 52                      push edx
:00411FB4 50                      push eax
:00411FB5 6A00                    push 00000000
:00411FB7 8BCE                    mov ecx, esi
:00411FB9 E812981D00              call 005EB7D0
:00411FBE 85C0                    test eax, eax
:00411FC0 7518                    jne 00411FDA
:00411FC2 8B4C2418                mov ecx, dword ptr [esp+18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411FA4(C)
|
:00411FC6 8D41F4                  lea eax, dword ptr [ecx-0C]
:00411FC9 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00411FD1 8B08                    mov ecx, dword ptr [eax]
:00411FD3 49                      dec ecx
:00411FD4 8908                    mov dword ptr [eax], ecx
:00411FD6 7535                    jne 0041200D
:00411FD8 EB2A                    jmp 00412004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411FC0(C)
|
:00411FDA 8D442418                lea eax, dword ptr [esp+18]
:00411FDE 8BCE                    mov ecx, esi
:00411FE0 50                      push eax
:00411FE1 E83A931D00              call 005EB320
:00411FE6 8BCF                    mov ecx, edi
:00411FE8 E803FFFFFF              call 00411EF0
:00411FED 8B4C2418                mov ecx, dword ptr [esp+18]
:00411FF1 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00411FF9 8D41F4                  lea eax, dword ptr [ecx-0C]
:00411FFC 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00411FFF 49                      dec ecx
:00412000 8908                    mov dword ptr [eax], ecx
:00412002 7509                    jne 0041200D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411FD8(U)
|
:00412004 50                      push eax
:00412005 E8F6F21C00              call 005E1300
:0041200A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411FD6(C), :00412002(C)
|
:0041200D 8B4C2408                mov ecx, dword ptr [esp+08]
:00412011 5F                      pop edi
:00412012 64890D00000000          mov dword ptr fs:[00000000], ecx
:00412019 5E                      pop esi
:0041201A 83C40C                  add esp, 0000000C
:0041201D C20400                  ret 0004



* Referenced by a CALL at Address:
|:00411F0E   
|
:00412020 6AFF                    push FFFFFFFF
:00412022 68B50C6D00              push 006D0CB5
:00412027 64A100000000            mov eax, dword ptr fs:[00000000]
:0041202D 50                      push eax
:0041202E 64892500000000          mov dword ptr fs:[00000000], esp
:00412035 83EC70                  sub esp, 00000070
:00412038 53                      push ebx
:00412039 55                      push ebp
:0041203A 56                      push esi
:0041203B 8BF1                    mov esi, ecx
:0041203D 33DB                    xor ebx, ebx
:0041203F 57                      push edi
:00412040 89742420                mov dword ptr [esp+20], esi
:00412044 895C2414                mov dword ptr [esp+14], ebx
:00412048 8D442413                lea eax, dword ptr [esp+13]
:0041204C 8D4C244C                lea ecx, dword ptr [esp+4C]
:00412050 50                      push eax
:00412051 899C248C000000          mov dword ptr [esp+0000008C], ebx
:00412058 E883310000              call 004151E0
:0041205D A188DA7900              mov eax, dword ptr [0079DA88]
:00412062 B994DA7900              mov ecx, 0079DA94
:00412067 40                      inc eax
:00412068 894C241C                mov dword ptr [esp+1C], ecx
:0041206C 40                      inc eax
:0041206D 894C2418                mov dword ptr [esp+18], ecx
:00412071 A388DA7900              mov dword ptr [0079DA88], eax
:00412076 33C9                    xor ecx, ecx
:00412078 33C0                    xor eax, eax
:0041207A 81C6260B0000            add esi, 00000B26
:00412080 C684248800000004        mov byte ptr [esp+00000088], 04
:00412088 8974242C                mov dword ptr [esp+2C], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412097(C)
|
:0041208C 803C0600                cmp byte ptr [esi+eax], 00
:00412090 7401                    je 00412093
:00412092 41                      inc ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412090(C)
|
:00412093 40                      inc eax
:00412094 83F81B                  cmp eax, 0000001B
:00412097 72F3                    jb 0041208C
:00412099 3BCB                    cmp ecx, ebx
:0041209B 0F84E2050000            je 00412683
:004120A1 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:004120A7 51                      push ecx

* Possible StringData Ref from Data Obj ->"otraits"
                                  |
:004120A8 68F8B87800              push 0078B8F8
:004120AD 8D4C2430                lea ecx, dword ptr [esp+30]
:004120B1 E8FA8F1D00              call 005EB0B0
:004120B6 50                      push eax
:004120B7 8D4C241C                lea ecx, dword ptr [esp+1C]
:004120BB C684248C00000005        mov byte ptr [esp+0000008C], 05
:004120C3 E858921D00              call 005EB320
:004120C8 8B542428                mov edx, dword ptr [esp+28]
:004120CC C684248800000004        mov byte ptr [esp+00000088], 04
:004120D4 8B4AF4                  mov ecx, dword ptr [edx-0C]
:004120D7 8D42F4                  lea eax, dword ptr [edx-0C]
:004120DA 49                      dec ecx
:004120DB 8908                    mov dword ptr [eax], ecx
:004120DD 7509                    jne 004120E8
:004120DF 50                      push eax
:004120E0 E81BF21C00              call 005E1300
:004120E5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004120DD(C)
|
:004120E8 A128FE7200              mov eax, dword ptr [0072FE28]
:004120ED 8D4C2428                lea ecx, dword ptr [esp+28]
:004120F1 50                      push eax

* Possible StringData Ref from Data Obj ->"name_sttraits"
                                  |
:004120F2 6868BA7800              push 0078BA68
:004120F7 E8B48F1D00              call 005EB0B0
:004120FC 8D4C2428                lea ecx, dword ptr [esp+28]
:00412100 8D542424                lea edx, dword ptr [esp+24]
:00412104 51                      push ecx
:00412105 52                      push edx
:00412106 B9D7AF7A00              mov ecx, 007AAFD7
:0041210B C684249000000006        mov byte ptr [esp+00000090], 06
:00412113 E88876FFFF              call 004097A0
:00412118 8B00                    mov eax, dword ptr [eax]
:0041211A 8D4C241C                lea ecx, dword ptr [esp+1C]
:0041211E 50                      push eax

* Possible StringData Ref from Data Obj ->"             %s               "
                                        ->"    "
                                  |
:0041211F 6844BA7800              push 0078BA44
:00412124 51                      push ecx
:00412125 C684249400000007        mov byte ptr [esp+00000094], 07
:0041212D E89E9B1D00              call 005EBCD0
:00412132 8B542430                mov edx, dword ptr [esp+30]
:00412136 83C40C                  add esp, 0000000C
:00412139 C684248800000006        mov byte ptr [esp+00000088], 06
:00412141 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00412144 8D42F4                  lea eax, dword ptr [edx-0C]
:00412147 49                      dec ecx
:00412148 8908                    mov dword ptr [eax], ecx
:0041214A 7509                    jne 00412155
:0041214C 50                      push eax
:0041214D E8AEF11C00              call 005E1300
:00412152 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041214A(C)
|
:00412155 8B442428                mov eax, dword ptr [esp+28]
:00412159 C684248800000004        mov byte ptr [esp+00000088], 04
:00412161 83C0F4                  add eax, FFFFFFF4
:00412164 8B08                    mov ecx, dword ptr [eax]
:00412166 49                      dec ecx
:00412167 8908                    mov dword ptr [eax], ecx
:00412169 7509                    jne 00412174
:0041216B 50                      push eax
:0041216C E88FF11C00              call 005E1300
:00412171 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412169(C)
|
:00412174 683E010000              push 0000013E
:00412179 E802F11C00              call 005E1280
:0041217E 8BF0                    mov esi, eax
:00412180 83C404                  add esp, 00000004
:00412183 89742438                mov dword ptr [esp+38], esi
:00412187 85F6                    test esi, esi
:00412189 C684248800000008        mov byte ptr [esp+00000088], 08
:00412191 0F8497000000            je 0041222E
:00412197 8B6C2420                mov ebp, dword ptr [esp+20]
:0041219B 33C9                    xor ecx, ecx
:0041219D B8E0AF4000              mov eax, 0040AFE0
:004121A2 51                      push ecx
:004121A3 8D4C2470                lea ecx, dword ptr [esp+70]
:004121A7 50                      push eax
:004121A8 51                      push ecx
:004121A9 8BCD                    mov ecx, ebp
:004121AB E8901C0000              call 00413E40
:004121B0 BB01000000              mov ebx, 00000001
:004121B5 8BF8                    mov edi, eax
:004121B7 895C2414                mov dword ptr [esp+14], ebx
:004121BB 8D4C2458                lea ecx, dword ptr [esp+58]
:004121BF E8FC14FFFF              call 004036C0
:004121C4 53                      push ebx
:004121C5 6A00                    push 00000000
:004121C7 53                      push ebx
:004121C8 50                      push eax
:004121C9 8D54242C                lea edx, dword ptr [esp+2C]
:004121CD 57                      push edi
:004121CE 52                      push edx
:004121CF 8D442454                lea eax, dword ptr [esp+54]
:004121D3 6A00                    push 00000000
:004121D5 50                      push eax
:004121D6 8BCE                    mov ecx, esi
:004121D8 C78424A80000000A000000  mov dword ptr [esp+000000A8], 0000000A
:004121E3 C744245C00000000        mov [esp+5C], 00000000
:004121EB C74424600C000000        mov [esp+60], 0000000C
:004121F3 E8A8F11E00              call 006013A0
:004121F8 8B4C2458                mov ecx, dword ptr [esp+58]
:004121FC C68424880000000C        mov byte ptr [esp+00000088], 0C
:00412204 85C9                    test ecx, ecx
:00412206 740A                    je 00412212
:00412208 8D542458                lea edx, dword ptr [esp+58]
:0041220C 52                      push edx
:0041220D E80EC11E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412206(C)
|
:00412212 8D442418                lea eax, dword ptr [esp+18]
:00412216 8D4E24                  lea ecx, dword ptr [esi+24]
:00412219 50                      push eax
:0041221A C706B49A7000            mov dword ptr [esi], 00709AB4
:00412220 C74608AC9A7000          mov [esi+08], 00709AAC
:00412227 E8F4901D00              call 005EB320
:0041222C EB06                    jmp 00412234

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412191(C)
|
:0041222E 8B6C2420                mov ebp, dword ptr [esp+20]
:00412232 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041222C(U)
|
:00412234 8B442450                mov eax, dword ptr [esp+50]
:00412238 8B4C2454                mov ecx, dword ptr [esp+54]
:0041223C 3BC1                    cmp eax, ecx
:0041223E C78424880000000D000000  mov dword ptr [esp+00000088], 0000000D
:00412249 89742428                mov dword ptr [esp+28], esi
:0041224D 7413                    je 00412262
:0041224F 85C0                    test eax, eax
:00412251 7406                    je 00412259
:00412253 8930                    mov dword ptr [eax], esi
:00412255 8B442450                mov eax, dword ptr [esp+50]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412251(C)
|
:00412259 83C004                  add eax, 00000004
:0041225C 89442450                mov dword ptr [esp+50], eax
:00412260 EB11                    jmp 00412273

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041224D(C)
|
:00412262 8D4C2428                lea ecx, dword ptr [esp+28]
:00412266 6A01                    push 00000001
:00412268 51                      push ecx
:00412269 50                      push eax
:0041226A 8D4C2458                lea ecx, dword ptr [esp+58]
:0041226E E85D43FFFF              call 004065D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412260(U)
|
:00412273 F6C301                  test bl, 01
:00412276 C784248800000004000000  mov dword ptr [esp+00000088], 00000004
:00412281 7419                    je 0041229C
:00412283 8B4C246C                mov ecx, dword ptr [esp+6C]
:00412287 83E3FE                  and ebx, FFFFFFFE
:0041228A 85C9                    test ecx, ecx
:0041228C 895C2414                mov dword ptr [esp+14], ebx
:00412290 740A                    je 0041229C
:00412292 8D54246C                lea edx, dword ptr [esp+6C]
:00412296 52                      push edx
:00412297 E884C01E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412281(C), :00412290(C)
|
:0041229C 8B44242C                mov eax, dword ptr [esp+2C]

* Possible Indirect StringData Ref from Data Obj ->"fastMetabolism"
                                  |
:004122A0 C744242894427900        mov [esp+28], 00794294
:004122A8 89442424                mov dword ptr [esp+24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004124BB(C)
|
:004122AC 8B4C2424                mov ecx, dword ptr [esp+24]
:004122B0 803900                  cmp byte ptr [ecx], 00
:004122B3 0F84E9010000            je 004124A2
:004122B9 8B542428                mov edx, dword ptr [esp+28]
:004122BD 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:004122C3 51                      push ecx
:004122C4 8D4C2430                lea ecx, dword ptr [esp+30]
:004122C8 8B02                    mov eax, dword ptr [edx]
:004122CA 50                      push eax
:004122CB E8E08D1D00              call 005EB0B0
:004122D0 50                      push eax
:004122D1 8D4C241C                lea ecx, dword ptr [esp+1C]
:004122D5 C684248C0000000E        mov byte ptr [esp+0000008C], 0E
:004122DD E83E901D00              call 005EB320
:004122E2 8B54242C                mov edx, dword ptr [esp+2C]
:004122E6 C684248800000004        mov byte ptr [esp+00000088], 04
:004122EE 8B4AF4                  mov ecx, dword ptr [edx-0C]
:004122F1 8D42F4                  lea eax, dword ptr [edx-0C]
:004122F4 49                      dec ecx
:004122F5 8908                    mov dword ptr [eax], ecx
:004122F7 7509                    jne 00412302
:004122F9 50                      push eax
:004122FA E801F01C00              call 005E1300
:004122FF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004122F7(C)
|
:00412302 8D442418                lea eax, dword ptr [esp+18]
:00412306 8D4C2434                lea ecx, dword ptr [esp+34]
:0041230A 50                      push eax

* Possible StringData Ref from Data Obj ->"name_"
                                  |
:0041230B 68C8B57800              push 0078B5C8
:00412310 51                      push ecx
:00412311 E89A220000              call 004145B0
:00412316 83C40C                  add esp, 0000000C
:00412319 8D542430                lea edx, dword ptr [esp+30]
:0041231D 50                      push eax
:0041231E 52                      push edx
:0041231F B9D7AF7A00              mov ecx, 007AAFD7
:00412324 C68424900000000F        mov byte ptr [esp+00000090], 0F
:0041232C E86F74FFFF              call 004097A0
:00412331 50                      push eax
:00412332 8D4C2420                lea ecx, dword ptr [esp+20]
:00412336 C684248C00000010        mov byte ptr [esp+0000008C], 10
:0041233E E8DD8F1D00              call 005EB320
:00412343 8B442430                mov eax, dword ptr [esp+30]
:00412347 C68424880000000F        mov byte ptr [esp+00000088], 0F
:0041234F 83C0F4                  add eax, FFFFFFF4
:00412352 8B08                    mov ecx, dword ptr [eax]
:00412354 49                      dec ecx
:00412355 8908                    mov dword ptr [eax], ecx
:00412357 7509                    jne 00412362
:00412359 50                      push eax
:0041235A E8A1EF1C00              call 005E1300
:0041235F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412357(C)
|
:00412362 8B4C2434                mov ecx, dword ptr [esp+34]
:00412366 C684248800000004        mov byte ptr [esp+00000088], 04
:0041236E 8D41F4                  lea eax, dword ptr [ecx-0C]
:00412371 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00412374 49                      dec ecx
:00412375 8908                    mov dword ptr [eax], ecx
:00412377 7509                    jne 00412382
:00412379 50                      push eax
:0041237A E881EF1C00              call 005E1300
:0041237F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412377(C)
|
:00412382 683E010000              push 0000013E
:00412387 E8F4EE1C00              call 005E1280
:0041238C 8BF0                    mov esi, eax
:0041238E 83C404                  add esp, 00000004
:00412391 8974243C                mov dword ptr [esp+3C], esi
:00412395 85F6                    test esi, esi
:00412397 C684248800000011        mov byte ptr [esp+00000088], 11
:0041239F 0F8493000000            je 00412438
:004123A5 33C9                    xor ecx, ecx
:004123A7 B8E0AF4000              mov eax, 0040AFE0
:004123AC 51                      push ecx
:004123AD 8D54245C                lea edx, dword ptr [esp+5C]
:004123B1 50                      push eax
:004123B2 52                      push edx
:004123B3 8BCD                    mov ecx, ebp
:004123B5 E8861A0000              call 00413E40
:004123BA 83CB02                  or ebx, 00000002
:004123BD 8BF8                    mov edi, eax
:004123BF 895C2414                mov dword ptr [esp+14], ebx
:004123C3 8D4C246C                lea ecx, dword ptr [esp+6C]
:004123C7 E8F412FFFF              call 004036C0
:004123CC 6A00                    push 00000000
:004123CE 6A00                    push 00000000
:004123D0 6A01                    push 00000001
:004123D2 50                      push eax
:004123D3 8D44242C                lea eax, dword ptr [esp+2C]
:004123D7 57                      push edi
:004123D8 50                      push eax
:004123D9 8D4C245C                lea ecx, dword ptr [esp+5C]
:004123DD 6A00                    push 00000000
:004123DF 51                      push ecx
:004123E0 8BCE                    mov ecx, esi
:004123E2 C78424A800000013000000  mov dword ptr [esp+000000A8], 00000013
:004123ED C744246400000000        mov [esp+64], 00000000
:004123F5 C74424680C000000        mov [esp+68], 0000000C
:004123FD E89EEF1E00              call 006013A0
:00412402 8B4C246C                mov ecx, dword ptr [esp+6C]
:00412406 C684248800000015        mov byte ptr [esp+00000088], 15
:0041240E 85C9                    test ecx, ecx
:00412410 740A                    je 0041241C
:00412412 8D54246C                lea edx, dword ptr [esp+6C]
:00412416 52                      push edx
:00412417 E804BF1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412410(C)
|
:0041241C 8D442418                lea eax, dword ptr [esp+18]
:00412420 8D4E24                  lea ecx, dword ptr [esi+24]
:00412423 50                      push eax
:00412424 C706B49A7000            mov dword ptr [esi], 00709AB4
:0041242A C74608AC9A7000          mov [esi+08], 00709AAC
:00412431 E8EA8E1D00              call 005EB320
:00412436 EB02                    jmp 0041243A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041239F(C)
|
:00412438 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412436(U)
|
:0041243A 8B442450                mov eax, dword ptr [esp+50]
:0041243E 8B4C2454                mov ecx, dword ptr [esp+54]
:00412442 3BC1                    cmp eax, ecx
:00412444 C784248800000016000000  mov dword ptr [esp+00000088], 00000016
:0041244F 89742438                mov dword ptr [esp+38], esi
:00412453 7413                    je 00412468
:00412455 85C0                    test eax, eax
:00412457 7406                    je 0041245F
:00412459 8930                    mov dword ptr [eax], esi
:0041245B 8B442450                mov eax, dword ptr [esp+50]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412457(C)
|
:0041245F 83C004                  add eax, 00000004
:00412462 89442450                mov dword ptr [esp+50], eax
:00412466 EB11                    jmp 00412479

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412453(C)
|
:00412468 8D4C2438                lea ecx, dword ptr [esp+38]
:0041246C 6A01                    push 00000001
:0041246E 51                      push ecx
:0041246F 50                      push eax
:00412470 8D4C2458                lea ecx, dword ptr [esp+58]
:00412474 E85741FFFF              call 004065D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412466(U)
|
:00412479 F6C302                  test bl, 02
:0041247C C784248800000004000000  mov dword ptr [esp+00000088], 00000004
:00412487 7419                    je 004124A2
:00412489 8B4C2458                mov ecx, dword ptr [esp+58]
:0041248D 83E3FD                  and ebx, FFFFFFFD
:00412490 85C9                    test ecx, ecx
:00412492 895C2414                mov dword ptr [esp+14], ebx
:00412496 740A                    je 004124A2
:00412498 8D542458                lea edx, dword ptr [esp+58]
:0041249C 52                      push edx
:0041249D E87EBE1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004122B3(C), :00412487(C), :00412496(C)
|
:004124A2 8B442428                mov eax, dword ptr [esp+28]
:004124A6 8B742424                mov esi, dword ptr [esp+24]
:004124AA 83C004                  add eax, 00000004
:004124AD 46                      inc esi
:004124AE 3D00437900              cmp eax, 00794300
:004124B3 89742424                mov dword ptr [esp+24], esi
:004124B7 89442428                mov dword ptr [esp+28], eax
:004124BB 0F82EBFDFFFF            jb 004122AC
:004124C1 683E010000              push 0000013E
:004124C6 E8B5ED1C00              call 005E1280
:004124CB 8BF0                    mov esi, eax
:004124CD 83C404                  add esp, 00000004
:004124D0 8974243C                mov dword ptr [esp+3C], esi
:004124D4 85F6                    test esi, esi
:004124D6 C684248800000017        mov byte ptr [esp+00000088], 17
:004124DE 0F84D8000000            je 004125BC
:004124E4 A128FE7200              mov eax, dword ptr [0072FE28]
:004124E9 8D4C2424                lea ecx, dword ptr [esp+24]
:004124ED 50                      push eax
:004124EE 6868987A00              push 007A9868
:004124F3 BFE0AF4000              mov edi, 0040AFE0
:004124F8 33ED                    xor ebp, ebp
:004124FA E8B18B1D00              call 005EB0B0
:004124FF 83CB04                  or ebx, 00000004
:00412502 895C2414                mov dword ptr [esp+14], ebx
:00412506 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0041250C C684248800000018        mov byte ptr [esp+00000088], 18
:00412514 51                      push ecx
:00412515 6868987A00              push 007A9868
:0041251A 8D4C2430                lea ecx, dword ptr [esp+30]
:0041251E E88D8B1D00              call 005EB0B0
:00412523 83CB08                  or ebx, 00000008
:00412526 895C2414                mov dword ptr [esp+14], ebx
:0041252A 8B4C2420                mov ecx, dword ptr [esp+20]
:0041252E 55                      push ebp
:0041252F 8D54245C                lea edx, dword ptr [esp+5C]
:00412533 57                      push edi
:00412534 52                      push edx
:00412535 C784249400000019000000  mov dword ptr [esp+00000094], 00000019
:00412540 E8FB180000              call 00413E40
:00412545 83CB10                  or ebx, 00000010
:00412548 8BF8                    mov edi, eax
:0041254A 895C2414                mov dword ptr [esp+14], ebx
:0041254E 8D4C246C                lea ecx, dword ptr [esp+6C]
:00412552 E86911FFFF              call 004036C0
:00412557 55                      push ebp
:00412558 55                      push ebp
:00412559 6A01                    push 00000001
:0041255B 50                      push eax
:0041255C 8D442438                lea eax, dword ptr [esp+38]
:00412560 57                      push edi
:00412561 50                      push eax
:00412562 8D4C245C                lea ecx, dword ptr [esp+5C]
:00412566 55                      push ebp
:00412567 51                      push ecx
:00412568 8BCE                    mov ecx, esi
:0041256A C78424A80000001B000000  mov dword ptr [esp+000000A8], 0000001B
:00412575 896C2464                mov dword ptr [esp+64], ebp
:00412579 C74424680C000000        mov [esp+68], 0000000C
:00412581 E81AEE1E00              call 006013A0
:00412586 8B4C246C                mov ecx, dword ptr [esp+6C]
:0041258A C68424880000001D        mov byte ptr [esp+00000088], 1D
:00412592 85C9                    test ecx, ecx
:00412594 740A                    je 004125A0
:00412596 8D54246C                lea edx, dword ptr [esp+6C]
:0041259A 52                      push edx
:0041259B E880BD1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412594(C)
|
:004125A0 8D442424                lea eax, dword ptr [esp+24]
:004125A4 8D4E24                  lea ecx, dword ptr [esi+24]
:004125A7 50                      push eax
:004125A8 C706B49A7000            mov dword ptr [esi], 00709AB4
:004125AE C74608AC9A7000          mov [esi+08], 00709AAC
:004125B5 E8668D1D00              call 005EB320
:004125BA EB02                    jmp 004125BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004124DE(C)
|
:004125BC 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004125BA(U)
|
:004125BE 8B442450                mov eax, dword ptr [esp+50]
:004125C2 8B4C2454                mov ecx, dword ptr [esp+54]
:004125C6 3BC1                    cmp eax, ecx
:004125C8 C784248800000020000000  mov dword ptr [esp+00000088], 00000020
:004125D3 89742438                mov dword ptr [esp+38], esi
:004125D7 7413                    je 004125EC
:004125D9 85C0                    test eax, eax
:004125DB 7406                    je 004125E3
:004125DD 8930                    mov dword ptr [eax], esi
:004125DF 8B442450                mov eax, dword ptr [esp+50]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004125DB(C)
|
:004125E3 83C004                  add eax, 00000004
:004125E6 89442450                mov dword ptr [esp+50], eax
:004125EA EB11                    jmp 004125FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004125D7(C)
|
:004125EC 8D4C2438                lea ecx, dword ptr [esp+38]
:004125F0 6A01                    push 00000001
:004125F2 51                      push ecx
:004125F3 50                      push eax
:004125F4 8D4C2458                lea ecx, dword ptr [esp+58]
:004125F8 E8D33FFFFF              call 004065D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004125EA(U)
|
:004125FD F6C310                  test bl, 10
:00412600 C78424880000001F000000  mov dword ptr [esp+00000088], 0000001F
:0041260B 7419                    je 00412626
:0041260D 8B4C2458                mov ecx, dword ptr [esp+58]
:00412611 83E3EF                  and ebx, FFFFFFEF
:00412614 85C9                    test ecx, ecx
:00412616 895C2414                mov dword ptr [esp+14], ebx
:0041261A 740A                    je 00412626
:0041261C 8D542458                lea edx, dword ptr [esp+58]
:00412620 52                      push edx
:00412621 E8FABC1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041260B(C), :0041261A(C)
|
:00412626 F6C308                  test bl, 08
:00412629 C78424880000001E000000  mov dword ptr [esp+00000088], 0000001E
:00412634 741E                    je 00412654
:00412636 8B442428                mov eax, dword ptr [esp+28]
:0041263A 83E3F7                  and ebx, FFFFFFF7
:0041263D 83C0F4                  add eax, FFFFFFF4
:00412640 895C2414                mov dword ptr [esp+14], ebx
:00412644 8B08                    mov ecx, dword ptr [eax]
:00412646 49                      dec ecx
:00412647 8908                    mov dword ptr [eax], ecx
:00412649 7509                    jne 00412654
:0041264B 50                      push eax
:0041264C E8AFEC1C00              call 005E1300
:00412651 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412634(C), :00412649(C)
|
:00412654 F6C304                  test bl, 04
:00412657 C784248800000004000000  mov dword ptr [esp+00000088], 00000004
:00412662 741F                    je 00412683
:00412664 8B4C2424                mov ecx, dword ptr [esp+24]
:00412668 83E3FB                  and ebx, FFFFFFFB
:0041266B 895C2414                mov dword ptr [esp+14], ebx
:0041266F 8D41F4                  lea eax, dword ptr [ecx-0C]
:00412672 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00412675 49                      dec ecx
:00412676 8908                    mov dword ptr [eax], ecx
:00412678 7509                    jne 00412683
:0041267A 50                      push eax
:0041267B E880EC1C00              call 005E1300
:00412680 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041209B(C), :00412662(C), :00412678(C)
|
:00412683 8B442420                mov eax, dword ptr [esp+20]
:00412687 33D2                    xor edx, edx
:00412689 B962000000              mov ecx, 00000062
:0041268E 8DA84E0B0000            lea ebp, dword ptr [eax+00000B4E]
:00412694 8BC5                    mov eax, ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004126A0(C)
|
:00412696 833800                  cmp dword ptr [eax], 00000000
:00412699 7401                    je 0041269C
:0041269B 42                      inc edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412699(C)
|
:0041269C 83C004                  add eax, 00000004
:0041269F 49                      dec ecx
:004126A0 75F4                    jne 00412696
:004126A2 85D2                    test edx, edx
:004126A4 0F8439040000            je 00412AE3
:004126AA 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:004126B0 51                      push ecx

* Possible StringData Ref from Data Obj ->"perks"
                                  |
:004126B1 68F0B97800              push 0078B9F0
:004126B6 8D4C2440                lea ecx, dword ptr [esp+40]
:004126BA E8F1891D00              call 005EB0B0
:004126BF 50                      push eax
:004126C0 8D4C241C                lea ecx, dword ptr [esp+1C]
:004126C4 C684248C00000021        mov byte ptr [esp+0000008C], 21
:004126CC E84F8C1D00              call 005EB320
:004126D1 8B542438                mov edx, dword ptr [esp+38]
:004126D5 C684248800000004        mov byte ptr [esp+00000088], 04
:004126DD 8B4AF4                  mov ecx, dword ptr [edx-0C]
:004126E0 8D42F4                  lea eax, dword ptr [edx-0C]
:004126E3 49                      dec ecx
:004126E4 8908                    mov dword ptr [eax], ecx
:004126E6 7509                    jne 004126F1
:004126E8 50                      push eax
:004126E9 E812EC1C00              call 005E1300
:004126EE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004126E6(C)
|
:004126F1 A128FE7200              mov eax, dword ptr [0072FE28]
:004126F6 8D4C2428                lea ecx, dword ptr [esp+28]
:004126FA 50                      push eax

* Possible StringData Ref from Data Obj ->"name_stperks"
                                  |
:004126FB 6834BA7800              push 0078BA34
:00412700 E8AB891D00              call 005EB0B0
:00412705 8D4C2428                lea ecx, dword ptr [esp+28]
:00412709 8D542438                lea edx, dword ptr [esp+38]
:0041270D 51                      push ecx
:0041270E 52                      push edx
:0041270F B9D7AF7A00              mov ecx, 007AAFD7
:00412714 C684249000000022        mov byte ptr [esp+00000090], 22
:0041271C E87F70FFFF              call 004097A0
:00412721 8B00                    mov eax, dword ptr [eax]
:00412723 8D4C241C                lea ecx, dword ptr [esp+1C]
:00412727 50                      push eax

* Possible StringData Ref from Data Obj ->"             %s               "
                                        ->"    "
                                  |
:00412728 6844BA7800              push 0078BA44
:0041272D 51                      push ecx
:0041272E C684249400000023        mov byte ptr [esp+00000094], 23
:00412736 E895951D00              call 005EBCD0
:0041273B 8B542444                mov edx, dword ptr [esp+44]
:0041273F 83C40C                  add esp, 0000000C
:00412742 C684248800000022        mov byte ptr [esp+00000088], 22
:0041274A 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0041274D 8D42F4                  lea eax, dword ptr [edx-0C]
:00412750 49                      dec ecx
:00412751 8908                    mov dword ptr [eax], ecx
:00412753 7509                    jne 0041275E
:00412755 50                      push eax
:00412756 E8A5EB1C00              call 005E1300
:0041275B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412753(C)
|
:0041275E 8B442428                mov eax, dword ptr [esp+28]
:00412762 C684248800000004        mov byte ptr [esp+00000088], 04
:0041276A 83C0F4                  add eax, FFFFFFF4
:0041276D 8B08                    mov ecx, dword ptr [eax]
:0041276F 49                      dec ecx
:00412770 8908                    mov dword ptr [eax], ecx
:00412772 7509                    jne 0041277D
:00412774 50                      push eax
:00412775 E886EB1C00              call 005E1300
:0041277A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412772(C)
|
:0041277D 683E010000              push 0000013E
:00412782 E8F9EA1C00              call 005E1280
:00412787 8BF0                    mov esi, eax
:00412789 83C404                  add esp, 00000004
:0041278C 8974243C                mov dword ptr [esp+3C], esi
:00412790 85F6                    test esi, esi
:00412792 C684248800000024        mov byte ptr [esp+00000088], 24
:0041279A 0F8495000000            je 00412835
:004127A0 33C9                    xor ecx, ecx
:004127A2 B8E0AF4000              mov eax, 0040AFE0
:004127A7 51                      push ecx
:004127A8 8D4C245C                lea ecx, dword ptr [esp+5C]
:004127AC 50                      push eax
:004127AD 51                      push ecx
:004127AE 8B4C242C                mov ecx, dword ptr [esp+2C]
:004127B2 E889160000              call 00413E40
:004127B7 83CB20                  or ebx, 00000020
:004127BA 8BF8                    mov edi, eax
:004127BC 895C2414                mov dword ptr [esp+14], ebx
:004127C0 8D4C246C                lea ecx, dword ptr [esp+6C]
:004127C4 E8F70EFFFF              call 004036C0
:004127C9 6A01                    push 00000001
:004127CB 6A00                    push 00000000
:004127CD 6A01                    push 00000001
:004127CF 50                      push eax
:004127D0 8D54242C                lea edx, dword ptr [esp+2C]
:004127D4 57                      push edi
:004127D5 52                      push edx
:004127D6 8D44245C                lea eax, dword ptr [esp+5C]
:004127DA 6A00                    push 00000000
:004127DC 50                      push eax
:004127DD 8BCE                    mov ecx, esi
:004127DF C78424A800000026000000  mov dword ptr [esp+000000A8], 00000026
:004127EA C744246400000000        mov [esp+64], 00000000
:004127F2 C74424680C000000        mov [esp+68], 0000000C
:004127FA E8A1EB1E00              call 006013A0
:004127FF 8B4C246C                mov ecx, dword ptr [esp+6C]
:00412803 C684248800000028        mov byte ptr [esp+00000088], 28
:0041280B 85C9                    test ecx, ecx
:0041280D 740A                    je 00412819
:0041280F 8D54246C                lea edx, dword ptr [esp+6C]
:00412813 52                      push edx
:00412814 E807BB1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041280D(C)
|
:00412819 8D442418                lea eax, dword ptr [esp+18]
:0041281D 8D4E24                  lea ecx, dword ptr [esi+24]
:00412820 50                      push eax
:00412821 C706B49A7000            mov dword ptr [esi], 00709AB4
:00412827 C74608AC9A7000          mov [esi+08], 00709AAC
:0041282E E8ED8A1D00              call 005EB320
:00412833 EB02                    jmp 00412837

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041279A(C)
|
:00412835 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412833(U)
|
:00412837 8B442450                mov eax, dword ptr [esp+50]
:0041283B 8B4C2454                mov ecx, dword ptr [esp+54]
:0041283F 3BC1                    cmp eax, ecx
:00412841 C784248800000029000000  mov dword ptr [esp+00000088], 00000029
:0041284C 89742438                mov dword ptr [esp+38], esi
:00412850 7413                    je 00412865
:00412852 85C0                    test eax, eax
:00412854 7406                    je 0041285C
:00412856 8930                    mov dword ptr [eax], esi
:00412858 8B442450                mov eax, dword ptr [esp+50]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412854(C)
|
:0041285C 83C004                  add eax, 00000004
:0041285F 89442450                mov dword ptr [esp+50], eax
:00412863 EB11                    jmp 00412876

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412850(C)
|
:00412865 8D4C2438                lea ecx, dword ptr [esp+38]
:00412869 6A01                    push 00000001
:0041286B 51                      push ecx
:0041286C 50                      push eax
:0041286D 8D4C2458                lea ecx, dword ptr [esp+58]
:00412871 E85A3DFFFF              call 004065D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412863(U)
|
:00412876 F6C320                  test bl, 20
:00412879 C784248800000004000000  mov dword ptr [esp+00000088], 00000004
:00412884 7419                    je 0041289F
:00412886 8B4C2458                mov ecx, dword ptr [esp+58]
:0041288A 83E3DF                  and ebx, FFFFFFDF
:0041288D 85C9                    test ecx, ecx
:0041288F 895C2414                mov dword ptr [esp+14], ebx
:00412893 740A                    je 0041289F
:00412895 8D542458                lea edx, dword ptr [esp+58]
:00412899 52                      push edx
:0041289A E881BA1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412884(C), :00412893(C)
|

* Possible Indirect StringData Ref from Data Obj ->"awareness"
                                  |
:0041289F BF70447900              mov edi, 00794470
:004128A4 896C2428                mov dword ptr [esp+28], ebp
:004128A8 897C2424                mov dword ptr [esp+24], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412ADD(C)
|
:004128AC 8B7500                  mov esi, dword ptr [ebp+00]
:004128AF 85F6                    test esi, esi
:004128B1 0F840E020000            je 00412AC5
:004128B7 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:004128BD 8B07                    mov eax, dword ptr [edi]
:004128BF 51                      push ecx
:004128C0 50                      push eax
:004128C1 8D4C2440                lea ecx, dword ptr [esp+40]
:004128C5 E8E6871D00              call 005EB0B0
:004128CA 50                      push eax
:004128CB 8D4C241C                lea ecx, dword ptr [esp+1C]
:004128CF C684248C0000002A        mov byte ptr [esp+0000008C], 2A
:004128D7 E8448A1D00              call 005EB320
:004128DC 8B542438                mov edx, dword ptr [esp+38]
:004128E0 C684248800000004        mov byte ptr [esp+00000088], 04
:004128E8 8B4AF4                  mov ecx, dword ptr [edx-0C]
:004128EB 8D42F4                  lea eax, dword ptr [edx-0C]
:004128EE 49                      dec ecx
:004128EF 8908                    mov dword ptr [eax], ecx
:004128F1 7509                    jne 004128FC
:004128F3 50                      push eax
:004128F4 E807EA1C00              call 005E1300
:004128F9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004128F1(C)
|
:004128FC 8D442418                lea eax, dword ptr [esp+18]
:00412900 8D4C2430                lea ecx, dword ptr [esp+30]
:00412904 50                      push eax

* Possible StringData Ref from Data Obj ->"name_"
                                  |
:00412905 68C8B57800              push 0078B5C8
:0041290A 51                      push ecx
:0041290B E8A01C0000              call 004145B0
:00412910 83C40C                  add esp, 0000000C
:00412913 8D542434                lea edx, dword ptr [esp+34]
:00412917 50                      push eax
:00412918 52                      push edx
:00412919 B9D7AF7A00              mov ecx, 007AAFD7
:0041291E C68424900000002B        mov byte ptr [esp+00000090], 2B
:00412926 E8756EFFFF              call 004097A0
:0041292B 50                      push eax
:0041292C 8D4C2420                lea ecx, dword ptr [esp+20]
:00412930 C684248C0000002C        mov byte ptr [esp+0000008C], 2C
:00412938 E8E3891D00              call 005EB320
:0041293D 8B442434                mov eax, dword ptr [esp+34]
:00412941 C68424880000002B        mov byte ptr [esp+00000088], 2B
:00412949 83C0F4                  add eax, FFFFFFF4
:0041294C 8B08                    mov ecx, dword ptr [eax]
:0041294E 49                      dec ecx
:0041294F 8908                    mov dword ptr [eax], ecx
:00412951 7509                    jne 0041295C
:00412953 50                      push eax
:00412954 E8A7E91C00              call 005E1300
:00412959 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412951(C)
|
:0041295C 8B4C2430                mov ecx, dword ptr [esp+30]
:00412960 C684248800000004        mov byte ptr [esp+00000088], 04
:00412968 8D41F4                  lea eax, dword ptr [ecx-0C]
:0041296B 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0041296E 49                      dec ecx
:0041296F 8908                    mov dword ptr [eax], ecx
:00412971 7509                    jne 0041297C
:00412973 50                      push eax
:00412974 E887E91C00              call 005E1300
:00412979 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412971(C)
|
:0041297C 83FE01                  cmp esi, 00000001
:0041297F 7418                    je 00412999
:00412981 8B54241C                mov edx, dword ptr [esp+1C]
:00412985 56                      push esi
:00412986 52                      push edx
:00412987 8D442424                lea eax, dword ptr [esp+24]

* Possible StringData Ref from Data Obj ->"%s (%d)"
                                  |
:0041298B 682CBA7800              push 0078BA2C
:00412990 50                      push eax
:00412991 E83A931D00              call 005EBCD0
:00412996 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041297F(C)
|
:00412999 683E010000              push 0000013E
:0041299E E8DDE81C00              call 005E1280
:004129A3 8BF0                    mov esi, eax
:004129A5 83C404                  add esp, 00000004
:004129A8 8974243C                mov dword ptr [esp+3C], esi
:004129AC 85F6                    test esi, esi
:004129AE C68424880000002D        mov byte ptr [esp+00000088], 2D
:004129B6 0F849F000000            je 00412A5B
:004129BC 33C9                    xor ecx, ecx
:004129BE B8E0AF4000              mov eax, 0040AFE0
:004129C3 51                      push ecx
:004129C4 8D4C2470                lea ecx, dword ptr [esp+70]
:004129C8 50                      push eax
:004129C9 51                      push ecx
:004129CA 8B4C242C                mov ecx, dword ptr [esp+2C]
:004129CE 33FF                    xor edi, edi
:004129D0 E86B140000              call 00413E40
:004129D5 83CB40                  or ebx, 00000040
:004129D8 895C2414                mov dword ptr [esp+14], ebx
:004129DC 33C9                    xor ecx, ecx
:004129DE 33D2                    xor edx, edx
:004129E0 83CDFF                  or ebp, FFFFFFFF
:004129E3 897C2458                mov dword ptr [esp+58], edi
:004129E7 894C245C                mov dword ptr [esp+5C], ecx
:004129EB 89542460                mov dword ptr [esp+60], edx
:004129EF 897C2464                mov dword ptr [esp+64], edi
:004129F3 896C2468                mov dword ptr [esp+68], ebp
:004129F7 52                      push edx
:004129F8 89542448                mov dword ptr [esp+48], edx
:004129FC 52                      push edx
:004129FD 8D542460                lea edx, dword ptr [esp+60]
:00412A01 6A01                    push 00000001
:00412A03 52                      push edx
:00412A04 50                      push eax
:00412A05 8D442430                lea eax, dword ptr [esp+30]
:00412A09 50                      push eax
:00412A0A 51                      push ecx
:00412A0B 8D4C2460                lea ecx, dword ptr [esp+60]
:00412A0F C78424A40000002F000000  mov dword ptr [esp+000000A4], 0000002F
:00412A1A 51                      push ecx
:00412A1B 8BCE                    mov ecx, esi
:00412A1D C74424680C000000        mov [esp+68], 0000000C
:00412A25 E876E91E00              call 006013A0
:00412A2A 8D4C2458                lea ecx, dword ptr [esp+58]
:00412A2E C684248800000031        mov byte ptr [esp+00000088], 31
:00412A36 E8B50CFFFF              call 004036F0
:00412A3B 8D542418                lea edx, dword ptr [esp+18]
:00412A3F 8D4E24                  lea ecx, dword ptr [esi+24]
:00412A42 52                      push edx
:00412A43 C706B49A7000            mov dword ptr [esi], 00709AB4
:00412A49 C74608AC9A7000          mov [esi+08], 00709AAC
:00412A50 E8CB881D00              call 005EB320
:00412A55 8B7C2424                mov edi, dword ptr [esp+24]
:00412A59 EB02                    jmp 00412A5D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004129B6(C)
|
:00412A5B 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412A59(U)
|
:00412A5D 8B442450                mov eax, dword ptr [esp+50]
:00412A61 8B4C2454                mov ecx, dword ptr [esp+54]
:00412A65 3BC1                    cmp eax, ecx
:00412A67 C784248800000032000000  mov dword ptr [esp+00000088], 00000032
:00412A72 8974242C                mov dword ptr [esp+2C], esi
:00412A76 7413                    je 00412A8B
:00412A78 85C0                    test eax, eax
:00412A7A 7406                    je 00412A82
:00412A7C 8930                    mov dword ptr [eax], esi
:00412A7E 8B442450                mov eax, dword ptr [esp+50]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412A7A(C)
|
:00412A82 83C004                  add eax, 00000004
:00412A85 89442450                mov dword ptr [esp+50], eax
:00412A89 EB11                    jmp 00412A9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412A76(C)
|
:00412A8B 8D4C242C                lea ecx, dword ptr [esp+2C]
:00412A8F 6A01                    push 00000001
:00412A91 51                      push ecx
:00412A92 50                      push eax
:00412A93 8D4C2458                lea ecx, dword ptr [esp+58]
:00412A97 E8343BFFFF              call 004065D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412A89(U)
|
:00412A9C F6C340                  test bl, 40
:00412A9F C784248800000004000000  mov dword ptr [esp+00000088], 00000004
:00412AAA 7419                    je 00412AC5
:00412AAC 8B4C246C                mov ecx, dword ptr [esp+6C]
:00412AB0 83E3BF                  and ebx, FFFFFFBF
:00412AB3 85C9                    test ecx, ecx
:00412AB5 895C2414                mov dword ptr [esp+14], ebx
:00412AB9 740A                    je 00412AC5
:00412ABB 8D54246C                lea edx, dword ptr [esp+6C]
:00412ABF 52                      push edx
:00412AC0 E85BB81E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004128B1(C), :00412AAA(C), :00412AB9(C)
|
:00412AC5 8B6C2428                mov ebp, dword ptr [esp+28]
:00412AC9 83C74C                  add edi, 0000004C
:00412ACC 83C504                  add ebp, 00000004
:00412ACF 81FF88617900            cmp edi, 00796188
:00412AD5 896C2428                mov dword ptr [esp+28], ebp
:00412AD9 897C2424                mov dword ptr [esp+24], edi
:00412ADD 0F82C9FDFFFF            jb 004128AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004126A4(C)
|
:00412AE3 8B4C2420                mov ecx, dword ptr [esp+20]
:00412AE7 8D44244C                lea eax, dword ptr [esp+4C]
:00412AEB 50                      push eax
:00412AEC 8B89AE160000            mov ecx, dword ptr [ecx+000016AE]
:00412AF2 E839F31E00              call 00601E30
:00412AF7 8B542418                mov edx, dword ptr [esp+18]
:00412AFB 5F                      pop edi
:00412AFC 5E                      pop esi
:00412AFD 5D                      pop ebp
:00412AFE 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00412B01 8D42F4                  lea eax, dword ptr [edx-0C]
:00412B04 49                      dec ecx
:00412B05 C644247C03              mov [esp+7C], 03
:00412B0A 8908                    mov dword ptr [eax], ecx
:00412B0C 5B                      pop ebx
:00412B0D 7509                    jne 00412B18
:00412B0F 50                      push eax
:00412B10 E8EBE71C00              call 005E1300
:00412B15 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412B0D(C)
|
:00412B18 8B44240C                mov eax, dword ptr [esp+0C]
:00412B1C C644247802              mov [esp+78], 02
:00412B21 83C0F4                  add eax, FFFFFFF4
:00412B24 8B08                    mov ecx, dword ptr [eax]
:00412B26 49                      dec ecx
:00412B27 8908                    mov dword ptr [eax], ecx
:00412B29 7509                    jne 00412B34
:00412B2B 50                      push eax
:00412B2C E8CFE71C00              call 005E1300
:00412B31 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412B29(C)
|
:00412B34 8B44243C                mov eax, dword ptr [esp+3C]
:00412B38 C744247833000000        mov [esp+78], 00000033
:00412B40 85C0                    test eax, eax
:00412B42 7416                    je 00412B5A
:00412B44 8B4C2444                mov ecx, dword ptr [esp+44]
:00412B48 2BC8                    sub ecx, eax
:00412B4A C1F902                  sar ecx, 02
:00412B4D C1E102                  shl ecx, 02
:00412B50 51                      push ecx
:00412B51 50                      push eax
:00412B52 E8593EFFFF              call 004069B0
:00412B57 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412B42(C)
|
:00412B5A 8B4C2470                mov ecx, dword ptr [esp+70]
:00412B5E 64890D00000000          mov dword ptr fs:[00000000], ecx
:00412B65 83C47C                  add esp, 0000007C
:00412B68 C3                      ret


:00412B69 90                      nop
:00412B6A 90                      nop
:00412B6B 90                      nop
:00412B6C 90                      nop
:00412B6D 90                      nop
:00412B6E 90                      nop
:00412B6F 90                      nop

* Referenced by a CALL at Address:
|:00411F2A   
|
:00412B70 6AFF                    push FFFFFFFF
:00412B72 686F0E6D00              push 006D0E6F
:00412B77 64A100000000            mov eax, dword ptr fs:[00000000]
:00412B7D 50                      push eax
:00412B7E 64892500000000          mov dword ptr fs:[00000000], esp
:00412B85 83EC70                  sub esp, 00000070
:00412B88 53                      push ebx
:00412B89 55                      push ebp
:00412B8A 56                      push esi
:00412B8B 8BF1                    mov esi, ecx
:00412B8D 33DB                    xor ebx, ebx
:00412B8F 57                      push edi
:00412B90 8974241C                mov dword ptr [esp+1C], esi
:00412B94 33FF                    xor edi, edi
:00412B96 895C2414                mov dword ptr [esp+14], ebx
:00412B9A 8D442413                lea eax, dword ptr [esp+13]
:00412B9E 8D4C244C                lea ecx, dword ptr [esp+4C]
:00412BA2 50                      push eax
:00412BA3 89BC248C000000          mov dword ptr [esp+0000008C], edi
:00412BAA E831260000              call 004151E0
:00412BAF A188DA7900              mov eax, dword ptr [0079DA88]
:00412BB4 B994DA7900              mov ecx, 0079DA94
:00412BB9 40                      inc eax
:00412BBA 894C2420                mov dword ptr [esp+20], ecx
:00412BBE 40                      inc eax
:00412BBF 894C2418                mov dword ptr [esp+18], ecx
:00412BC3 A388DA7900              mov dword ptr [0079DA88], eax
:00412BC8 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:00412BCE C684248800000004        mov byte ptr [esp+00000088], 04
:00412BD6 51                      push ecx

* Possible StringData Ref from Data Obj ->"rank"
                                  |
:00412BD7 68E8BA7800              push 0078BAE8
:00412BDC 8D4C2434                lea ecx, dword ptr [esp+34]
:00412BE0 E8CB841D00              call 005EB0B0
:00412BE5 50                      push eax
:00412BE6 8D4C241C                lea ecx, dword ptr [esp+1C]
:00412BEA C684248C00000005        mov byte ptr [esp+0000008C], 05
:00412BF2 E829871D00              call 005EB320
:00412BF7 8B54242C                mov edx, dword ptr [esp+2C]
:00412BFB C684248800000004        mov byte ptr [esp+00000088], 04
:00412C03 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00412C06 8D42F4                  lea eax, dword ptr [edx-0C]
:00412C09 49                      dec ecx
:00412C0A 8908                    mov dword ptr [eax], ecx
:00412C0C 7509                    jne 00412C17
:00412C0E 50                      push eax
:00412C0F E8ECE61C00              call 005E1300
:00412C14 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412C0C(C)
|
:00412C17 A128FE7200              mov eax, dword ptr [0072FE28]
:00412C1C 8D4C2424                lea ecx, dword ptr [esp+24]
:00412C20 50                      push eax

* Possible StringData Ref from Data Obj ->"name_rank"
                                  |
:00412C21 68DCBA7800              push 0078BADC
:00412C26 E885841D00              call 005EB0B0
:00412C2B 8D4C2424                lea ecx, dword ptr [esp+24]
:00412C2F 8D54242C                lea edx, dword ptr [esp+2C]
:00412C33 51                      push ecx
:00412C34 52                      push edx
:00412C35 B9D7AF7A00              mov ecx, 007AAFD7
:00412C3A C684249000000006        mov byte ptr [esp+00000090], 06
:00412C42 E8596BFFFF              call 004097A0
:00412C47 8B8E37010000            mov ecx, dword ptr [esi+00000137]
:00412C4D 8B10                    mov edx, dword ptr [eax]
:00412C4F 51                      push ecx
:00412C50 52                      push edx
:00412C51 8D442428                lea eax, dword ptr [esp+28]

* Possible StringData Ref from Data Obj ->"%s: %d"
                                  |
:00412C55 6880B77800              push 0078B780
:00412C5A 50                      push eax
:00412C5B C684249800000007        mov byte ptr [esp+00000098], 07
:00412C63 E868901D00              call 005EBCD0
:00412C68 8B4C243C                mov ecx, dword ptr [esp+3C]
:00412C6C 83C410                  add esp, 00000010
:00412C6F C684248800000006        mov byte ptr [esp+00000088], 06
:00412C77 8D41F4                  lea eax, dword ptr [ecx-0C]
:00412C7A 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00412C7D 49                      dec ecx
:00412C7E 8908                    mov dword ptr [eax], ecx
:00412C80 7509                    jne 00412C8B
:00412C82 50                      push eax
:00412C83 E878E61C00              call 005E1300
:00412C88 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412C80(C)
|
:00412C8B 8B542424                mov edx, dword ptr [esp+24]
:00412C8F C684248800000004        mov byte ptr [esp+00000088], 04
:00412C97 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00412C9A 8D42F4                  lea eax, dword ptr [edx-0C]
:00412C9D 49                      dec ecx
:00412C9E 8908                    mov dword ptr [eax], ecx
:00412CA0 7509                    jne 00412CAB
:00412CA2 50                      push eax
:00412CA3 E858E61C00              call 005E1300
:00412CA8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412CA0(C)
|
:00412CAB 683E010000              push 0000013E
:00412CB0 E8CBE51C00              call 005E1280
:00412CB5 8BF0                    mov esi, eax
:00412CB7 83C404                  add esp, 00000004
:00412CBA 89742438                mov dword ptr [esp+38], esi
:00412CBE 3BF7                    cmp esi, edi
:00412CC0 C684248800000008        mov byte ptr [esp+00000088], 08
:00412CC8 0F848F000000            je 00412D5D
:00412CCE 33C9                    xor ecx, ecx
:00412CD0 B8E0AF4000              mov eax, 0040AFE0
:00412CD5 51                      push ecx
:00412CD6 8B4C2420                mov ecx, dword ptr [esp+20]
:00412CDA 50                      push eax
:00412CDB 8D442474                lea eax, dword ptr [esp+74]
:00412CDF 50                      push eax
:00412CE0 E85B110000              call 00413E40
:00412CE5 BB01000000              mov ebx, 00000001
:00412CEA 8BE8                    mov ebp, eax
:00412CEC 895C2414                mov dword ptr [esp+14], ebx
:00412CF0 8D4C2458                lea ecx, dword ptr [esp+58]
:00412CF4 E8C709FFFF              call 004036C0
:00412CF9 57                      push edi
:00412CFA 57                      push edi
:00412CFB 53                      push ebx
:00412CFC 50                      push eax
:00412CFD 8D4C2430                lea ecx, dword ptr [esp+30]
:00412D01 55                      push ebp
:00412D02 51                      push ecx
:00412D03 8D542454                lea edx, dword ptr [esp+54]
:00412D07 57                      push edi
:00412D08 52                      push edx
:00412D09 8BCE                    mov ecx, esi
:00412D0B C78424A80000000A000000  mov dword ptr [esp+000000A8], 0000000A
:00412D16 897C245C                mov dword ptr [esp+5C], edi
:00412D1A C74424600C000000        mov [esp+60], 0000000C
:00412D22 E879E61E00              call 006013A0
:00412D27 8B4C2458                mov ecx, dword ptr [esp+58]
:00412D2B C68424880000000C        mov byte ptr [esp+00000088], 0C
:00412D33 3BCF                    cmp ecx, edi
:00412D35 740A                    je 00412D41
:00412D37 8D442458                lea eax, dword ptr [esp+58]
:00412D3B 50                      push eax
:00412D3C E8DFB51E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412D35(C)
|
:00412D41 8D4C2418                lea ecx, dword ptr [esp+18]
:00412D45 C706B49A7000            mov dword ptr [esi], 00709AB4
:00412D4B 51                      push ecx
:00412D4C 8D4E24                  lea ecx, dword ptr [esi+24]
:00412D4F C74608AC9A7000          mov [esi+08], 00709AAC
:00412D56 E8C5851D00              call 005EB320
:00412D5B EB02                    jmp 00412D5F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412CC8(C)
|
:00412D5D 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412D5B(U)
|
:00412D5F 8B442450                mov eax, dword ptr [esp+50]
:00412D63 8B4C2454                mov ecx, dword ptr [esp+54]
:00412D67 3BC1                    cmp eax, ecx
:00412D69 C78424880000000D000000  mov dword ptr [esp+00000088], 0000000D
:00412D74 8974242C                mov dword ptr [esp+2C], esi
:00412D78 7413                    je 00412D8D
:00412D7A 3BC7                    cmp eax, edi
:00412D7C 7406                    je 00412D84
:00412D7E 8930                    mov dword ptr [eax], esi
:00412D80 8B442450                mov eax, dword ptr [esp+50]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412D7C(C)
|
:00412D84 83C004                  add eax, 00000004
:00412D87 89442450                mov dword ptr [esp+50], eax
:00412D8B EB11                    jmp 00412D9E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412D78(C)
|
:00412D8D 8D54242C                lea edx, dword ptr [esp+2C]
:00412D91 6A01                    push 00000001
:00412D93 52                      push edx
:00412D94 50                      push eax
:00412D95 8D4C2458                lea ecx, dword ptr [esp+58]
:00412D99 E83238FFFF              call 004065D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412D8B(U)
|
:00412D9E F6C301                  test bl, 01
:00412DA1 C784248800000004000000  mov dword ptr [esp+00000088], 00000004
:00412DAC 7419                    je 00412DC7
:00412DAE 8B4C246C                mov ecx, dword ptr [esp+6C]
:00412DB2 83E3FE                  and ebx, FFFFFFFE
:00412DB5 3BCF                    cmp ecx, edi
:00412DB7 895C2414                mov dword ptr [esp+14], ebx
:00412DBB 740A                    je 00412DC7
:00412DBD 8D44246C                lea eax, dword ptr [esp+6C]
:00412DC1 50                      push eax
:00412DC2 E859B51E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412DAC(C), :00412DBB(C)
|
:00412DC7 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:00412DCD 51                      push ecx

* Possible StringData Ref from Data Obj ->"reputation"
                                  |
:00412DCE 68D0BA7800              push 0078BAD0
:00412DD3 8D4C2434                lea ecx, dword ptr [esp+34]
:00412DD7 E8D4821D00              call 005EB0B0
:00412DDC 50                      push eax
:00412DDD 8D4C241C                lea ecx, dword ptr [esp+1C]
:00412DE1 C684248C0000000E        mov byte ptr [esp+0000008C], 0E
:00412DE9 E832851D00              call 005EB320
:00412DEE 8B54242C                mov edx, dword ptr [esp+2C]
:00412DF2 C684248800000004        mov byte ptr [esp+00000088], 04
:00412DFA 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00412DFD 8D42F4                  lea eax, dword ptr [edx-0C]
:00412E00 49                      dec ecx
:00412E01 8908                    mov dword ptr [eax], ecx
:00412E03 7509                    jne 00412E0E
:00412E05 50                      push eax
:00412E06 E8F5E41C00              call 005E1300
:00412E0B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412E03(C)
|
:00412E0E A128FE7200              mov eax, dword ptr [0072FE28]
:00412E13 8D4C2424                lea ecx, dword ptr [esp+24]
:00412E17 50                      push eax

* Possible StringData Ref from Data Obj ->"name_reputation"
                                  |
:00412E18 68C0BA7800              push 0078BAC0
:00412E1D E88E821D00              call 005EB0B0
:00412E22 8D4C2424                lea ecx, dword ptr [esp+24]
:00412E26 8D54242C                lea edx, dword ptr [esp+2C]
:00412E2A 51                      push ecx
:00412E2B 52                      push edx
:00412E2C B9D7AF7A00              mov ecx, 007AAFD7
:00412E31 C68424900000000F        mov byte ptr [esp+00000090], 0F
:00412E39 E86269FFFF              call 004097A0
:00412E3E 8B4C241C                mov ecx, dword ptr [esp+1C]
:00412E42 8B00                    mov eax, dword ptr [eax]

* Possible StringData Ref from Data Obj ->"???"
                                  |
:00412E44 68BCBA7800              push 0078BABC
:00412E49 C684248C00000010        mov byte ptr [esp+0000008C], 10
:00412E51 8B913B010000            mov edx, dword ptr [ecx+0000013B]
:00412E57 8D4C2424                lea ecx, dword ptr [esp+24]
:00412E5B 52                      push edx
:00412E5C 50                      push eax

* Possible StringData Ref from Data Obj ->"%s: %d (%s)"
                                  |
:00412E5D 68B0BA7800              push 0078BAB0
:00412E62 51                      push ecx
:00412E63 E8688E1D00              call 005EBCD0
:00412E68 8B542440                mov edx, dword ptr [esp+40]
:00412E6C 83C414                  add esp, 00000014
:00412E6F C68424880000000F        mov byte ptr [esp+00000088], 0F
:00412E77 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00412E7A 8D42F4                  lea eax, dword ptr [edx-0C]
:00412E7D 49                      dec ecx
:00412E7E 8908                    mov dword ptr [eax], ecx
:00412E80 7509                    jne 00412E8B
:00412E82 50                      push eax
:00412E83 E878E41C00              call 005E1300
:00412E88 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412E80(C)
|
:00412E8B 8B442424                mov eax, dword ptr [esp+24]
:00412E8F C684248800000004        mov byte ptr [esp+00000088], 04
:00412E97 83C0F4                  add eax, FFFFFFF4
:00412E9A 8B08                    mov ecx, dword ptr [eax]
:00412E9C 49                      dec ecx
:00412E9D 8908                    mov dword ptr [eax], ecx
:00412E9F 7509                    jne 00412EAA
:00412EA1 50                      push eax
:00412EA2 E859E41C00              call 005E1300
:00412EA7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412E9F(C)
|
:00412EAA 683E010000              push 0000013E
:00412EAF E8CCE31C00              call 005E1280
:00412EB4 8BF0                    mov esi, eax
:00412EB6 83C404                  add esp, 00000004
:00412EB9 89742438                mov dword ptr [esp+38], esi
:00412EBD 3BF7                    cmp esi, edi
:00412EBF C684248800000011        mov byte ptr [esp+00000088], 11
:00412EC7 0F848E000000            je 00412F5B
:00412ECD 33C9                    xor ecx, ecx
:00412ECF B8E0AF4000              mov eax, 0040AFE0
:00412ED4 51                      push ecx
:00412ED5 8D4C245C                lea ecx, dword ptr [esp+5C]
:00412ED9 50                      push eax
:00412EDA 51                      push ecx
:00412EDB 8B4C2428                mov ecx, dword ptr [esp+28]
:00412EDF E85C0F0000              call 00413E40
:00412EE4 83CB02                  or ebx, 00000002
:00412EE7 8BE8                    mov ebp, eax
:00412EE9 895C2414                mov dword ptr [esp+14], ebx
:00412EED 8D4C246C                lea ecx, dword ptr [esp+6C]
:00412EF1 E8CA07FFFF              call 004036C0
:00412EF6 57                      push edi
:00412EF7 57                      push edi
:00412EF8 6A01                    push 00000001
:00412EFA 50                      push eax
:00412EFB 8D542430                lea edx, dword ptr [esp+30]
:00412EFF 55                      push ebp
:00412F00 52                      push edx
:00412F01 8D442454                lea eax, dword ptr [esp+54]
:00412F05 57                      push edi
:00412F06 50                      push eax
:00412F07 8BCE                    mov ecx, esi
:00412F09 C78424A800000013000000  mov dword ptr [esp+000000A8], 00000013
:00412F14 897C245C                mov dword ptr [esp+5C], edi
:00412F18 C74424600C000000        mov [esp+60], 0000000C
:00412F20 E87BE41E00              call 006013A0
:00412F25 8B4C246C                mov ecx, dword ptr [esp+6C]
:00412F29 C684248800000015        mov byte ptr [esp+00000088], 15
:00412F31 3BCF                    cmp ecx, edi
:00412F33 740A                    je 00412F3F
:00412F35 8D54246C                lea edx, dword ptr [esp+6C]
:00412F39 52                      push edx
:00412F3A E8E1B31E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412F33(C)
|
:00412F3F 8D442418                lea eax, dword ptr [esp+18]
:00412F43 8D4E24                  lea ecx, dword ptr [esi+24]
:00412F46 50                      push eax
:00412F47 C706B49A7000            mov dword ptr [esi], 00709AB4
:00412F4D C74608AC9A7000          mov [esi+08], 00709AAC
:00412F54 E8C7831D00              call 005EB320
:00412F59 EB02                    jmp 00412F5D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412EC7(C)
|
:00412F5B 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412F59(U)
|
:00412F5D 8B442450                mov eax, dword ptr [esp+50]
:00412F61 8B4C2454                mov ecx, dword ptr [esp+54]
:00412F65 3BC1                    cmp eax, ecx
:00412F67 C784248800000016000000  mov dword ptr [esp+00000088], 00000016
:00412F72 8974242C                mov dword ptr [esp+2C], esi
:00412F76 7413                    je 00412F8B
:00412F78 3BC7                    cmp eax, edi
:00412F7A 7406                    je 00412F82
:00412F7C 8930                    mov dword ptr [eax], esi
:00412F7E 8B442450                mov eax, dword ptr [esp+50]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412F7A(C)
|
:00412F82 83C004                  add eax, 00000004
:00412F85 89442450                mov dword ptr [esp+50], eax
:00412F89 EB11                    jmp 00412F9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412F76(C)
|
:00412F8B 8D4C242C                lea ecx, dword ptr [esp+2C]
:00412F8F 6A01                    push 00000001
:00412F91 51                      push ecx
:00412F92 50                      push eax
:00412F93 8D4C2458                lea ecx, dword ptr [esp+58]
:00412F97 E83436FFFF              call 004065D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412F89(U)
|
:00412F9C F6C302                  test bl, 02
:00412F9F C784248800000004000000  mov dword ptr [esp+00000088], 00000004
:00412FAA 7419                    je 00412FC5
:00412FAC 8B4C2458                mov ecx, dword ptr [esp+58]
:00412FB0 83E3FD                  and ebx, FFFFFFFD
:00412FB3 3BCF                    cmp ecx, edi
:00412FB5 895C2414                mov dword ptr [esp+14], ebx
:00412FB9 740A                    je 00412FC5
:00412FBB 8D542458                lea edx, dword ptr [esp+58]
:00412FBF 52                      push edx
:00412FC0 E85BB31E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412FAA(C), :00412FB9(C)
|
:00412FC5 683E010000              push 0000013E
:00412FCA E8B1E21C00              call 005E1280
:00412FCF 8BF0                    mov esi, eax
:00412FD1 83C404                  add esp, 00000004
:00412FD4 89742438                mov dword ptr [esp+38], esi
:00412FD8 3BF7                    cmp esi, edi
:00412FDA C684248800000017        mov byte ptr [esp+00000088], 17
:00412FE2 0F84CF000000            je 004130B7
:00412FE8 A128FE7200              mov eax, dword ptr [0072FE28]
:00412FED 8D4C242C                lea ecx, dword ptr [esp+2C]
:00412FF1 50                      push eax
:00412FF2 6868987A00              push 007A9868
:00412FF7 BDE0AF4000              mov ebp, 0040AFE0
:00412FFC E8AF801D00              call 005EB0B0
:00413001 83CB04                  or ebx, 00000004
:00413004 895C2414                mov dword ptr [esp+14], ebx
:00413008 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0041300E C684248800000018        mov byte ptr [esp+00000088], 18
:00413016 51                      push ecx
:00413017 6868987A00              push 007A9868
:0041301C 8D4C2430                lea ecx, dword ptr [esp+30]
:00413020 E88B801D00              call 005EB0B0
:00413025 83CB08                  or ebx, 00000008
:00413028 895C2414                mov dword ptr [esp+14], ebx
:0041302C 8B4C241C                mov ecx, dword ptr [esp+1C]
:00413030 57                      push edi
:00413031 8D542470                lea edx, dword ptr [esp+70]
:00413035 55                      push ebp
:00413036 52                      push edx
:00413037 C784249400000019000000  mov dword ptr [esp+00000094], 00000019
:00413042 E8F90D0000              call 00413E40
:00413047 83CB10                  or ebx, 00000010
:0041304A 8BE8                    mov ebp, eax
:0041304C 895C2414                mov dword ptr [esp+14], ebx
:00413050 8D4C2458                lea ecx, dword ptr [esp+58]
:00413054 E86706FFFF              call 004036C0
:00413059 33FF                    xor edi, edi
:0041305B 8D4C243C                lea ecx, dword ptr [esp+3C]
:0041305F 57                      push edi
:00413060 57                      push edi
:00413061 6A01                    push 00000001
:00413063 50                      push eax
:00413064 8D442438                lea eax, dword ptr [esp+38]
:00413068 55                      push ebp
:00413069 50                      push eax
:0041306A 57                      push edi
:0041306B 51                      push ecx
:0041306C 8BCE                    mov ecx, esi
:0041306E C78424A80000001B000000  mov dword ptr [esp+000000A8], 0000001B
:00413079 897C245C                mov dword ptr [esp+5C], edi
:0041307D C74424600C000000        mov [esp+60], 0000000C
:00413085 E816E31E00              call 006013A0
:0041308A 8D4C2458                lea ecx, dword ptr [esp+58]
:0041308E C68424880000001D        mov byte ptr [esp+00000088], 1D
:00413096 E85506FFFF              call 004036F0
:0041309B 8D54242C                lea edx, dword ptr [esp+2C]
:0041309F 8D4E24                  lea ecx, dword ptr [esi+24]
:004130A2 52                      push edx
:004130A3 C706B49A7000            mov dword ptr [esi], 00709AB4
:004130A9 C74608AC9A7000          mov [esi+08], 00709AAC
:004130B0 E86B821D00              call 005EB320
:004130B5 EB02                    jmp 004130B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412FE2(C)
|
:004130B7 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004130B5(U)
|
:004130B9 8B442450                mov eax, dword ptr [esp+50]
:004130BD 8B4C2454                mov ecx, dword ptr [esp+54]
:004130C1 3BC1                    cmp eax, ecx
:004130C3 C784248800000020000000  mov dword ptr [esp+00000088], 00000020
:004130CE 89742424                mov dword ptr [esp+24], esi
:004130D2 741B                    je 004130EF
:004130D4 8D4C2424                lea ecx, dword ptr [esp+24]
:004130D8 51                      push ecx
:004130D9 50                      push eax
:004130DA E851260000              call 00415730
:004130DF 8B442458                mov eax, dword ptr [esp+58]
:004130E3 83C408                  add esp, 00000008
:004130E6 83C004                  add eax, 00000004
:004130E9 89442450                mov dword ptr [esp+50], eax
:004130ED EB11                    jmp 00413100

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004130D2(C)
|
:004130EF 8D542424                lea edx, dword ptr [esp+24]
:004130F3 6A01                    push 00000001
:004130F5 52                      push edx
:004130F6 50                      push eax
:004130F7 8D4C2458                lea ecx, dword ptr [esp+58]
:004130FB E8D034FFFF              call 004065D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004130ED(U)
|
:00413100 F6C310                  test bl, 10
:00413103 C78424880000001F000000  mov dword ptr [esp+00000088], 0000001F
:0041310E 7419                    je 00413129
:00413110 8B4C246C                mov ecx, dword ptr [esp+6C]
:00413114 83E3EF                  and ebx, FFFFFFEF
:00413117 3BCF                    cmp ecx, edi
:00413119 895C2414                mov dword ptr [esp+14], ebx
:0041311D 740A                    je 00413129
:0041311F 8D44246C                lea eax, dword ptr [esp+6C]
:00413123 50                      push eax
:00413124 E8F7B11E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041310E(C), :0041311D(C)
|
:00413129 F6C308                  test bl, 08
:0041312C C78424880000001E000000  mov dword ptr [esp+00000088], 0000001E
:00413137 741F                    je 00413158
:00413139 8B4C2428                mov ecx, dword ptr [esp+28]
:0041313D 83E3F7                  and ebx, FFFFFFF7
:00413140 895C2414                mov dword ptr [esp+14], ebx
:00413144 8D41F4                  lea eax, dword ptr [ecx-0C]
:00413147 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0041314A 49                      dec ecx
:0041314B 8908                    mov dword ptr [eax], ecx
:0041314D 7509                    jne 00413158
:0041314F 50                      push eax
:00413150 E8ABE11C00              call 005E1300
:00413155 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413137(C), :0041314D(C)
|
:00413158 F6C304                  test bl, 04
:0041315B C784248800000004000000  mov dword ptr [esp+00000088], 00000004
:00413166 741F                    je 00413187
:00413168 8B54242C                mov edx, dword ptr [esp+2C]
:0041316C 83E3FB                  and ebx, FFFFFFFB
:0041316F 895C2414                mov dword ptr [esp+14], ebx
:00413173 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00413176 8D42F4                  lea eax, dword ptr [edx-0C]
:00413179 49                      dec ecx
:0041317A 8908                    mov dword ptr [eax], ecx
:0041317C 7509                    jne 00413187
:0041317E 50                      push eax
:0041317F E87CE11C00              call 005E1300
:00413184 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413166(C), :0041317C(C)
|
:00413187 8B44241C                mov eax, dword ptr [esp+1C]
:0041318B 33D2                    xor edx, edx
:0041318D 05DA0C0000              add eax, 00000CDA
:00413192 B90A000000              mov ecx, 0000000A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004131A0(C)
|
:00413197 3938                    cmp dword ptr [eax], edi
:00413199 7401                    je 0041319C
:0041319B 42                      inc edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413199(C)
|
:0041319C 83C004                  add eax, 00000004
:0041319F 49                      dec ecx
:004131A0 75F5                    jne 00413197
:004131A2 3BD7                    cmp edx, edi
:004131A4 0F8421040000            je 004135CB
:004131AA 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:004131B0 51                      push ecx

* Possible StringData Ref from Data Obj ->"addict"
                                  |
:004131B1 68A8BA7800              push 0078BAA8
:004131B6 8D4C2434                lea ecx, dword ptr [esp+34]
:004131BA E8F17E1D00              call 005EB0B0
:004131BF 50                      push eax
:004131C0 8D4C241C                lea ecx, dword ptr [esp+1C]
:004131C4 C684248C00000021        mov byte ptr [esp+0000008C], 21
:004131CC E84F811D00              call 005EB320
:004131D1 8B54242C                mov edx, dword ptr [esp+2C]
:004131D5 C684248800000004        mov byte ptr [esp+00000088], 04
:004131DD 8B4AF4                  mov ecx, dword ptr [edx-0C]
:004131E0 8D42F4                  lea eax, dword ptr [edx-0C]
:004131E3 49                      dec ecx
:004131E4 8908                    mov dword ptr [eax], ecx
:004131E6 7509                    jne 004131F1
:004131E8 50                      push eax
:004131E9 E812E11C00              call 005E1300
:004131EE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004131E6(C)
|
:004131F1 A128FE7200              mov eax, dword ptr [0072FE28]
:004131F6 8D4C242C                lea ecx, dword ptr [esp+2C]
:004131FA 50                      push eax

* Possible StringData Ref from Data Obj ->"name_staddict"
                                  |
:004131FB 6898BA7800              push 0078BA98
:00413200 E8AB7E1D00              call 005EB0B0
:00413205 8D4C242C                lea ecx, dword ptr [esp+2C]
:00413209 8D542428                lea edx, dword ptr [esp+28]
:0041320D 51                      push ecx
:0041320E 52                      push edx
:0041320F B9D7AF7A00              mov ecx, 007AAFD7
:00413214 C684249000000022        mov byte ptr [esp+00000090], 22
:0041321C E87F65FFFF              call 004097A0
:00413221 8B00                    mov eax, dword ptr [eax]
:00413223 8D4C2420                lea ecx, dword ptr [esp+20]
:00413227 50                      push eax

* Possible StringData Ref from Data Obj ->"          %s                  "
                                  |
:00413228 6878BA7800              push 0078BA78
:0041322D 51                      push ecx
:0041322E C684249400000023        mov byte ptr [esp+00000094], 23
:00413236 E8958A1D00              call 005EBCD0
:0041323B 8B542434                mov edx, dword ptr [esp+34]
:0041323F 83C40C                  add esp, 0000000C
:00413242 C684248800000022        mov byte ptr [esp+00000088], 22
:0041324A 8B4AF4                  mov ecx, dword ptr [edx-0C]
:0041324D 8D42F4                  lea eax, dword ptr [edx-0C]
:00413250 49                      dec ecx
:00413251 8908                    mov dword ptr [eax], ecx
:00413253 7509                    jne 0041325E
:00413255 50                      push eax
:00413256 E8A5E01C00              call 005E1300
:0041325B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413253(C)
|
:0041325E 8B44242C                mov eax, dword ptr [esp+2C]
:00413262 C684248800000004        mov byte ptr [esp+00000088], 04
:0041326A 83C0F4                  add eax, FFFFFFF4
:0041326D 8B08                    mov ecx, dword ptr [eax]
:0041326F 49                      dec ecx
:00413270 8908                    mov dword ptr [eax], ecx
:00413272 7509                    jne 0041327D
:00413274 50                      push eax
:00413275 E886E01C00              call 005E1300
:0041327A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413272(C)
|
:0041327D 683E010000              push 0000013E
:00413282 E8F9DF1C00              call 005E1280
:00413287 8BF0                    mov esi, eax
:00413289 83C404                  add esp, 00000004
:0041328C 89742438                mov dword ptr [esp+38], esi
:00413290 3BF7                    cmp esi, edi
:00413292 C684248800000024        mov byte ptr [esp+00000088], 24
:0041329A 0F848F000000            je 0041332F
:004132A0 33C9                    xor ecx, ecx
:004132A2 B8E0AF4000              mov eax, 0040AFE0
:004132A7 51                      push ecx
:004132A8 8D4C245C                lea ecx, dword ptr [esp+5C]
:004132AC 50                      push eax
:004132AD 51                      push ecx
:004132AE 8B4C2428                mov ecx, dword ptr [esp+28]
:004132B2 E8890B0000              call 00413E40
:004132B7 83CB20                  or ebx, 00000020
:004132BA 8BE8                    mov ebp, eax
:004132BC 895C2414                mov dword ptr [esp+14], ebx
:004132C0 8D4C246C                lea ecx, dword ptr [esp+6C]
:004132C4 E8F703FFFF              call 004036C0
:004132C9 6A01                    push 00000001
:004132CB 57                      push edi
:004132CC 6A01                    push 00000001
:004132CE 50                      push eax
:004132CF 8D542430                lea edx, dword ptr [esp+30]
:004132D3 55                      push ebp
:004132D4 52                      push edx
:004132D5 8D442454                lea eax, dword ptr [esp+54]
:004132D9 57                      push edi
:004132DA 50                      push eax
:004132DB 8BCE                    mov ecx, esi
:004132DD C78424A800000026000000  mov dword ptr [esp+000000A8], 00000026
:004132E8 897C245C                mov dword ptr [esp+5C], edi
:004132EC C74424600C000000        mov [esp+60], 0000000C
:004132F4 E8A7E01E00              call 006013A0
:004132F9 8B4C246C                mov ecx, dword ptr [esp+6C]
:004132FD C684248800000028        mov byte ptr [esp+00000088], 28
:00413305 3BCF                    cmp ecx, edi
:00413307 740A                    je 00413313
:00413309 8D54246C                lea edx, dword ptr [esp+6C]
:0041330D 52                      push edx
:0041330E E80DB01E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413307(C)
|
:00413313 8D442418                lea eax, dword ptr [esp+18]
:00413317 8D4E24                  lea ecx, dword ptr [esi+24]
:0041331A 50                      push eax
:0041331B C706B49A7000            mov dword ptr [esi], 00709AB4
:00413321 C74608AC9A7000          mov [esi+08], 00709AAC
:00413328 E8F37F1D00              call 005EB320
:0041332D EB02                    jmp 00413331

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041329A(C)
|
:0041332F 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041332D(U)
|
:00413331 8B442450                mov eax, dword ptr [esp+50]
:00413335 8B4C2454                mov ecx, dword ptr [esp+54]
:00413339 3BC1                    cmp eax, ecx
:0041333B C784248800000029000000  mov dword ptr [esp+00000088], 00000029
:00413346 8974242C                mov dword ptr [esp+2C], esi
:0041334A 7413                    je 0041335F
:0041334C 3BC7                    cmp eax, edi
:0041334E 7406                    je 00413356
:00413350 8930                    mov dword ptr [eax], esi
:00413352 8B442450                mov eax, dword ptr [esp+50]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041334E(C)
|
:00413356 83C004                  add eax, 00000004
:00413359 89442450                mov dword ptr [esp+50], eax
:0041335D EB11                    jmp 00413370

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041334A(C)
|
:0041335F 8D4C242C                lea ecx, dword ptr [esp+2C]
:00413363 6A01                    push 00000001
:00413365 51                      push ecx
:00413366 50                      push eax
:00413367 8D4C2458                lea ecx, dword ptr [esp+58]
:0041336B E86032FFFF              call 004065D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041335D(U)
|
:00413370 F6C320                  test bl, 20
:00413373 C784248800000004000000  mov dword ptr [esp+00000088], 00000004
:0041337E 7419                    je 00413399
:00413380 8B4C2458                mov ecx, dword ptr [esp+58]
:00413384 83E3DF                  and ebx, FFFFFFDF
:00413387 3BCF                    cmp ecx, edi
:00413389 895C2414                mov dword ptr [esp+14], ebx
:0041338D 740A                    je 00413399
:0041338F 8D542458                lea edx, dword ptr [esp+58]
:00413393 52                      push edx
:00413394 E887AF1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041337E(C), :0041338D(C)
|
:00413399 8B44241C                mov eax, dword ptr [esp+1C]

* Possible Indirect StringData Ref from Data Obj ->"buffoutAddiction"
                                  |
:0041339D BD90407900              mov ebp, 00794090
:004133A2 05DA0C0000              add eax, 00000CDA
:004133A7 896C242C                mov dword ptr [esp+2C], ebp
:004133AB 89442424                mov dword ptr [esp+24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004135C5(C)
|
:004133AF 8B4C2424                mov ecx, dword ptr [esp+24]
:004133B3 3939                    cmp dword ptr [ecx], edi
:004133B5 0F84F2010000            je 004135AD
:004133BB 8B1528FE7200            mov edx, dword ptr [0072FE28]
:004133C1 8B4500                  mov eax, dword ptr [ebp+00]
:004133C4 52                      push edx
:004133C5 50                      push eax
:004133C6 8D4C2430                lea ecx, dword ptr [esp+30]
:004133CA E8E17C1D00              call 005EB0B0
:004133CF 50                      push eax
:004133D0 8D4C241C                lea ecx, dword ptr [esp+1C]
:004133D4 C684248C0000002A        mov byte ptr [esp+0000008C], 2A
:004133DC E83F7F1D00              call 005EB320
:004133E1 8B442428                mov eax, dword ptr [esp+28]
:004133E5 C684248800000004        mov byte ptr [esp+00000088], 04
:004133ED 83C0F4                  add eax, FFFFFFF4
:004133F0 8B08                    mov ecx, dword ptr [eax]
:004133F2 49                      dec ecx
:004133F3 8908                    mov dword ptr [eax], ecx
:004133F5 7509                    jne 00413400
:004133F7 50                      push eax
:004133F8 E803DF1C00              call 005E1300
:004133FD 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004133F5(C)
|
:00413400 8D4C2418                lea ecx, dword ptr [esp+18]
:00413404 8D542434                lea edx, dword ptr [esp+34]
:00413408 51                      push ecx

* Possible StringData Ref from Data Obj ->"name_"
                                  |
:00413409 68C8B57800              push 0078B5C8
:0041340E 52                      push edx
:0041340F E89C110000              call 004145B0
:00413414 83C40C                  add esp, 0000000C
:00413417 50                      push eax
:00413418 8D442434                lea eax, dword ptr [esp+34]
:0041341C 50                      push eax
:0041341D B9D7AF7A00              mov ecx, 007AAFD7
:00413422 C68424900000002B        mov byte ptr [esp+00000090], 2B
:0041342A E87163FFFF              call 004097A0
:0041342F 50                      push eax
:00413430 8D4C2424                lea ecx, dword ptr [esp+24]
:00413434 C684248C0000002C        mov byte ptr [esp+0000008C], 2C
:0041343C E8DF7E1D00              call 005EB320
:00413441 8B4C2430                mov ecx, dword ptr [esp+30]
:00413445 C68424880000002B        mov byte ptr [esp+00000088], 2B
:0041344D 8D41F4                  lea eax, dword ptr [ecx-0C]
:00413450 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00413453 49                      dec ecx
:00413454 8908                    mov dword ptr [eax], ecx
:00413456 7509                    jne 00413461
:00413458 50                      push eax
:00413459 E8A2DE1C00              call 005E1300
:0041345E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413456(C)
|
:00413461 8B542434                mov edx, dword ptr [esp+34]
:00413465 C684248800000004        mov byte ptr [esp+00000088], 04
:0041346D 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00413470 8D42F4                  lea eax, dword ptr [edx-0C]
:00413473 49                      dec ecx
:00413474 8908                    mov dword ptr [eax], ecx
:00413476 7509                    jne 00413481
:00413478 50                      push eax
:00413479 E882DE1C00              call 005E1300
:0041347E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413476(C)
|
:00413481 683E010000              push 0000013E
:00413486 E8F5DD1C00              call 005E1280
:0041348B 8BF0                    mov esi, eax
:0041348D 83C404                  add esp, 00000004
:00413490 8974243C                mov dword ptr [esp+3C], esi
:00413494 3BF7                    cmp esi, edi
:00413496 C68424880000002D        mov byte ptr [esp+00000088], 2D
:0041349E 0F849F000000            je 00413543
:004134A4 33C9                    xor ecx, ecx
:004134A6 B8E0AF4000              mov eax, 0040AFE0
:004134AB 51                      push ecx
:004134AC 8B4C2420                mov ecx, dword ptr [esp+20]
:004134B0 50                      push eax
:004134B1 8D442474                lea eax, dword ptr [esp+74]
:004134B5 50                      push eax
:004134B6 E885090000              call 00413E40
:004134BB 83CB40                  or ebx, 00000040
:004134BE 895C2414                mov dword ptr [esp+14], ebx
:004134C2 33C9                    xor ecx, ecx
:004134C4 33D2                    xor edx, edx
:004134C6 83CDFF                  or ebp, FFFFFFFF
:004134C9 897C2458                mov dword ptr [esp+58], edi
:004134CD 894C245C                mov dword ptr [esp+5C], ecx
:004134D1 89542460                mov dword ptr [esp+60], edx
:004134D5 897C2464                mov dword ptr [esp+64], edi
:004134D9 896C2468                mov dword ptr [esp+68], ebp
:004134DD 33FF                    xor edi, edi
:004134DF 8D4C2458                lea ecx, dword ptr [esp+58]
:004134E3 57                      push edi
:004134E4 57                      push edi
:004134E5 6A01                    push 00000001
:004134E7 51                      push ecx
:004134E8 8D542430                lea edx, dword ptr [esp+30]
:004134EC 50                      push eax
:004134ED 52                      push edx
:004134EE 8D44245C                lea eax, dword ptr [esp+5C]
:004134F2 57                      push edi
:004134F3 50                      push eax
:004134F4 8BCE                    mov ecx, esi
:004134F6 C78424A80000002F000000  mov dword ptr [esp+000000A8], 0000002F
:00413501 897C2464                mov dword ptr [esp+64], edi
:00413505 C74424680C000000        mov [esp+68], 0000000C
:0041350D E88EDE1E00              call 006013A0
:00413512 8D4C2458                lea ecx, dword ptr [esp+58]
:00413516 C684248800000031        mov byte ptr [esp+00000088], 31
:0041351E E8CD01FFFF              call 004036F0
:00413523 8D4C2418                lea ecx, dword ptr [esp+18]
:00413527 C706B49A7000            mov dword ptr [esi], 00709AB4
:0041352D 51                      push ecx
:0041352E 8D4E24                  lea ecx, dword ptr [esi+24]
:00413531 C74608AC9A7000          mov [esi+08], 00709AAC
:00413538 E8E37D1D00              call 005EB320
:0041353D 8B6C242C                mov ebp, dword ptr [esp+2C]
:00413541 EB02                    jmp 00413545

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041349E(C)
|
:00413543 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413541(U)
|
:00413545 8B442450                mov eax, dword ptr [esp+50]
:00413549 8B4C2454                mov ecx, dword ptr [esp+54]
:0041354D 3BC1                    cmp eax, ecx
:0041354F C784248800000032000000  mov dword ptr [esp+00000088], 00000032
:0041355A 89742438                mov dword ptr [esp+38], esi
:0041355E 7413                    je 00413573
:00413560 3BC7                    cmp eax, edi
:00413562 7406                    je 0041356A
:00413564 8930                    mov dword ptr [eax], esi
:00413566 8B442450                mov eax, dword ptr [esp+50]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413562(C)
|
:0041356A 83C004                  add eax, 00000004
:0041356D 89442450                mov dword ptr [esp+50], eax
:00413571 EB11                    jmp 00413584

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041355E(C)
|
:00413573 8D542438                lea edx, dword ptr [esp+38]
:00413577 6A01                    push 00000001
:00413579 52                      push edx
:0041357A 50                      push eax
:0041357B 8D4C2458                lea ecx, dword ptr [esp+58]
:0041357F E84C30FFFF              call 004065D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413571(U)
|
:00413584 F6C340                  test bl, 40
:00413587 C784248800000004000000  mov dword ptr [esp+00000088], 00000004
:00413592 7419                    je 004135AD
:00413594 8B4C246C                mov ecx, dword ptr [esp+6C]
:00413598 83E3BF                  and ebx, FFFFFFBF
:0041359B 3BCF                    cmp ecx, edi
:0041359D 895C2414                mov dword ptr [esp+14], ebx
:004135A1 740A                    je 004135AD
:004135A3 8D44246C                lea eax, dword ptr [esp+6C]
:004135A7 50                      push eax
:004135A8 E873AD1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004133B5(C), :00413592(C), :004135A1(C)
|
:004135AD 8B542424                mov edx, dword ptr [esp+24]
:004135B1 83C504                  add ebp, 00000004
:004135B4 83C204                  add edx, 00000004
:004135B7 81FDB0407900            cmp ebp, 007940B0
:004135BD 89542424                mov dword ptr [esp+24], edx
:004135C1 896C242C                mov dword ptr [esp+2C], ebp
:004135C5 0F82E4FDFFFF            jb 004133AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004131A4(C)
|
:004135CB 8B54241C                mov edx, dword ptr [esp+1C]
:004135CF 8D4C244C                lea ecx, dword ptr [esp+4C]
:004135D3 51                      push ecx
:004135D4 8B8AAE160000            mov ecx, dword ptr [edx+000016AE]
:004135DA E851E81E00              call 00601E30
:004135DF 8B442418                mov eax, dword ptr [esp+18]
:004135E3 5F                      pop edi
:004135E4 83C0F4                  add eax, FFFFFFF4
:004135E7 5E                      pop esi
:004135E8 5D                      pop ebp
:004135E9 C644247C03              mov [esp+7C], 03
:004135EE 8B08                    mov ecx, dword ptr [eax]
:004135F0 5B                      pop ebx
:004135F1 49                      dec ecx
:004135F2 8908                    mov dword ptr [eax], ecx
:004135F4 7509                    jne 004135FF
:004135F6 50                      push eax
:004135F7 E804DD1C00              call 005E1300
:004135FC 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004135F4(C)
|
:004135FF 8B4C2410                mov ecx, dword ptr [esp+10]
:00413603 C644247802              mov [esp+78], 02
:00413608 8D41F4                  lea eax, dword ptr [ecx-0C]
:0041360B 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0041360E 49                      dec ecx
:0041360F 8908                    mov dword ptr [eax], ecx
:00413611 7509                    jne 0041361C
:00413613 50                      push eax
:00413614 E8E7DC1C00              call 005E1300
:00413619 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413611(C)
|
:0041361C 8B542444                mov edx, dword ptr [esp+44]
:00413620 8B44243C                mov eax, dword ptr [esp+3C]
:00413624 2BD0                    sub edx, eax
:00413626 8D4C2444                lea ecx, dword ptr [esp+44]
:0041362A C1FA02                  sar edx, 02
:0041362D 52                      push edx
:0041362E 50                      push eax
:0041362F C784248000000033000000  mov dword ptr [esp+00000080], 00000033
:0041363A E821200000              call 00415660
:0041363F 8B4C2470                mov ecx, dword ptr [esp+70]
:00413643 64890D00000000          mov dword ptr fs:[00000000], ecx
:0041364A 83C47C                  add esp, 0000007C
:0041364D C3                      ret


:0041364E 90                      nop
:0041364F 90                      nop

* Referenced by a CALL at Address:
|:00411F46   
|
:00413650 6AFF                    push FFFFFFFF
:00413652 68F30E6D00              push 006D0EF3
:00413657 64A100000000            mov eax, dword ptr fs:[00000000]
:0041365D 50                      push eax
:0041365E 64892500000000          mov dword ptr fs:[00000000], esp
:00413665 83EC68                  sub esp, 00000068
:00413668 53                      push ebx
:00413669 55                      push ebp
:0041366A 57                      push edi
:0041366B 33FF                    xor edi, edi
:0041366D 8BD9                    mov ebx, ecx
:0041366F 897C2410                mov dword ptr [esp+10], edi
:00413673 8D44240F                lea eax, dword ptr [esp+0F]
:00413677 8D4C2440                lea ecx, dword ptr [esp+40]
:0041367B 50                      push eax
:0041367C 89BC2480000000          mov dword ptr [esp+00000080], edi
:00413683 E8581B0000              call 004151E0
:00413688 8D4C240F                lea ecx, dword ptr [esp+0F]
:0041368C C644247C03              mov [esp+7C], 03
:00413691 51                      push ecx
:00413692 8D4C2438                lea ecx, dword ptr [esp+38]
:00413696 E8351B0000              call 004151D0
:0041369B 8B15089C7A00            mov edx, dword ptr [007A9C08]
:004136A1 33C9                    xor ecx, ecx
:004136A3 668B8BF8000000          mov cx, word ptr [ebx+000000F8]
:004136AA C644247C05              mov [esp+7C], 05
:004136AF 8B82CD050000            mov eax, dword ptr [edx+000005CD]
:004136B5 668B54C806              mov dx, word ptr [eax+8*ecx+06]
:004136BA 663B93F6000000          cmp dx, word ptr [ebx+000000F6]
:004136C1 8D04C8                  lea eax, dword ptr [eax+8*ecx]
:004136C4 7419                    je 004136DF
:004136C6 6689BBF6000000          mov word ptr [ebx+000000F6], di
:004136CD 6689BBF8000000          mov word ptr [ebx+000000F8], di
:004136D4 A1089C7A00              mov eax, dword ptr [007A9C08]
:004136D9 8B80CD050000            mov eax, dword ptr [eax+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004136C4(C)
|
:004136DF 8B08                    mov ecx, dword ptr [eax]
:004136E1 8D442434                lea eax, dword ptr [esp+34]
:004136E5 50                      push eax
:004136E6 8B11                    mov edx, dword ptr [ecx]
:004136E8 FF9208040000            call dword ptr [edx+00000408]
:004136EE 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:004136F4 51                      push ecx

* Possible StringData Ref from Data Obj ->"kills"
                                  |
:004136F5 68B8B97800              push 0078B9B8
:004136FA 8D4C2424                lea ecx, dword ptr [esp+24]
:004136FE E8AD791D00              call 005EB0B0
:00413703 8B2D88DA7900            mov ebp, dword ptr [0079DA88]
:00413709 C744241494DA7900        mov [esp+14], 0079DA94
:00413711 45                      inc ebp
:00413712 892D88DA7900            mov dword ptr [0079DA88], ebp
:00413718 8B542438                mov edx, dword ptr [esp+38]
:0041371C 8B442434                mov eax, dword ptr [esp+34]
:00413720 2BD0                    sub edx, eax
:00413722 33ED                    xor ebp, ebp
:00413724 C1FA02                  sar edx, 02
:00413727 C644247C07              mov [esp+7C], 07
:0041372C 896C2418                mov dword ptr [esp+18], ebp
:00413730 0F84A9010000            je 004138DF
:00413736 56                      push esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004138D8(C)
|
:00413737 393CA8                  cmp dword ptr [eax+4*ebp], edi
:0041373A 0F8E84010000            jle 004138C4
:00413740 8D442424                lea eax, dword ptr [esp+24]
:00413744 55                      push ebp
:00413745 50                      push eax
:00413746 B930AD7A00              mov ecx, 007AAD30
:0041374B E840FF1400              call 00563690
:00413750 8B4C2438                mov ecx, dword ptr [esp+38]
:00413754 8B00                    mov eax, dword ptr [eax]
:00413756 C684248000000008        mov byte ptr [esp+00000080], 08
:0041375E 8B14A9                  mov edx, dword ptr [ecx+4*ebp]
:00413761 8D4C2418                lea ecx, dword ptr [esp+18]
:00413765 52                      push edx
:00413766 50                      push eax

* Possible StringData Ref from Data Obj ->"%s : %d"
                                  |
:00413767 68F0BA7800              push 0078BAF0
:0041376C 51                      push ecx
:0041376D E85E851D00              call 005EBCD0
:00413772 8B542434                mov edx, dword ptr [esp+34]
:00413776 83C410                  add esp, 00000010
:00413779 C684248000000007        mov byte ptr [esp+00000080], 07
:00413781 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00413784 8D42F4                  lea eax, dword ptr [edx-0C]
:00413787 49                      dec ecx
:00413788 8908                    mov dword ptr [eax], ecx
:0041378A 7509                    jne 00413795
:0041378C 50                      push eax
:0041378D E86EDB1C00              call 005E1300
:00413792 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041378A(C)
|
:00413795 683E010000              push 0000013E
:0041379A E8E1DA1C00              call 005E1280
:0041379F 8BF0                    mov esi, eax
:004137A1 83C404                  add esp, 00000004
:004137A4 8974242C                mov dword ptr [esp+2C], esi
:004137A8 3BF7                    cmp esi, edi
:004137AA C684248000000009        mov byte ptr [esp+00000080], 09
:004137B2 0F849B000000            je 00413853
:004137B8 33C9                    xor ecx, ecx
:004137BA B8E0AF4000              mov eax, 0040AFE0
:004137BF 51                      push ecx
:004137C0 50                      push eax
:004137C1 8D44246C                lea eax, dword ptr [esp+6C]
:004137C5 8BCB                    mov ecx, ebx
:004137C7 50                      push eax
:004137C8 E873060000              call 00413E40
:004137CD 834C241401              or dword ptr [esp+14], 00000001
:004137D2 33C9                    xor ecx, ecx
:004137D4 33D2                    xor edx, edx
:004137D6 83CDFF                  or ebp, FFFFFFFF
:004137D9 897C2450                mov dword ptr [esp+50], edi
:004137DD 894C2454                mov dword ptr [esp+54], ecx
:004137E1 89542458                mov dword ptr [esp+58], edx
:004137E5 897C245C                mov dword ptr [esp+5C], edi
:004137E9 896C2460                mov dword ptr [esp+60], ebp
:004137ED 33FF                    xor edi, edi
:004137EF 8D4C2450                lea ecx, dword ptr [esp+50]
:004137F3 57                      push edi
:004137F4 57                      push edi
:004137F5 6A01                    push 00000001
:004137F7 51                      push ecx
:004137F8 8D542428                lea edx, dword ptr [esp+28]
:004137FC 50                      push eax
:004137FD 52                      push edx
:004137FE 8D442448                lea eax, dword ptr [esp+48]
:00413802 57                      push edi
:00413803 50                      push eax
:00413804 8BCE                    mov ecx, esi
:00413806 C78424A00000000B000000  mov dword ptr [esp+000000A0], 0000000B
:00413811 897C2450                mov dword ptr [esp+50], edi
:00413815 C74424540C000000        mov [esp+54], 0000000C
:0041381D E87EDB1E00              call 006013A0
:00413822 8D4C2450                lea ecx, dword ptr [esp+50]
:00413826 C68424800000000D        mov byte ptr [esp+00000080], 0D
:0041382E E8BDFEFEFF              call 004036F0
:00413833 8D4C2420                lea ecx, dword ptr [esp+20]
:00413837 C706B49A7000            mov dword ptr [esi], 00709AB4
:0041383D 51                      push ecx
:0041383E 8D4E24                  lea ecx, dword ptr [esi+24]
:00413841 C74608AC9A7000          mov [esi+08], 00709AAC
:00413848 E8D37A1D00              call 005EB320
:0041384D 8B6C241C                mov ebp, dword ptr [esp+1C]
:00413851 EB02                    jmp 00413855

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004137B2(C)
|
:00413853 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413851(U)
|
:00413855 8B442448                mov eax, dword ptr [esp+48]
:00413859 8B4C244C                mov ecx, dword ptr [esp+4C]
:0041385D 3BC1                    cmp eax, ecx
:0041385F C78424800000000E000000  mov dword ptr [esp+00000080], 0000000E
:0041386A 89742428                mov dword ptr [esp+28], esi
:0041386E 7413                    je 00413883
:00413870 3BC7                    cmp eax, edi
:00413872 7406                    je 0041387A
:00413874 8930                    mov dword ptr [eax], esi
:00413876 8B442448                mov eax, dword ptr [esp+48]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413872(C)
|
:0041387A 83C004                  add eax, 00000004
:0041387D 89442448                mov dword ptr [esp+48], eax
:00413881 EB11                    jmp 00413894

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041386E(C)
|
:00413883 8D542428                lea edx, dword ptr [esp+28]
:00413887 6A01                    push 00000001
:00413889 52                      push edx
:0041388A 50                      push eax
:0041388B 8D4C2450                lea ecx, dword ptr [esp+50]
:0041388F E83C2DFFFF              call 004065D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413881(U)
|
:00413894 8A442414                mov al, byte ptr [esp+14]
:00413898 C784248000000007000000  mov dword ptr [esp+00000080], 00000007
:004138A3 A801                    test al, 01
:004138A5 741D                    je 004138C4
:004138A7 8B4C2414                mov ecx, dword ptr [esp+14]
:004138AB 83E1FE                  and ecx, FFFFFFFE
:004138AE 894C2414                mov dword ptr [esp+14], ecx
:004138B2 8B4C2464                mov ecx, dword ptr [esp+64]
:004138B6 3BCF                    cmp ecx, edi
:004138B8 740A                    je 004138C4
:004138BA 8D442464                lea eax, dword ptr [esp+64]
:004138BE 50                      push eax
:004138BF E85CAA1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041373A(C), :004138A5(C), :004138B8(C)
|
:004138C4 8B4C243C                mov ecx, dword ptr [esp+3C]
:004138C8 8B442438                mov eax, dword ptr [esp+38]
:004138CC 2BC8                    sub ecx, eax
:004138CE 45                      inc ebp
:004138CF C1F902                  sar ecx, 02
:004138D2 3BE9                    cmp ebp, ecx
:004138D4 896C241C                mov dword ptr [esp+1C], ebp
:004138D8 0F8259FEFFFF            jb 00413737
:004138DE 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413730(C)
|
:004138DF 8B8BAE160000            mov ecx, dword ptr [ebx+000016AE]
:004138E5 8D542440                lea edx, dword ptr [esp+40]
:004138E9 52                      push edx
:004138EA E841E51E00              call 00601E30
:004138EF 8B442414                mov eax, dword ptr [esp+14]
:004138F3 C644247C06              mov [esp+7C], 06
:004138F8 83C0F4                  add eax, FFFFFFF4
:004138FB 8B08                    mov ecx, dword ptr [eax]
:004138FD 49                      dec ecx
:004138FE 8908                    mov dword ptr [eax], ecx
:00413900 7509                    jne 0041390B
:00413902 50                      push eax
:00413903 E8F8D91C00              call 005E1300
:00413908 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413900(C)
|
:0041390B 8B4C241C                mov ecx, dword ptr [esp+1C]
:0041390F C644247C05              mov [esp+7C], 05
:00413914 8D41F4                  lea eax, dword ptr [ecx-0C]
:00413917 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0041391A 49                      dec ecx
:0041391B 8908                    mov dword ptr [eax], ecx
:0041391D 7509                    jne 00413928
:0041391F 50                      push eax
:00413920 E8DBD91C00              call 005E1300
:00413925 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041391D(C)
|
:00413928 8B44243C                mov eax, dword ptr [esp+3C]
:0041392C 8B4C2434                mov ecx, dword ptr [esp+34]
:00413930 2BC1                    sub eax, ecx
:00413932 C644247C0F              mov [esp+7C], 0F
:00413937 C1F802                  sar eax, 02
:0041393A 3BCF                    cmp ecx, edi
:0041393C 7411                    je 0041394F
:0041393E 8D148500000000          lea edx, dword ptr [4*eax+00000000]
:00413945 52                      push edx
:00413946 51                      push ecx
:00413947 E86430FFFF              call 004069B0
:0041394C 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041393C(C)
|
:0041394F 8B442440                mov eax, dword ptr [esp+40]
:00413953 C744247C10000000        mov [esp+7C], 00000010
:0041395B 3BC7                    cmp eax, edi
:0041395D 5F                      pop edi
:0041395E 5D                      pop ebp
:0041395F 5B                      pop ebx
:00413960 7416                    je 00413978
:00413962 8B4C243C                mov ecx, dword ptr [esp+3C]
:00413966 2BC8                    sub ecx, eax
:00413968 C1F902                  sar ecx, 02
:0041396B C1E102                  shl ecx, 02
:0041396E 51                      push ecx
:0041396F 50                      push eax
:00413970 E83B30FFFF              call 004069B0
:00413975 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413960(C)
|
:00413978 8B4C2468                mov ecx, dword ptr [esp+68]
:0041397C 64890D00000000          mov dword ptr fs:[00000000], ecx
:00413983 83C474                  add esp, 00000074
:00413986 C3                      ret


:00413987 90                      nop
:00413988 90                      nop
:00413989 90                      nop
:0041398A 90                      nop
:0041398B 90                      nop
:0041398C 90                      nop
:0041398D 90                      nop
:0041398E 90                      nop
:0041398F 90                      nop
:00413990 C20400                  ret 0004


:00413993 90                      nop
:00413994 90                      nop
:00413995 90                      nop
:00413996 90                      nop
:00413997 90                      nop
:00413998 90                      nop
:00413999 90                      nop
:0041399A 90                      nop
:0041399B 90                      nop
:0041399C 90                      nop
:0041399D 90                      nop
:0041399E 90                      nop
:0041399F 90                      nop

* Referenced by a CALL at Address:
|:00413BE0   
|
:004139A0 6AFF                    push FFFFFFFF
:004139A2 682D0F6D00              push 006D0F2D
:004139A7 64A100000000            mov eax, dword ptr fs:[00000000]
:004139AD 50                      push eax
:004139AE 64892500000000          mov dword ptr fs:[00000000], esp
:004139B5 83EC24                  sub esp, 00000024
:004139B8 53                      push ebx
:004139B9 56                      push esi
:004139BA 8BF1                    mov esi, ecx
:004139BC 33DB                    xor ebx, ebx
:004139BE C644240B01              mov [esp+0B], 01
:004139C3 389EF3000000            cmp byte ptr [esi+000000F3], bl
:004139C9 7413                    je 004139DE
:004139CB 5E                      pop esi
:004139CC B001                    mov al, 01
:004139CE 5B                      pop ebx
:004139CF 8B4C2424                mov ecx, dword ptr [esp+24]
:004139D3 64890D00000000          mov dword ptr fs:[00000000], ecx
:004139DA 83C430                  add esp, 00000030
:004139DD C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004139C9(C)
|
:004139DE 399E2B010000            cmp dword ptr [esi+0000012B], ebx
:004139E4 0F8485000000            je 00413A6F
:004139EA A128FE7200              mov eax, dword ptr [0072FE28]
:004139EF 8D4C240C                lea ecx, dword ptr [esp+0C]
:004139F3 50                      push eax

* Possible StringData Ref from Data Obj ->"char_tagsused"
                                  |
:004139F4 6818BB7800              push 0078BB18
:004139F9 E8B2761D00              call 005EB0B0
:004139FE 8D4C240C                lea ecx, dword ptr [esp+0C]
:00413A02 8D542414                lea edx, dword ptr [esp+14]
:00413A06 51                      push ecx
:00413A07 52                      push edx
:00413A08 B9B0AF7A00              mov ecx, 007AAFB0
:00413A0D 895C243C                mov dword ptr [esp+3C], ebx
:00413A11 895C2424                mov dword ptr [esp+24], ebx
:00413A15 895C2428                mov dword ptr [esp+28], ebx
:00413A19 E8825DFFFF              call 004097A0
:00413A1E 8D4C241C                lea ecx, dword ptr [esp+1C]
:00413A22 C644243401              mov [esp+34], 01
:00413A27 51                      push ecx
:00413A28 6A04                    push 00000004
:00413A2A 50                      push eax
:00413A2B 56                      push esi
:00413A2C E8DFCC1700              call 00590710
:00413A31 8B542424                mov edx, dword ptr [esp+24]
:00413A35 83C410                  add esp, 00000010
:00413A38 885C2434                mov byte ptr [esp+34], bl
:00413A3C 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00413A3F 8D42F4                  lea eax, dword ptr [edx-0C]
:00413A42 49                      dec ecx
:00413A43 8908                    mov dword ptr [eax], ecx
:00413A45 7509                    jne 00413A50
:00413A47 50                      push eax
:00413A48 E8B3D81C00              call 005E1300
:00413A4D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413A45(C)
|
:00413A50 8B44240C                mov eax, dword ptr [esp+0C]
:00413A54 C7442434FFFFFFFF        mov [esp+34], FFFFFFFF
:00413A5C 83C0F4                  add eax, FFFFFFF4
:00413A5F 8B08                    mov ecx, dword ptr [eax]
:00413A61 49                      dec ecx
:00413A62 8908                    mov dword ptr [eax], ecx
:00413A64 0F8548010000            jne 00413BB2
:00413A6A E93A010000              jmp 00413BA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004139E4(C)
|
:00413A6F 399E2F010000            cmp dword ptr [esi+0000012F], ebx
:00413A75 0F8E8B000000            jle 00413B06
:00413A7B 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:00413A81 51                      push ecx

* Possible StringData Ref from Data Obj ->"char_statsused"
                                  |
:00413A82 6808BB7800              push 0078BB08
:00413A87 8D4C2414                lea ecx, dword ptr [esp+14]
:00413A8B E820761D00              call 005EB0B0
:00413A90 8D54240C                lea edx, dword ptr [esp+0C]
:00413A94 8D442414                lea eax, dword ptr [esp+14]
:00413A98 52                      push edx
:00413A99 50                      push eax
:00413A9A B9B0AF7A00              mov ecx, 007AAFB0
:00413A9F C744243C02000000        mov [esp+3C], 00000002
:00413AA7 895C2424                mov dword ptr [esp+24], ebx
:00413AAB 895C2428                mov dword ptr [esp+28], ebx
:00413AAF E8EC5CFFFF              call 004097A0
:00413AB4 8D4C241C                lea ecx, dword ptr [esp+1C]
:00413AB8 C644243403              mov [esp+34], 03
:00413ABD 51                      push ecx
:00413ABE 6A04                    push 00000004
:00413AC0 50                      push eax
:00413AC1 56                      push esi
:00413AC2 E849CC1700              call 00590710
:00413AC7 8B542424                mov edx, dword ptr [esp+24]
:00413ACB 83C410                  add esp, 00000010
:00413ACE C644243402              mov [esp+34], 02
:00413AD3 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00413AD6 8D42F4                  lea eax, dword ptr [edx-0C]
:00413AD9 49                      dec ecx
:00413ADA 8908                    mov dword ptr [eax], ecx
:00413ADC 7509                    jne 00413AE7
:00413ADE 50                      push eax
:00413ADF E81CD81C00              call 005E1300
:00413AE4 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413ADC(C)
|
:00413AE7 8B44240C                mov eax, dword ptr [esp+0C]
:00413AEB C7442434FFFFFFFF        mov [esp+34], FFFFFFFF
:00413AF3 83C0F4                  add eax, FFFFFFF4
:00413AF6 8B08                    mov ecx, dword ptr [eax]
:00413AF8 49                      dec ecx
:00413AF9 8908                    mov dword ptr [eax], ecx
:00413AFB 0F85B1000000            jne 00413BB2
:00413B01 E9A3000000              jmp 00413BA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413A75(C)
|
:00413B06 8D8E1C050000            lea ecx, dword ptr [esi+0000051C]
:00413B0C 8D9631130000            lea edx, dword ptr [esi+00001331]
:00413B12 51                      push ecx
:00413B13 52                      push edx
:00413B14 8D8E02040000            lea ecx, dword ptr [esi+00000402]
:00413B1A E871461400              call 00558190
:00413B1F 83F8FF                  cmp eax, FFFFFFFF
:00413B22 0F848E000000            je 00413BB6
:00413B28 A128FE7200              mov eax, dword ptr [0072FE28]
:00413B2D 8D4C2410                lea ecx, dword ptr [esp+10]
:00413B31 50                      push eax

* Possible StringData Ref from Data Obj ->"char_statsrange"
                                  |
:00413B32 68F8BA7800              push 0078BAF8
:00413B37 E874751D00              call 005EB0B0
:00413B3C 8D4C2410                lea ecx, dword ptr [esp+10]
:00413B40 8D542418                lea edx, dword ptr [esp+18]
:00413B44 51                      push ecx
:00413B45 52                      push edx
:00413B46 B9B0AF7A00              mov ecx, 007AAFB0
:00413B4B C744243C04000000        mov [esp+3C], 00000004
:00413B53 895C242C                mov dword ptr [esp+2C], ebx
:00413B57 895C2430                mov dword ptr [esp+30], ebx
:00413B5B E8405CFFFF              call 004097A0
:00413B60 8D4C2424                lea ecx, dword ptr [esp+24]
:00413B64 C644243405              mov [esp+34], 05
:00413B69 51                      push ecx
:00413B6A 6A04                    push 00000004
:00413B6C 50                      push eax
:00413B6D 56                      push esi
:00413B6E E89DCB1700              call 00590710
:00413B73 8B542428                mov edx, dword ptr [esp+28]
:00413B77 83C410                  add esp, 00000010
:00413B7A C644243404              mov [esp+34], 04
:00413B7F 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00413B82 8D42F4                  lea eax, dword ptr [edx-0C]
:00413B85 49                      dec ecx
:00413B86 8908                    mov dword ptr [eax], ecx
:00413B88 7509                    jne 00413B93
:00413B8A 50                      push eax
:00413B8B E870D71C00              call 005E1300
:00413B90 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413B88(C)
|
:00413B93 8B442410                mov eax, dword ptr [esp+10]
:00413B97 C7442434FFFFFFFF        mov [esp+34], FFFFFFFF
:00413B9F 83C0F4                  add eax, FFFFFFF4
:00413BA2 8B08                    mov ecx, dword ptr [eax]
:00413BA4 49                      dec ecx
:00413BA5 8908                    mov dword ptr [eax], ecx
:00413BA7 7509                    jne 00413BB2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413A6A(U), :00413B01(U)
|
:00413BA9 50                      push eax
:00413BAA E851D71C00              call 005E1300
:00413BAF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413A64(C), :00413AFB(C), :00413BA7(C)
|
:00413BB2 885C240B                mov byte ptr [esp+0B], bl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413B22(C)
|
:00413BB6 8B4C242C                mov ecx, dword ptr [esp+2C]
:00413BBA 8A44240B                mov al, byte ptr [esp+0B]
:00413BBE 5E                      pop esi
:00413BBF 5B                      pop ebx
:00413BC0 64890D00000000          mov dword ptr fs:[00000000], ecx
:00413BC7 83C430                  add esp, 00000030
:00413BCA C3                      ret


:00413BCB 90                      nop
:00413BCC 90                      nop
:00413BCD 90                      nop
:00413BCE 90                      nop
:00413BCF 90                      nop

* Referenced by a CALL at Address:
|:0041F777   
|
:00413BD0 53                      push ebx
:00413BD1 56                      push esi
:00413BD2 8BF1                    mov esi, ecx
:00413BD4 32DB                    xor bl, bl
:00413BD6 8A86F4000000            mov al, byte ptr [esi+000000F4]
:00413BDC 84C0                    test al, al
:00413BDE 7409                    je 00413BE9
:00413BE0 E8BBFDFFFF              call 004139A0
:00413BE5 84C0                    test al, al
:00413BE7 7402                    je 00413BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413BDE(C)
|
:00413BE9 B301                    mov bl, 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413BE7(C)
|
:00413BEB A1089C7A00              mov eax, dword ptr [007A9C08]
:00413BF0 85C0                    test eax, eax
:00413BF2 7429                    je 00413C1D
:00413BF4 8A8829060000            mov cl, byte ptr [eax+00000629]
:00413BFA 84C9                    test cl, cl
:00413BFC 741F                    je 00413C1D
:00413BFE 8B0DCC997A00            mov ecx, dword ptr [007A99CC]
:00413C04 85C9                    test ecx, ecx
:00413C06 7407                    je 00413C0F
:00413C08 6A00                    push 00000000
:00413C0A E8919B0000              call 0041D7A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413C06(C)
|
:00413C0F 8B06                    mov eax, dword ptr [esi]
:00413C11 6A04                    push 00000004
:00413C13 8BCE                    mov ecx, esi
:00413C15 FF5034                  call [eax+34]
:00413C18 5E                      pop esi
:00413C19 5B                      pop ebx
:00413C1A C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413BF2(C), :00413BFC(C)
|
:00413C1D 84DB                    test bl, bl
:00413C1F 7421                    je 00413C42
:00413C21 8BCE                    mov ecx, esi
:00413C23 E828000000              call 00413C50
:00413C28 8B0DCC997A00            mov ecx, dword ptr [007A99CC]
:00413C2E 85C9                    test ecx, ecx
:00413C30 7407                    je 00413C39
:00413C32 6A00                    push 00000000
:00413C34 E8679B0000              call 0041D7A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413C30(C)
|
:00413C39 8B16                    mov edx, dword ptr [esi]
:00413C3B 6A04                    push 00000004
:00413C3D 8BCE                    mov ecx, esi
:00413C3F FF5234                  call [edx+34]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413C1F(C)
|
:00413C42 5E                      pop esi
:00413C43 5B                      pop ebx
:00413C44 C20400                  ret 0004


:00413C47 90                      nop
:00413C48 90                      nop
:00413C49 90                      nop
:00413C4A 90                      nop
:00413C4B 90                      nop
:00413C4C 90                      nop
:00413C4D 90                      nop
:00413C4E 90                      nop
:00413C4F 90                      nop

* Referenced by a CALL at Addresses:
|:0040A878   , :00413C23   
|
:00413C50 6AFF                    push FFFFFFFF
:00413C52 683F0F6D00              push 006D0F3F
:00413C57 64A100000000            mov eax, dword ptr fs:[00000000]
:00413C5D 50                      push eax
:00413C5E 64892500000000          mov dword ptr fs:[00000000], esp
:00413C65 51                      push ecx
:00413C66 A1089C7A00              mov eax, dword ptr [007A9C08]
:00413C6B 53                      push ebx
:00413C6C 56                      push esi
:00413C6D 8BF1                    mov esi, ecx
:00413C6F 8B80CD050000            mov eax, dword ptr [eax+000005CD]
:00413C75 33C9                    xor ecx, ecx
:00413C77 668B8EF8000000          mov cx, word ptr [esi+000000F8]
:00413C7E 33DB                    xor ebx, ebx
:00413C80 668B54C806              mov dx, word ptr [eax+8*ecx+06]
:00413C85 8D04C8                  lea eax, dword ptr [eax+8*ecx]
:00413C88 663B96F6000000          cmp dx, word ptr [esi+000000F6]
:00413C8F 7419                    je 00413CAA
:00413C91 66899EF6000000          mov word ptr [esi+000000F6], bx
:00413C98 66899EF8000000          mov word ptr [esi+000000F8], bx
:00413C9F A1089C7A00              mov eax, dword ptr [007A9C08]
:00413CA4 8B80CD050000            mov eax, dword ptr [eax+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413C8F(C)
|
:00413CAA 8B08                    mov ecx, dword ptr [eax]
:00413CAC 8D86FA000000            lea eax, dword ptr [esi+000000FA]
:00413CB2 50                      push eax
:00413CB3 8B11                    mov edx, dword ptr [ecx]
:00413CB5 FF92BC040000            call dword ptr [edx+000004BC]
:00413CBB 889E30130000            mov byte ptr [esi+00001330], bl
:00413CC1 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00413CC7 33D2                    xor edx, edx
:00413CC9 8B81CD050000            mov eax, dword ptr [ecx+000005CD]
:00413CCF 668B96F8000000          mov dx, word ptr [esi+000000F8]
:00413CD6 668B4CD006              mov cx, word ptr [eax+8*edx+06]
:00413CDB 8D04D0                  lea eax, dword ptr [eax+8*edx]
:00413CDE 663B8EF6000000          cmp cx, word ptr [esi+000000F6]
:00413CE5 741A                    je 00413D01
:00413CE7 66899EF6000000          mov word ptr [esi+000000F6], bx
:00413CEE 66899EF8000000          mov word ptr [esi+000000F8], bx
:00413CF5 8B15089C7A00            mov edx, dword ptr [007A9C08]
:00413CFB 8B82CD050000            mov eax, dword ptr [edx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413CE5(C)
|
:00413D01 8B08                    mov ecx, dword ptr [eax]
:00413D03 8D960C130000            lea edx, dword ptr [esi+0000130C]
:00413D09 52                      push edx
:00413D0A 8B01                    mov eax, dword ptr [ecx]
:00413D0C FF90C4040000            call dword ptr [eax+000004C4]
:00413D12 8B864B010000            mov eax, dword ptr [esi+0000014B]
:00413D18 8D4C2408                lea ecx, dword ptr [esp+08]
:00413D1C 50                      push eax
:00413D1D 51                      push ecx
:00413D1E B930AD7A00              mov ecx, 007AAD30
:00413D23 E868F91400              call 00563690
:00413D28 8B15089C7A00            mov edx, dword ptr [007A9C08]
:00413D2E 895C2414                mov dword ptr [esp+14], ebx
:00413D32 8B8ACD050000            mov ecx, dword ptr [edx+000005CD]
:00413D38 33D2                    xor edx, edx
:00413D3A 668B96F8000000          mov dx, word ptr [esi+000000F8]
:00413D41 8D0CD1                  lea ecx, dword ptr [ecx+8*edx]
:00413D44 668B5106                mov dx, word ptr [ecx+06]
:00413D48 663B96F6000000          cmp dx, word ptr [esi+000000F6]
:00413D4F 741A                    je 00413D6B
:00413D51 66899EF6000000          mov word ptr [esi+000000F6], bx
:00413D58 66899EF8000000          mov word ptr [esi+000000F8], bx
:00413D5F 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00413D65 8B89CD050000            mov ecx, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413D4F(C)
|
:00413D6B 8B09                    mov ecx, dword ptr [ecx]
:00413D6D 50                      push eax
:00413D6E 81C152010000            add ecx, 00000152
:00413D74 E8A7751D00              call 005EB320
:00413D79 8B542408                mov edx, dword ptr [esp+08]
:00413D7D 5E                      pop esi
:00413D7E C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00413D86 5B                      pop ebx
:00413D87 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00413D8A 8D42F4                  lea eax, dword ptr [edx-0C]
:00413D8D 49                      dec ecx
:00413D8E 8908                    mov dword ptr [eax], ecx
:00413D90 7509                    jne 00413D9B
:00413D92 50                      push eax
:00413D93 E868D51C00              call 005E1300
:00413D98 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413D90(C)
|
:00413D9B 8B4C2404                mov ecx, dword ptr [esp+04]
:00413D9F 64890D00000000          mov dword ptr fs:[00000000], ecx
:00413DA6 83C410                  add esp, 00000010
:00413DA9 C3                      ret


:00413DAA 90                      nop
:00413DAB 90                      nop
:00413DAC 90                      nop
:00413DAD 90                      nop
:00413DAE 90                      nop
:00413DAF 90                      nop

* Referenced by a CALL at Address:
|:0041F6AC   
|
:00413DB0 56                      push esi
:00413DB1 8BF1                    mov esi, ecx
:00413DB3 8B0DCC997A00            mov ecx, dword ptr [007A99CC]
:00413DB9 85C9                    test ecx, ecx
:00413DBB 7407                    je 00413DC4
:00413DBD 6A00                    push 00000000
:00413DBF E8DC990000              call 0041D7A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413DBB(C)
|
:00413DC4 8B06                    mov eax, dword ptr [esi]
:00413DC6 6A10                    push 00000010
:00413DC8 8BCE                    mov ecx, esi
:00413DCA FF5034                  call [eax+34]
:00413DCD 5E                      pop esi
:00413DCE C20400                  ret 0004


:00413DD1 90                      nop
:00413DD2 90                      nop
:00413DD3 90                      nop
:00413DD4 90                      nop
:00413DD5 90                      nop
:00413DD6 90                      nop
:00413DD7 90                      nop
:00413DD8 90                      nop
:00413DD9 90                      nop
:00413DDA 90                      nop
:00413DDB 90                      nop
:00413DDC 90                      nop
:00413DDD 90                      nop
:00413DDE 90                      nop
:00413DDF 90                      nop
:00413DE0 E90B000000              jmp 00413DF0
:00413DE5 90                      nop
:00413DE6 90                      nop
:00413DE7 90                      nop
:00413DE8 90                      nop
:00413DE9 90                      nop
:00413DEA 90                      nop
:00413DEB 90                      nop
:00413DEC 90                      nop
:00413DED 90                      nop
:00413DEE 90                      nop
:00413DEF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413DE0(U)
|
:00413DF0 D90560837000            fld dword ptr [00708360]
:00413DF6 D835FC8E7000            fdiv dword ptr [00708EFC]
:00413DFC D91DBC987A00            fstp dword ptr [007A98BC]
:00413E02 C3                      ret


:00413E03 90                      nop
:00413E04 90                      nop
:00413E05 90                      nop
:00413E06 90                      nop
:00413E07 90                      nop
:00413E08 90                      nop
:00413E09 90                      nop
:00413E0A 90                      nop
:00413E0B 90                      nop
:00413E0C 90                      nop
:00413E0D 90                      nop
:00413E0E 90                      nop
:00413E0F 90                      nop
:00413E10 8A0DA8D47A00            mov cl, byte ptr [007AD4A8]
:00413E16 B001                    mov al, 01
:00413E18 84C8                    test al, cl
:00413E1A 7508                    jne 00413E24
:00413E1C 0AC8                    or cl, al
:00413E1E 880DA8D47A00            mov byte ptr [007AD4A8], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413E1A(C)
|
:00413E24 E907000000              jmp 00413E30
:00413E29 90                      nop
:00413E2A 90                      nop
:00413E2B 90                      nop
:00413E2C 90                      nop
:00413E2D 90                      nop
:00413E2E 90                      nop
:00413E2F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413E24(U)
|
:00413E30 6880104000              push 00401080
:00413E35 E823A62A00              call 006BE45D
:00413E3A 59                      pop ecx
:00413E3B C3                      ret


:00413E3C 90                      nop
:00413E3D 90                      nop
:00413E3E 90                      nop
:00413E3F 90                      nop

* Referenced by a CALL at Addresses:
|:00409FEA   , :0040A124   , :0040A246   , :0040B0E8   , :0040B248   
|:0040B3B1   , :0040B4DF   , :0040B611   , :0040B770   , :0040C420   
|:0040C571   , :0040C7D5   , :0040C946   , :0040CB15   , :0040CDAA   
|:0040CF37   , :0040D090   , :0040D1BB   , :0040D316   , :0040DFF0   
|:0040E1C9   , :0040F4A8   , :0040F6B9   , :0040F82F   , :0040FA27   
|:0040FCF6   , :0040FFDF   , :00410137   , :00410296   , :00410C98   
|:00410E69   , :00410F93   , :00411773   , :004119F4   , :00411C57   
|:004121AB   , :004123B5   , :00412540   , :004127B2   , :004129D0   
|:00412CE0   , :00412EDF   , :00413042   , :004132B2   , :004134B6   
|:004137C8   
|
:00413E40 51                      push ecx
:00413E41 8B44240C                mov eax, dword ptr [esp+0C]
:00413E45 53                      push ebx
:00413E46 56                      push esi
:00413E47 57                      push edi
:00413E48 83EC10                  sub esp, 00000010
:00413E4B 33D2                    xor edx, edx
:00413E4D 8BDC                    mov ebx, esp
:00413E4F 33F6                    xor esi, esi
:00413E51 33FF                    xor edi, edi
:00413E53 8903                    mov dword ptr [ebx], eax
:00413E55 897C241C                mov dword ptr [esp+1C], edi
:00413E59 895304                  mov dword ptr [ebx+04], edx
:00413E5C 897308                  mov dword ptr [ebx+08], esi
:00413E5F 8B742424                mov esi, dword ptr [esp+24]
:00413E63 56                      push esi
:00413E64 897B0C                  mov dword ptr [ebx+0C], edi
:00413E67 E8F4F7FEFF              call 00403660
:00413E6C 8BC6                    mov eax, esi
:00413E6E 5F                      pop edi
:00413E6F 5E                      pop esi
:00413E70 5B                      pop ebx
:00413E71 59                      pop ecx
:00413E72 C20C00                  ret 000C


:00413E75 90                      nop
:00413E76 90                      nop
:00413E77 90                      nop
:00413E78 90                      nop
:00413E79 90                      nop
:00413E7A 90                      nop
:00413E7B 90                      nop
:00413E7C 90                      nop
:00413E7D 90                      nop
:00413E7E 90                      nop
:00413E7F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415793(U)
|
:00413E80 56                      push esi
:00413E81 8BF1                    mov esi, ecx
:00413E83 E89865FFFF              call 0040A420
:00413E88 F644240801              test [esp+08], 01
:00413E8D 7409                    je 00413E98
:00413E8F 56                      push esi
:00413E90 E86BD41C00              call 005E1300
:00413E95 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413E8D(C)
|
:00413E98 8BC6                    mov eax, esi
:00413E9A 5E                      pop esi
:00413E9B C20400                  ret 0004


:00413E9E 90                      nop
:00413E9F 90                      nop

* Referenced by a CALL at Addresses:
|:0040A701   , :0040AA22   , :0040AAA6   , :0040ABC2   , :0040AF3C   
|:0040BEF1   , :0040DA6D   , :0040DB50   , :0040DC33   , :0040DD45   
|:0040DE29   , :00554C8A   
|
:00413EA0 8BC1                    mov eax, ecx
:00413EA2 8B4C2404                mov ecx, dword ptr [esp+04]
:00413EA6 8B5104                  mov edx, dword ptr [ecx+04]
:00413EA9 895004                  mov dword ptr [eax+04], edx
:00413EAC 8B5108                  mov edx, dword ptr [ecx+08]
:00413EAF 895008                  mov dword ptr [eax+08], edx
:00413EB2 8B510C                  mov edx, dword ptr [ecx+0C]
:00413EB5 89500C                  mov dword ptr [eax+0C], edx
:00413EB8 8B5110                  mov edx, dword ptr [ecx+10]
:00413EBB 895010                  mov dword ptr [eax+10], edx
:00413EBE 8B5114                  mov edx, dword ptr [ecx+14]
:00413EC1 895014                  mov dword ptr [eax+14], edx
:00413EC4 8B5118                  mov edx, dword ptr [ecx+18]
:00413EC7 895018                  mov dword ptr [eax+18], edx
:00413ECA 8B511C                  mov edx, dword ptr [ecx+1C]
:00413ECD 89501C                  mov dword ptr [eax+1C], edx
:00413ED0 8B5120                  mov edx, dword ptr [ecx+20]
:00413ED3 895020                  mov dword ptr [eax+20], edx
:00413ED6 8B5124                  mov edx, dword ptr [ecx+24]
:00413ED9 895024                  mov dword ptr [eax+24], edx
:00413EDC 8B5128                  mov edx, dword ptr [ecx+28]
:00413EDF 895028                  mov dword ptr [eax+28], edx
:00413EE2 8B492C                  mov ecx, dword ptr [ecx+2C]
:00413EE5 89482C                  mov dword ptr [eax+2C], ecx
:00413EE8 C20400                  ret 0004


:00413EEB 90                      nop
:00413EEC 90                      nop
:00413EED 90                      nop
:00413EEE 90                      nop
:00413EEF 90                      nop

* Referenced by a CALL at Addresses:
|:0040A710   , :0040AA2E   , :0040AAB5   , :0040ABD1   , :0040AE5F   
|:0040AF4F   , :0040BF00   , :0040DA7C   , :0040DB5C   , :0040DC42   
|:0040DD54   , :0040DE38   , :0055439F   , :00554C98   
|
:00413EF0 8BC1                    mov eax, ecx
:00413EF2 8B4C2404                mov ecx, dword ptr [esp+04]
:00413EF6 8B5104                  mov edx, dword ptr [ecx+04]
:00413EF9 895004                  mov dword ptr [eax+04], edx
:00413EFC 8B5108                  mov edx, dword ptr [ecx+08]
:00413EFF 895008                  mov dword ptr [eax+08], edx
:00413F02 8B510C                  mov edx, dword ptr [ecx+0C]
:00413F05 89500C                  mov dword ptr [eax+0C], edx
:00413F08 8B5110                  mov edx, dword ptr [ecx+10]
:00413F0B 895010                  mov dword ptr [eax+10], edx
:00413F0E 8B5114                  mov edx, dword ptr [ecx+14]
:00413F11 895014                  mov dword ptr [eax+14], edx
:00413F14 8B5118                  mov edx, dword ptr [ecx+18]
:00413F17 895018                  mov dword ptr [eax+18], edx
:00413F1A 8B511C                  mov edx, dword ptr [ecx+1C]
:00413F1D 89501C                  mov dword ptr [eax+1C], edx
:00413F20 8B5120                  mov edx, dword ptr [ecx+20]
:00413F23 895020                  mov dword ptr [eax+20], edx
:00413F26 8B5124                  mov edx, dword ptr [ecx+24]
:00413F29 895024                  mov dword ptr [eax+24], edx
:00413F2C 8B5128                  mov edx, dword ptr [ecx+28]
:00413F2F 895028                  mov dword ptr [eax+28], edx
:00413F32 8B512C                  mov edx, dword ptr [ecx+2C]
:00413F35 89502C                  mov dword ptr [eax+2C], edx
:00413F38 8B5130                  mov edx, dword ptr [ecx+30]
:00413F3B 895030                  mov dword ptr [eax+30], edx
:00413F3E 8B5134                  mov edx, dword ptr [ecx+34]
:00413F41 895034                  mov dword ptr [eax+34], edx
:00413F44 8B5138                  mov edx, dword ptr [ecx+38]
:00413F47 895038                  mov dword ptr [eax+38], edx
:00413F4A 8B513C                  mov edx, dword ptr [ecx+3C]
:00413F4D 89503C                  mov dword ptr [eax+3C], edx
:00413F50 8B5140                  mov edx, dword ptr [ecx+40]
:00413F53 895040                  mov dword ptr [eax+40], edx
:00413F56 8B5144                  mov edx, dword ptr [ecx+44]
:00413F59 895044                  mov dword ptr [eax+44], edx
:00413F5C 8B5148                  mov edx, dword ptr [ecx+48]
:00413F5F 895048                  mov dword ptr [eax+48], edx
:00413F62 8B514C                  mov edx, dword ptr [ecx+4C]
:00413F65 89504C                  mov dword ptr [eax+4C], edx
:00413F68 8B5150                  mov edx, dword ptr [ecx+50]
:00413F6B 895050                  mov dword ptr [eax+50], edx
:00413F6E 8B5154                  mov edx, dword ptr [ecx+54]
:00413F71 895054                  mov dword ptr [eax+54], edx
:00413F74 8B5158                  mov edx, dword ptr [ecx+58]
:00413F77 895058                  mov dword ptr [eax+58], edx
:00413F7A 8B515C                  mov edx, dword ptr [ecx+5C]
:00413F7D 89505C                  mov dword ptr [eax+5C], edx
:00413F80 8B5160                  mov edx, dword ptr [ecx+60]
:00413F83 895060                  mov dword ptr [eax+60], edx
:00413F86 8B5164                  mov edx, dword ptr [ecx+64]
:00413F89 895064                  mov dword ptr [eax+64], edx
:00413F8C 8B4968                  mov ecx, dword ptr [ecx+68]
:00413F8F 894868                  mov dword ptr [eax+68], ecx
:00413F92 C20400                  ret 0004


:00413F95 90                      nop
:00413F96 90                      nop
:00413F97 90                      nop
:00413F98 90                      nop
:00413F99 90                      nop
:00413F9A 90                      nop
:00413F9B 90                      nop
:00413F9C 90                      nop
:00413F9D 90                      nop
:00413F9E 90                      nop
:00413F9F 90                      nop

* Referenced by a CALL at Addresses:
|:0040A722   , :0040AA40   , :0040AAC7   , :0040ABE3   , :0040AE72   
|:0040AF62   , :0040BF12   , :0040DA8E   , :0040DB6E   , :0040DC54   
|:0040DD66   , :0040DE4A   , :004E2C49   , :004E61F7   , :005543B1   
|:00554605   , :00554CAE   
|
:00413FA0 8BC1                    mov eax, ecx
:00413FA2 56                      push esi
:00413FA3 8B4C2408                mov ecx, dword ptr [esp+08]
:00413FA7 57                      push edi
:00413FA8 8BF1                    mov esi, ecx
:00413FAA BFB4FFFFFF              mov edi, FFFFFFB4
:00413FAF 8B5104                  mov edx, dword ptr [ecx+04]
:00413FB2 2BF0                    sub esi, eax
:00413FB4 895004                  mov dword ptr [eax+04], edx
:00413FB7 8B5108                  mov edx, dword ptr [ecx+08]
:00413FBA 895008                  mov dword ptr [eax+08], edx
:00413FBD 8B510C                  mov edx, dword ptr [ecx+0C]
:00413FC0 89500C                  mov dword ptr [eax+0C], edx
:00413FC3 8B5110                  mov edx, dword ptr [ecx+10]
:00413FC6 895010                  mov dword ptr [eax+10], edx
:00413FC9 8B5114                  mov edx, dword ptr [ecx+14]
:00413FCC 895014                  mov dword ptr [eax+14], edx
:00413FCF 8B5118                  mov edx, dword ptr [ecx+18]
:00413FD2 895018                  mov dword ptr [eax+18], edx
:00413FD5 8B511C                  mov edx, dword ptr [ecx+1C]
:00413FD8 89501C                  mov dword ptr [eax+1C], edx
:00413FDB 8B5120                  mov edx, dword ptr [ecx+20]
:00413FDE 895020                  mov dword ptr [eax+20], edx
:00413FE1 8B5124                  mov edx, dword ptr [ecx+24]
:00413FE4 895024                  mov dword ptr [eax+24], edx
:00413FE7 8B5128                  mov edx, dword ptr [ecx+28]
:00413FEA 895028                  mov dword ptr [eax+28], edx
:00413FED 8B512C                  mov edx, dword ptr [ecx+2C]
:00413FF0 89502C                  mov dword ptr [eax+2C], edx
:00413FF3 8B5130                  mov edx, dword ptr [ecx+30]
:00413FF6 895030                  mov dword ptr [eax+30], edx
:00413FF9 8B5134                  mov edx, dword ptr [ecx+34]
:00413FFC 895034                  mov dword ptr [eax+34], edx
:00413FFF 8B5138                  mov edx, dword ptr [ecx+38]
:00414002 895038                  mov dword ptr [eax+38], edx
:00414005 8B513C                  mov edx, dword ptr [ecx+3C]
:00414008 89503C                  mov dword ptr [eax+3C], edx
:0041400B 8B5140                  mov edx, dword ptr [ecx+40]
:0041400E 895040                  mov dword ptr [eax+40], edx
:00414011 8B5144                  mov edx, dword ptr [ecx+44]
:00414014 895044                  mov dword ptr [eax+44], edx
:00414017 8B5148                  mov edx, dword ptr [ecx+48]
:0041401A 895048                  mov dword ptr [eax+48], edx
:0041401D 8D504C                  lea edx, dword ptr [eax+4C]
:00414020 2BF8                    sub edi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041402E(C)
|
:00414022 8A0C16                  mov cl, byte ptr [esi+edx]
:00414025 880A                    mov byte ptr [edx], cl
:00414027 42                      inc edx
:00414028 8D0C17                  lea ecx, dword ptr [edi+edx]
:0041402B 83F912                  cmp ecx, 00000012
:0041402E 72F2                    jb 00414022
:00414030 5F                      pop edi
:00414031 5E                      pop esi
:00414032 C20400                  ret 0004


:00414035 90                      nop
:00414036 90                      nop
:00414037 90                      nop
:00414038 90                      nop
:00414039 90                      nop
:0041403A 90                      nop
:0041403B 90                      nop
:0041403C 90                      nop
:0041403D 90                      nop
:0041403E 90                      nop
:0041403F 90                      nop

* Referenced by a CALL at Addresses:
|:0040A734   , :0040AA52   , :0040AAD9   , :0040ABF5   , :0040AE85   
|:0040AF75   , :0040BF24   , :0040DAA0   , :0040DB80   , :0040DC66   
|:0040DD78   , :0040DE5C   , :004E2C5B   , :004E6209   , :005543C5   
|:00554619   , :00554CC0   
|
:00414040 8BC1                    mov eax, ecx
:00414042 8B4C2404                mov ecx, dword ptr [esp+04]
:00414046 8A5104                  mov dl, byte ptr [ecx+04]
:00414049 885004                  mov byte ptr [eax+04], dl
:0041404C 8A5105                  mov dl, byte ptr [ecx+05]
:0041404F 885005                  mov byte ptr [eax+05], dl
:00414052 8A5106                  mov dl, byte ptr [ecx+06]
:00414055 885006                  mov byte ptr [eax+06], dl
:00414058 8A5107                  mov dl, byte ptr [ecx+07]
:0041405B 885007                  mov byte ptr [eax+07], dl
:0041405E 8A5108                  mov dl, byte ptr [ecx+08]
:00414061 885008                  mov byte ptr [eax+08], dl
:00414064 8A5109                  mov dl, byte ptr [ecx+09]
:00414067 885009                  mov byte ptr [eax+09], dl
:0041406A 8A510A                  mov dl, byte ptr [ecx+0A]
:0041406D 88500A                  mov byte ptr [eax+0A], dl
:00414070 8A510B                  mov dl, byte ptr [ecx+0B]
:00414073 88500B                  mov byte ptr [eax+0B], dl
:00414076 8A510C                  mov dl, byte ptr [ecx+0C]
:00414079 88500C                  mov byte ptr [eax+0C], dl
:0041407C 8A510D                  mov dl, byte ptr [ecx+0D]
:0041407F 88500D                  mov byte ptr [eax+0D], dl
:00414082 8A510E                  mov dl, byte ptr [ecx+0E]
:00414085 88500E                  mov byte ptr [eax+0E], dl
:00414088 8A510F                  mov dl, byte ptr [ecx+0F]
:0041408B 88500F                  mov byte ptr [eax+0F], dl
:0041408E 8A5110                  mov dl, byte ptr [ecx+10]
:00414091 885010                  mov byte ptr [eax+10], dl
:00414094 8A5111                  mov dl, byte ptr [ecx+11]
:00414097 885011                  mov byte ptr [eax+11], dl
:0041409A 8A5112                  mov dl, byte ptr [ecx+12]
:0041409D 885012                  mov byte ptr [eax+12], dl
:004140A0 8A5113                  mov dl, byte ptr [ecx+13]
:004140A3 885013                  mov byte ptr [eax+13], dl
:004140A6 8A5114                  mov dl, byte ptr [ecx+14]
:004140A9 885014                  mov byte ptr [eax+14], dl
:004140AC 8A5115                  mov dl, byte ptr [ecx+15]
:004140AF 885015                  mov byte ptr [eax+15], dl
:004140B2 8A5116                  mov dl, byte ptr [ecx+16]
:004140B5 885016                  mov byte ptr [eax+16], dl
:004140B8 8A5117                  mov dl, byte ptr [ecx+17]
:004140BB 885017                  mov byte ptr [eax+17], dl
:004140BE 8A5118                  mov dl, byte ptr [ecx+18]
:004140C1 885018                  mov byte ptr [eax+18], dl
:004140C4 8A5119                  mov dl, byte ptr [ecx+19]
:004140C7 885019                  mov byte ptr [eax+19], dl
:004140CA 8A511A                  mov dl, byte ptr [ecx+1A]
:004140CD 88501A                  mov byte ptr [eax+1A], dl
:004140D0 8A511B                  mov dl, byte ptr [ecx+1B]
:004140D3 88501B                  mov byte ptr [eax+1B], dl
:004140D6 8A511C                  mov dl, byte ptr [ecx+1C]
:004140D9 88501C                  mov byte ptr [eax+1C], dl
:004140DC 8A511D                  mov dl, byte ptr [ecx+1D]
:004140DF 88501D                  mov byte ptr [eax+1D], dl
:004140E2 8A511E                  mov dl, byte ptr [ecx+1E]
:004140E5 88501E                  mov byte ptr [eax+1E], dl
:004140E8 8A511F                  mov dl, byte ptr [ecx+1F]
:004140EB 88501F                  mov byte ptr [eax+1F], dl
:004140EE 8A5120                  mov dl, byte ptr [ecx+20]
:004140F1 885020                  mov byte ptr [eax+20], dl
:004140F4 8A5121                  mov dl, byte ptr [ecx+21]
:004140F7 885021                  mov byte ptr [eax+21], dl
:004140FA 8A5122                  mov dl, byte ptr [ecx+22]
:004140FD 885022                  mov byte ptr [eax+22], dl
:00414100 8A5123                  mov dl, byte ptr [ecx+23]
:00414103 885023                  mov byte ptr [eax+23], dl
:00414106 8A5124                  mov dl, byte ptr [ecx+24]
:00414109 885024                  mov byte ptr [eax+24], dl
:0041410C 8A5125                  mov dl, byte ptr [ecx+25]
:0041410F 885025                  mov byte ptr [eax+25], dl
:00414112 8A5126                  mov dl, byte ptr [ecx+26]
:00414115 885026                  mov byte ptr [eax+26], dl
:00414118 8A4927                  mov cl, byte ptr [ecx+27]
:0041411B 884827                  mov byte ptr [eax+27], cl
:0041411E C20400                  ret 0004


:00414121 90                      nop
:00414122 90                      nop
:00414123 90                      nop
:00414124 90                      nop
:00414125 90                      nop
:00414126 90                      nop
:00414127 90                      nop
:00414128 90                      nop
:00414129 90                      nop
:0041412A 90                      nop
:0041412B 90                      nop
:0041412C 90                      nop
:0041412D 90                      nop
:0041412E 90                      nop
:0041412F 90                      nop

* Referenced by a CALL at Addresses:
|:0040A746   , :0040AA64   , :0040AAEB   , :0040AC07   , :0040AE98   
|:0040AF88   , :0040BF36   , :0040DAB2   , :0040DB92   , :0040DC78   
|:0040DD8A   , :0040DE6E   , :004E2C6D   , :004E621B   , :005543D7   
|:0055462B   , :00554CD2   
|
:00414130 8BC1                    mov eax, ecx
:00414132 8B4C2404                mov ecx, dword ptr [esp+04]
:00414136 8B5104                  mov edx, dword ptr [ecx+04]
:00414139 895004                  mov dword ptr [eax+04], edx
:0041413C 8B5108                  mov edx, dword ptr [ecx+08]
:0041413F 895008                  mov dword ptr [eax+08], edx
:00414142 8B510C                  mov edx, dword ptr [ecx+0C]
:00414145 89500C                  mov dword ptr [eax+0C], edx
:00414148 8B5110                  mov edx, dword ptr [ecx+10]
:0041414B 895010                  mov dword ptr [eax+10], edx
:0041414E 8B5114                  mov edx, dword ptr [ecx+14]
:00414151 895014                  mov dword ptr [eax+14], edx
:00414154 8B5118                  mov edx, dword ptr [ecx+18]
:00414157 895018                  mov dword ptr [eax+18], edx
:0041415A 8B511C                  mov edx, dword ptr [ecx+1C]
:0041415D 89501C                  mov dword ptr [eax+1C], edx
:00414160 8B5120                  mov edx, dword ptr [ecx+20]
:00414163 895020                  mov dword ptr [eax+20], edx
:00414166 8B5124                  mov edx, dword ptr [ecx+24]
:00414169 895024                  mov dword ptr [eax+24], edx
:0041416C 8B5128                  mov edx, dword ptr [ecx+28]
:0041416F 895028                  mov dword ptr [eax+28], edx
:00414172 8B512C                  mov edx, dword ptr [ecx+2C]
:00414175 89502C                  mov dword ptr [eax+2C], edx
:00414178 8B5130                  mov edx, dword ptr [ecx+30]
:0041417B 895030                  mov dword ptr [eax+30], edx
:0041417E 8B5134                  mov edx, dword ptr [ecx+34]
:00414181 895034                  mov dword ptr [eax+34], edx
:00414184 8B5138                  mov edx, dword ptr [ecx+38]
:00414187 895038                  mov dword ptr [eax+38], edx
:0041418A 8B513C                  mov edx, dword ptr [ecx+3C]
:0041418D 89503C                  mov dword ptr [eax+3C], edx
:00414190 8B5140                  mov edx, dword ptr [ecx+40]
:00414193 895040                  mov dword ptr [eax+40], edx
:00414196 8B5144                  mov edx, dword ptr [ecx+44]
:00414199 895044                  mov dword ptr [eax+44], edx
:0041419C 8B5148                  mov edx, dword ptr [ecx+48]
:0041419F 895048                  mov dword ptr [eax+48], edx
:004141A2 8B514C                  mov edx, dword ptr [ecx+4C]
:004141A5 89504C                  mov dword ptr [eax+4C], edx
:004141A8 8B5150                  mov edx, dword ptr [ecx+50]
:004141AB 895050                  mov dword ptr [eax+50], edx
:004141AE 8B5154                  mov edx, dword ptr [ecx+54]
:004141B1 895054                  mov dword ptr [eax+54], edx
:004141B4 8B5158                  mov edx, dword ptr [ecx+58]
:004141B7 895058                  mov dword ptr [eax+58], edx
:004141BA 8B515C                  mov edx, dword ptr [ecx+5C]
:004141BD 89505C                  mov dword ptr [eax+5C], edx
:004141C0 8B5160                  mov edx, dword ptr [ecx+60]
:004141C3 895060                  mov dword ptr [eax+60], edx
:004141C6 8B5164                  mov edx, dword ptr [ecx+64]
:004141C9 895064                  mov dword ptr [eax+64], edx
:004141CC 8B5168                  mov edx, dword ptr [ecx+68]
:004141CF 895068                  mov dword ptr [eax+68], edx
:004141D2 8B516C                  mov edx, dword ptr [ecx+6C]
:004141D5 89506C                  mov dword ptr [eax+6C], edx
:004141D8 8B5170                  mov edx, dword ptr [ecx+70]
:004141DB 895070                  mov dword ptr [eax+70], edx
:004141DE 8B5174                  mov edx, dword ptr [ecx+74]
:004141E1 895074                  mov dword ptr [eax+74], edx
:004141E4 8B5178                  mov edx, dword ptr [ecx+78]
:004141E7 895078                  mov dword ptr [eax+78], edx
:004141EA 8B517C                  mov edx, dword ptr [ecx+7C]
:004141ED 89507C                  mov dword ptr [eax+7C], edx
:004141F0 8B9180000000            mov edx, dword ptr [ecx+00000080]
:004141F6 899080000000            mov dword ptr [eax+00000080], edx
:004141FC 8B9184000000            mov edx, dword ptr [ecx+00000084]
:00414202 899084000000            mov dword ptr [eax+00000084], edx
:00414208 8B9188000000            mov edx, dword ptr [ecx+00000088]
:0041420E 899088000000            mov dword ptr [eax+00000088], edx
:00414214 8B918C000000            mov edx, dword ptr [ecx+0000008C]
:0041421A 89908C000000            mov dword ptr [eax+0000008C], edx
:00414220 8B9190000000            mov edx, dword ptr [ecx+00000090]
:00414226 899090000000            mov dword ptr [eax+00000090], edx
:0041422C 8B9194000000            mov edx, dword ptr [ecx+00000094]
:00414232 899094000000            mov dword ptr [eax+00000094], edx
:00414238 8B9198000000            mov edx, dword ptr [ecx+00000098]
:0041423E 899098000000            mov dword ptr [eax+00000098], edx
:00414244 8B919C000000            mov edx, dword ptr [ecx+0000009C]
:0041424A 89909C000000            mov dword ptr [eax+0000009C], edx
:00414250 8B91A0000000            mov edx, dword ptr [ecx+000000A0]
:00414256 8990A0000000            mov dword ptr [eax+000000A0], edx
:0041425C 8B91A4000000            mov edx, dword ptr [ecx+000000A4]
:00414262 8990A4000000            mov dword ptr [eax+000000A4], edx
:00414268 8B91A8000000            mov edx, dword ptr [ecx+000000A8]
:0041426E 8990A8000000            mov dword ptr [eax+000000A8], edx
:00414274 8B91AC000000            mov edx, dword ptr [ecx+000000AC]
:0041427A 8990AC000000            mov dword ptr [eax+000000AC], edx
:00414280 8B91B0000000            mov edx, dword ptr [ecx+000000B0]
:00414286 8990B0000000            mov dword ptr [eax+000000B0], edx
:0041428C 8B91B4000000            mov edx, dword ptr [ecx+000000B4]
:00414292 8990B4000000            mov dword ptr [eax+000000B4], edx
:00414298 8B91B8000000            mov edx, dword ptr [ecx+000000B8]
:0041429E 8990B8000000            mov dword ptr [eax+000000B8], edx
:004142A4 8B91BC000000            mov edx, dword ptr [ecx+000000BC]
:004142AA 8990BC000000            mov dword ptr [eax+000000BC], edx
:004142B0 8B91C0000000            mov edx, dword ptr [ecx+000000C0]
:004142B6 8990C0000000            mov dword ptr [eax+000000C0], edx
:004142BC 8B91C4000000            mov edx, dword ptr [ecx+000000C4]
:004142C2 8990C4000000            mov dword ptr [eax+000000C4], edx
:004142C8 8B91C8000000            mov edx, dword ptr [ecx+000000C8]
:004142CE 8990C8000000            mov dword ptr [eax+000000C8], edx
:004142D4 8B91CC000000            mov edx, dword ptr [ecx+000000CC]
:004142DA 8990CC000000            mov dword ptr [eax+000000CC], edx
:004142E0 8B91D0000000            mov edx, dword ptr [ecx+000000D0]
:004142E6 8990D0000000            mov dword ptr [eax+000000D0], edx
:004142EC 8B91D4000000            mov edx, dword ptr [ecx+000000D4]
:004142F2 8990D4000000            mov dword ptr [eax+000000D4], edx
:004142F8 8B91D8000000            mov edx, dword ptr [ecx+000000D8]
:004142FE 8990D8000000            mov dword ptr [eax+000000D8], edx
:00414304 8B91DC000000            mov edx, dword ptr [ecx+000000DC]
:0041430A 8990DC000000            mov dword ptr [eax+000000DC], edx
:00414310 8B91E0000000            mov edx, dword ptr [ecx+000000E0]
:00414316 8990E0000000            mov dword ptr [eax+000000E0], edx
:0041431C 8B91E4000000            mov edx, dword ptr [ecx+000000E4]
:00414322 8990E4000000            mov dword ptr [eax+000000E4], edx
:00414328 8B91E8000000            mov edx, dword ptr [ecx+000000E8]
:0041432E 8990E8000000            mov dword ptr [eax+000000E8], edx
:00414334 8B91EC000000            mov edx, dword ptr [ecx+000000EC]
:0041433A 8990EC000000            mov dword ptr [eax+000000EC], edx
:00414340 8B91F0000000            mov edx, dword ptr [ecx+000000F0]
:00414346 8990F0000000            mov dword ptr [eax+000000F0], edx
:0041434C 8B91F4000000            mov edx, dword ptr [ecx+000000F4]
:00414352 8990F4000000            mov dword ptr [eax+000000F4], edx
:00414358 8B91F8000000            mov edx, dword ptr [ecx+000000F8]
:0041435E 8990F8000000            mov dword ptr [eax+000000F8], edx
:00414364 8B91FC000000            mov edx, dword ptr [ecx+000000FC]
:0041436A 8990FC000000            mov dword ptr [eax+000000FC], edx
:00414370 8B9100010000            mov edx, dword ptr [ecx+00000100]
:00414376 899000010000            mov dword ptr [eax+00000100], edx
:0041437C 8B9104010000            mov edx, dword ptr [ecx+00000104]
:00414382 899004010000            mov dword ptr [eax+00000104], edx
:00414388 8B9108010000            mov edx, dword ptr [ecx+00000108]
:0041438E 899008010000            mov dword ptr [eax+00000108], edx
:00414394 8B910C010000            mov edx, dword ptr [ecx+0000010C]
:0041439A 89900C010000            mov dword ptr [eax+0000010C], edx
:004143A0 8B9110010000            mov edx, dword ptr [ecx+00000110]
:004143A6 899010010000            mov dword ptr [eax+00000110], edx
:004143AC 8B9114010000            mov edx, dword ptr [ecx+00000114]
:004143B2 899014010000            mov dword ptr [eax+00000114], edx
:004143B8 8B9118010000            mov edx, dword ptr [ecx+00000118]
:004143BE 899018010000            mov dword ptr [eax+00000118], edx
:004143C4 8B911C010000            mov edx, dword ptr [ecx+0000011C]
:004143CA 89901C010000            mov dword ptr [eax+0000011C], edx
:004143D0 8B9120010000            mov edx, dword ptr [ecx+00000120]
:004143D6 899020010000            mov dword ptr [eax+00000120], edx
:004143DC 8B9124010000            mov edx, dword ptr [ecx+00000124]
:004143E2 899024010000            mov dword ptr [eax+00000124], edx
:004143E8 8B9128010000            mov edx, dword ptr [ecx+00000128]
:004143EE 899028010000            mov dword ptr [eax+00000128], edx
:004143F4 8B912C010000            mov edx, dword ptr [ecx+0000012C]
:004143FA 89902C010000            mov dword ptr [eax+0000012C], edx
:00414400 8B9130010000            mov edx, dword ptr [ecx+00000130]
:00414406 899030010000            mov dword ptr [eax+00000130], edx
:0041440C 8B9134010000            mov edx, dword ptr [ecx+00000134]
:00414412 899034010000            mov dword ptr [eax+00000134], edx
:00414418 8B9138010000            mov edx, dword ptr [ecx+00000138]
:0041441E 899038010000            mov dword ptr [eax+00000138], edx
:00414424 8B913C010000            mov edx, dword ptr [ecx+0000013C]
:0041442A 89903C010000            mov dword ptr [eax+0000013C], edx
:00414430 8B9140010000            mov edx, dword ptr [ecx+00000140]
:00414436 899040010000            mov dword ptr [eax+00000140], edx
:0041443C 8B9144010000            mov edx, dword ptr [ecx+00000144]
:00414442 899044010000            mov dword ptr [eax+00000144], edx
:00414448 8B9148010000            mov edx, dword ptr [ecx+00000148]
:0041444E 899048010000            mov dword ptr [eax+00000148], edx
:00414454 8B914C010000            mov edx, dword ptr [ecx+0000014C]
:0041445A 89904C010000            mov dword ptr [eax+0000014C], edx
:00414460 8B9150010000            mov edx, dword ptr [ecx+00000150]
:00414466 899050010000            mov dword ptr [eax+00000150], edx
:0041446C 8B9154010000            mov edx, dword ptr [ecx+00000154]
:00414472 899054010000            mov dword ptr [eax+00000154], edx
:00414478 8B9158010000            mov edx, dword ptr [ecx+00000158]
:0041447E 899058010000            mov dword ptr [eax+00000158], edx
:00414484 8B915C010000            mov edx, dword ptr [ecx+0000015C]
:0041448A 89905C010000            mov dword ptr [eax+0000015C], edx
:00414490 8B9160010000            mov edx, dword ptr [ecx+00000160]
:00414496 899060010000            mov dword ptr [eax+00000160], edx
:0041449C 8B9164010000            mov edx, dword ptr [ecx+00000164]
:004144A2 899064010000            mov dword ptr [eax+00000164], edx
:004144A8 8B9168010000            mov edx, dword ptr [ecx+00000168]
:004144AE 899068010000            mov dword ptr [eax+00000168], edx
:004144B4 8B916C010000            mov edx, dword ptr [ecx+0000016C]
:004144BA 89906C010000            mov dword ptr [eax+0000016C], edx
:004144C0 8B9170010000            mov edx, dword ptr [ecx+00000170]
:004144C6 899070010000            mov dword ptr [eax+00000170], edx
:004144CC 8B9174010000            mov edx, dword ptr [ecx+00000174]
:004144D2 899074010000            mov dword ptr [eax+00000174], edx
:004144D8 8B9178010000            mov edx, dword ptr [ecx+00000178]
:004144DE 899078010000            mov dword ptr [eax+00000178], edx
:004144E4 8B917C010000            mov edx, dword ptr [ecx+0000017C]
:004144EA 89907C010000            mov dword ptr [eax+0000017C], edx
:004144F0 8B9180010000            mov edx, dword ptr [ecx+00000180]
:004144F6 899080010000            mov dword ptr [eax+00000180], edx
:004144FC 8B9184010000            mov edx, dword ptr [ecx+00000184]
:00414502 899084010000            mov dword ptr [eax+00000184], edx
:00414508 8B8988010000            mov ecx, dword ptr [ecx+00000188]
:0041450E 898888010000            mov dword ptr [eax+00000188], ecx
:00414514 C20400                  ret 0004


:00414517 90                      nop
:00414518 90                      nop
:00414519 90                      nop
:0041451A 90                      nop
:0041451B 90                      nop
:0041451C 90                      nop
:0041451D 90                      nop
:0041451E 90                      nop
:0041451F 90                      nop

* Referenced by a CALL at Addresses:
|:0040A758   , :0040AA76   , :0040AAFD   , :0040AC19   , :0040AEAB   
|:0040AF9B   , :0040BF48   , :0040DAC4   , :0040DBA4   , :0040DC8A   
|:0040DD9C   , :0040DE80   , :005543E9   , :00554CE6   
|
:00414520 8BC1                    mov eax, ecx
:00414522 8B4C2404                mov ecx, dword ptr [esp+04]
:00414526 8B5104                  mov edx, dword ptr [ecx+04]
:00414529 895004                  mov dword ptr [eax+04], edx
:0041452C 8B5108                  mov edx, dword ptr [ecx+08]
:0041452F 895008                  mov dword ptr [eax+08], edx
:00414532 8B510C                  mov edx, dword ptr [ecx+0C]
:00414535 89500C                  mov dword ptr [eax+0C], edx
:00414538 8B5110                  mov edx, dword ptr [ecx+10]
:0041453B 895010                  mov dword ptr [eax+10], edx
:0041453E 8B5114                  mov edx, dword ptr [ecx+14]
:00414541 895014                  mov dword ptr [eax+14], edx
:00414544 8B5118                  mov edx, dword ptr [ecx+18]
:00414547 895018                  mov dword ptr [eax+18], edx
:0041454A 8B511C                  mov edx, dword ptr [ecx+1C]
:0041454D 89501C                  mov dword ptr [eax+1C], edx
:00414550 8B5120                  mov edx, dword ptr [ecx+20]
:00414553 895020                  mov dword ptr [eax+20], edx
:00414556 8B5124                  mov edx, dword ptr [ecx+24]
:00414559 895024                  mov dword ptr [eax+24], edx
:0041455C 8B4928                  mov ecx, dword ptr [ecx+28]
:0041455F 894828                  mov dword ptr [eax+28], ecx
:00414562 C20400                  ret 0004


:00414565 90                      nop
:00414566 90                      nop
:00414567 90                      nop
:00414568 90                      nop
:00414569 90                      nop
:0041456A 90                      nop
:0041456B 90                      nop
:0041456C 90                      nop
:0041456D 90                      nop
:0041456E 90                      nop
:0041456F 90                      nop

* Referenced by a CALL at Addresses:
|:0040AA16   , :0040AA97   , :0040ABB3   , :0040AC4B   , :0040AC57   
|:0040AC63   , :0040BFF7   , :0040DA5E   , :0040DB44   , :0040DD36   
|:0041903B   , :00554C7E   , :00565095   , :005650A5   , :005650B1   
|:00565152   , :0056515F   
|
:00414570 8BC1                    mov eax, ecx
:00414572 8B4C2404                mov ecx, dword ptr [esp+04]
:00414576 8B5104                  mov edx, dword ptr [ecx+04]
:00414579 895004                  mov dword ptr [eax+04], edx
:0041457C 8B5108                  mov edx, dword ptr [ecx+08]
:0041457F 895008                  mov dword ptr [eax+08], edx
:00414582 8B510C                  mov edx, dword ptr [ecx+0C]
:00414585 89500C                  mov dword ptr [eax+0C], edx
:00414588 8B5110                  mov edx, dword ptr [ecx+10]
:0041458B 895010                  mov dword ptr [eax+10], edx
:0041458E 8B5114                  mov edx, dword ptr [ecx+14]
:00414591 895014                  mov dword ptr [eax+14], edx
:00414594 8B5118                  mov edx, dword ptr [ecx+18]
:00414597 895018                  mov dword ptr [eax+18], edx
:0041459A 8B491C                  mov ecx, dword ptr [ecx+1C]
:0041459D 89481C                  mov dword ptr [eax+1C], ecx
:004145A0 C20400                  ret 0004


:004145A3 90                      nop
:004145A4 90                      nop
:004145A5 90                      nop
:004145A6 90                      nop
:004145A7 90                      nop
:004145A8 90                      nop
:004145A9 90                      nop
:004145AA 90                      nop
:004145AB 90                      nop
:004145AC 90                      nop
:004145AD 90                      nop
:004145AE 90                      nop
:004145AF 90                      nop

* Referenced by a CALL at Addresses:
|:0040BBB6   , :0040C521   , :0040D683   , :0040D790   , :0040D825   
|:0040E183   , :0040E441   , :0040E593   , :0040E692   , :0040F137   
|:0040F7E7   , :0041139D   , :00411849   , :00411ACA   , :00411D29   
|:00412311   , :0041290B   , :0041340F   , :004159EF   , :00419964   
|:00419EC2   , :0041A014   , :0041A11B   , :0041A44D   , :0041A554   
|:0041A708   , :0041F2CE   , :004232CC   , :00423354   , :004234AF   
|:00423549   , :0042ACBB   , :0042AED2   , :0042B7B6   , :0042B908   
|:004327D6   , :00439D8B   , :00439E3E   , :00439F0C   , :00439FC7   
|:0043A082   , :0043A135   , :0043A3F1   , :00444D25   , :00444E08   
|:00444FDC   , :0044504E   , :00445315   , :0044EE53   , :0045904E   
|:0045AE2C   , :0045BF4B   , :0045BF93   , :0045BFD8   , :0045C01D   
|:0045CC44   , :0045CCAF   , :0045E922   , :0045E9D5   , :004601E2   
|:00466586   , :00468344   , :0046899E   , :0046A097   , :00476A1F   
|:004F94F0   , :005049EC   , :0050583A   , :0051481A   , :0051F017   
|:00562EAE   , :005630C4   , :00568C54   , :0056F811   , :0056F85A   
|:0056FD5C   , :0056FEF4   , :00581C51   , :00581E30   , :005821CF   
|:00582258   , :005822FB   , :00589729   , :0058FB2C   , :00592AB0   
|:005A1E92   , :005A20B6   , :005A22DA   , :005A24FE   , :005A2724   
|:005B576E   , :005B9D6E   , :005DAE9F   , :005E0455   , :00605910   
|:0062C165   , :0063EC6D   , :0065B7F6   
|
:004145B0 6AFF                    push FFFFFFFF
:004145B2 686F0F6D00              push 006D0F6F
:004145B7 64A100000000            mov eax, dword ptr fs:[00000000]
:004145BD 50                      push eax
:004145BE 64892500000000          mov dword ptr fs:[00000000], esp
:004145C5 51                      push ecx
:004145C6 A128FE7200              mov eax, dword ptr [0072FE28]
:004145CB 8B4C2418                mov ecx, dword ptr [esp+18]
:004145CF 56                      push esi
:004145D0 50                      push eax
:004145D1 51                      push ecx
:004145D2 8D4C2424                lea ecx, dword ptr [esp+24]
:004145D6 C744240C00000000        mov [esp+0C], 00000000
:004145DE E8CD6A1D00              call 005EB0B0
:004145E3 8B4C2420                mov ecx, dword ptr [esp+20]
:004145E7 C744241001000000        mov [esp+10], 00000001
:004145EF 8B11                    mov edx, dword ptr [ecx]
:004145F1 8B52FC                  mov edx, dword ptr [edx-04]
:004145F4 52                      push edx
:004145F5 6A00                    push 00000000
:004145F7 51                      push ecx
:004145F8 8BC8                    mov ecx, eax
:004145FA E8716C1D00              call 005EB270
:004145FF 8B742418                mov esi, dword ptr [esp+18]
:00414603 8B00                    mov eax, dword ptr [eax]
:00414605 C744240401000000        mov [esp+04], 00000001
:0041460D 8906                    mov dword ptr [esi], eax
:0041460F 8B50F4                  mov edx, dword ptr [eax-0C]
:00414612 42                      inc edx
:00414613 8950F4                  mov dword ptr [eax-0C], edx
:00414616 8B44241C                mov eax, dword ptr [esp+1C]
:0041461A C644241000              mov [esp+10], 00
:0041461F 83C0F4                  add eax, FFFFFFF4
:00414622 8B08                    mov ecx, dword ptr [eax]
:00414624 49                      dec ecx
:00414625 8908                    mov dword ptr [eax], ecx
:00414627 7509                    jne 00414632
:00414629 50                      push eax
:0041462A E8D1CC1C00              call 005E1300
:0041462F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414627(C)
|
:00414632 8B4C2408                mov ecx, dword ptr [esp+08]
:00414636 8BC6                    mov eax, esi
:00414638 5E                      pop esi
:00414639 64890D00000000          mov dword ptr fs:[00000000], ecx
:00414640 83C410                  add esp, 00000010
:00414643 C3                      ret


:00414644 90                      nop
:00414645 90                      nop
:00414646 90                      nop
:00414647 90                      nop
:00414648 90                      nop
:00414649 90                      nop
:0041464A 90                      nop
:0041464B 90                      nop
:0041464C 90                      nop
:0041464D 90                      nop
:0041464E 90                      nop
:0041464F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415783(U)
|
:00414650 56                      push esi
:00414651 8BF1                    mov esi, ecx
:00414653 E828000000              call 00414680
:00414658 F644240801              test [esp+08], 01
:0041465D 7409                    je 00414668
:0041465F 56                      push esi
:00414660 E89BCC1C00              call 005E1300
:00414665 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041465D(C)
|
:00414668 8BC6                    mov eax, esi
:0041466A 5E                      pop esi
:0041466B C20400                  ret 0004


:0041466E 90                      nop
:0041466F 90                      nop

* Referenced by a CALL at Address:
|:00459363   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CFD42(U), :006D9403(U)
|
:00414670 E96B831E00              jmp 005FC9E0
:00414675 90                      nop
:00414676 90                      nop
:00414677 90                      nop
:00414678 90                      nop
:00414679 90                      nop
:0041467A 90                      nop
:0041467B 90                      nop
:0041467C 90                      nop
:0041467D 90                      nop
:0041467E 90                      nop
:0041467F 90                      nop

* Referenced by a CALL at Address:
|:00414653   
|
:00414680 E95B831E00              jmp 005FC9E0
:00414685 90                      nop
:00414686 90                      nop
:00414687 90                      nop
:00414688 90                      nop
:00414689 90                      nop
:0041468A 90                      nop
:0041468B 90                      nop
:0041468C 90                      nop
:0041468D 90                      nop
:0041468E 90                      nop
:0041468F 90                      nop
:00414690 B001                    mov al, 01
:00414692 C3                      ret


:00414693 90                      nop
:00414694 90                      nop
:00414695 90                      nop
:00414696 90                      nop
:00414697 90                      nop
:00414698 90                      nop
:00414699 90                      nop
:0041469A 90                      nop
:0041469B 90                      nop
:0041469C 90                      nop
:0041469D 90                      nop
:0041469E 90                      nop
:0041469F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415773(U)
|
:004146A0 56                      push esi
:004146A1 8BF1                    mov esi, ecx
:004146A3 E8E8000000              call 00414790
:004146A8 F644240801              test [esp+08], 01
:004146AD 7409                    je 004146B8
:004146AF 56                      push esi
:004146B0 E84BCC1C00              call 005E1300
:004146B5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004146AD(C)
|
:004146B8 8BC6                    mov eax, esi
:004146BA 5E                      pop esi
:004146BB C20400                  ret 0004


:004146BE 90                      nop
:004146BF 90                      nop

* Referenced by a CALL at Address:
|:00594383   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CFE5E(U), :006CFFC9(U), :006D058F(U), :006D0633(U), :006D69CF(U)
|:006D6CB9(U), :006D6D08(U), :006D6FF2(U), :006DA845(U), :006DBB50(U)
|:006FB128(U), :006FB143(U), :006FB15E(U)
|
:004146C0 6AFF                    push FFFFFFFF
:004146C2 68BD0F6D00              push 006D0FBD
:004146C7 64A100000000            mov eax, dword ptr fs:[00000000]
:004146CD 50                      push eax
:004146CE 64892500000000          mov dword ptr fs:[00000000], esp
:004146D5 83EC0C                  sub esp, 0000000C
:004146D8 56                      push esi
:004146D9 8BF1                    mov esi, ecx
:004146DB 57                      push edi
:004146DC 8974240C                mov dword ptr [esp+0C], esi
:004146E0 C744241C00000000        mov [esp+1C], 00000000
:004146E8 8DBE0E010000            lea edi, dword ptr [esi+0000010E]
:004146EE 897C2410                mov dword ptr [esp+10], edi
:004146F2 8D442408                lea eax, dword ptr [esp+08]
:004146F6 B9ADB67A00              mov ecx, 007AB6AD
:004146FB 50                      push eax
:004146FC C644242004              mov [esp+20], 04
:00414701 897C240C                mov dword ptr [esp+0C], edi
:00414705 E8E60F0000              call 004156F0
:0041470A 8B4F0D                  mov ecx, dword ptr [edi+0D]
:0041470D 8D470D                  lea eax, dword ptr [edi+0D]
:00414710 85C9                    test ecx, ecx
:00414712 C644241C03              mov [esp+1C], 03
:00414717 7406                    je 0041471F
:00414719 50                      push eax
:0041471A E8019C1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414717(C)
|
:0041471F 8B8EFE000000            mov ecx, dword ptr [esi+000000FE]
:00414725 C644241C02              mov [esp+1C], 02
:0041472A 85C9                    test ecx, ecx
:0041472C 7405                    je 00414733
:0041472E 8B11                    mov edx, dword ptr [ecx]
:00414730 FF5204                  call [edx+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041472C(C)
|
:00414733 8B86F6000000            mov eax, dword ptr [esi+000000F6]
:00414739 C644241C01              mov [esp+1C], 01
:0041473E 83E80C                  sub eax, 0000000C
:00414741 8B08                    mov ecx, dword ptr [eax]
:00414743 49                      dec ecx
:00414744 8908                    mov dword ptr [eax], ecx
:00414746 7509                    jne 00414751
:00414748 50                      push eax
:00414749 E8B2CB1C00              call 005E1300
:0041474E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414746(C)
|
:00414751 8B86F2000000            mov eax, dword ptr [esi+000000F2]
:00414757 C644241C00              mov [esp+1C], 00
:0041475C 83E80C                  sub eax, 0000000C
:0041475F 8B08                    mov ecx, dword ptr [eax]
:00414761 49                      dec ecx
:00414762 8908                    mov dword ptr [eax], ecx
:00414764 7509                    jne 0041476F
:00414766 50                      push eax
:00414767 E894CB1C00              call 005E1300
:0041476C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414764(C)
|
:0041476F 8BCE                    mov ecx, esi
:00414771 C744241CFFFFFFFF        mov [esp+1C], FFFFFFFF
:00414779 E862821E00              call 005FC9E0
:0041477E 8B4C2414                mov ecx, dword ptr [esp+14]
:00414782 5F                      pop edi
:00414783 5E                      pop esi
:00414784 64890D00000000          mov dword ptr fs:[00000000], ecx
:0041478B 83C418                  add esp, 00000018
:0041478E C3                      ret


:0041478F 90                      nop

* Referenced by a CALL at Address:
|:004146A3   
|
:00414790 6AFF                    push FFFFFFFF
:00414792 680D106D00              push 006D100D
:00414797 64A100000000            mov eax, dword ptr fs:[00000000]
:0041479D 50                      push eax
:0041479E 64892500000000          mov dword ptr fs:[00000000], esp
:004147A5 83EC0C                  sub esp, 0000000C
:004147A8 56                      push esi
:004147A9 8BF1                    mov esi, ecx
:004147AB 57                      push edi
:004147AC 8974240C                mov dword ptr [esp+0C], esi
:004147B0 C744241C00000000        mov [esp+1C], 00000000
:004147B8 8DBE0E010000            lea edi, dword ptr [esi+0000010E]
:004147BE 897C2410                mov dword ptr [esp+10], edi
:004147C2 8D442408                lea eax, dword ptr [esp+08]
:004147C6 B9ADB67A00              mov ecx, 007AB6AD
:004147CB 50                      push eax
:004147CC C644242004              mov [esp+20], 04
:004147D1 897C240C                mov dword ptr [esp+0C], edi
:004147D5 E8160F0000              call 004156F0
:004147DA 8B4F0D                  mov ecx, dword ptr [edi+0D]
:004147DD 8D470D                  lea eax, dword ptr [edi+0D]
:004147E0 85C9                    test ecx, ecx
:004147E2 C644241C03              mov [esp+1C], 03
:004147E7 7406                    je 004147EF
:004147E9 50                      push eax
:004147EA E8319B1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004147E7(C)
|
:004147EF 8B8EFE000000            mov ecx, dword ptr [esi+000000FE]
:004147F5 C644241C02              mov [esp+1C], 02
:004147FA 85C9                    test ecx, ecx
:004147FC 7405                    je 00414803
:004147FE 8B11                    mov edx, dword ptr [ecx]
:00414800 FF5204                  call [edx+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004147FC(C)
|
:00414803 8B86F6000000            mov eax, dword ptr [esi+000000F6]
:00414809 C644241C01              mov [esp+1C], 01
:0041480E 83E80C                  sub eax, 0000000C
:00414811 8B08                    mov ecx, dword ptr [eax]
:00414813 49                      dec ecx
:00414814 8908                    mov dword ptr [eax], ecx
:00414816 7509                    jne 00414821
:00414818 50                      push eax
:00414819 E8E2CA1C00              call 005E1300
:0041481E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414816(C)
|
:00414821 8B86F2000000            mov eax, dword ptr [esi+000000F2]
:00414827 C644241C00              mov [esp+1C], 00
:0041482C 83E80C                  sub eax, 0000000C
:0041482F 8B08                    mov ecx, dword ptr [eax]
:00414831 49                      dec ecx
:00414832 8908                    mov dword ptr [eax], ecx
:00414834 7509                    jne 0041483F
:00414836 50                      push eax
:00414837 E8C4CA1C00              call 005E1300
:0041483C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414834(C)
|
:0041483F 8BCE                    mov ecx, esi
:00414841 C744241CFFFFFFFF        mov [esp+1C], FFFFFFFF
:00414849 E892811E00              call 005FC9E0
:0041484E 8B4C2414                mov ecx, dword ptr [esp+14]
:00414852 5F                      pop edi
:00414853 5E                      pop esi
:00414854 64890D00000000          mov dword ptr fs:[00000000], ecx
:0041485B 83C418                  add esp, 00000018
:0041485E C3                      ret


:0041485F 90                      nop
:00414860 B001                    mov al, 01
:00414862 C3                      ret


:00414863 90                      nop
:00414864 90                      nop
:00414865 90                      nop
:00414866 90                      nop
:00414867 90                      nop
:00414868 90                      nop
:00414869 90                      nop
:0041486A 90                      nop
:0041486B 90                      nop
:0041486C 90                      nop
:0041486D 90                      nop
:0041486E 90                      nop
:0041486F 90                      nop
:00414870 8A81AF000000            mov al, byte ptr [ecx+000000AF]
:00414876 56                      push esi
:00414877 84C0                    test al, al
:00414879 743E                    je 004148B9
:0041487B 8B81C8000000            mov eax, dword ptr [ecx+000000C8]
:00414881 8B91C0000000            mov edx, dword ptr [ecx+000000C0]
:00414887 8BB1C4000000            mov esi, dword ptr [ecx+000000C4]
:0041488D 2BC2                    sub eax, edx
:0041488F 8B91CC000000            mov edx, dword ptr [ecx+000000CC]
:00414895 2BD6                    sub edx, esi
:00414897 8B742408                mov esi, dword ptr [esp+08]
:0041489B 8B0E                    mov ecx, dword ptr [esi]
:0041489D 85C9                    test ecx, ecx
:0041489F 7C18                    jl 004148B9
:004148A1 3BC8                    cmp ecx, eax
:004148A3 7D14                    jge 004148B9
:004148A5 8B4604                  mov eax, dword ptr [esi+04]
:004148A8 85C0                    test eax, eax
:004148AA 7C0D                    jl 004148B9
:004148AC 3BC2                    cmp eax, edx
:004148AE 7D09                    jge 004148B9
:004148B0 B801000000              mov eax, 00000001
:004148B5 5E                      pop esi
:004148B6 C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00414879(C), :0041489F(C), :004148A3(C), :004148AA(C), :004148AE(C)
|
:004148B9 33C0                    xor eax, eax
:004148BB 5E                      pop esi
:004148BC C20400                  ret 0004


:004148BF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004157A3(U)
|
:004148C0 56                      push esi
:004148C1 8BF1                    mov esi, ecx
:004148C3 E818010000              call 004149E0
:004148C8 F644240801              test [esp+08], 01
:004148CD 7409                    je 004148D8
:004148CF 56                      push esi
:004148D0 E82BCA1C00              call 005E1300
:004148D5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004148CD(C)
|
:004148D8 8BC6                    mov eax, esi
:004148DA 5E                      pop esi
:004148DB C20400                  ret 0004


:004148DE 90                      nop
:004148DF 90                      nop

* Referenced by a CALL at Address:
|:005943A3   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CFE3D(U), :006CFF9A(U), :006D0427(U), :006D0560(U), :006D0604(U)
|:006D0835(U)
|
:004148E0 6AFF                    push FFFFFFFF
:004148E2 683E106D00              push 006D103E
:004148E7 64A100000000            mov eax, dword ptr fs:[00000000]
:004148ED 50                      push eax
:004148EE 64892500000000          mov dword ptr fs:[00000000], esp
:004148F5 51                      push ecx
:004148F6 56                      push esi
:004148F7 8BF1                    mov esi, ecx
:004148F9 89742404                mov dword ptr [esp+04], esi
:004148FD 8B8E2B010000            mov ecx, dword ptr [esi+0000012B]
:00414903 8D862B010000            lea eax, dword ptr [esi+0000012B]
:00414909 85C9                    test ecx, ecx
:0041490B C744241001000000        mov [esp+10], 00000001
:00414913 7406                    je 0041491B
:00414915 50                      push eax
:00414916 E8059A1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414913(C)
|
:0041491B 8B8627010000            mov eax, dword ptr [esi+00000127]
:00414921 C644241000              mov [esp+10], 00
:00414926 83E80C                  sub eax, 0000000C
:00414929 8B08                    mov ecx, dword ptr [eax]
:0041492B 49                      dec ecx
:0041492C 8908                    mov dword ptr [eax], ecx
:0041492E 7509                    jne 00414939
:00414930 50                      push eax
:00414931 E8CAC91C00              call 005E1300
:00414936 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041492E(C)
|
:00414939 8B86F2000000            mov eax, dword ptr [esi+000000F2]
:0041493F C744241002000000        mov [esp+10], 00000002
:00414947 83E80C                  sub eax, 0000000C
:0041494A 8B08                    mov ecx, dword ptr [eax]
:0041494C 49                      dec ecx
:0041494D 8908                    mov dword ptr [eax], ecx
:0041494F 7509                    jne 0041495A
:00414951 50                      push eax
:00414952 E8A9C91C00              call 005E1300
:00414957 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041494F(C)
|
:0041495A 8BCE                    mov ecx, esi
:0041495C C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00414964 E877801E00              call 005FC9E0
:00414969 8B4C2408                mov ecx, dword ptr [esp+08]
:0041496D 5E                      pop esi
:0041496E 64890D00000000          mov dword ptr fs:[00000000], ecx
:00414975 83C410                  add esp, 00000010
:00414978 C3                      ret


:00414979 90                      nop
:0041497A 90                      nop
:0041497B 90                      nop
:0041497C 90                      nop
:0041497D 90                      nop
:0041497E 90                      nop
:0041497F 90                      nop

* Referenced by a CALL at Address:
|:00414D03   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006D09C3(U), :006D0A47(U), :006D0AD9(U), :006D1023(U), :006D1073(U)
|:006D132C(U), :006D1EEC(U), :006D2491(U), :006D33EB(U), :006D3440(U)
|:006D352F(U), :006D3ABA(U), :006D3CDA(U), :006D3D70(U), :006D3DB5(U)
|:006D41D9(U), :006D424A(U), :006D4297(U), :006D434D(U), :006D4AED(U)
|:006D4ED7(U), :006D4F68(U), :006D5072(U), :006D50EA(U), :006D513B(U)
|:006D51B0(U), :006D5204(U), :006D528E(U), :006D52DD(U), :006D536B(U)
|:006D689C(U), :006D6BFA(U), :006D6CED(U), :006D6F33(U), :006D730E(U)
|:006D734F(U), :006D73BA(U), :006D743C(U), :006D785A(U), :006D789B(U)
|:006D78FE(U), :006D7A42(U), :006D7A83(U), :006D85C9(U), :006D86AB(U)
|:006D8765(U), :006D881F(U), :006D88E1(U), :006D8A31(U), :006D901D(U)
|:006D94F4(U), :006DA381(U), :006DA7A2(U), :006EF20E(U), :006EF24F(U)
|:006EF290(U), :006EF2D3(U), :006EF318(U), :006EFB40(U), :006EFB81(U)
|:006EFBC4(U), :006EFC09(U), :006EFC56(U), :006EFCA3(U), :006F1322(U)
|:006F135D(U), :006F1390(U), :006F140D(U), :006F159D(U), :006F2163(U)
|
:00414980 6AFF                    push FFFFFFFF
:00414982 6858106D00              push 006D1058
:00414987 64A100000000            mov eax, dword ptr fs:[00000000]
:0041498D 50                      push eax
:0041498E 64892500000000          mov dword ptr fs:[00000000], esp
:00414995 51                      push ecx
:00414996 56                      push esi
:00414997 8BF1                    mov esi, ecx
:00414999 89742404                mov dword ptr [esp+04], esi
:0041499D 8B86F2000000            mov eax, dword ptr [esi+000000F2]
:004149A3 C744241000000000        mov [esp+10], 00000000
:004149AB 83E80C                  sub eax, 0000000C
:004149AE 8B08                    mov ecx, dword ptr [eax]
:004149B0 49                      dec ecx
:004149B1 8908                    mov dword ptr [eax], ecx
:004149B3 7509                    jne 004149BE
:004149B5 50                      push eax
:004149B6 E845C91C00              call 005E1300
:004149BB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004149B3(C)
|
:004149BE 8BCE                    mov ecx, esi
:004149C0 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:004149C8 E813801E00              call 005FC9E0
:004149CD 8B4C2408                mov ecx, dword ptr [esp+08]
:004149D1 5E                      pop esi
:004149D2 64890D00000000          mov dword ptr fs:[00000000], ecx
:004149D9 83C410                  add esp, 00000010
:004149DC C3                      ret


:004149DD 90                      nop
:004149DE 90                      nop
:004149DF 90                      nop

* Referenced by a CALL at Address:
|:004148C3   
|
:004149E0 6AFF                    push FFFFFFFF
:004149E2 688E106D00              push 006D108E
:004149E7 64A100000000            mov eax, dword ptr fs:[00000000]
:004149ED 50                      push eax
:004149EE 64892500000000          mov dword ptr fs:[00000000], esp
:004149F5 51                      push ecx
:004149F6 56                      push esi
:004149F7 8BF1                    mov esi, ecx
:004149F9 89742404                mov dword ptr [esp+04], esi
:004149FD 8B8E2B010000            mov ecx, dword ptr [esi+0000012B]
:00414A03 8D862B010000            lea eax, dword ptr [esi+0000012B]
:00414A09 85C9                    test ecx, ecx
:00414A0B C744241001000000        mov [esp+10], 00000001
:00414A13 7406                    je 00414A1B
:00414A15 50                      push eax
:00414A16 E805991E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414A13(C)
|
:00414A1B 8B8627010000            mov eax, dword ptr [esi+00000127]
:00414A21 C644241000              mov [esp+10], 00
:00414A26 83E80C                  sub eax, 0000000C
:00414A29 8B08                    mov ecx, dword ptr [eax]
:00414A2B 49                      dec ecx
:00414A2C 8908                    mov dword ptr [eax], ecx
:00414A2E 7509                    jne 00414A39
:00414A30 50                      push eax
:00414A31 E8CAC81C00              call 005E1300
:00414A36 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414A2E(C)
|
:00414A39 8B86F2000000            mov eax, dword ptr [esi+000000F2]
:00414A3F C744241002000000        mov [esp+10], 00000002
:00414A47 83E80C                  sub eax, 0000000C
:00414A4A 8B08                    mov ecx, dword ptr [eax]
:00414A4C 49                      dec ecx
:00414A4D 8908                    mov dword ptr [eax], ecx
:00414A4F 7509                    jne 00414A5A
:00414A51 50                      push eax
:00414A52 E8A9C81C00              call 005E1300
:00414A57 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414A4F(C)
|
:00414A5A 8BCE                    mov ecx, esi
:00414A5C C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00414A64 E8777F1E00              call 005FC9E0
:00414A69 8B4C2408                mov ecx, dword ptr [esp+08]
:00414A6D 5E                      pop esi
:00414A6E 64890D00000000          mov dword ptr fs:[00000000], ecx
:00414A75 83C410                  add esp, 00000010
:00414A78 C3                      ret


:00414A79 90                      nop
:00414A7A 90                      nop
:00414A7B 90                      nop
:00414A7C 90                      nop
:00414A7D 90                      nop
:00414A7E 90                      nop
:00414A7F 90                      nop
:00414A80 32C0                    xor al, al
:00414A82 C20400                  ret 0004


:00414A85 90                      nop
:00414A86 90                      nop
:00414A87 90                      nop
:00414A88 90                      nop
:00414A89 90                      nop
:00414A8A 90                      nop
:00414A8B 90                      nop
:00414A8C 90                      nop
:00414A8D 90                      nop
:00414A8E 90                      nop
:00414A8F 90                      nop
:00414A90 B001                    mov al, 01
:00414A92 C3                      ret


:00414A93 90                      nop
:00414A94 90                      nop
:00414A95 90                      nop
:00414A96 90                      nop
:00414A97 90                      nop
:00414A98 90                      nop
:00414A99 90                      nop
:00414A9A 90                      nop
:00414A9B 90                      nop
:00414A9C 90                      nop
:00414A9D 90                      nop
:00414A9E 90                      nop
:00414A9F 90                      nop
:00414AA0 B001                    mov al, 01
:00414AA2 C3                      ret


:00414AA3 90                      nop
:00414AA4 90                      nop
:00414AA5 90                      nop
:00414AA6 90                      nop
:00414AA7 90                      nop
:00414AA8 90                      nop
:00414AA9 90                      nop
:00414AAA 90                      nop
:00414AAB 90                      nop
:00414AAC 90                      nop
:00414AAD 90                      nop
:00414AAE 90                      nop
:00414AAF 90                      nop
:00414AB0 C20400                  ret 0004


:00414AB3 90                      nop
:00414AB4 90                      nop
:00414AB5 90                      nop
:00414AB6 90                      nop
:00414AB7 90                      nop
:00414AB8 90                      nop
:00414AB9 90                      nop
:00414ABA 90                      nop
:00414ABB 90                      nop
:00414ABC 90                      nop
:00414ABD 90                      nop
:00414ABE 90                      nop
:00414ABF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004157D3(U)
|
:00414AC0 56                      push esi
:00414AC1 8BF1                    mov esi, ecx
:00414AC3 E818000000              call 00414AE0
:00414AC8 F644240801              test [esp+08], 01
:00414ACD 7409                    je 00414AD8
:00414ACF 56                      push esi
:00414AD0 E82BC81C00              call 005E1300
:00414AD5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414ACD(C)
|
:00414AD8 8BC6                    mov eax, esi
:00414ADA 5E                      pop esi
:00414ADB C20400                  ret 0004


:00414ADE 90                      nop
:00414ADF 90                      nop

* Referenced by a CALL at Address:
|:00414AC3   
|
:00414AE0 6AFF                    push FFFFFFFF
:00414AE2 68C1106D00              push 006D10C1
:00414AE7 64A100000000            mov eax, dword ptr fs:[00000000]
:00414AED 50                      push eax
:00414AEE 64892500000000          mov dword ptr fs:[00000000], esp
:00414AF5 83EC0C                  sub esp, 0000000C
:00414AF8 56                      push esi
:00414AF9 8BF1                    mov esi, ecx
:00414AFB 89742404                mov dword ptr [esp+04], esi
:00414AFF C70640997000            mov dword ptr [esi], 00709940
:00414B05 C7460838997000          mov [esi+08], 00709938
:00414B0C 6A00                    push 00000000
:00414B0E C744241C01000000        mov [esp+1C], 00000001
:00414B16 E825D91E00              call 00602440
:00414B1B 8B86F7000000            mov eax, dword ptr [esi+000000F7]
:00414B21 8D8EF7000000            lea ecx, dword ptr [esi+000000F7]
:00414B27 894C2408                mov dword ptr [esp+08], ecx
:00414B2B 8944240C                mov dword ptr [esp+0C], eax
:00414B2F 8B4908                  mov ecx, dword ptr [ecx+08]
:00414B32 C644241802              mov [esp+18], 02
:00414B37 2BC8                    sub ecx, eax
:00414B39 C1F902                  sar ecx, 02
:00414B3C 85C0                    test eax, eax
:00414B3E 742C                    je 00414B6C
:00414B40 C1E102                  shl ecx, 02
:00414B43 81F980000000            cmp ecx, 00000080
:00414B49 760B                    jbe 00414B56
:00414B4B 50                      push eax
:00414B4C E8AFC71C00              call 005E1300
:00414B51 83C404                  add esp, 00000004
:00414B54 EB16                    jmp 00414B6C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414B49(C)
|
:00414B56 49                      dec ecx
:00414B57 C1E903                  shr ecx, 03
:00414B5A 8B148DFC977A00          mov edx, dword ptr [4*ecx+007A97FC]
:00414B61 8D0C8DFC977A00          lea ecx, dword ptr [4*ecx+007A97FC]
:00414B68 8910                    mov dword ptr [eax], edx
:00414B6A 8901                    mov dword ptr [ecx], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00414B3E(C), :00414B54(U)
|
:00414B6C 8BCE                    mov ecx, esi
:00414B6E C7442418FFFFFFFF        mov [esp+18], FFFFFFFF
:00414B76 E8657E1E00              call 005FC9E0
:00414B7B 8B4C2410                mov ecx, dword ptr [esp+10]
:00414B7F 5E                      pop esi
:00414B80 64890D00000000          mov dword ptr fs:[00000000], ecx
:00414B87 83C418                  add esp, 00000018
:00414B8A C3                      ret


:00414B8B 90                      nop
:00414B8C 90                      nop
:00414B8D 90                      nop
:00414B8E 90                      nop
:00414B8F 90                      nop
:00414B90 8A91F2000000            mov dl, byte ptr [ecx+000000F2]
:00414B96 33C0                    xor eax, eax
:00414B98 84D2                    test dl, dl
:00414B9A 0F94C0                  sete al
:00414B9D C3                      ret


:00414B9E 90                      nop
:00414B9F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004157E3(U)
|
:00414BA0 56                      push esi
:00414BA1 8BF1                    mov esi, ecx
:00414BA3 E818000000              call 00414BC0
:00414BA8 F644240801              test [esp+08], 01
:00414BAD 7409                    je 00414BB8
:00414BAF 56                      push esi
:00414BB0 E84BC71C00              call 005E1300
:00414BB5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414BAD(C)
|
:00414BB8 8BC6                    mov eax, esi
:00414BBA 5E                      pop esi
:00414BBB C20400                  ret 0004


:00414BBE 90                      nop
:00414BBF 90                      nop

* Referenced by a CALL at Address:
|:00414BA3   
|
:00414BC0 6AFF                    push FFFFFFFF
:00414BC2 68F1106D00              push 006D10F1
:00414BC7 64A100000000            mov eax, dword ptr fs:[00000000]
:00414BCD 50                      push eax
:00414BCE 64892500000000          mov dword ptr fs:[00000000], esp
:00414BD5 83EC0C                  sub esp, 0000000C
:00414BD8 56                      push esi
:00414BD9 8BF1                    mov esi, ecx
:00414BDB 89742404                mov dword ptr [esp+04], esi
:00414BDF C70640997000            mov dword ptr [esi], 00709940
:00414BE5 C7460838997000          mov [esi+08], 00709938
:00414BEC 6A00                    push 00000000
:00414BEE C744241C01000000        mov [esp+1C], 00000001
:00414BF6 E845D81E00              call 00602440
:00414BFB 8B86F7000000            mov eax, dword ptr [esi+000000F7]
:00414C01 8D8EF7000000            lea ecx, dword ptr [esi+000000F7]
:00414C07 894C2408                mov dword ptr [esp+08], ecx
:00414C0B 8944240C                mov dword ptr [esp+0C], eax
:00414C0F 8B4908                  mov ecx, dword ptr [ecx+08]
:00414C12 C644241802              mov [esp+18], 02
:00414C17 2BC8                    sub ecx, eax
:00414C19 C1F902                  sar ecx, 02
:00414C1C 85C0                    test eax, eax
:00414C1E 742C                    je 00414C4C
:00414C20 C1E102                  shl ecx, 02
:00414C23 81F980000000            cmp ecx, 00000080
:00414C29 760B                    jbe 00414C36
:00414C2B 50                      push eax
:00414C2C E8CFC61C00              call 005E1300
:00414C31 83C404                  add esp, 00000004
:00414C34 EB16                    jmp 00414C4C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414C29(C)
|
:00414C36 49                      dec ecx
:00414C37 C1E903                  shr ecx, 03
:00414C3A 8B148DFC977A00          mov edx, dword ptr [4*ecx+007A97FC]
:00414C41 8D0C8DFC977A00          lea ecx, dword ptr [4*ecx+007A97FC]
:00414C48 8910                    mov dword ptr [eax], edx
:00414C4A 8901                    mov dword ptr [ecx], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00414C1E(C), :00414C34(U)
|
:00414C4C 8BCE                    mov ecx, esi
:00414C4E C7442418FFFFFFFF        mov [esp+18], FFFFFFFF
:00414C56 E8857D1E00              call 005FC9E0
:00414C5B 8B4C2410                mov ecx, dword ptr [esp+10]
:00414C5F 5E                      pop esi
:00414C60 64890D00000000          mov dword ptr fs:[00000000], ecx
:00414C67 83C418                  add esp, 00000018
:00414C6A C3                      ret


:00414C6B 90                      nop
:00414C6C 90                      nop
:00414C6D 90                      nop
:00414C6E 90                      nop
:00414C6F 90                      nop

* Referenced by a CALL at Addresses:
|:004118B0   , :00411B31   , :00415A49   , :0041E80B   , :0042D7E0   
|:0042DA03   , :0042DB0D   , :004337C9   , :00434C76   , :00434EEB   
|:00435585   , :004357C7   , :004358DB   , :00435B2B   , :00447F31   
|:004491F1   , :0044A2E1   , :0044BE22   , :0044BF3C   , :0044C175   
|:0044C381   , :0044DC61   , :0044DD80   , :0044DF31   , :0044E427   
|:0044E542   , :0045315C   , :00453512   , :0045381A   , :00453B2D   
|:00454768   , :00458B24   , :0045E33A   , :0046010D   , :00578635   
|:00578768   , :005788A1   , :005789D6   , :00578B0B   , :0057E543   
|:0057E6C2   , :0057E7DC   , :0057E8F2   , :0058C90A   , :0058CE19   
|:0058D51D   
|
:00414C70 6AFF                    push FFFFFFFF
:00414C72 6808116D00              push 006D1108
:00414C77 64A100000000            mov eax, dword ptr fs:[00000000]
:00414C7D 50                      push eax
:00414C7E 64892500000000          mov dword ptr fs:[00000000], esp
:00414C85 51                      push ecx
:00414C86 8B442420                mov eax, dword ptr [esp+20]
:00414C8A 8B542418                mov edx, dword ptr [esp+18]
:00414C8E 56                      push esi
:00414C8F 8BF1                    mov esi, ecx
:00414C91 8B4C2420                mov ecx, dword ptr [esp+20]
:00414C95 50                      push eax
:00414C96 8B44241C                mov eax, dword ptr [esp+1C]
:00414C9A 51                      push ecx
:00414C9B 52                      push edx
:00414C9C 50                      push eax
:00414C9D 8BCE                    mov ecx, esi
:00414C9F 89742414                mov dword ptr [esp+14], esi
:00414CA3 E8D8381F00              call 00608580
:00414CA8 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00414CAE C744241000000000        mov [esp+10], 00000000
:00414CB6 83C164                  add ecx, 00000064
:00414CB9 C70658967000            mov dword ptr [esi], 00709658
:00414CBF 51                      push ecx
:00414CC0 8BCE                    mov ecx, esi
:00414CC2 C7460850967000          mov [esi+08], 00709650
:00414CC9 E8523D1F00              call 00608A20
:00414CCE 8B96D4000000            mov edx, dword ptr [esi+000000D4]
:00414CD4 8BCE                    mov ecx, esi
:00414CD6 8B4218                  mov eax, dword ptr [edx+18]
:00414CD9 50                      push eax
:00414CDA E8A13D1F00              call 00608A80
:00414CDF 8B4C2408                mov ecx, dword ptr [esp+08]
:00414CE3 8BC6                    mov eax, esi
:00414CE5 5E                      pop esi
:00414CE6 64890D00000000          mov dword ptr fs:[00000000], ecx
:00414CED 83C410                  add esp, 00000010
:00414CF0 C21000                  ret 0010


:00414CF3 90                      nop
:00414CF4 90                      nop
:00414CF5 90                      nop
:00414CF6 90                      nop
:00414CF7 90                      nop
:00414CF8 90                      nop
:00414CF9 90                      nop
:00414CFA 90                      nop
:00414CFB 90                      nop
:00414CFC 90                      nop
:00414CFD 90                      nop
:00414CFE 90                      nop
:00414CFF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004157F3(U)
|
:00414D00 56                      push esi
:00414D01 8BF1                    mov esi, ecx
:00414D03 E878FCFFFF              call 00414980
:00414D08 F644240801              test [esp+08], 01
:00414D0D 7409                    je 00414D18
:00414D0F 56                      push esi
:00414D10 E8EBC51C00              call 005E1300
:00414D15 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414D0D(C)
|
:00414D18 8BC6                    mov eax, esi
:00414D1A 5E                      pop esi
:00414D1B C20400                  ret 0004


:00414D1E 90                      nop
:00414D1F 90                      nop

* Referenced by a CALL at Address:
|:00609373   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006D0AD1(U), :006D1103(U), :006D14D3(U), :006D14FD(U), :006D1527(U)
|:006D1EE4(U), :006D24D2(U), :006D33E3(U), :006D3438(U), :006D3527(U)
|:006D3AB2(U), :006D3E05(U), :006D3E4A(U), :006D3E8F(U), :006D41D1(U)
|:006D4242(U), :006D428F(U), :006D4345(U), :006D51FC(U), :006D5286(U)
|:006D52D5(U), :006D5363(U), :006D5ED8(U), :006D6CE5(U), :006D7481(U)
|:006D74C6(U), :006D750B(U), :006D88D9(U), :006D9015(U), :006D9BB3(U)
|:006D9BDD(U), :006EFC4E(U), :006EFC9B(U), :006F1355(U), :006F1595(U)
|:006F16BC(U), :006FB63E(U), :006FB6AD(U)
|
:00414D20 6AFF                    push FFFFFFFF
:00414D22 6828116D00              push 006D1128
:00414D27 64A100000000            mov eax, dword ptr fs:[00000000]
:00414D2D 50                      push eax
:00414D2E 64892500000000          mov dword ptr fs:[00000000], esp
:00414D35 51                      push ecx
:00414D36 56                      push esi
:00414D37 8BF1                    mov esi, ecx
:00414D39 89742404                mov dword ptr [esp+04], esi
:00414D3D 8B86F2000000            mov eax, dword ptr [esi+000000F2]
:00414D43 C744241000000000        mov [esp+10], 00000000
:00414D4B 83E80C                  sub eax, 0000000C
:00414D4E 8B08                    mov ecx, dword ptr [eax]
:00414D50 49                      dec ecx
:00414D51 8908                    mov dword ptr [eax], ecx
:00414D53 7509                    jne 00414D5E
:00414D55 50                      push eax
:00414D56 E8A5C51C00              call 005E1300
:00414D5B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414D53(C)
|
:00414D5E 8BCE                    mov ecx, esi
:00414D60 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00414D68 E8737C1E00              call 005FC9E0
:00414D6D 8B4C2408                mov ecx, dword ptr [esp+08]
:00414D71 5E                      pop esi
:00414D72 64890D00000000          mov dword ptr fs:[00000000], ecx
:00414D79 83C410                  add esp, 00000010
:00414D7C C3                      ret


:00414D7D 90                      nop
:00414D7E 90                      nop
:00414D7F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004157B3(U)
|
:00414D80 56                      push esi
:00414D81 8BF1                    mov esi, ecx
:00414D83 E818000000              call 00414DA0
:00414D88 F644240801              test [esp+08], 01
:00414D8D 7409                    je 00414D98
:00414D8F 56                      push esi
:00414D90 E86BC51C00              call 005E1300
:00414D95 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414D8D(C)
|
:00414D98 8BC6                    mov eax, esi
:00414D9A 5E                      pop esi
:00414D9B C20400                  ret 0004


:00414D9E 90                      nop
:00414D9F 90                      nop

* Referenced by a CALL at Address:
|:00414D83   
|
:00414DA0 6AFF                    push FFFFFFFF
:00414DA2 6848116D00              push 006D1148
:00414DA7 64A100000000            mov eax, dword ptr fs:[00000000]
:00414DAD 50                      push eax
:00414DAE 64892500000000          mov dword ptr fs:[00000000], esp
:00414DB5 51                      push ecx
:00414DB6 56                      push esi
:00414DB7 8BF1                    mov esi, ecx
:00414DB9 89742404                mov dword ptr [esp+04], esi
:00414DBD 8B86F2000000            mov eax, dword ptr [esi+000000F2]
:00414DC3 C744241000000000        mov [esp+10], 00000000
:00414DCB 83E80C                  sub eax, 0000000C
:00414DCE 8B08                    mov ecx, dword ptr [eax]
:00414DD0 49                      dec ecx
:00414DD1 8908                    mov dword ptr [eax], ecx
:00414DD3 7509                    jne 00414DDE
:00414DD5 50                      push eax
:00414DD6 E825C51C00              call 005E1300
:00414DDB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414DD3(C)
|
:00414DDE 8BCE                    mov ecx, esi
:00414DE0 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00414DE8 E8F37B1E00              call 005FC9E0
:00414DED 8B4C2408                mov ecx, dword ptr [esp+08]
:00414DF1 5E                      pop esi
:00414DF2 64890D00000000          mov dword ptr fs:[00000000], ecx
:00414DF9 83C410                  add esp, 00000010
:00414DFC C3                      ret


:00414DFD 90                      nop
:00414DFE 90                      nop
:00414DFF 90                      nop

* Referenced by a CALL at Addresses:
|:00411F00   , :00411F1C   , :00411F38   , :0043ED34   , :0043ED4A   
|:004427FB   , :00455C6C   , :00455C86   , :0046B0CE   , :0046D330   
|:0046D34D   , :0046D4A6   , :0046D4C3   , :0046D61C   , :0046D63D   
|:0046D6F8   , :0046D78C   , :0046D7DF   , :0046D7F5   , :0046D80B   
|:0046D821   , :0046D837   , :0046D84D   , :0046D863   , :0046D879   
|:0046D88F   , :0046D8A5   , :0046D8BB   , :0046D8CD   , :0046D8DF   
|:0046D8F1   , :0046D903   , :0046D915   , :0046D9BB   , :00499531   
|:0049954F   , :0049956D   , :0049958B   , :004A51CC   , :004AB637   
|:004AB8A4   , :004AD2C3   , :004AD2F7   , :004AD32B   , :004AD33D   
|:004AD34F   , :004B0988   , :004B0B79   , :004B0C3F   , :004B1206   
|:004B14BE   , :004B170E   , :004B1720   , :004B2612   , :004B2624   
|:004B2636   , :004B2DFB   , :004B6F03   , :004B777F   , :004C3B2E   
|:004C51DD   , :004C53FD   , :004E5E61   , :004E5F44   , :004F1ECE   
|:004F1EE7   , :004F1F2A   , :004F203D   , :004F204F   , :004F5DEF   
|:004F5E16   , :004F5E41   , :004F5E85   , :004F5EDA   , :004F67F2   
|:00509E4E   , :00509E60   , :00509E72   , :00509E84   , :0050A2EA   
|:0050E07D   , :005147C9   , :00514A0D   , :00514A1F   , :00516CFB   
|:00516D1A   , :00516D39   , :00516D55   , :00516D71   , :00516D8D   
|:00516DA9   , :0051AC7A   , :0051C092   , :0051C0D6   , :0051CAE1   
|:0051CC00   , :0051CCD0   , :0052186A   , :00523D36   , :00523D66   
|:00523D96   , :00526AD1   , :00526B4C   , :00528463   , :0052849A   
|:005285B0   , :0052863E   , :00528657   , :0052866F   , :0052BD2C   
|:0052F6ED   , :0052F84C   , :00532EB6   , :0053939A   , :00555535   
|:0055555C   , :005555A5   , :005555CA   , :005562E2   , :00556325   
|:00556512   , :00556555   , :00556742   , :00556785   , :005567E9   
|:00556EA5   , :00556EF2   , :005576D2   , :00557715   , :00557768   
|:005577A5   , :005577E9   , :00558045   , :00558092   , :005580D8   
|:00558352   , :00558395   , :0056EC6C   , :0056EC82   , :0056EC98   
|:0056ECAE   , :0056ECC4   , :0056ECDA   , :0056ECF0   , :0056ED06   
|:0056ED1C   , :0056ED32   , :0056ED48   , :0056ED5E   , :0056ED74   
|:0056ED8A   , :0056EDA0   , :0056EDB6   , :0056EDCC   , :0056EDE2   
|:0056EDF8   , :0056EE12   , :0056EE24   , :0056EE36   , :0056EE48   
|:0056EE5A   , :0056EE6C   , :0056EE7E   , :0056EE90   , :0056EEA2   
|:005708F2   , :00570D22   , :00570F32   , :00570F82   , :005715E2   
|:005B1CB2   , :005B1D11   , :005B1D2A   , :005C177B   , :005C17AA   
|:005CE269   , :005CE289   , :005CE2A9   , :006015FE   , :0060F988   
|:0060F9AB   , :0060F9D1   , :0060F9F7   , :0061D259   , :0061D289   
|:0061D2AC   , :0061D41E   , :0061D591   , :0061D5B5   , :0061D5DC   
|:0061D603   , :0061D629   , :0061D650   , :0061D677   , :0061D69D   
|:0061D6C4   , :0061D6EB   , :0061D8A2   , :0061D8C9   , :0061D8F3   
|:0061D91D   , :0061D944   , :0061D968   , :0061D98C   , :0061D9B8   
|:0061D9F2   , :0062CECB   , :0062CEEB   , :0062CF0C   , :00631B17   
|:006537B0   
|
:00414E00 64A100000000            mov eax, dword ptr fs:[00000000]
:00414E06 8B4C2408                mov ecx, dword ptr [esp+08]
:00414E0A 6AFF                    push FFFFFFFF
:00414E0C 6868116D00              push 006D1168
:00414E11 50                      push eax
:00414E12 A128FE7200              mov eax, dword ptr [0072FE28]
:00414E17 64892500000000          mov dword ptr fs:[00000000], esp
:00414E1E 53                      push ebx
:00414E1F 56                      push esi
:00414E20 50                      push eax
:00414E21 51                      push ecx
:00414E22 8D4C2424                lea ecx, dword ptr [esp+24]
:00414E26 E885621D00              call 005EB0B0
:00414E2B 8B4C2418                mov ecx, dword ptr [esp+18]
:00414E2F 8B30                    mov esi, dword ptr [eax]
:00414E31 C744241000000000        mov [esp+10], 00000000
:00414E39 8B11                    mov edx, dword ptr [ecx]
:00414E3B 3BD6                    cmp edx, esi
:00414E3D 7504                    jne 00414E43
:00414E3F 33C0                    xor eax, eax
:00414E41 EB12                    jmp 00414E55

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414E3D(C)
|
:00414E43 8B76FC                  mov esi, dword ptr [esi-04]
:00414E46 8B52FC                  mov edx, dword ptr [edx-04]
:00414E49 56                      push esi
:00414E4A 6A00                    push 00000000
:00414E4C 50                      push eax
:00414E4D 52                      push edx
:00414E4E 6A00                    push 00000000
:00414E50 E87B691D00              call 005EB7D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414E41(U)
|
:00414E55 8B54241C                mov edx, dword ptr [esp+1C]
:00414E59 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00414E61 85C0                    test eax, eax
:00414E63 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00414E66 8D42F4                  lea eax, dword ptr [edx-0C]
:00414E69 0F94C3                  sete bl
:00414E6C 49                      dec ecx
:00414E6D 8908                    mov dword ptr [eax], ecx
:00414E6F 7509                    jne 00414E7A
:00414E71 50                      push eax
:00414E72 E889C41C00              call 005E1300
:00414E77 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414E6F(C)
|
:00414E7A 8B4C2408                mov ecx, dword ptr [esp+08]
:00414E7E 8AC3                    mov al, bl
:00414E80 5E                      pop esi
:00414E81 64890D00000000          mov dword ptr fs:[00000000], ecx
:00414E88 5B                      pop ebx
:00414E89 83C40C                  add esp, 0000000C
:00414E8C C3                      ret


:00414E8D 90                      nop
:00414E8E 90                      nop
:00414E8F 90                      nop
:00414E90 B001                    mov al, 01
:00414E92 C3                      ret


:00414E93 90                      nop
:00414E94 90                      nop
:00414E95 90                      nop
:00414E96 90                      nop
:00414E97 90                      nop
:00414E98 90                      nop
:00414E99 90                      nop
:00414E9A 90                      nop
:00414E9B 90                      nop
:00414E9C 90                      nop
:00414E9D 90                      nop
:00414E9E 90                      nop
:00414E9F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004157C3(U)
|
:00414EA0 56                      push esi
:00414EA1 8BF1                    mov esi, ecx
:00414EA3 E8C8000000              call 00414F70
:00414EA8 F644240801              test [esp+08], 01
:00414EAD 7409                    je 00414EB8
:00414EAF 56                      push esi
:00414EB0 E84BC41C00              call 005E1300
:00414EB5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414EAD(C)
|
:00414EB8 8BC6                    mov eax, esi
:00414EBA 5E                      pop esi
:00414EBB C20400                  ret 0004


:00414EBE 90                      nop
:00414EBF 90                      nop

* Referenced by a CALL at Address:
|:00602663   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006D0B6A(U), :006D0BB4(U), :006D0C14(U), :006D0C5E(U), :006D0CA8(U)
|:006D0D24(U), :006D0D6E(U), :006D0DCE(U), :006D0E18(U), :006D0E62(U)
|:006D0EDE(U)
|
:00414EC0 6AFF                    push FFFFFFFF
:00414EC2 68AC116D00              push 006D11AC
:00414EC7 64A100000000            mov eax, dword ptr fs:[00000000]
:00414ECD 50                      push eax
:00414ECE 64892500000000          mov dword ptr fs:[00000000], esp
:00414ED5 51                      push ecx
:00414ED6 56                      push esi
:00414ED7 8BF1                    mov esi, ecx
:00414ED9 89742404                mov dword ptr [esp+04], esi
:00414EDD 8B8E3A010000            mov ecx, dword ptr [esi+0000013A]
:00414EE3 C744241001000000        mov [esp+10], 00000001
:00414EEB 85C9                    test ecx, ecx
:00414EED 7405                    je 00414EF4
:00414EEF 8B01                    mov eax, dword ptr [ecx]
:00414EF1 FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414EED(C)
|
:00414EF4 8B862C010000            mov eax, dword ptr [esi+0000012C]
:00414EFA C644241000              mov [esp+10], 00
:00414EFF 83E80C                  sub eax, 0000000C
:00414F02 8B08                    mov ecx, dword ptr [eax]
:00414F04 49                      dec ecx
:00414F05 8908                    mov dword ptr [eax], ecx
:00414F07 7509                    jne 00414F12
:00414F09 50                      push eax
:00414F0A E8F1C31C00              call 005E1300
:00414F0F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414F07(C)
|
:00414F12 8B8E18010000            mov ecx, dword ptr [esi+00000118]
:00414F18 8D8618010000            lea eax, dword ptr [esi+00000118]
:00414F1E 85C9                    test ecx, ecx
:00414F20 C744241003000000        mov [esp+10], 00000003
:00414F28 7406                    je 00414F30
:00414F2A 50                      push eax
:00414F2B E8F0931E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414F28(C)
|
:00414F30 8B8E04010000            mov ecx, dword ptr [esi+00000104]
:00414F36 8D8604010000            lea eax, dword ptr [esi+00000104]
:00414F3C 85C9                    test ecx, ecx
:00414F3E C644241002              mov [esp+10], 02
:00414F43 7406                    je 00414F4B
:00414F45 50                      push eax
:00414F46 E8D5931E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414F43(C)
|
:00414F4B 8BCE                    mov ecx, esi
:00414F4D C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00414F55 E8867A1E00              call 005FC9E0
:00414F5A 8B4C2408                mov ecx, dword ptr [esp+08]
:00414F5E 5E                      pop esi
:00414F5F 64890D00000000          mov dword ptr fs:[00000000], ecx
:00414F66 83C410                  add esp, 00000010
:00414F69 C3                      ret


:00414F6A 90                      nop
:00414F6B 90                      nop
:00414F6C 90                      nop
:00414F6D 90                      nop
:00414F6E 90                      nop
:00414F6F 90                      nop

* Referenced by a CALL at Address:
|:00414EA3   
|
:00414F70 6AFF                    push FFFFFFFF
:00414F72 68EC116D00              push 006D11EC
:00414F77 64A100000000            mov eax, dword ptr fs:[00000000]
:00414F7D 50                      push eax
:00414F7E 64892500000000          mov dword ptr fs:[00000000], esp
:00414F85 51                      push ecx
:00414F86 56                      push esi
:00414F87 8BF1                    mov esi, ecx
:00414F89 89742404                mov dword ptr [esp+04], esi
:00414F8D 8B8E3A010000            mov ecx, dword ptr [esi+0000013A]
:00414F93 C744241001000000        mov [esp+10], 00000001
:00414F9B 85C9                    test ecx, ecx
:00414F9D 7405                    je 00414FA4
:00414F9F 8B01                    mov eax, dword ptr [ecx]
:00414FA1 FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414F9D(C)
|
:00414FA4 8B862C010000            mov eax, dword ptr [esi+0000012C]
:00414FAA C644241000              mov [esp+10], 00
:00414FAF 83E80C                  sub eax, 0000000C
:00414FB2 8B08                    mov ecx, dword ptr [eax]
:00414FB4 49                      dec ecx
:00414FB5 8908                    mov dword ptr [eax], ecx
:00414FB7 7509                    jne 00414FC2
:00414FB9 50                      push eax
:00414FBA E841C31C00              call 005E1300
:00414FBF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414FB7(C)
|
:00414FC2 8B8E18010000            mov ecx, dword ptr [esi+00000118]
:00414FC8 8D8618010000            lea eax, dword ptr [esi+00000118]
:00414FCE 85C9                    test ecx, ecx
:00414FD0 C744241003000000        mov [esp+10], 00000003
:00414FD8 7406                    je 00414FE0
:00414FDA 50                      push eax
:00414FDB E840931E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414FD8(C)
|
:00414FE0 8B8E04010000            mov ecx, dword ptr [esi+00000104]
:00414FE6 8D8604010000            lea eax, dword ptr [esi+00000104]
:00414FEC 85C9                    test ecx, ecx
:00414FEE C644241002              mov [esp+10], 02
:00414FF3 7406                    je 00414FFB
:00414FF5 50                      push eax
:00414FF6 E825931E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414FF3(C)
|
:00414FFB 8BCE                    mov ecx, esi
:00414FFD C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00415005 E8D6791E00              call 005FC9E0
:0041500A 8B4C2408                mov ecx, dword ptr [esp+08]
:0041500E 5E                      pop esi
:0041500F 64890D00000000          mov dword ptr fs:[00000000], ecx
:00415016 83C410                  add esp, 00000010
:00415019 C3                      ret


:0041501A 90                      nop
:0041501B 90                      nop
:0041501C 90                      nop
:0041501D 90                      nop
:0041501E 90                      nop
:0041501F 90                      nop

* Referenced by a CALL at Addresses:
|:0048CA00   , :0048CA0D   , :0048CA1A   , :0048CA34   , :0048CCF6   
|:0048CD03   , :0048CD10   , :004AE8BA   , :004B449A   , :004B457B   
|:004B4650   , :004B4731   , :004CD7AB   , :005654B3   , :00566593   
|:005CF7C2   , :005CF7CF   , :005CF7DB   , :005D1B6F   , :005D1B7B   
|:005D3942   , :005D3951   , :005D39F6   , :005D3A02   , :005D3A0E   
|:005D3EB6   , :005D3FA3   , :005D3FAF   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006D0E94(U), :006D3BDF(U), :006D3C0B(U), :006D3C21(U), :006D3C34(U)
|:006D4496(U), :006D44AC(U), :006D44B7(U), :006D44C2(U), :006D554C(U)
|:006D5562(U), :006D556D(U), :006D5578(U), :006DBDF2(U), :006DD05D(U)
|:006DD7CE(U), :006DDAC2(U), :006DDAE8(U), :006DDAFB(U), :006DDB0E(U)
|:006DDD55(U), :006DDD6B(U), :006DDD76(U), :006DDD81(U), :006DDE05(U)
|:006DDE10(U), :006DE079(U), :006DE084(U), :006DFCC6(U), :006DFCDE(U)
|:006DFCF6(U), :006DFD0E(U), :006DFD26(U), :006DFD3E(U), :006DFD67(U)
|:006DFD90(U), :006DFDFE(U), :006DFF80(U), :006DFFBE(U), :006E2581(U)
|:006ED3BB(U), :006ED57B(U), :006ED833(U), :006ED9CB(U), :006F9AC2(U)
|:006F9BB8(U), :006FA3EE(U), :006FA3F9(U), :006FA4FC(U), :006FA55B(U)
|:006FA58B(U), :006FA5BB(U), :006FA5CB(U), :006FA5E3(U), :006FA5EB(U)
|:006FA674(U), :006FA6B6(U), :006FA6C1(U), :006FA80E(U), :006FA819(U)
|:006FA8E6(U), :006FA8F1(U), :006FA9EB(U), :006FAA13(U), :006FAA33(U)
|:006FAA3B(U), :006FAA4B(U), :006FAA53(U), :006FAB17(U), :006FAB22(U)
|:006FAB35(U), :006FAB40(U), :006FAB69(U), :006FAB87(U), :006FABE5(U)
|:006FAC16(U), :006FAC82(U), :006FAE25(U), :006FAE4E(U), :006FAEB5(U)
|:006FAEDE(U), :006FAF1F(U), :006FAF32(U), :006FAF3D(U), :006FAF48(U)
|:006FAF7F(U), :006FAF92(U), :006FAF9D(U), :006FAFA8(U), :006FAFDF(U)
|:006FAFF2(U), :006FAFFD(U), :006FB008(U), :006FD985(U), :006FE009(U)
|:006FE014(U), :006FE03C(U), :006FE51B(U), :006FE5A4(U), :006FE5FA(U)
|:006FE64A(U), :00701070(U), :00702E55(U), :00707507(U)
|
:00415020 6AFF                    push FFFFFFFF
:00415022 680B126D00              push 006D120B
:00415027 64A100000000            mov eax, dword ptr fs:[00000000]
:0041502D 50                      push eax
:0041502E 64892500000000          mov dword ptr fs:[00000000], esp
:00415035 51                      push ecx
:00415036 894C2400                mov dword ptr [esp], ecx
:0041503A 8B11                    mov edx, dword ptr [ecx]
:0041503C C744240C00000000        mov [esp+0C], 00000000
:00415044 85D2                    test edx, edx
:00415046 7440                    je 00415088
:00415048 8B4108                  mov eax, dword ptr [ecx+08]
:0041504B 2BC2                    sub eax, edx
:0041504D C1F802                  sar eax, 02
:00415050 C1E002                  shl eax, 02
:00415053 3D80000000              cmp eax, 00000080
:00415058 7618                    jbe 00415072
:0041505A 52                      push edx
:0041505B E8A0C21C00              call 005E1300
:00415060 83C404                  add esp, 00000004
:00415063 8B4C2404                mov ecx, dword ptr [esp+04]
:00415067 64890D00000000          mov dword ptr fs:[00000000], ecx
:0041506E 83C410                  add esp, 00000010
:00415071 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415058(C)
|
:00415072 48                      dec eax
:00415073 C1E803                  shr eax, 03
:00415076 8B0C85FC977A00          mov ecx, dword ptr [4*eax+007A97FC]
:0041507D 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:00415084 890A                    mov dword ptr [edx], ecx
:00415086 8910                    mov dword ptr [eax], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415046(C)
|
:00415088 8B4C2404                mov ecx, dword ptr [esp+04]
:0041508C 64890D00000000          mov dword ptr fs:[00000000], ecx
:00415093 83C410                  add esp, 00000010
:00415096 C3                      ret


:00415097 90                      nop
:00415098 90                      nop
:00415099 90                      nop
:0041509A 90                      nop
:0041509B 90                      nop
:0041509C 90                      nop
:0041509D 90                      nop
:0041509E 90                      nop
:0041509F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006D0E8C(U), :006D3BD4(U), :006D3C00(U), :006D3C16(U), :006D3C29(U)
|:006DBD9D(U), :006DCB43(U), :006DCD52(U), :006DD055(U), :006DD253(U)
|:006DD7C3(U), :006DD7D6(U), :006DDAB7(U), :006DDADD(U), :006DDAF0(U)
|:006DDB03(U), :006DFCBE(U), :006DFCD6(U), :006DFCEE(U), :006DFD06(U)
|:006DFD1E(U), :006DFD36(U), :006DFD5F(U), :006DFD88(U), :006DFDF3(U)
|:006DFEC4(U), :006DFEE3(U), :006DFF14(U), :006DFF44(U), :006DFF78(U)
|:006DFFB6(U), :006E0EBF(U), :006E0F41(U), :006E1269(U), :006E12A8(U)
|:006E132A(U), :006E1345(U), :006E19BE(U), :006E1CDA(U), :006E1CF0(U)
|:006E1DDF(U), :006E1DF5(U), :006E2579(U), :006E3134(U), :006E33A5(U)
|:006E342F(U), :006E3457(U), :006E38A3(U), :006E8DC6(U), :006E9346(U)
|:006E9431(U), :006E9485(U), :006E94A7(U), :006ED135(U), :006ED184(U)
|:006ED1D6(U), :006ED56D(U), :006ED82B(U), :006ED9C3(U), :006EDA74(U)
|:006EDAB4(U), :006EDAF4(U), :006F9AB7(U), :006FA553(U), :006FA563(U)
|:006FA5B3(U), :006FA5C3(U), :006FA5D3(U), :006FAB53(U), :006FAB71(U)
|:006FAB8F(U), :006FAC6C(U), :006FAC8A(U), :006FAF14(U), :006FAF27(U)
|:006FAF74(U), :006FAF87(U), :006FAFD4(U), :006FAFE7(U), :006FE50B(U)
|:006FE58E(U), :006FE5AC(U), :006FE5EF(U), :006FE602(U), :006FE63F(U)
|:006FE652(U), :00702E3F(U), :00702E5D(U), :007074FF(U)
|
:004150A0 C3                      ret
:004150A1 90                      nop
:004150A2 90                      nop
:004150A3 90                      nop
:004150A4 90                      nop
:004150A5 90                      nop
:004150A6 90                      nop
:004150A7 90                      nop
:004150A8 90                      nop
:004150A9 90                      nop
:004150AA 90                      nop
:004150AB 90                      nop
:004150AC 90                      nop
:004150AD 90                      nop
:004150AE 90                      nop
:004150AF 90                      nop

* Referenced by a CALL at Addresses:
|:0047ABB7   , :0047D3AD   , :0047D4F6   , :004929D6   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006D0308(U), :006D20FD(U), :006D2113(U), :006D273E(U), :006D274E(U)
|:006D2867(U), :006D3BC1(U), :006D3BEA(U), :006D3F1C(U), :006D3F2C(U)
|:006D458A(U), :006D45C4(U), :006D4AF5(U), :006D4B55(U), :006D65F7(U)
|:006D66C5(U), :006D71F1(U), :006D7D27(U), :006D7D3D(U), :006D7E05(U)
|:006D7E45(U), :006D8BA8(U), :006D8BE4(U), :006D95CE(U), :006DA1DC(U)
|:006DA448(U), :006DA468(U), :006DBF5B(U), :006DC093(U), :006DC488(U)
|:006DC9A3(U), :006DCC34(U), :006DCDE4(U), :006DCE34(U), :006DD1A3(U)
|:006DD358(U), :006DD39A(U), :006DD3AA(U), :006DD543(U), :006DD7B0(U)
|:006DD989(U), :006DDAA4(U), :006DDACA(U), :006DEB0B(U), :006DEB3B(U)
|:006DEB4B(U), :006DEB63(U), :006DF6E7(U), :006DF6F7(U), :006DF70F(U)
|:006DF71F(U), :006DF737(U), :006DFE0E(U), :006E07FB(U), :006E080B(U)
|:006E081B(U), :006E082B(U), :006E0846(U), :006E2153(U), :006E21BB(U)
|:006E21CB(U), :006E21DB(U), :006E21EB(U), :006E21FB(U), :006E220B(U)
|:006E224B(U), :006E228B(U), :006E22A3(U), :006E2D93(U), :006E3199(U)
|:006E31A9(U), :006E31B9(U), :006E38D6(U), :006E3C63(U), :006E3C93(U)
|:006E4B77(U), :006E5223(U), :006E523B(U), :006E5705(U), :006E571D(U)
|:006E5E2A(U), :006E6EA5(U), :006E6EB5(U), :006E6EC5(U), :006E6ED5(U)
|:006E6EE5(U), :006E6F15(U), :006E795E(U), :006E796E(U), :006E8E8C(U)
|:006E8E9C(U), :006E8EAC(U), :006E8EBC(U), :006E8EEC(U), :006E9853(U)
|:006E9866(U), :006E9879(U), :006E988C(U), :006E989F(U), :006E98B2(U)
|:006E98C5(U), :006E990F(U), :006E9922(U), :006E9CB0(U), :006E9CC3(U)
|:006E9CD6(U), :006E9CE9(U), :006E9CFC(U), :006E9D0F(U), :006E9D22(U)
|:006E9D77(U), :006EA58C(U), :006EA59C(U), :006EA5AC(U), :006EA5BC(U)
|:006EA5CC(U), :006EA5E4(U), :006EACEB(U), :006EAFFD(U), :006EB025(U)
|:006EB035(U), :006EB3AC(U), :006EB3D6(U), :006ECE83(U), :006ED473(U)
|:006ED483(U), :006ED496(U), :006ED4A9(U), :006ED4BC(U), :006ED4CF(U)
|:006ED4E2(U), :006ED51B(U), :006ED52E(U), :006ED541(U), :006ED557(U)
|:006ED81B(U), :006ED83B(U), :006ED88F(U), :006ED89F(U), :006EEB3C(U)
|:006EF0E6(U), :006EFFA1(U), :006EFFC1(U), :006F047A(U), :006F1829(U)
|:006F18A4(U), :006F18CE(U), :006F1949(U), :006F19EB(U), :006F1A16(U)
|:006F3336(U), :006F35C4(U), :006F3B56(U), :006F41AF(U), :006F41D2(U)
|:006F548B(U), :006F559B(U), :006F575B(U), :006F65DA(U), :006F66A0(U)
|:006F66B0(U), :006F66C8(U), :006F6772(U), :006F6782(U), :006F682C(U)
|:006F683C(U), :006F68D4(U), :006F68E4(U), :006F6AC8(U), :006F6B00(U)
|:006F6C12(U), :006F6EC8(U), :006F6ED8(U), :006F6F48(U), :006F6FDA(U)
|:006F7993(U), :006F79C3(U), :006F7B95(U), :006F7BA5(U), :006F7BC5(U)
|:006F7DFA(U), :006F7F02(U), :006F800F(U), :006F8047(U), :006F81A1(U)
|:006F835E(U), :006F839E(U), :006F85AF(U), :006F85CF(U), :006F8681(U)
|:006F8808(U), :006F8888(U), :006F9720(U), :006F9854(U), :006F9963(U)
|:006F9A58(U), :006F9AA4(U), :006F9D75(U), :006F9D88(U), :006F9D9B(U)
|:006F9E11(U), :006F9E84(U), :006F9EF4(U), :006F9F0A(U), :006F9F4B(U)
|:006FA04D(U), :006FA06D(U), :006FA171(U), :006FA191(U), :006FA543(U)
|:006FA636(U), :006FAC46(U), :006FAE07(U), :006FAE97(U), :006FB023(U)
|:006FB8A7(U), :006FC220(U), :006FC238(U), :006FC6D5(U), :006FC6F5(U)
|:006FDA85(U), :006FDE92(U), :006FDEB2(U), :006FDF96(U), :006FE116(U)
|:006FE142(U), :006FF65E(U), :006FF6D9(U), :006FF77B(U), :006FF7BD(U)
|:007010E2(U), :00701102(U), :0070116F(U), :0070118F(U), :007012C3(U)
|:00701A75(U), :0070514E(U), :0070516E(U), :0070529C(U), :007052BF(U)
|:007052DD(U), :00705A33(U), :00705A5F(U)
|
:004150B0 C3                      ret
:004150B1 90                      nop
:004150B2 90                      nop
:004150B3 90                      nop
:004150B4 90                      nop
:004150B5 90                      nop
:004150B6 90                      nop
:004150B7 90                      nop
:004150B8 90                      nop
:004150B9 90                      nop
:004150BA 90                      nop
:004150BB 90                      nop
:004150BC 90                      nop
:004150BD 90                      nop
:004150BE 90                      nop
:004150BF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006D0310(U), :006D66DB(U), :006D6811(U)
|
:004150C0 6AFF                    push FFFFFFFF
:004150C2 6828126D00              push 006D1228
:004150C7 64A100000000            mov eax, dword ptr fs:[00000000]
:004150CD 50                      push eax
:004150CE 64892500000000          mov dword ptr fs:[00000000], esp
:004150D5 51                      push ecx
:004150D6 53                      push ebx
:004150D7 8BD9                    mov ebx, ecx
:004150D9 56                      push esi
:004150DA 895C2408                mov dword ptr [esp+08], ebx
:004150DE 8B03                    mov eax, dword ptr [ebx]
:004150E0 C744241400000000        mov [esp+14], 00000000
:004150E8 8B30                    mov esi, dword ptr [eax]
:004150EA 3BF0                    cmp esi, eax
:004150EC 7431                    je 0041511F
:004150EE 57                      push edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041511C(C)
|
:004150EF 8BFE                    mov edi, esi
:004150F1 8B36                    mov esi, dword ptr [esi]
:004150F3 8B4708                  mov eax, dword ptr [edi+08]
:004150F6 83E80C                  sub eax, 0000000C
:004150F9 8B08                    mov ecx, dword ptr [eax]
:004150FB 49                      dec ecx
:004150FC 8908                    mov dword ptr [eax], ecx
:004150FE 7509                    jne 00415109
:00415100 50                      push eax
:00415101 E8FAC11C00              call 005E1300
:00415106 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004150FE(C)
|
:00415109 85FF                    test edi, edi
:0041510B 740D                    je 0041511A
:0041510D A100987A00              mov eax, dword ptr [007A9800]
:00415112 8907                    mov dword ptr [edi], eax
:00415114 893D00987A00            mov dword ptr [007A9800], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041510B(C)
|
:0041511A 3B33                    cmp esi, dword ptr [ebx]
:0041511C 75D1                    jne 004150EF
:0041511E 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004150EC(C)
|
:0041511F 8B03                    mov eax, dword ptr [ebx]
:00415121 8900                    mov dword ptr [eax], eax
:00415123 8B03                    mov eax, dword ptr [ebx]
:00415125 894004                  mov dword ptr [eax+04], eax
:00415128 8B1B                    mov ebx, dword ptr [ebx]
:0041512A 85DB                    test ebx, ebx
:0041512C 740E                    je 0041513C
:0041512E 8B0D00987A00            mov ecx, dword ptr [007A9800]
:00415134 890B                    mov dword ptr [ebx], ecx
:00415136 891D00987A00            mov dword ptr [007A9800], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041512C(C)
|
:0041513C 8B4C240C                mov ecx, dword ptr [esp+0C]
:00415140 5E                      pop esi
:00415141 5B                      pop ebx
:00415142 64890D00000000          mov dword ptr fs:[00000000], ecx
:00415149 83C410                  add esp, 00000010
:0041514C C3                      ret


:0041514D 90                      nop
:0041514E 90                      nop
:0041514F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CF8C3(U), :006CFA59(U)
|
:00415150 6AFF                    push FFFFFFFF
:00415152 6848126D00              push 006D1248
:00415157 64A100000000            mov eax, dword ptr fs:[00000000]
:0041515D 50                      push eax
:0041515E 64892500000000          mov dword ptr fs:[00000000], esp
:00415165 51                      push ecx
:00415166 56                      push esi
:00415167 57                      push edi
:00415168 8BF9                    mov edi, ecx
:0041516A 897C2408                mov dword ptr [esp+08], edi
:0041516E 8B07                    mov eax, dword ptr [edi]
:00415170 C744241400000000        mov [esp+14], 00000000
:00415178 8B30                    mov esi, dword ptr [eax]
:0041517A 3BF0                    cmp esi, eax
:0041517C 7415                    je 00415193

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415191(C)
|
:0041517E 8BC6                    mov eax, esi
:00415180 8B36                    mov esi, dword ptr [esi]
:00415182 85C0                    test eax, eax
:00415184 7409                    je 0041518F
:00415186 50                      push eax
:00415187 E874C11C00              call 005E1300
:0041518C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415184(C)
|
:0041518F 3B37                    cmp esi, dword ptr [edi]
:00415191 75EB                    jne 0041517E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041517C(C)
|
:00415193 8B07                    mov eax, dword ptr [edi]
:00415195 8900                    mov dword ptr [eax], eax
:00415197 8B07                    mov eax, dword ptr [edi]
:00415199 894004                  mov dword ptr [eax+04], eax
:0041519C 8B3F                    mov edi, dword ptr [edi]
:0041519E 85FF                    test edi, edi
:004151A0 7409                    je 004151AB
:004151A2 57                      push edi
:004151A3 E858C11C00              call 005E1300
:004151A8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004151A0(C)
|
:004151AB 8B4C240C                mov ecx, dword ptr [esp+0C]
:004151AF 5F                      pop edi
:004151B0 5E                      pop esi
:004151B1 64890D00000000          mov dword ptr fs:[00000000], ecx
:004151B8 83C410                  add esp, 00000010
:004151BB C3                      ret


:004151BC 90                      nop
:004151BD 90                      nop
:004151BE 90                      nop
:004151BF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:006CF8B5(U)
|
:004151C0 C3                      ret
:004151C1 90                      nop
:004151C2 90                      nop
:004151C3 90                      nop
:004151C4 90                      nop
:004151C5 90                      nop
:004151C6 90                      nop
:004151C7 90                      nop
:004151C8 90                      nop
:004151C9 90                      nop
:004151CA 90                      nop
:004151CB 90                      nop
:004151CC 90                      nop
:004151CD 90                      nop
:004151CE 90                      nop
:004151CF 90                      nop

* Referenced by a CALL at Addresses:
|:00413696   , :0047FE02   , :004B476D   , :004B484E   , :004B492D   
|:004B4A14   , :004B70A8   , :004B7547   , :004D4660   , :004E21BB   
|:004E268B   , :004F58F1   , :00564390   , :005CA6A4   , :005D004E   
|:005D0061   , :005D01CD   , :005D01E0   , :005D01F3   , :0069ACEA   
|
:004151D0 8BC1                    mov eax, ecx
:004151D2 33C9                    xor ecx, ecx
:004151D4 8908                    mov dword ptr [eax], ecx
:004151D6 894804                  mov dword ptr [eax+04], ecx
:004151D9 894808                  mov dword ptr [eax+08], ecx
:004151DC C20400                  ret 0004


:004151DF 90                      nop

* Referenced by a CALL at Addresses:
|:00412058   , :00412BAA   , :00413683   , :0042FB30   , :0043BB44   
|:00453284   , :004548A6   , :00458FAD   , :004681F5   , :0057EE0F   
|:00592899   , :005A1439   , :005C5654   , :005C5C15   , :005C6563   
|:005C69A5   , :005C7D78   , :00653AB9   
|
:004151E0 8BC1                    mov eax, ecx
:004151E2 33C9                    xor ecx, ecx
:004151E4 8908                    mov dword ptr [eax], ecx
:004151E6 894804                  mov dword ptr [eax+04], ecx
:004151E9 894808                  mov dword ptr [eax+08], ecx
:004151EC C20400                  ret 0004


:004151EF 90                      nop

* Referenced by a CALL at Addresses:
|:0040E794   , :0040E838   , :0040E8DB   , :0040E97E   , :0040EA20   
|:0040EAC2   , :0040EB65   , :0040EC09   , :0040ECAC   , :0040ED50   
|:0040EDF3   , :0040EE95   , :0040EF36   , :0040EFD8   , :0040F079   
|:00447403   
|
:004151F0 8B442404                mov eax, dword ptr [esp+04]
:004151F4 8B09                    mov ecx, dword ptr [ecx]
:004151F6 8908                    mov dword ptr [eax], ecx
:004151F8 C20400                  ret 0004


:004151FB 90                      nop
:004151FC 90                      nop
:004151FD 90                      nop
:004151FE 90                      nop
:004151FF 90                      nop

* Referenced by a CALL at Addresses:
|:0040E7A2   , :0040E846   , :0040E8E9   , :0040E98C   , :0040EA2E   
|:0040EAD0   , :0040EB73   , :0040EC17   , :0040ECBA   , :0040ED5E   
|:0040EE01   , :0040EEA3   , :0040EF44   , :0040EFE6   , :0040F087   
|:0044740F   
|
:00415200 8B44240C                mov eax, dword ptr [esp+0C]
:00415204 50                      push eax
:00415205 E836030000              call 00415540
:0041520A 8B4C2408                mov ecx, dword ptr [esp+08]
:0041520E 8B5104                  mov edx, dword ptr [ecx+04]
:00415211 8908                    mov dword ptr [eax], ecx
:00415213 895004                  mov dword ptr [eax+04], edx
:00415216 8902                    mov dword ptr [edx], eax
:00415218 894104                  mov dword ptr [ecx+04], eax
:0041521B 8B4C2404                mov ecx, dword ptr [esp+04]
:0041521F 8901                    mov dword ptr [ecx], eax
:00415221 8BC1                    mov eax, ecx
:00415223 C20C00                  ret 000C


:00415226 90                      nop
:00415227 90                      nop
:00415228 90                      nop
:00415229 90                      nop
:0041522A 90                      nop
:0041522B 90                      nop
:0041522C 90                      nop
:0041522D 90                      nop
:0041522E 90                      nop
:0041522F 90                      nop

* Referenced by a CALL at Addresses:
|:0040F1CE   , :00447566   
|
:00415230 56                      push esi
:00415231 8B74240C                mov esi, dword ptr [esp+0C]
:00415235 57                      push edi
:00415236 8B4604                  mov eax, dword ptr [esi+04]
:00415239 8B3E                    mov edi, dword ptr [esi]
:0041523B 8938                    mov dword ptr [eax], edi
:0041523D 894704                  mov dword ptr [edi+04], eax
:00415240 8B4608                  mov eax, dword ptr [esi+08]
:00415243 83E80C                  sub eax, 0000000C
:00415246 8B08                    mov ecx, dword ptr [eax]
:00415248 49                      dec ecx
:00415249 8908                    mov dword ptr [eax], ecx
:0041524B 7509                    jne 00415256
:0041524D 50                      push eax
:0041524E E8ADC01C00              call 005E1300
:00415253 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041524B(C)
|
:00415256 85F6                    test esi, esi
:00415258 740D                    je 00415267
:0041525A A100987A00              mov eax, dword ptr [007A9800]
:0041525F 8906                    mov dword ptr [esi], eax
:00415261 893500987A00            mov dword ptr [007A9800], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415258(C)
|
:00415267 8B44240C                mov eax, dword ptr [esp+0C]
:0041526B 8938                    mov dword ptr [eax], edi
:0041526D 5F                      pop edi
:0041526E 5E                      pop esi
:0041526F C20800                  ret 0008


:00415272 90                      nop
:00415273 90                      nop
:00415274 90                      nop
:00415275 90                      nop
:00415276 90                      nop
:00415277 90                      nop
:00415278 90                      nop
:00415279 90                      nop
:0041527A 90                      nop
:0041527B 90                      nop
:0041527C 90                      nop
:0041527D 90                      nop
:0041527E 90                      nop
:0041527F 90                      nop

* Referenced by a CALL at Address:
|:0040E716   
|
:00415280 6AFF                    push FFFFFFFF
:00415282 6868126D00              push 006D1268
:00415287 64A100000000            mov eax, dword ptr fs:[00000000]
:0041528D 50                      push eax
:0041528E 64892500000000          mov dword ptr fs:[00000000], esp
:00415295 83EC08                  sub esp, 00000008
:00415298 55                      push ebp
:00415299 8BE9                    mov ebp, ecx
:0041529B 56                      push esi
:0041529C 57                      push edi
:0041529D 896C2410                mov dword ptr [esp+10], ebp
:004152A1 C7450000000000          mov [ebp+00], 00000000
:004152A8 A100987A00              mov eax, dword ptr [007A9800]
:004152AD C744241C00000000        mov [esp+1C], 00000000
:004152B5 85C0                    test eax, eax
:004152B7 740D                    je 004152C6
:004152B9 8B08                    mov ecx, dword ptr [eax]
:004152BB 890D00987A00            mov dword ptr [007A9800], ecx
:004152C1 E934010000              jmp 004153FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004152B7(C)
|
:004152C6 A144987A00              mov eax, dword ptr [007A9844]
:004152CB 8B0D40987A00            mov ecx, dword ptr [007A9840]
:004152D1 2BC1                    sub eax, ecx
:004152D3 BF14000000              mov edi, 00000014
:004152D8 3D40010000              cmp eax, 00000140
:004152DD 897C240C                mov dword ptr [esp+0C], edi
:004152E1 7213                    jb 004152F6
:004152E3 8BC1                    mov eax, ecx
:004152E5 81C140010000            add ecx, 00000140
:004152EB 890D40987A00            mov dword ptr [007A9840], ecx
:004152F1 E9D5000000              jmp 004153CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004152E1(C)
|
:004152F6 83F810                  cmp eax, 00000010
:004152F9 721D                    jb 00415318
:004152FB C1E804                  shr eax, 04
:004152FE 8BF8                    mov edi, eax
:00415300 8BC1                    mov eax, ecx
:00415302 8BD7                    mov edx, edi
:00415304 897C240C                mov dword ptr [esp+0C], edi
:00415308 C1E204                  shl edx, 04
:0041530B 03CA                    add ecx, edx
:0041530D 890D40987A00            mov dword ptr [007A9840], ecx
:00415313 E9AE000000              jmp 004153C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004152F9(C)
|
:00415318 8B353C987A00            mov esi, dword ptr [007A983C]
:0041531E C1EE04                  shr esi, 04
:00415321 83C607                  add esi, 00000007
:00415324 83E6F8                  and esi, FFFFFFF8
:00415327 81C680020000            add esi, 00000280
:0041532D 85C0                    test eax, eax
:0041532F 761C                    jbe 0041534D
:00415331 48                      dec eax
:00415332 C1E803                  shr eax, 03
:00415335 8B1485FC977A00          mov edx, dword ptr [4*eax+007A97FC]
:0041533C 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:00415343 8911                    mov dword ptr [ecx], edx
:00415345 8B0D40987A00            mov ecx, dword ptr [007A9840]
:0041534B 8908                    mov dword ptr [eax], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041532F(C)
|
:0041534D 56                      push esi
:0041534E E82DBF1C00              call 005E1280
:00415353 83C404                  add esp, 00000004
:00415356 A340987A00              mov dword ptr [007A9840], eax
:0041535B 85C0                    test eax, eax
:0041535D 753F                    jne 0041539E
:0041535F B910000000              mov ecx, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415389(C)
|
:00415364 8D51FF                  lea edx, dword ptr [ecx-01]
:00415367 C1EA03                  shr edx, 03
:0041536A 8B0495FC977A00          mov eax, dword ptr [4*edx+007A97FC]
:00415371 8D1495FC977A00          lea edx, dword ptr [4*edx+007A97FC]
:00415378 85C0                    test eax, eax
:0041537A 0F8598000000            jne 00415418
:00415380 83C108                  add ecx, 00000008
:00415383 81F980000000            cmp ecx, 00000080
:00415389 76D9                    jbe 00415364
:0041538B 56                      push esi
:0041538C A344987A00              mov dword ptr [007A9844], eax
:00415391 E8EABE1C00              call 005E1280
:00415396 83C404                  add esp, 00000004
:00415399 A340987A00              mov dword ptr [007A9840], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041535D(C)
|
:0041539E 8B3D3C987A00            mov edi, dword ptr [007A983C]
:004153A4 8D4C240C                lea ecx, dword ptr [esp+0C]
:004153A8 03FE                    add edi, esi
:004153AA 03C6                    add eax, esi
:004153AC 893D3C987A00            mov dword ptr [007A983C], edi
:004153B2 A344987A00              mov dword ptr [007A9844], eax
:004153B7 51                      push ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041542D(U)
|
:004153B8 6A10                    push 00000010
:004153BA E8B1EFFEFF              call 00404370
:004153BF 8B7C2414                mov edi, dword ptr [esp+14]
:004153C3 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415313(U)
|
:004153C6 83FF01                  cmp edi, 00000001
:004153C9 742F                    je 004153FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004152F1(U)
|
:004153CB 8D4810                  lea ecx, dword ptr [eax+10]
:004153CE BE01000000              mov esi, 00000001
:004153D3 890D00987A00            mov dword ptr [007A9800], ecx
:004153D9 8BD1                    mov edx, ecx
:004153DB 83C110                  add ecx, 00000010
:004153DE 4F                      dec edi
:004153DF 3BFE                    cmp edi, esi
:004153E1 7411                    je 004153F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004153F2(C)
|
:004153E3 890A                    mov dword ptr [edx], ecx
:004153E5 8B7C240C                mov edi, dword ptr [esp+0C]
:004153E9 8BD1                    mov edx, ecx
:004153EB 46                      inc esi
:004153EC 83C110                  add ecx, 00000010
:004153EF 4F                      dec edi
:004153F0 3BFE                    cmp edi, esi
:004153F2 75EF                    jne 004153E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004153E1(C)
|
:004153F4 C70200000000            mov dword ptr [edx], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004152C1(U), :004153C9(C)
|
:004153FA 8B4C2414                mov ecx, dword ptr [esp+14]
:004153FE 8900                    mov dword ptr [eax], eax
:00415400 894004                  mov dword ptr [eax+04], eax
:00415403 894500                  mov dword ptr [ebp+00], eax
:00415406 5F                      pop edi
:00415407 8BC5                    mov eax, ebp
:00415409 5E                      pop esi
:0041540A 5D                      pop ebp
:0041540B 64890D00000000          mov dword ptr fs:[00000000], ecx
:00415412 83C414                  add esp, 00000014
:00415415 C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041537A(C)
|
:00415418 8B30                    mov esi, dword ptr [eax]
:0041541A A340987A00              mov dword ptr [007A9840], eax
:0041541F 03C1                    add eax, ecx
:00415421 8932                    mov dword ptr [edx], esi
:00415423 A344987A00              mov dword ptr [007A9844], eax
:00415428 8D44240C                lea eax, dword ptr [esp+0C]
:0041542C 50                      push eax
:0041542D EB89                    jmp 004153B8
:0041542F 90                      nop

* Referenced by a CALL at Addresses:
|:0040AB3D   , :0040DA3A   
|
:00415430 8B442404                mov eax, dword ptr [esp+04]
:00415434 8B09                    mov ecx, dword ptr [ecx]
:00415436 8908                    mov dword ptr [eax], ecx
:00415438 C20400                  ret 0004


:0041543B 90                      nop
:0041543C 90                      nop
:0041543D 90                      nop
:0041543E 90                      nop
:0041543F 90                      nop

* Referenced by a CALL at Addresses:
|:0040AB49   , :0040DA46   
|
:00415440 8B44240C                mov eax, dword ptr [esp+0C]
:00415444 50                      push eax
:00415445 E876010000              call 004155C0
:0041544A 8B4C2408                mov ecx, dword ptr [esp+08]
:0041544E 8B5104                  mov edx, dword ptr [ecx+04]
:00415451 8908                    mov dword ptr [eax], ecx
:00415453 895004                  mov dword ptr [eax+04], edx
:00415456 8902                    mov dword ptr [edx], eax
:00415458 894104                  mov dword ptr [ecx+04], eax
:0041545B 8B4C2404                mov ecx, dword ptr [esp+04]
:0041545F 8901                    mov dword ptr [ecx], eax
:00415461 8BC1                    mov eax, ecx
:00415463 C20C00                  ret 000C


:00415466 90                      nop
:00415467 90                      nop
:00415468 90                      nop
:00415469 90                      nop
:0041546A 90                      nop
:0041546B 90                      nop
:0041546C 90                      nop
:0041546D 90                      nop
:0041546E 90                      nop
:0041546F 90                      nop

* Referenced by a CALL at Addresses:
|:0040DBD3   , :0040DDCA   
|
:00415470 8B442408                mov eax, dword ptr [esp+08]
:00415474 56                      push esi
:00415475 85C0                    test eax, eax
:00415477 8B4804                  mov ecx, dword ptr [eax+04]
:0041547A 8B30                    mov esi, dword ptr [eax]
:0041547C 8931                    mov dword ptr [ecx], esi
:0041547E 894E04                  mov dword ptr [esi+04], ecx
:00415481 7409                    je 0041548C
:00415483 50                      push eax
:00415484 E877BE1C00              call 005E1300
:00415489 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415481(C)
|
:0041548C 8B442408                mov eax, dword ptr [esp+08]
:00415490 8930                    mov dword ptr [eax], esi
:00415492 5E                      pop esi
:00415493 C20800                  ret 0008


:00415496 90                      nop
:00415497 90                      nop
:00415498 90                      nop
:00415499 90                      nop
:0041549A 90                      nop
:0041549B 90                      nop
:0041549C 90                      nop
:0041549D 90                      nop
:0041549E 90                      nop
:0041549F 90                      nop

* Referenced by a CALL at Address:
|:00409D81   
|
:004154A0 6AFF                    push FFFFFFFF
:004154A2 6888126D00              push 006D1288
:004154A7 64A100000000            mov eax, dword ptr fs:[00000000]
:004154AD 50                      push eax
:004154AE 64892500000000          mov dword ptr fs:[00000000], esp
:004154B5 51                      push ecx
:004154B6 56                      push esi
:004154B7 8BF1                    mov esi, ecx
:004154B9 89742404                mov dword ptr [esp+04], esi
:004154BD C70600000000            mov dword ptr [esi], 00000000
:004154C3 680B030000              push 0000030B
:004154C8 C744241400000000        mov [esp+14], 00000000
:004154D0 E8ABBD1C00              call 005E1280
:004154D5 8B4C240C                mov ecx, dword ptr [esp+0C]
:004154D9 83C404                  add esp, 00000004
:004154DC 8900                    mov dword ptr [eax], eax
:004154DE 894004                  mov dword ptr [eax+04], eax
:004154E1 8906                    mov dword ptr [esi], eax
:004154E3 8BC6                    mov eax, esi
:004154E5 5E                      pop esi
:004154E6 64890D00000000          mov dword ptr fs:[00000000], ecx
:004154ED 83C410                  add esp, 00000010
:004154F0 C20400                  ret 0004


:004154F3 90                      nop
:004154F4 90                      nop
:004154F5 90                      nop
:004154F6 90                      nop
:004154F7 90                      nop
:004154F8 90                      nop
:004154F9 90                      nop
:004154FA 90                      nop
:004154FB 90                      nop
:004154FC 90                      nop
:004154FD 90                      nop
:004154FE 90                      nop
:004154FF 90                      nop

* Referenced by a CALL at Addresses:
|:0040DBC0   , :0040DDB7   
|
:00415500 8BC1                    mov eax, ecx
:00415502 8B08                    mov ecx, dword ptr [eax]
:00415504 8B5104                  mov edx, dword ptr [ecx+04]
:00415507 8910                    mov dword ptr [eax], edx
:00415509 C3                      ret


:0041550A 90                      nop
:0041550B 90                      nop
:0041550C 90                      nop
:0041550D 90                      nop
:0041550E 90                      nop
:0041550F 90                      nop

* Referenced by a CALL at Addresses:
|:004AED88   , :004B5C72   , :004B5DC8   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006D0EE6(U), :006D1206(U), :006D5599(U), :006D55A4(U), :006D55AF(U)
|:006D55C2(U), :006D56A6(U), :006DBDFD(U), :006DCB4E(U), :006DCD76(U)
|:006DD065(U), :006DE08F(U), :006DE09A(U), :006DE0A5(U), :006DF9B6(U)
|:006DFCA4(U), :006DFE66(U), :006DFECF(U), :006DFEEE(U), :006DFF1F(U)
|:006DFF4F(U), :006DFFA4(U), :006DFFE2(U), :006E127C(U), :006E12BB(U)
|:006E133D(U), :006E1358(U), :006E1376(U), :006E2589(U), :006E314A(U)
|:006E346A(U), :006E367E(U), :006E38B9(U), :006E963C(U), :006ED0B2(U)
|:006ED10A(U), :006ED159(U), :006ED192(U), :006ED1AB(U), :006ED1EF(U)
|:006ED93E(U), :006ED9D3(U), :006EDA87(U), :006EDABF(U), :006EDACA(U)
|:006EDAFF(U), :006EDB0A(U), :006FA5F6(U), :006FA601(U), :006FA60C(U)
|:006FA67F(U), :006FA68A(U), :006FA6CC(U), :006FA6D7(U), :006FA6E2(U)
|:006FAA5E(U), :006FAA69(U), :006FAA74(U), :006FAB5E(U), :006FAB7C(U)
|:006FAB9A(U), :006FAC77(U), :006FAC95(U), :006FD990(U), :006FE047(U)
|:006FE052(U), :006FE599(U), :006FE5B7(U), :007010AB(U), :00702E4A(U)
|:00702E68(U), :007075D8(U)
|
:00415510 C3                      ret
:00415511 90                      nop
:00415512 90                      nop
:00415513 90                      nop
:00415514 90                      nop
:00415515 90                      nop
:00415516 90                      nop
:00415517 90                      nop
:00415518 90                      nop
:00415519 90                      nop
:0041551A 90                      nop
:0041551B 90                      nop
:0041551C 90                      nop
:0041551D 90                      nop
:0041551E 90                      nop
:0041551F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006D03B0(U), :006D1223(U), :006D1263(U), :006D66CD(U), :006D6821(U)
|
:00415520 C3                      ret
:00415521 90                      nop
:00415522 90                      nop
:00415523 90                      nop
:00415524 90                      nop
:00415525 90                      nop
:00415526 90                      nop
:00415527 90                      nop
:00415528 90                      nop
:00415529 90                      nop
:0041552A 90                      nop
:0041552B 90                      nop
:0041552C 90                      nop
:0041552D 90                      nop
:0041552E 90                      nop
:0041552F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006CFA77(U), :006D1243(U), :006D1283(U)
|
:00415530 C3                      ret
:00415531 90                      nop
:00415532 90                      nop
:00415533 90                      nop
:00415534 90                      nop
:00415535 90                      nop
:00415536 90                      nop
:00415537 90                      nop
:00415538 90                      nop
:00415539 90                      nop
:0041553A 90                      nop
:0041553B 90                      nop
:0041553C 90                      nop
:0041553D 90                      nop
:0041553E 90                      nop
:0041553F 90                      nop

* Referenced by a CALL at Address:
|:00415205   
|
:00415540 51                      push ecx
:00415541 A100987A00              mov eax, dword ptr [007A9800]
:00415546 57                      push edi
:00415547 85C0                    test eax, eax
:00415549 740A                    je 00415555
:0041554B 8B08                    mov ecx, dword ptr [eax]
:0041554D 890D00987A00            mov dword ptr [007A9800], ecx
:00415553 EB51                    jmp 004155A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415549(C)
|
:00415555 8D542404                lea edx, dword ptr [esp+04]
:00415559 C744240414000000        mov [esp+04], 00000014
:00415561 52                      push edx
:00415562 6A10                    push 00000010
:00415564 E807EEFEFF              call 00404370
:00415569 8B7C240C                mov edi, dword ptr [esp+0C]
:0041556D 83C408                  add esp, 00000008
:00415570 83FF01                  cmp edi, 00000001
:00415573 7431                    je 004155A6
:00415575 8D4810                  lea ecx, dword ptr [eax+10]
:00415578 56                      push esi
:00415579 890D00987A00            mov dword ptr [007A9800], ecx
:0041557F 8BD1                    mov edx, ecx
:00415581 83C110                  add ecx, 00000010
:00415584 BE01000000              mov esi, 00000001
:00415589 4F                      dec edi
:0041558A 3BFE                    cmp edi, esi
:0041558C 7411                    je 0041559F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041559D(C)
|
:0041558E 890A                    mov dword ptr [edx], ecx
:00415590 8B7C2408                mov edi, dword ptr [esp+08]
:00415594 8BD1                    mov edx, ecx
:00415596 46                      inc esi
:00415597 83C110                  add ecx, 00000010
:0041559A 4F                      dec edi
:0041559B 3BFE                    cmp edi, esi
:0041559D 75EF                    jne 0041558E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041558C(C)
|
:0041559F C70200000000            mov dword ptr [edx], 00000000
:004155A5 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415553(U), :00415573(C)
|
:004155A6 8D5008                  lea edx, dword ptr [eax+08]
:004155A9 5F                      pop edi
:004155AA 85D2                    test edx, edx
:004155AC 740B                    je 004155B9
:004155AE 8B4C2408                mov ecx, dword ptr [esp+08]
:004155B2 8B09                    mov ecx, dword ptr [ecx]
:004155B4 890A                    mov dword ptr [edx], ecx
:004155B6 FF41F4                  inc [ecx-0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004155AC(C)
|
:004155B9 59                      pop ecx
:004155BA C20400                  ret 0004


:004155BD 90                      nop
:004155BE 90                      nop
:004155BF 90                      nop

* Referenced by a CALL at Address:
|:00415445   
|
:004155C0 55                      push ebp
:004155C1 8BEC                    mov ebp, esp
:004155C3 6AFF                    push FFFFFFFF
:004155C5 68B1126D00              push 006D12B1
:004155CA 64A100000000            mov eax, dword ptr fs:[00000000]
:004155D0 50                      push eax
:004155D1 64892500000000          mov dword ptr fs:[00000000], esp
:004155D8 83EC10                  sub esp, 00000010
:004155DB 53                      push ebx
:004155DC 56                      push esi
:004155DD 57                      push edi
:004155DE 8965F0                  mov dword ptr [ebp-10], esp
:004155E1 680B030000              push 0000030B
:004155E6 E895BC1C00              call 005E1280
:004155EB 8BF0                    mov esi, eax
:004155ED 83C404                  add esp, 00000004
:004155F0 8975EC                  mov dword ptr [ebp-14], esi
:004155F3 C745FC00000000          mov [ebp-04], 00000000
:004155FA 8D4E08                  lea ecx, dword ptr [esi+08]
:004155FD 894DE8                  mov dword ptr [ebp-18], ecx
:00415600 894DE4                  mov dword ptr [ebp-1C], ecx
:00415603 85C9                    test ecx, ecx
:00415605 C645FC01                mov [ebp-04], 01
:00415609 7409                    je 00415614
:0041560B 8B4508                  mov eax, dword ptr [ebp+08]
:0041560E 50                      push eax
:0041560F E8BCFA1300              call 005550D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415609(C)
|
:00415614 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00415617 8BC6                    mov eax, esi
:00415619 5F                      pop edi
:0041561A 5E                      pop esi
:0041561B 64890D00000000          mov dword ptr fs:[00000000], ecx
:00415622 5B                      pop ebx
:00415623 8BE5                    mov esp, ebp
:00415625 5D                      pop ebp
:00415626 C20400                  ret 0004


:00415629 8B45EC                  mov eax, dword ptr [ebp-14]
:0041562C 85C0                    test eax, eax
:0041562E 7409                    je 00415639
:00415630 50                      push eax
:00415631 E8CABC1C00              call 005E1300
:00415636 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041562E(C)
|
:00415639 6A00                    push 00000000
:0041563B 6A00                    push 00000000
:0041563D E875932A00              call 006BE9B7
:00415642 90                      nop
:00415643 90                      nop
:00415644 90                      nop
:00415645 90                      nop
:00415646 90                      nop
:00415647 90                      nop
:00415648 90                      nop
:00415649 90                      nop
:0041564A 90                      nop
:0041564B 90                      nop
:0041564C 90                      nop
:0041564D 90                      nop
:0041564E 90                      nop
:0041564F 90                      nop

* Referenced by a CALL at Addresses:
|:006D12A8   , :006D22E9   , :006D23F9   , :006D2415   , :006D2431   
|:006D6548   , :006DCC28   , :006DCC88   , :006DCCD8   , :006DCDD8   
|:006DCE28   , :006DCE78   , :006DCEB8   , :006DCEF8   , :006DCF48   
|:006DD0CD   , :006DD1E8   , :006DD2D0   , :006DDED6   , :006DE558   
|:006DFA58   , :006DFC52   , :006DFC95   , :006DFD53   , :006DFD7C   
|:006DFDA5   , :006DFE88   , :006DFEB8   , :006DFF08   , :006DFF38   
|:006DFF95   , :006DFFD3   , :006E0488   , :006E04D8   , :006EAAD8   
|:006EBF48   , :006EC138   , :006EC208   , :006EDA68   , :006EDAA8   
|:006EDAE8   , :006EE9A8   , :006EE9D8   , :006EEA18   , :006EEA58   
|:006F1D27   , :006FA09A   , :006FA1BE   , :006FA918   , :006FA978   
|:006FAAB8   , :006FAB08   , :006FABB8   , :006FAD08   , :006FAD58   
|:006FADE8   , :006FAE78   , :006FAF08   , :006FAF68   , :006FAFC8   
|:006FB4DF   , :006FC838   , :006FC853   , :006FCBD9   , :006FCE58   
|:006FE268   , :006FE568   , :006FE5D8   , :006FE628   , :007006D8   
|:007007D8   , :007009A8   , :00700A58   , :00702058   , :00702AF4   
|:00702B0D   , :00702C2E   , :00702C45   , :00702E28   , :007043A6   
|:007057B8   , :007057D8   , :00705848   , :00705898   , :00705F88   
|:007062EC   , :007064C8   , :00706558   , :00706902   , :00706939   
|:007069E8   , :00706B68   , :00706F58   , :00707928   
|
:00415650 C3                      ret
:00415651 90                      nop
:00415652 90                      nop
:00415653 90                      nop
:00415654 90                      nop
:00415655 90                      nop
:00415656 90                      nop
:00415657 90                      nop
:00415658 90                      nop
:00415659 90                      nop
:0041565A 90                      nop
:0041565B 90                      nop
:0041565C 90                      nop
:0041565D 90                      nop
:0041565E 90                      nop
:0041565F 90                      nop

* Referenced by a CALL at Addresses:
|:0041363A   , :005A1876   
|
:00415660 8B4C2404                mov ecx, dword ptr [esp+04]
:00415664 85C9                    test ecx, ecx
:00415666 7430                    je 00415698
:00415668 8B442408                mov eax, dword ptr [esp+08]
:0041566C C1E002                  shl eax, 02
:0041566F 3D80000000              cmp eax, 00000080
:00415674 760C                    jbe 00415682
:00415676 51                      push ecx
:00415677 E884BC1C00              call 005E1300
:0041567C 83C404                  add esp, 00000004
:0041567F C20800                  ret 0008



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415674(C)
|
:00415682 48                      dec eax
:00415683 C1E803                  shr eax, 03
:00415686 8B1485FC977A00          mov edx, dword ptr [4*eax+007A97FC]
:0041568D 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:00415694 8911                    mov dword ptr [ecx], edx
:00415696 8908                    mov dword ptr [eax], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415666(C)
|
:00415698 C20800                  ret 0008
:0041569B 90                      nop
:0041569C 90                      nop
:0041569D 90                      nop
:0041569E 90                      nop
:0041569F 90                      nop

* Referenced by a CALL at Address:
|:0040AB26   
|
:004156A0 8B4C2404                mov ecx, dword ptr [esp+04]
:004156A4 85C9                    test ecx, ecx
:004156A6 743B                    je 004156E3
:004156A8 8B442408                mov eax, dword ptr [esp+08]
:004156AC 8D1440                  lea edx, dword ptr [eax+2*eax]
:004156AF C1E205                  shl edx, 05
:004156B2 03D0                    add edx, eax
:004156B4 8D1490                  lea edx, dword ptr [eax+4*edx]
:004156B7 8D0450                  lea eax, dword ptr [eax+2*edx]
:004156BA 3D80000000              cmp eax, 00000080
:004156BF 760C                    jbe 004156CD
:004156C1 51                      push ecx
:004156C2 E839BC1C00              call 005E1300
:004156C7 83C404                  add esp, 00000004
:004156CA C20800                  ret 0008



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004156BF(C)
|
:004156CD 48                      dec eax
:004156CE C1E803                  shr eax, 03
:004156D1 8B1485FC977A00          mov edx, dword ptr [4*eax+007A97FC]
:004156D8 8D0485FC977A00          lea eax, dword ptr [4*eax+007A97FC]
:004156DF 8911                    mov dword ptr [ecx], edx
:004156E1 8908                    mov dword ptr [eax], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004156A6(C)
|
:004156E3 C20800                  ret 0008
:004156E6 90                      nop
:004156E7 90                      nop
:004156E8 90                      nop
:004156E9 90                      nop
:004156EA 90                      nop
:004156EB 90                      nop
:004156EC 90                      nop
:004156ED 90                      nop
:004156EE 90                      nop
:004156EF 90                      nop

* Referenced by a CALL at Addresses:
|:00414705   , :004147D5   , :0041D404   , :0041D43B   , :0041D54C   
|:0041D585   , :0041D5BC   , :00446197   , :0044625C   , :0045AA0F   
|:0046362E   , :00463665   , :0046369C   , :0046A8F5   , :00575110   
|:00593FA5   , :005940B5   , :005941C5   , :005D8324   , :005FFBE4   
|:0060CCF5   , :0060CDF5   , :0060CEF5   , :00644AED   
|
:004156F0 53                      push ebx
:004156F1 55                      push ebp
:004156F2 8BD9                    mov ebx, ecx
:004156F4 56                      push esi
:004156F5 57                      push edi
:004156F6 8B3B                    mov edi, dword ptr [ebx]
:004156F8 8B07                    mov eax, dword ptr [edi]
:004156FA 3BC7                    cmp eax, edi
:004156FC 7427                    je 00415725
:004156FE 8B6C2414                mov ebp, dword ptr [esp+14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415723(C)
|
:00415702 8B4808                  mov ecx, dword ptr [eax+08]
:00415705 8B5500                  mov edx, dword ptr [ebp+00]
:00415708 8B30                    mov esi, dword ptr [eax]
:0041570A 3BCA                    cmp ecx, edx
:0041570C 7511                    jne 0041571F
:0041570E 51                      push ecx
:0041570F 8D542418                lea edx, dword ptr [esp+18]
:00415713 8BCC                    mov ecx, esp
:00415715 52                      push edx
:00415716 8901                    mov dword ptr [ecx], eax
:00415718 8BCB                    mov ecx, ebx
:0041571A E8D112FFFF              call 004069F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041570C(C)
|
:0041571F 3BF7                    cmp esi, edi
:00415721 8BC6                    mov eax, esi
:00415723 75DD                    jne 00415702

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004156FC(C)
|
:00415725 5F                      pop edi
:00415726 5E                      pop esi
:00415727 5D                      pop ebp
:00415728 5B                      pop ebx
:00415729 C20400                  ret 0004


:0041572C 90                      nop
:0041572D 90                      nop
:0041572E 90                      nop
:0041572F 90                      nop

* Referenced by a CALL at Addresses:
|:004130DA   , :005A1528   
|
:00415730 8B442404                mov eax, dword ptr [esp+04]
:00415734 85C0                    test eax, eax
:00415736 7408                    je 00415740
:00415738 8B4C2408                mov ecx, dword ptr [esp+08]
:0041573C 8B11                    mov edx, dword ptr [ecx]
:0041573E 8910                    mov dword ptr [eax], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415736(C)
|
:00415740 C3                      ret
:00415741 90                      nop
:00415742 90                      nop
:00415743 90                      nop
:00415744 90                      nop
:00415745 90                      nop
:00415746 90                      nop
:00415747 90                      nop
:00415748 90                      nop
:00415749 90                      nop
:0041574A 90                      nop
:0041574B 90                      nop
:0041574C 90                      nop
:0041574D 90                      nop
:0041574E 90                      nop
:0041574F 90                      nop

* Referenced by a CALL at Addresses:
|:0040DB19   , :0040DD06   
|
:00415750 8B442404                mov eax, dword ptr [esp+04]
:00415754 8B542408                mov edx, dword ptr [esp+08]
:00415758 3BC2                    cmp eax, edx
:0041575A 7411                    je 0041576D
:0041575C 8B4C240C                mov ecx, dword ptr [esp+0C]
:00415760 56                      push esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041576A(C)
|
:00415761 8B31                    mov esi, dword ptr [ecx]
:00415763 8B00                    mov eax, dword ptr [eax]
:00415765 46                      inc esi
:00415766 3BC2                    cmp eax, edx
:00415768 8931                    mov dword ptr [ecx], esi
:0041576A 75F5                    jne 00415761
:0041576C 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041575A(C)
|
:0041576D C3                      ret
:0041576E 90                      nop
:0041576F 90                      nop
:00415770 83E908                  sub ecx, 00000008
:00415773 E928EFFFFF              jmp 004146A0
:00415778 CC                      int 03
:00415779 CC                      int 03
:0041577A CC                      int 03
:0041577B CC                      int 03
:0041577C CC                      int 03
:0041577D CC                      int 03
:0041577E CC                      int 03
:0041577F CC                      int 03
:00415780 83E908                  sub ecx, 00000008
:00415783 E9C8EEFFFF              jmp 00414650
:00415788 CC                      int 03
:00415789 CC                      int 03
:0041578A CC                      int 03
:0041578B CC                      int 03
:0041578C CC                      int 03
:0041578D CC                      int 03
:0041578E CC                      int 03
:0041578F CC                      int 03
:00415790 83E908                  sub ecx, 00000008
:00415793 E9E8E6FFFF              jmp 00413E80
:00415798 CC                      int 03
:00415799 CC                      int 03
:0041579A CC                      int 03
:0041579B CC                      int 03
:0041579C CC                      int 03
:0041579D CC                      int 03
:0041579E CC                      int 03
:0041579F CC                      int 03
:004157A0 83E908                  sub ecx, 00000008
:004157A3 E918F1FFFF              jmp 004148C0
:004157A8 CC                      int 03
:004157A9 CC                      int 03
:004157AA CC                      int 03
:004157AB CC                      int 03
:004157AC CC                      int 03
:004157AD CC                      int 03
:004157AE CC                      int 03
:004157AF CC                      int 03
:004157B0 83E908                  sub ecx, 00000008
:004157B3 E9C8F5FFFF              jmp 00414D80
:004157B8 CC                      int 03
:004157B9 CC                      int 03
:004157BA CC                      int 03
:004157BB CC                      int 03
:004157BC CC                      int 03
:004157BD CC                      int 03
:004157BE CC                      int 03
:004157BF CC                      int 03
:004157C0 83E908                  sub ecx, 00000008
:004157C3 E9D8F6FFFF              jmp 00414EA0
:004157C8 CC                      int 03
:004157C9 CC                      int 03
:004157CA CC                      int 03
:004157CB CC                      int 03
:004157CC CC                      int 03
:004157CD CC                      int 03
:004157CE CC                      int 03
:004157CF CC                      int 03
:004157D0 83E908                  sub ecx, 00000008
:004157D3 E9E8F2FFFF              jmp 00414AC0
:004157D8 CC                      int 03
:004157D9 CC                      int 03
:004157DA CC                      int 03
:004157DB CC                      int 03
:004157DC CC                      int 03
:004157DD CC                      int 03
:004157DE CC                      int 03
:004157DF CC                      int 03
:004157E0 83E908                  sub ecx, 00000008
:004157E3 E9B8F3FFFF              jmp 00414BA0
:004157E8 CC                      int 03
:004157E9 CC                      int 03
:004157EA CC                      int 03
:004157EB CC                      int 03
:004157EC CC                      int 03
:004157ED CC                      int 03
:004157EE CC                      int 03
:004157EF CC                      int 03
:004157F0 83E908                  sub ecx, 00000008
:004157F3 E908F5FFFF              jmp 00414D00
:004157F8 CC                      int 03
:004157F9 CC                      int 03
:004157FA CC                      int 03
:004157FB CC                      int 03
:004157FC CC                      int 03
:004157FD CC                      int 03
:004157FE CC                      int 03
:004157FF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041F7DC   , :0041F8AC   , :0041F995   
|
:00415800 6AFF                    push FFFFFFFF
:00415802 686A136D00              push 006D136A
:00415807 64A100000000            mov eax, dword ptr fs:[00000000]
:0041580D 50                      push eax
:0041580E 64892500000000          mov dword ptr fs:[00000000], esp
:00415815 83EC3C                  sub esp, 0000003C
:00415818 A128FE7200              mov eax, dword ptr [0072FE28]
:0041581D 53                      push ebx
:0041581E 56                      push esi
:0041581F 8BF1                    mov esi, ecx
:00415821 33DB                    xor ebx, ebx
:00415823 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/back/chat_bar"
                                  |
:00415824 6880BB7800              push 0078BB80
:00415829 8D4C2418                lea ecx, dword ptr [esp+18]
:0041582D 8974241C                mov dword ptr [esp+1C], esi
:00415831 895C2410                mov dword ptr [esp+10], ebx
:00415835 E876581D00              call 005EB0B0
:0041583A 8B442454                mov eax, dword ptr [esp+54]
:0041583E 8D4C2410                lea ecx, dword ptr [esp+10]
:00415842 8D542418                lea edx, dword ptr [esp+18]
:00415846 51                      push ecx
:00415847 52                      push edx
:00415848 50                      push eax
:00415849 8BCE                    mov ecx, esi
:0041584B 895C2458                mov dword ptr [esp+58], ebx
:0041584F 895C2424                mov dword ptr [esp+24], ebx
:00415853 895C2428                mov dword ptr [esp+28], ebx
:00415857 E8D4AC1E00              call 00600530
:0041585C 8B4C2410                mov ecx, dword ptr [esp+10]
:00415860 C644244C02              mov [esp+4C], 02
:00415865 8D41F4                  lea eax, dword ptr [ecx-0C]
:00415868 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0041586B 49                      dec ecx
:0041586C 8908                    mov dword ptr [eax], ecx
:0041586E 7509                    jne 00415879
:00415870 50                      push eax
:00415871 E88ABA1C00              call 005E1300
:00415876 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041586E(C)
|
:00415879 8B542460                mov edx, dword ptr [esp+60]
:0041587D 8B442464                mov eax, dword ptr [esp+64]
:00415881 8A4C2458                mov cl, byte ptr [esp+58]
:00415885 8996F6000000            mov dword ptr [esi+000000F6], edx
:0041588B 8A54245C                mov dl, byte ptr [esp+5C]
:0041588F 8986FA000000            mov dword ptr [esi+000000FA], eax
:00415895 888EFE000000            mov byte ptr [esi+000000FE], cl
:0041589B 8896FF000000            mov byte ptr [esi+000000FF], dl
:004158A1 C706A89D7000            mov dword ptr [esi], 00709DA8
:004158A7 C74608A09D7000          mov [esi+08], 00709DA0
:004158AE 8B0D88DA7900            mov ecx, dword ptr [0079DA88]
:004158B4 C744240C94DA7900        mov [esp+0C], 0079DA94
:004158BC 41                      inc ecx
:004158BD 890D88DA7900            mov dword ptr [0079DA88], ecx
:004158C3 8B8EFA000000            mov ecx, dword ptr [esi+000000FA]
:004158C9 C644244C03              mov [esp+4C], 03
:004158CE 3BCB                    cmp ecx, ebx
:004158D0 741A                    je 004158EC
:004158D2 E869601700              call 0058B940
:004158D7 85C0                    test eax, eax
:004158D9 7411                    je 004158EC
:004158DB 8B8EFA000000            mov ecx, dword ptr [esi+000000FA]
:004158E1 E85A601700              call 0058B940
:004158E6 66395838                cmp word ptr [eax+38], bx
:004158EA 7507                    jne 004158F3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004158D0(C), :004158D9(C)
|
:004158EC C686FE00000000          mov byte ptr [esi+000000FE], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004158EA(C)
|
:004158F3 8A86FE000000            mov al, byte ptr [esi+000000FE]
:004158F9 84C0                    test al, al
:004158FB 743D                    je 0041593A
:004158FD A128FE7200              mov eax, dword ptr [0072FE28]
:00415902 8D4C2458                lea ecx, dword ptr [esp+58]
:00415906 50                      push eax

* Possible StringData Ref from Data Obj ->"team"
                                  |
:00415907 6878BB7800              push 0078BB78
:0041590C E89F571D00              call 005EB0B0
:00415911 50                      push eax
:00415912 8D4C2410                lea ecx, dword ptr [esp+10]
:00415916 C644245004              mov [esp+50], 04
:0041591B E8005A1D00              call 005EB320
:00415920 8B4C2458                mov ecx, dword ptr [esp+58]
:00415924 C644244C03              mov [esp+4C], 03
:00415929 8D41F4                  lea eax, dword ptr [ecx-0C]
:0041592C 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0041592F 49                      dec ecx
:00415930 8908                    mov dword ptr [eax], ecx
:00415932 0F8586000000            jne 004159BE
:00415938 EB7B                    jmp 004159B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004158FB(C)
|
:0041593A 8A86FF000000            mov al, byte ptr [esi+000000FF]
:00415940 84C0                    test al, al
:00415942 7439                    je 0041597D
:00415944 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0041594A 8D4C2458                lea ecx, dword ptr [esp+58]
:0041594E 52                      push edx

* Possible StringData Ref from Data Obj ->"whisper"
                                  |
:0041594F 6870BB7800              push 0078BB70
:00415954 E857571D00              call 005EB0B0
:00415959 50                      push eax
:0041595A 8D4C2410                lea ecx, dword ptr [esp+10]
:0041595E C644245005              mov [esp+50], 05
:00415963 E8B8591D00              call 005EB320
:00415968 8B442458                mov eax, dword ptr [esp+58]
:0041596C C644244C03              mov [esp+4C], 03
:00415971 83C0F4                  add eax, FFFFFFF4
:00415974 8B08                    mov ecx, dword ptr [eax]
:00415976 49                      dec ecx
:00415977 8908                    mov dword ptr [eax], ecx
:00415979 7543                    jne 004159BE
:0041597B EB38                    jmp 004159B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415942(C)
|
:0041597D 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:00415983 51                      push ecx

* Possible StringData Ref from Data Obj ->"chat"
                                  |
:00415984 6868BB7800              push 0078BB68
:00415989 8D4C2460                lea ecx, dword ptr [esp+60]
:0041598D E81E571D00              call 005EB0B0
:00415992 50                      push eax
:00415993 8D4C2410                lea ecx, dword ptr [esp+10]
:00415997 C644245006              mov [esp+50], 06
:0041599C E87F591D00              call 005EB320
:004159A1 8B542458                mov edx, dword ptr [esp+58]
:004159A5 C644244C03              mov [esp+4C], 03
:004159AA 8B4AF4                  mov ecx, dword ptr [edx-0C]
:004159AD 8D42F4                  lea eax, dword ptr [edx-0C]
:004159B0 49                      dec ecx
:004159B1 8908                    mov dword ptr [eax], ecx
:004159B3 7509                    jne 004159BE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415938(U), :0041597B(U)
|
:004159B5 50                      push eax
:004159B6 E845B91C00              call 005E1300
:004159BB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415932(C), :00415979(C), :004159B3(C)
|
:004159BE 55                      push ebp
:004159BF 57                      push edi
:004159C0 680A010000              push 0000010A
:004159C5 E8B6B81C00              call 005E1280
:004159CA 8BF8                    mov edi, eax
:004159CC 83C404                  add esp, 00000004
:004159CF 897C245C                mov dword ptr [esp+5C], edi
:004159D3 3BFB                    cmp edi, ebx
:004159D5 C644245407              mov [esp+54], 07
:004159DA 0F84A1000000            je 00415A81
:004159E0 8D442414                lea eax, dword ptr [esp+14]
:004159E4 8D4C2464                lea ecx, dword ptr [esp+64]
:004159E8 50                      push eax

* Possible StringData Ref from Data Obj ->"chatWindow_"
                                  |
:004159E9 685CBB7800              push 0078BB5C
:004159EE 51                      push ecx
:004159EF E8BCEBFFFF              call 004145B0
:004159F4 83C40C                  add esp, 0000000C
:004159F7 8D542460                lea edx, dword ptr [esp+60]
:004159FB BB03000000              mov ebx, 00000003
:00415A00 50                      push eax
:00415A01 52                      push edx
:00415A02 B9B0AF7A00              mov ecx, 007AAFB0
:00415A07 C644245C08              mov [esp+5C], 08
:00415A0C 895C2418                mov dword ptr [esp+18], ebx
:00415A10 E88B3DFFFF              call 004097A0
:00415A15 6A02                    push 00000002
:00415A17 50                      push eax
:00415A18 8D442430                lea eax, dword ptr [esp+30]
:00415A1C BD0A000000              mov ebp, 0000000A
:00415A21 50                      push eax
:00415A22 56                      push esi
:00415A23 8BCF                    mov ecx, edi
:00415A25 C744246409000000        mov [esp+64], 00000009
:00415A2D C74424380D000000        mov [esp+38], 0000000D
:00415A35 896C243C                mov dword ptr [esp+3C], ebp
:00415A39 C74424407E000000        mov [esp+40], 0000007E
:00415A41 C744244420000000        mov [esp+44], 00000020
:00415A49 E822F2FFFF              call 00414C70
:00415A4E 8B8FD4000000            mov ecx, dword ptr [edi+000000D4]
:00415A54 896C2454                mov dword ptr [esp+54], ebp
:00415A58 83C158                  add ecx, 00000058
:00415A5B C707349C7000            mov dword ptr [edi], 00709C34
:00415A61 51                      push ecx
:00415A62 8BCF                    mov ecx, edi
:00415A64 C747082C9C7000          mov [edi+08], 00709C2C
:00415A6B E8B02F1F00              call 00608A20
:00415A70 8B97D4000000            mov edx, dword ptr [edi+000000D4]
:00415A76 8BCF                    mov ecx, edi
:00415A78 8B4228                  mov eax, dword ptr [edx+28]
:00415A7B 50                      push eax
:00415A7C E8FF2F1F00              call 00608A80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004159DA(C)
|
:00415A81 F6C302                  test bl, 02
:00415A84 C74424540B000000        mov [esp+54], 0000000B
:00415A8C 741F                    je 00415AAD
:00415A8E 8B4C2460                mov ecx, dword ptr [esp+60]
:00415A92 83E3FD                  and ebx, FFFFFFFD
:00415A95 895C2410                mov dword ptr [esp+10], ebx
:00415A99 8D41F4                  lea eax, dword ptr [ecx-0C]
:00415A9C 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00415A9F 49                      dec ecx
:00415AA0 8908                    mov dword ptr [eax], ecx
:00415AA2 7509                    jne 00415AAD
:00415AA4 50                      push eax
:00415AA5 E856B81C00              call 005E1300
:00415AAA 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415A8C(C), :00415AA2(C)
|
:00415AAD F6C301                  test bl, 01
:00415AB0 C744245403000000        mov [esp+54], 00000003
:00415AB8 741B                    je 00415AD5
:00415ABA 8B542464                mov edx, dword ptr [esp+64]
:00415ABE 83E3FE                  and ebx, FFFFFFFE
:00415AC1 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00415AC4 8D42F4                  lea eax, dword ptr [edx-0C]
:00415AC7 49                      dec ecx
:00415AC8 8908                    mov dword ptr [eax], ecx
:00415ACA 7509                    jne 00415AD5
:00415ACC 50                      push eax
:00415ACD E82EB81C00              call 005E1300
:00415AD2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415AB8(C), :00415ACA(C)
|
:00415AD5 6844010000              push 00000144
:00415ADA E8A1B71C00              call 005E1280
:00415ADF 83C404                  add esp, 00000004
:00415AE2 89442464                mov dword ptr [esp+64], eax
:00415AE6 85C0                    test eax, eax
:00415AE8 C64424540D              mov [esp+54], 0D
:00415AED 747B                    je 00415B6A
:00415AEF A128FE7200              mov eax, dword ptr [0072FE28]
:00415AF4 8D4C2460                lea ecx, dword ptr [esp+60]
:00415AF8 50                      push eax
:00415AF9 6868987A00              push 007A9868
:00415AFE BF105C4100              mov edi, 00415C10
:00415B03 33ED                    xor ebp, ebp
:00415B05 E8A6551D00              call 005EB0B0
:00415B0A 83CB04                  or ebx, 00000004
:00415B0D 895C2410                mov dword ptr [esp+10], ebx
:00415B11 55                      push ebp
:00415B12 8D4C243C                lea ecx, dword ptr [esp+3C]
:00415B16 57                      push edi
:00415B17 51                      push ecx
:00415B18 8BCE                    mov ecx, esi
:00415B1A C64424600E              mov [esp+60], 0E
:00415B1F E82C030000              call 00415E50
:00415B24 83CB08                  or ebx, 00000008
:00415B27 895C2410                mov dword ptr [esp+10], ebx
:00415B2B 8B4C2464                mov ecx, dword ptr [esp+64]
:00415B2F 50                      push eax
:00415B30 8D542464                lea edx, dword ptr [esp+64]
:00415B34 8D44242C                lea eax, dword ptr [esp+2C]
:00415B38 52                      push edx
:00415B39 50                      push eax
:00415B3A 56                      push esi
:00415B3B C74424640F000000        mov [esp+64], 0000000F
:00415B43 C7442438F5000000        mov [esp+38], 000000F5
:00415B4B C744243C0D000000        mov [esp+3C], 0000000D
:00415B53 C744244011030000        mov [esp+40], 00000311
:00415B5B C744244419000000        mov [esp+44], 00000019
:00415B63 E8A87B1700              call 0058D710
:00415B68 EB02                    jmp 00415B6C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415AED(C)
|
:00415B6A 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415B68(U)
|
:00415B6C 5F                      pop edi
:00415B6D 898600010000            mov dword ptr [esi+00000100], eax
:00415B73 F6C308                  test bl, 08
:00415B76 C744245010000000        mov [esp+50], 00000010
:00415B7E 5D                      pop ebp
:00415B7F 7419                    je 00415B9A
:00415B81 8B4C2430                mov ecx, dword ptr [esp+30]
:00415B85 83E3F7                  and ebx, FFFFFFF7
:00415B88 85C9                    test ecx, ecx
:00415B8A 895C2408                mov dword ptr [esp+08], ebx
:00415B8E 740A                    je 00415B9A
:00415B90 8D542430                lea edx, dword ptr [esp+30]
:00415B94 52                      push edx
:00415B95 E886871E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415B7F(C), :00415B8E(C)
|
:00415B9A F6C304                  test bl, 04
:00415B9D C744244C03000000        mov [esp+4C], 00000003
:00415BA5 7417                    je 00415BBE
:00415BA7 8B442458                mov eax, dword ptr [esp+58]
:00415BAB 83C0F4                  add eax, FFFFFFF4
:00415BAE 8B08                    mov ecx, dword ptr [eax]
:00415BB0 49                      dec ecx
:00415BB1 8908                    mov dword ptr [eax], ecx
:00415BB3 7509                    jne 00415BBE
:00415BB5 50                      push eax
:00415BB6 E845B71C00              call 005E1300
:00415BBB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415BA5(C), :00415BB3(C)
|
:00415BBE 8B8E00010000            mov ecx, dword ptr [esi+00000100]
:00415BC4 E8B7511F00              call 0060AD80
:00415BC9 8B16                    mov edx, dword ptr [esi]
:00415BCB 6A01                    push 00000001
:00415BCD 6A00                    push 00000000
:00415BCF 8BCE                    mov ecx, esi
:00415BD1 FF9258010000            call dword ptr [edx+00000158]
:00415BD7 8BCE                    mov ecx, esi
:00415BD9 E8D26B1E00              call 005FC7B0
:00415BDE 8B44240C                mov eax, dword ptr [esp+0C]
:00415BE2 C644244C02              mov [esp+4C], 02
:00415BE7 83C0F4                  add eax, FFFFFFF4
:00415BEA 8B08                    mov ecx, dword ptr [eax]
:00415BEC 49                      dec ecx
:00415BED 8908                    mov dword ptr [eax], ecx
:00415BEF 7509                    jne 00415BFA
:00415BF1 50                      push eax
:00415BF2 E809B71C00              call 005E1300
:00415BF7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415BEF(C)
|
:00415BFA 8B4C2444                mov ecx, dword ptr [esp+44]
:00415BFE 8BC6                    mov eax, esi
:00415C00 5E                      pop esi
:00415C01 5B                      pop ebx
:00415C02 64890D00000000          mov dword ptr fs:[00000000], ecx
:00415C09 83C448                  add esp, 00000048
:00415C0C C21400                  ret 0014


:00415C0F 90                      nop
:00415C10 6AFF                    push FFFFFFFF
:00415C12 687C136D00              push 006D137C
:00415C17 64A100000000            mov eax, dword ptr fs:[00000000]
:00415C1D 50                      push eax
:00415C1E 64892500000000          mov dword ptr fs:[00000000], esp
:00415C25 51                      push ecx
:00415C26 53                      push ebx
:00415C27 8B5C2418                mov ebx, dword ptr [esp+18]
:00415C2B 55                      push ebp
:00415C2C 56                      push esi
:00415C2D 8B4314                  mov eax, dword ptr [ebx+14]
:00415C30 57                      push edi
:00415C31 85C0                    test eax, eax
:00415C33 8BF1                    mov esi, ecx
:00415C35 0F84E4000000            je 00415D1F
:00415C3B 8A86FF000000            mov al, byte ptr [esi+000000FF]
:00415C41 6633C9                  xor cx, cx
:00415C44 6633D2                  xor dx, dx
:00415C47 84C0                    test al, al
:00415C49 7417                    je 00415C62
:00415C4B 8B8EFA000000            mov ecx, dword ptr [esi+000000FA]
:00415C51 8D442410                lea eax, dword ptr [esp+10]
:00415C55 50                      push eax
:00415C56 E8E55F1700              call 0058BC40
:00415C5B 668B08                  mov cx, word ptr [eax]
:00415C5E 668B5002                mov dx, word ptr [eax+02]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415C49(C)
|
:00415C62 8B4308                  mov eax, dword ptr [ebx+08]
:00415C65 8D7B08                  lea edi, dword ptr [ebx+08]
:00415C68 8B68FC                  mov ebp, dword ptr [eax-04]
:00415C6B 85ED                    test ebp, ebp
:00415C6D 7447                    je 00415CB6
:00415C6F 8A86FE000000            mov al, byte ptr [esi+000000FE]
:00415C75 51                      push ecx
:00415C76 84C0                    test al, al
:00415C78 7421                    je 00415C9B
:00415C7A 8BC4                    mov eax, esp
:00415C7C 89642414                mov dword ptr [esp+14], esp
:00415C80 668908                  mov word ptr [eax], cx
:00415C83 66895002                mov word ptr [eax+02], dx
:00415C87 8B8EFA000000            mov ecx, dword ptr [esi+000000FA]
:00415C8D E8AE5C1700              call 0058B940
:00415C92 33C9                    xor ecx, ecx
:00415C94 668B4838                mov cx, word ptr [eax+38]
:00415C98 51                      push ecx
:00415C99 EB0F                    jmp 00415CAA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415C78(C)
|
:00415C9B 8BC4                    mov eax, esp
:00415C9D 89642414                mov dword ptr [esp+14], esp
:00415CA1 6A00                    push 00000000
:00415CA3 668908                  mov word ptr [eax], cx
:00415CA6 66895002                mov word ptr [eax+02], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415C99(U)
|
:00415CAA 8B8EF6000000            mov ecx, dword ptr [esi+000000F6]
:00415CB0 57                      push edi
:00415CB1 E86AE71500              call 00574420

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415C6D(C)
|
:00415CB6 837B1402                cmp dword ptr [ebx+14], 00000002
:00415CBA 755A                    jne 00415D16
:00415CBC 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00415CC2 8D4C2424                lea ecx, dword ptr [esp+24]
:00415CC6 52                      push edx
:00415CC7 6868987A00              push 007A9868
:00415CCC E8DF531D00              call 005EB0B0
:00415CD1 8B8E00010000            mov ecx, dword ptr [esi+00000100]
:00415CD7 8D442424                lea eax, dword ptr [esp+24]
:00415CDB 50                      push eax
:00415CDC C744242000000000        mov [esp+20], 00000000
:00415CE4 E8174F1F00              call 0060AC00
:00415CE9 8B4C2424                mov ecx, dword ptr [esp+24]
:00415CED C744241CFFFFFFFF        mov [esp+1C], FFFFFFFF
:00415CF5 8D41F4                  lea eax, dword ptr [ecx-0C]
:00415CF8 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00415CFB 49                      dec ecx
:00415CFC 8908                    mov dword ptr [eax], ecx
:00415CFE 7509                    jne 00415D09
:00415D00 50                      push eax
:00415D01 E8FAB51C00              call 005E1300
:00415D06 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415CFE(C)
|
:00415D09 8B8E00010000            mov ecx, dword ptr [esi+00000100]
:00415D0F E86C501F00              call 0060AD80
:00415D14 EB09                    jmp 00415D1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415CBA(C)
|
:00415D16 8B16                    mov edx, dword ptr [esi]
:00415D18 6A10                    push 00000010
:00415D1A 8BCE                    mov ecx, esi
:00415D1C FF5234                  call [edx+34]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415C35(C), :00415D14(U)
|
:00415D1F 8B4C2414                mov ecx, dword ptr [esp+14]
:00415D23 5F                      pop edi
:00415D24 5E                      pop esi
:00415D25 5D                      pop ebp
:00415D26 64890D00000000          mov dword ptr fs:[00000000], ecx
:00415D2D 5B                      pop ebx
:00415D2E 83C410                  add esp, 00000010
:00415D31 C20400                  ret 0004


:00415D34 90                      nop
:00415D35 90                      nop
:00415D36 90                      nop
:00415D37 90                      nop
:00415D38 90                      nop
:00415D39 90                      nop
:00415D3A 90                      nop
:00415D3B 90                      nop
:00415D3C 90                      nop
:00415D3D 90                      nop
:00415D3E 90                      nop
:00415D3F 90                      nop
:00415D40 56                      push esi
:00415D41 8BF1                    mov esi, ecx
:00415D43 8B4C2408                mov ecx, dword ptr [esp+08]
:00415D47 8B06                    mov eax, dword ptr [esi]
:00415D49 51                      push ecx
:00415D4A 8BCE                    mov ecx, esi
:00415D4C FF501C                  call [eax+1C]
:00415D4F 84C0                    test al, al
:00415D51 750F                    jne 00415D62
:00415D53 8B16                    mov edx, dword ptr [esi]
:00415D55 6A10                    push 00000010
:00415D57 8BCE                    mov ecx, esi
:00415D59 FF5234                  call [edx+34]
:00415D5C 32C0                    xor al, al
:00415D5E 5E                      pop esi
:00415D5F C20C00                  ret 000C



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415D51(C)
|
:00415D62 B001                    mov al, 01
:00415D64 5E                      pop esi
:00415D65 C20C00                  ret 000C


:00415D68 90                      nop
:00415D69 90                      nop
:00415D6A 90                      nop
:00415D6B 90                      nop
:00415D6C 90                      nop
:00415D6D 90                      nop
:00415D6E 90                      nop
:00415D6F 90                      nop
:00415D70 E90B000000              jmp 00415D80
:00415D75 90                      nop
:00415D76 90                      nop
:00415D77 90                      nop
:00415D78 90                      nop
:00415D79 90                      nop
:00415D7A 90                      nop
:00415D7B 90                      nop
:00415D7C 90                      nop
:00415D7D 90                      nop
:00415D7E 90                      nop
:00415D7F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415D70(U)
|
:00415D80 D90560837000            fld dword ptr [00708360]
:00415D86 D835249C7000            fdiv dword ptr [00709C24]
:00415D8C D91D1C997A00            fstp dword ptr [007A991C]
:00415D92 C3                      ret


:00415D93 90                      nop
:00415D94 90                      nop
:00415D95 90                      nop
:00415D96 90                      nop
:00415D97 90                      nop
:00415D98 90                      nop
:00415D99 90                      nop
:00415D9A 90                      nop
:00415D9B 90                      nop
:00415D9C 90                      nop
:00415D9D 90                      nop
:00415D9E 90                      nop
:00415D9F 90                      nop
:00415DA0 8A0DA8D47A00            mov cl, byte ptr [007AD4A8]
:00415DA6 B001                    mov al, 01
:00415DA8 84C8                    test al, cl
:00415DAA 7508                    jne 00415DB4
:00415DAC 0AC8                    or cl, al
:00415DAE 880DA8D47A00            mov byte ptr [007AD4A8], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415DAA(C)
|
:00415DB4 E907000000              jmp 00415DC0
:00415DB9 90                      nop
:00415DBA 90                      nop
:00415DBB 90                      nop
:00415DBC 90                      nop
:00415DBD 90                      nop
:00415DBE 90                      nop
:00415DBF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415DB4(U)
|
:00415DC0 6880104000              push 00401080
:00415DC5 E893862A00              call 006BE45D
:00415DCA 59                      pop ecx
:00415DCB C3                      ret


:00415DCC 90                      nop
:00415DCD 90                      nop
:00415DCE 90                      nop
:00415DCF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415F23(U)
|
:00415DD0 56                      push esi
:00415DD1 8BF1                    mov esi, ecx
:00415DD3 E818000000              call 00415DF0
:00415DD8 F644240801              test [esp+08], 01
:00415DDD 7409                    je 00415DE8
:00415DDF 56                      push esi
:00415DE0 E81BB51C00              call 005E1300
:00415DE5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415DDD(C)
|
:00415DE8 8BC6                    mov eax, esi
:00415DEA 5E                      pop esi
:00415DEB C20400                  ret 0004


:00415DEE 90                      nop
:00415DEF 90                      nop

* Referenced by a CALL at Address:
|:00415DD3   
|
:00415DF0 6AFF                    push FFFFFFFF
:00415DF2 6898136D00              push 006D1398
:00415DF7 64A100000000            mov eax, dword ptr fs:[00000000]
:00415DFD 50                      push eax
:00415DFE 64892500000000          mov dword ptr fs:[00000000], esp
:00415E05 51                      push ecx
:00415E06 56                      push esi
:00415E07 8BF1                    mov esi, ecx
:00415E09 89742404                mov dword ptr [esp+04], esi
:00415E0D 8B86F2000000            mov eax, dword ptr [esi+000000F2]
:00415E13 C744241000000000        mov [esp+10], 00000000
:00415E1B 83E80C                  sub eax, 0000000C
:00415E1E 8B08                    mov ecx, dword ptr [eax]
:00415E20 49                      dec ecx
:00415E21 8908                    mov dword ptr [eax], ecx
:00415E23 7509                    jne 00415E2E
:00415E25 50                      push eax
:00415E26 E8D5B41C00              call 005E1300
:00415E2B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415E23(C)
|
:00415E2E 8BCE                    mov ecx, esi
:00415E30 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00415E38 E8A36B1E00              call 005FC9E0
:00415E3D 8B4C2408                mov ecx, dword ptr [esp+08]
:00415E41 5E                      pop esi
:00415E42 64890D00000000          mov dword ptr fs:[00000000], ecx
:00415E49 83C410                  add esp, 00000010
:00415E4C C3                      ret


:00415E4D 90                      nop
:00415E4E 90                      nop
:00415E4F 90                      nop

* Referenced by a CALL at Address:
|:00415B1F   
|
:00415E50 51                      push ecx
:00415E51 8B44240C                mov eax, dword ptr [esp+0C]
:00415E55 53                      push ebx
:00415E56 56                      push esi
:00415E57 57                      push edi
:00415E58 83EC10                  sub esp, 00000010
:00415E5B 33D2                    xor edx, edx
:00415E5D 8BDC                    mov ebx, esp
:00415E5F 33F6                    xor esi, esi
:00415E61 33FF                    xor edi, edi
:00415E63 8903                    mov dword ptr [ebx], eax
:00415E65 897C241C                mov dword ptr [esp+1C], edi
:00415E69 895304                  mov dword ptr [ebx+04], edx
:00415E6C 897308                  mov dword ptr [ebx+08], esi
:00415E6F 8B742424                mov esi, dword ptr [esp+24]
:00415E73 56                      push esi
:00415E74 897B0C                  mov dword ptr [ebx+0C], edi
:00415E77 E8E4D7FEFF              call 00403660
:00415E7C 8BC6                    mov eax, esi
:00415E7E 5F                      pop edi
:00415E7F 5E                      pop esi
:00415E80 5B                      pop ebx
:00415E81 59                      pop ecx
:00415E82 C20C00                  ret 000C


:00415E85 90                      nop
:00415E86 90                      nop
:00415E87 90                      nop
:00415E88 90                      nop
:00415E89 90                      nop
:00415E8A 90                      nop
:00415E8B 90                      nop
:00415E8C 90                      nop
:00415E8D 90                      nop
:00415E8E 90                      nop
:00415E8F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415F13(U)
|
:00415E90 56                      push esi
:00415E91 8BF1                    mov esi, ecx
:00415E93 E818000000              call 00415EB0
:00415E98 F644240801              test [esp+08], 01
:00415E9D 7409                    je 00415EA8
:00415E9F 56                      push esi
:00415EA0 E85BB41C00              call 005E1300
:00415EA5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415E9D(C)
|
:00415EA8 8BC6                    mov eax, esi
:00415EAA 5E                      pop esi
:00415EAB C20400                  ret 0004


:00415EAE 90                      nop
:00415EAF 90                      nop

* Referenced by a CALL at Address:
|:00415E93   
|
:00415EB0 6AFF                    push FFFFFFFF
:00415EB2 68B8136D00              push 006D13B8
:00415EB7 64A100000000            mov eax, dword ptr fs:[00000000]
:00415EBD 50                      push eax
:00415EBE 64892500000000          mov dword ptr fs:[00000000], esp
:00415EC5 51                      push ecx
:00415EC6 56                      push esi
:00415EC7 8BF1                    mov esi, ecx
:00415EC9 89742404                mov dword ptr [esp+04], esi
:00415ECD 8B8EF2000000            mov ecx, dword ptr [esi+000000F2]
:00415ED3 C744241000000000        mov [esp+10], 00000000
:00415EDB 85C9                    test ecx, ecx
:00415EDD 7405                    je 00415EE4
:00415EDF 8B01                    mov eax, dword ptr [ecx]
:00415EE1 FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415EDD(C)
|
:00415EE4 8BCE                    mov ecx, esi
:00415EE6 C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00415EEE E8ED6A1E00              call 005FC9E0
:00415EF3 8B4C2408                mov ecx, dword ptr [esp+08]
:00415EF7 5E                      pop esi
:00415EF8 64890D00000000          mov dword ptr fs:[00000000], ecx
:00415EFF 83C410                  add esp, 00000010
:00415F02 C3                      ret


:00415F03 90                      nop
:00415F04 90                      nop
:00415F05 90                      nop
:00415F06 90                      nop
:00415F07 90                      nop
:00415F08 90                      nop
:00415F09 90                      nop
:00415F0A 90                      nop
:00415F0B 90                      nop
:00415F0C 90                      nop
:00415F0D 90                      nop
:00415F0E 90                      nop
:00415F0F 90                      nop
:00415F10 83E908                  sub ecx, 00000008
:00415F13 E978FFFFFF              jmp 00415E90
:00415F18 CC                      int 03
:00415F19 CC                      int 03
:00415F1A CC                      int 03
:00415F1B CC                      int 03
:00415F1C CC                      int 03
:00415F1D CC                      int 03
:00415F1E CC                      int 03
:00415F1F CC                      int 03
:00415F20 83E908                  sub ecx, 00000008
:00415F23 E9A8FEFFFF              jmp 00415DD0
:00415F28 CC                      int 03
:00415F29 CC                      int 03
:00415F2A CC                      int 03
:00415F2B CC                      int 03
:00415F2C CC                      int 03
:00415F2D CC                      int 03
:00415F2E CC                      int 03
:00415F2F CC                      int 03

* Referenced by a CALL at Address:
|:0041D02A   
|
:00415F30 6AFF                    push FFFFFFFF
:00415F32 68F8166D00              push 006D16F8
:00415F37 64A100000000            mov eax, dword ptr fs:[00000000]
:00415F3D 50                      push eax
:00415F3E 64892500000000          mov dword ptr fs:[00000000], esp
:00415F45 83EC54                  sub esp, 00000054
:00415F48 53                      push ebx
:00415F49 55                      push ebp
:00415F4A 56                      push esi
:00415F4B 8BF1                    mov esi, ecx
:00415F4D 33DB                    xor ebx, ebx
:00415F4F 57                      push edi
:00415F50 89742428                mov dword ptr [esp+28], esi
:00415F54 33ED                    xor ebp, ebp
:00415F56 895C2410                mov dword ptr [esp+10], ebx
:00415F5A E831D6FEFF              call 00403590
:00415F5F 896C246C                mov dword ptr [esp+6C], ebp
:00415F63 896E0C                  mov dword ptr [esi+0C], ebp
:00415F66 896E10                  mov dword ptr [esi+10], ebp
:00415F69 896E14                  mov dword ptr [esi+14], ebp
:00415F6C 896E18                  mov dword ptr [esi+18], ebp
:00415F6F 896E1C                  mov dword ptr [esi+1C], ebp
:00415F72 C7460878877000          mov [esi+08], 00708778
:00415F79 8B3D88DA7900            mov edi, dword ptr [0079DA88]
:00415F7F B894DA7900              mov eax, 0079DA94
:00415F84 47                      inc edi
:00415F85 893D88DA7900            mov dword ptr [0079DA88], edi
:00415F8B 894624                  mov dword ptr [esi+24], eax
:00415F8E 8B1588DA7900            mov edx, dword ptr [0079DA88]
:00415F94 42                      inc edx
:00415F95 891588DA7900            mov dword ptr [0079DA88], edx
:00415F9B 894628                  mov dword ptr [esi+28], eax
:00415F9E 8B0D88DA7900            mov ecx, dword ptr [0079DA88]
:00415FA4 41                      inc ecx
:00415FA5 890D88DA7900            mov dword ptr [0079DA88], ecx
:00415FAB 89462C                  mov dword ptr [esi+2C], eax
:00415FAE 8D4E37                  lea ecx, dword ptr [esi+37]
:00415FB1 C644246C04              mov [esp+6C], 04
:00415FB6 E805D7FEFF              call 004036C0
:00415FBB 8D4E4B                  lea ecx, dword ptr [esi+4B]
:00415FBE C644246C05              mov [esp+6C], 05
:00415FC3 E8F8D6FEFF              call 004036C0
:00415FC8 8D4E5F                  lea ecx, dword ptr [esi+5F]
:00415FCB C644246C06              mov [esp+6C], 06
:00415FD0 E8EBD6FEFF              call 004036C0
:00415FD5 8D4E73                  lea ecx, dword ptr [esi+73]
:00415FD8 C644246C07              mov [esp+6C], 07
:00415FDD E8DED6FEFF              call 004036C0
:00415FE2 8D8E87000000            lea ecx, dword ptr [esi+00000087]
:00415FE8 C644246C08              mov [esp+6C], 08
:00415FED E8CED6FEFF              call 004036C0
:00415FF2 8D8E9B000000            lea ecx, dword ptr [esi+0000009B]
:00415FF8 C644246C09              mov [esp+6C], 09
:00415FFD E8BED6FEFF              call 004036C0
:00416002 89AEE8000000            mov dword ptr [esi+000000E8], ebp
:00416008 89AEEC000000            mov dword ptr [esi+000000EC], ebp
:0041600E 8BCE                    mov ecx, esi
:00416010 C644246C0A              mov [esp+6C], 0A
:00416015 C7060C867000            mov dword ptr [esi], 0070860C
:0041601B C7460804867000          mov [esi+08], 00708604
:00416022 E809691E00              call 005FC930
:00416027 8B4C2474                mov ecx, dword ptr [esp+74]
:0041602B 3BCD                    cmp ecx, ebp
:0041602D 7407                    je 00416036
:0041602F 8B01                    mov eax, dword ptr [ecx]
:00416031 55                      push ebp
:00416032 56                      push esi
:00416033 FF503C                  call [eax+3C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041602D(C)
|
:00416036 C744246C0B000000        mov [esp+6C], 0000000B
:0041603E 89AEF2000000            mov dword ptr [esi+000000F2], ebp
:00416044 89AEF6000000            mov dword ptr [esi+000000F6], ebp
:0041604A 8B4C247C                mov ecx, dword ptr [esp+7C]
:0041604E 8B542478                mov edx, dword ptr [esp+78]
:00416052 898E0F010000            mov dword ptr [esi+0000010F], ecx
:00416058 899613010000            mov dword ptr [esi+00000113], edx
:0041605E C70694A07000            mov dword ptr [esi], 0070A094
:00416064 C746088CA07000          mov [esi+08], 0070A08C
:0041606B A128FE7200              mov eax, dword ptr [0072FE28]
:00416070 8D4C2474                lea ecx, dword ptr [esp+74]
:00416074 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/back/end_turn"
                                  |
:00416075 68D4BC7800              push 0078BCD4
:0041607A C64424740D              mov [esp+74], 0D
:0041607F E82C501D00              call 005EB0B0
:00416084 8D4C2474                lea ecx, dword ptr [esp+74]
:00416088 55                      push ebp
:00416089 51                      push ecx
:0041608A B928B57A00              mov ecx, 007AB528
:0041608F C64424740E              mov [esp+74], 0E
:00416094 E807391D00              call 005E99A0
:00416099 8B8EF2000000            mov ecx, dword ptr [esi+000000F2]
:0041609F 8986F2000000            mov dword ptr [esi+000000F2], eax
:004160A5 3BCD                    cmp ecx, ebp
:004160A7 7405                    je 004160AE
:004160A9 8B11                    mov edx, dword ptr [ecx]
:004160AB FF5204                  call [edx+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004160A7(C)
|
:004160AE 8B442474                mov eax, dword ptr [esp+74]
:004160B2 C644246C0D              mov [esp+6C], 0D
:004160B7 83C0F4                  add eax, FFFFFFF4
:004160BA 8B08                    mov ecx, dword ptr [eax]
:004160BC 49                      dec ecx
:004160BD 8908                    mov dword ptr [eax], ecx
:004160BF 7509                    jne 004160CA
:004160C1 50                      push eax
:004160C2 E839B21C00              call 005E1300
:004160C7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004160BF(C)
|
:004160CA 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:004160D0 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/back/other_turn"
                                  |
:004160D1 68C0BC7800              push 0078BCC0
:004160D6 8D4C247C                lea ecx, dword ptr [esp+7C]
:004160DA E8D14F1D00              call 005EB0B0
:004160DF 8D542474                lea edx, dword ptr [esp+74]
:004160E3 55                      push ebp
:004160E4 52                      push edx
:004160E5 B928B57A00              mov ecx, 007AB528
:004160EA C64424740F              mov [esp+74], 0F
:004160EF E8AC381D00              call 005E99A0
:004160F4 8B8EF6000000            mov ecx, dword ptr [esi+000000F6]
:004160FA 8986F6000000            mov dword ptr [esi+000000F6], eax
:00416100 3BCD                    cmp ecx, ebp
:00416102 7405                    je 00416109
:00416104 8B01                    mov eax, dword ptr [ecx]
:00416106 FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416102(C)
|
:00416109 8B4C2474                mov ecx, dword ptr [esp+74]
:0041610D C644246C0D              mov [esp+6C], 0D
:00416112 8D41F4                  lea eax, dword ptr [ecx-0C]
:00416115 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00416118 49                      dec ecx
:00416119 8908                    mov dword ptr [eax], ecx
:0041611B 7509                    jne 00416126
:0041611D 50                      push eax
:0041611E E8DDB11C00              call 005E1300
:00416123 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041611B(C)
|
:00416126 8B86F2000000            mov eax, dword ptr [esi+000000F2]
:0041612C 3BC5                    cmp eax, ebp
:0041612E 741A                    je 0041614A
:00416130 8B5008                  mov edx, dword ptr [eax+08]
:00416133 8D4C242C                lea ecx, dword ptr [esp+2C]
:00416137 8954242C                mov dword ptr [esp+2C], edx
:0041613B 8B400C                  mov eax, dword ptr [eax+0C]
:0041613E 51                      push ecx
:0041613F 8BCE                    mov ecx, esi
:00416141 89442434                mov dword ptr [esp+34], eax
:00416145 E8966D1E00              call 005FCEE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041612E(C)
|
:0041614A 680A010000              push 0000010A
:0041614F E82CB11C00              call 005E1280
:00416154 8BF8                    mov edi, eax
:00416156 83C404                  add esp, 00000004
:00416159 897C2424                mov dword ptr [esp+24], edi
:0041615D 3BFD                    cmp edi, ebp
:0041615F C644246C10              mov [esp+6C], 10
:00416164 0F84CE000000            je 00416238
:0041616A 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00416170 8D4C2474                lea ecx, dword ptr [esp+74]
:00416174 52                      push edx

* Possible StringData Ref from Data Obj ->"misc_yourturn"
                                  |
:00416175 68B0BC7800              push 0078BCB0
:0041617A E8314F1D00              call 005EB0B0
:0041617F 8D442474                lea eax, dword ptr [esp+74]
:00416183 8D4C2478                lea ecx, dword ptr [esp+78]
:00416187 50                      push eax
:00416188 51                      push ecx
:00416189 B9B0AF7A00              mov ecx, 007AAFB0
:0041618E C644247411              mov [esp+74], 11
:00416193 C744241803000000        mov [esp+18], 00000003
:0041619B E80036FFFF              call 004097A0

* Possible StringData Ref from Data Obj ->":"
                                  |
:004161A0 68ACBC7800              push 0078BCAC
:004161A5 8D942480000000          lea edx, dword ptr [esp+00000080]
:004161AC BB07000000              mov ebx, 00000007
:004161B1 50                      push eax
:004161B2 52                      push edx
:004161B3 C744247812000000        mov [esp+78], 00000012
:004161BB 895C241C                mov dword ptr [esp+1C], ebx
:004161BF E8FC00FFFF              call 004062C0
:004161C4 83C40C                  add esp, 0000000C
:004161C7 6A02                    push 00000002
:004161C9 50                      push eax
:004161CA 8D442448                lea eax, dword ptr [esp+48]
:004161CE 8BCF                    mov ecx, edi
:004161D0 50                      push eax
:004161D1 56                      push esi
:004161D2 C744247C13000000        mov [esp+7C], 00000013
:004161DA C74424500B000000        mov [esp+50], 0000000B
:004161E2 C744245405000000        mov [esp+54], 00000005
:004161EA C744245870000000        mov [esp+58], 00000070
:004161F2 C744245C10000000        mov [esp+5C], 00000010
:004161FA E881231F00              call 00608580
:004161FF 8B8FD4000000            mov ecx, dword ptr [edi+000000D4]
:00416205 C744246C14000000        mov [esp+6C], 00000014
:0041620D 83C164                  add ecx, 00000064
:00416210 C70758967000            mov dword ptr [edi], 00709658
:00416216 51                      push ecx
:00416217 8BCF                    mov ecx, edi
:00416219 C7470850967000          mov [edi+08], 00709650
:00416220 E8FB271F00              call 00608A20
:00416225 8B97D4000000            mov edx, dword ptr [edi+000000D4]
:0041622B 8BCF                    mov ecx, edi
:0041622D 8B4218                  mov eax, dword ptr [edx+18]
:00416230 50                      push eax
:00416231 E84A281F00              call 00608A80
:00416236 EB02                    jmp 0041623A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416164(C)
|
:00416238 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416236(U)
|
:0041623A F6C304                  test bl, 04
:0041623D 89BE02010000            mov dword ptr [esi+00000102], edi
:00416243 C744246C16000000        mov [esp+6C], 00000016
:0041624B 741F                    je 0041626C
:0041624D 8B4C247C                mov ecx, dword ptr [esp+7C]
:00416251 83E3FB                  and ebx, FFFFFFFB
:00416254 895C2410                mov dword ptr [esp+10], ebx
:00416258 8D41F4                  lea eax, dword ptr [ecx-0C]
:0041625B 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0041625E 49                      dec ecx
:0041625F 8908                    mov dword ptr [eax], ecx
:00416261 7509                    jne 0041626C
:00416263 50                      push eax
:00416264 E897B01C00              call 005E1300
:00416269 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041624B(C), :00416261(C)
|
:0041626C F6C302                  test bl, 02
:0041626F C744246C15000000        mov [esp+6C], 00000015
:00416277 741F                    je 00416298
:00416279 8B542478                mov edx, dword ptr [esp+78]
:0041627D 83E3FD                  and ebx, FFFFFFFD
:00416280 895C2410                mov dword ptr [esp+10], ebx
:00416284 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00416287 8D42F4                  lea eax, dword ptr [edx-0C]
:0041628A 49                      dec ecx
:0041628B 8908                    mov dword ptr [eax], ecx
:0041628D 7509                    jne 00416298
:0041628F 50                      push eax
:00416290 E86BB01C00              call 005E1300
:00416295 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416277(C), :0041628D(C)
|
:00416298 F6C301                  test bl, 01
:0041629B C744246C0D000000        mov [esp+6C], 0000000D
:004162A3 741A                    je 004162BF
:004162A5 8B442474                mov eax, dword ptr [esp+74]
:004162A9 83E3FE                  and ebx, FFFFFFFE
:004162AC 83C0F4                  add eax, FFFFFFF4
:004162AF 8B08                    mov ecx, dword ptr [eax]
:004162B1 49                      dec ecx
:004162B2 8908                    mov dword ptr [eax], ecx
:004162B4 7509                    jne 004162BF
:004162B6 50                      push eax
:004162B7 E844B01C00              call 005E1300
:004162BC 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004162A3(C), :004162B4(C)
|
:004162BF 8B86D4000000            mov eax, dword ptr [esi+000000D4]
:004162C5 8D4C2434                lea ecx, dword ptr [esp+34]
:004162C9 83C04C                  add eax, 0000004C
:004162CC 51                      push ecx
:004162CD 8B8E02010000            mov ecx, dword ptr [esi+00000102]
:004162D3 D94008                  fld dword ptr [eax+08]
:004162D6 DCC0                    fadd st(0), st(0)
:004162D8 D94004                  fld dword ptr [eax+04]
:004162DB DCC0                    fadd st(0), st(0)
:004162DD D900                    fld dword ptr [eax]
:004162DF DCC0                    fadd st(0), st(0)
:004162E1 D95C2438                fstp dword ptr [esp+38]
:004162E5 D95C243C                fstp dword ptr [esp+3C]
:004162E9 D95C2440                fstp dword ptr [esp+40]
:004162ED E82E271F00              call 00608A20
:004162F2 8B86D4000000            mov eax, dword ptr [esi+000000D4]
:004162F8 8B8E02010000            mov ecx, dword ptr [esi+00000102]
:004162FE 8B4024                  mov eax, dword ptr [eax+24]
:00416301 8B11                    mov edx, dword ptr [ecx]
:00416303 50                      push eax
:00416304 FF92A4000000            call dword ptr [edx+000000A4]
:0041630A 680A010000              push 0000010A
:0041630F E86CAF1C00              call 005E1280
:00416314 8BF8                    mov edi, eax
:00416316 83C404                  add esp, 00000004
:00416319 897C247C                mov dword ptr [esp+7C], edi
:0041631D 3BFD                    cmp edi, ebp
:0041631F C644246C18              mov [esp+6C], 18
:00416324 0F848E000000            je 004163B8
:0041632A 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:00416330 51                      push ecx
:00416331 6868987A00              push 007A9868
:00416336 8D4C247C                lea ecx, dword ptr [esp+7C]
:0041633A E8714D1D00              call 005EB0B0
:0041633F 83CB08                  or ebx, 00000008
:00416342 895C2410                mov dword ptr [esp+10], ebx
:00416346 8D542474                lea edx, dword ptr [esp+74]
:0041634A 6A02                    push 00000002
:0041634C 8D442444                lea eax, dword ptr [esp+44]
:00416350 52                      push edx
:00416351 50                      push eax
:00416352 56                      push esi
:00416353 8BCF                    mov ecx, edi
:00416355 C644247C19              mov [esp+7C], 19
:0041635A C74424500B000000        mov [esp+50], 0000000B
:00416362 C744245405000000        mov [esp+54], 00000005
:0041636A C744245870000000        mov [esp+58], 00000070
:00416372 C744245C10000000        mov [esp+5C], 00000010
:0041637A E801221F00              call 00608580
:0041637F 8B8FD4000000            mov ecx, dword ptr [edi+000000D4]
:00416385 C744246C1A000000        mov [esp+6C], 0000001A
:0041638D 83C164                  add ecx, 00000064
:00416390 C70758967000            mov dword ptr [edi], 00709658
:00416396 51                      push ecx
:00416397 8BCF                    mov ecx, edi
:00416399 C7470850967000          mov [edi+08], 00709650
:004163A0 E87B261F00              call 00608A20
:004163A5 8B97D4000000            mov edx, dword ptr [edi+000000D4]
:004163AB 8BCF                    mov ecx, edi
:004163AD 8B4218                  mov eax, dword ptr [edx+18]
:004163B0 50                      push eax
:004163B1 E8CA261F00              call 00608A80
:004163B6 EB02                    jmp 004163BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416324(C)
|
:004163B8 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004163B6(U)
|
:004163BA F6C308                  test bl, 08
:004163BD 89BE06010000            mov dword ptr [esi+00000106], edi
:004163C3 C744246C0D000000        mov [esp+6C], 0000000D
:004163CB 741B                    je 004163E8
:004163CD 8B4C2474                mov ecx, dword ptr [esp+74]
:004163D1 83E3F7                  and ebx, FFFFFFF7
:004163D4 8D41F4                  lea eax, dword ptr [ecx-0C]
:004163D7 8B49F4                  mov ecx, dword ptr [ecx-0C]
:004163DA 49                      dec ecx
:004163DB 8908                    mov dword ptr [eax], ecx
:004163DD 7509                    jne 004163E8
:004163DF 50                      push eax
:004163E0 E81BAF1C00              call 005E1300
:004163E5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004163CB(C), :004163DD(C)
|
:004163E8 8B86D4000000            mov eax, dword ptr [esi+000000D4]
:004163EE 8B8E06010000            mov ecx, dword ptr [esi+00000106]
:004163F4 83C04C                  add eax, 0000004C
:004163F7 8D542434                lea edx, dword ptr [esp+34]
:004163FB 52                      push edx
:004163FC D94008                  fld dword ptr [eax+08]
:004163FF DCC0                    fadd st(0), st(0)
:00416401 D94004                  fld dword ptr [eax+04]
:00416404 DCC0                    fadd st(0), st(0)
:00416406 D900                    fld dword ptr [eax]
:00416408 DCC0                    fadd st(0), st(0)
:0041640A D95C2438                fstp dword ptr [esp+38]
:0041640E D95C243C                fstp dword ptr [esp+3C]
:00416412 D95C2440                fstp dword ptr [esp+40]
:00416416 E805261F00              call 00608A20
:0041641B 8B96D4000000            mov edx, dword ptr [esi+000000D4]
:00416421 8B8E06010000            mov ecx, dword ptr [esi+00000106]
:00416427 8B5224                  mov edx, dword ptr [edx+24]
:0041642A 8B01                    mov eax, dword ptr [ecx]
:0041642C 52                      push edx
:0041642D FF90A4000000            call dword ptr [eax+000000A4]
:00416433 680A010000              push 0000010A
:00416438 E843AE1C00              call 005E1280
:0041643D 8BF8                    mov edi, eax
:0041643F 83C404                  add esp, 00000004
:00416442 897C247C                mov dword ptr [esp+7C], edi
:00416446 85FF                    test edi, edi
:00416448 C644246C1C              mov [esp+6C], 1C
:0041644D BD23000000              mov ebp, 00000023
:00416452 0F8489000000            je 004164E1
:00416458 A128FE7200              mov eax, dword ptr [0072FE28]
:0041645D 8D4C2474                lea ecx, dword ptr [esp+74]
:00416461 50                      push eax
:00416462 6868987A00              push 007A9868
:00416467 E8444C1D00              call 005EB0B0
:0041646C 83CB10                  or ebx, 00000010
:0041646F 895C2410                mov dword ptr [esp+10], ebx
:00416473 8D4C2474                lea ecx, dword ptr [esp+74]
:00416477 6A00                    push 00000000
:00416479 8D542444                lea edx, dword ptr [esp+44]
:0041647D 51                      push ecx
:0041647E B81D000000              mov eax, 0000001D
:00416483 52                      push edx
:00416484 56                      push esi
:00416485 8BCF                    mov ecx, edi
:00416487 8844247C                mov byte ptr [esp+7C], al
:0041648B C744245007000000        mov [esp+50], 00000007
:00416493 89442454                mov dword ptr [esp+54], eax
:00416497 896C2458                mov dword ptr [esp+58], ebp
:0041649B C744245C27000000        mov [esp+5C], 00000027
:004164A3 E8D8201F00              call 00608580
:004164A8 8B87D4000000            mov eax, dword ptr [edi+000000D4]
:004164AE 8BCF                    mov ecx, edi
:004164B0 83C064                  add eax, 00000064
:004164B3 C744246C1E000000        mov [esp+6C], 0000001E
:004164BB 50                      push eax
:004164BC C70758967000            mov dword ptr [edi], 00709658
:004164C2 C7470850967000          mov [edi+08], 00709650
:004164C9 E852251F00              call 00608A20
:004164CE 8B8FD4000000            mov ecx, dword ptr [edi+000000D4]
:004164D4 8B5118                  mov edx, dword ptr [ecx+18]
:004164D7 8BCF                    mov ecx, edi
:004164D9 52                      push edx
:004164DA E8A1251F00              call 00608A80
:004164DF EB02                    jmp 004164E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416452(C)
|
:004164E1 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004164DF(U)
|
:004164E3 F6C310                  test bl, 10
:004164E6 89BE0A010000            mov dword ptr [esi+0000010A], edi
:004164EC C744246C0D000000        mov [esp+6C], 0000000D
:004164F4 741A                    je 00416510
:004164F6 8B442474                mov eax, dword ptr [esp+74]
:004164FA 83E3EF                  and ebx, FFFFFFEF
:004164FD 83C0F4                  add eax, FFFFFFF4
:00416500 8B08                    mov ecx, dword ptr [eax]
:00416502 49                      dec ecx
:00416503 8908                    mov dword ptr [eax], ecx
:00416505 7509                    jne 00416510
:00416507 50                      push eax
:00416508 E8F3AD1C00              call 005E1300
:0041650D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004164F4(C), :00416505(C)
|
:00416510 6837010000              push 00000137
:00416515 E866AD1C00              call 005E1280
:0041651A 8BF8                    mov edi, eax
:0041651C 83C404                  add esp, 00000004
:0041651F 897C242C                mov dword ptr [esp+2C], edi
:00416523 85FF                    test edi, edi
:00416525 C644246C20              mov [esp+6C], 20
:0041652A 0F84B2010000            je 004166E2
:00416530 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:00416536 51                      push ecx

* Possible StringData Ref from Data Obj ->"misc_turn"
                                  |
:00416537 68A0BC7800              push 0078BCA0
:0041653C 8D4C241C                lea ecx, dword ptr [esp+1C]
:00416540 E86B4B1D00              call 005EB0B0
:00416545 83CB20                  or ebx, 00000020
:00416548 895C2410                mov dword ptr [esp+10], ebx
:0041654C 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00416552 8D4C2478                lea ecx, dword ptr [esp+78]
:00416556 52                      push edx

* Possible StringData Ref from Data Obj ->"misc_end"
                                  |
:00416557 6894BC7800              push 0078BC94
:0041655C C644247421              mov [esp+74], 21
:00416561 E84A4B1D00              call 005EB0B0
:00416566 83CB40                  or ebx, 00000040
:00416569 895C2410                mov dword ptr [esp+10], ebx
:0041656D A128FE7200              mov eax, dword ptr [0072FE28]
:00416572 8D4C247C                lea ecx, dword ptr [esp+7C]
:00416576 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/endtrn_dn"
                                  |
:00416577 6880BC7800              push 0078BC80
:0041657C C744247422000000        mov [esp+74], 00000022
:00416584 E8274B1D00              call 005EB0B0
:00416589 80CB80                  or bl, 80
:0041658C 895C2410                mov dword ptr [esp+10], ebx
:00416590 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:00416596 896C246C                mov dword ptr [esp+6C], ebp
:0041659A 51                      push ecx

* Possible StringData Ref from Data Obj ->"gui/btn/endtrn_up"
                                  |
:0041659B 686CBC7800              push 0078BC6C
:004165A0 8D4C247C                lea ecx, dword ptr [esp+7C]
:004165A4 E8074B1D00              call 005EB0B0
:004165A9 80CF01                  or bh, 01
:004165AC 895C2410                mov dword ptr [esp+10], ebx
:004165B0 8D542414                lea edx, dword ptr [esp+14]
:004165B4 8D442424                lea eax, dword ptr [esp+24]
:004165B8 52                      push edx
:004165B9 50                      push eax
:004165BA B9B0AF7A00              mov ecx, 007AAFB0
:004165BF C744247424000000        mov [esp+74], 00000024
:004165C7 BD40714100              mov ebp, 00417140
:004165CC E8CF31FFFF              call 004097A0
:004165D1 89442418                mov dword ptr [esp+18], eax
:004165D5 80CF02                  or bh, 02
:004165D8 8D4C2478                lea ecx, dword ptr [esp+78]
:004165DC 8D542420                lea edx, dword ptr [esp+20]
:004165E0 80CF04                  or bh, 04
:004165E3 51                      push ecx
:004165E4 52                      push edx
:004165E5 B9B0AF7A00              mov ecx, 007AAFB0
:004165EA C744247425000000        mov [esp+74], 00000025
:004165F2 895C2418                mov dword ptr [esp+18], ebx
:004165F6 E8A531FFFF              call 004097A0
:004165FB 8944241C                mov dword ptr [esp+1C], eax
:004165FF 33C0                    xor eax, eax
:00416601 80CF08                  or bh, 08
:00416604 50                      push eax
:00416605 8D442454                lea eax, dword ptr [esp+54]
:00416609 55                      push ebp
:0041660A 50                      push eax
:0041660B 8BCE                    mov ecx, esi
:0041660D C744247826000000        mov [esp+78], 00000026
:00416615 895C241C                mov dword ptr [esp+1C], ebx
:00416619 E8120C0000              call 00417230
:0041661E B927000000              mov ecx, 00000027
:00416623 6A00                    push 00000000
:00416625 894C2470                mov dword ptr [esp+70], ecx
:00416629 894C2438                mov dword ptr [esp+38], ecx
:0041662D 8D8C2480000000          lea ecx, dword ptr [esp+00000080]
:00416634 8D542478                lea edx, dword ptr [esp+78]
:00416638 51                      push ecx
:00416639 52                      push edx
:0041663A 50                      push eax
:0041663B 8D442444                lea eax, dword ptr [esp+44]
:0041663F 50                      push eax
:00416640 C744244C15000000        mov [esp+4C], 00000015
:00416648 56                      push esi
:00416649 8BCF                    mov ecx, edi
:0041664B E8208D1E00              call 005FF370
:00416650 A188DA7900              mov eax, dword ptr [0079DA88]
:00416655 8D8F33010000            lea ecx, dword ptr [edi+00000133]
:0041665B 40                      inc eax
:0041665C C744246C28000000        mov [esp+6C], 00000028
:00416664 A388DA7900              mov dword ptr [0079DA88], eax
:00416669 C70194DA7900            mov dword ptr [ecx], 0079DA94
:0041666F 8B542418                mov edx, dword ptr [esp+18]
:00416673 C644246C29              mov [esp+6C], 29
:00416678 52                      push edx
:00416679 C707209F7000            mov dword ptr [edi], 00709F20
:0041667F C74708189F7000          mov [edi+08], 00709F18
:00416686 E8954C1D00              call 005EB320
:0041668B 8B44241C                mov eax, dword ptr [esp+1C]
:0041668F 8BCF                    mov ecx, edi
:00416691 50                      push eax
:00416692 E809881E00              call 005FEEA0
:00416697 8B8FD4000000            mov ecx, dword ptr [edi+000000D4]
:0041669D 8B5124                  mov edx, dword ptr [ecx+24]
:004166A0 8BCF                    mov ecx, edi
:004166A2 52                      push edx
:004166A3 E8B8881E00              call 005FEF60
:004166A8 8B87D4000000            mov eax, dword ptr [edi+000000D4]
:004166AE 8BCF                    mov ecx, edi
:004166B0 83C04C                  add eax, 0000004C
:004166B3 D94008                  fld dword ptr [eax+08]
:004166B6 DCC0                    fadd st(0), st(0)
:004166B8 D94004                  fld dword ptr [eax+04]
:004166BB DCC0                    fadd st(0), st(0)
:004166BD D900                    fld dword ptr [eax]
:004166BF DCC0                    fadd st(0), st(0)
:004166C1 8D442440                lea eax, dword ptr [esp+40]
:004166C5 50                      push eax
:004166C6 D95C2444                fstp dword ptr [esp+44]
:004166CA D95C2448                fstp dword ptr [esp+48]
:004166CE D95C244C                fstp dword ptr [esp+4C]
:004166D2 E859881E00              call 005FEF30
:004166D7 6A02                    push 00000002
:004166D9 8BCF                    mov ecx, edi
:004166DB E810881E00              call 005FEEF0
:004166E0 EB02                    jmp 004166E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041652A(C)
|
:004166E2 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004166E0(U)
|
:004166E4 F6C708                  test bh, 08
:004166E7 89BEFA000000            mov dword ptr [esi+000000FA], edi
:004166ED C744246C2F000000        mov [esp+6C], 0000002F
:004166F5 7419                    je 00416710
:004166F7 8B4C2450                mov ecx, dword ptr [esp+50]
:004166FB 80E7F7                  and bh, F7
:004166FE 85C9                    test ecx, ecx
:00416700 895C2410                mov dword ptr [esp+10], ebx
:00416704 740A                    je 00416710
:00416706 8D542450                lea edx, dword ptr [esp+50]
:0041670A 52                      push edx
:0041670B E8107C1E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004166F5(C), :00416704(C)
|
:00416710 F6C704                  test bh, 04
:00416713 C744246C2E000000        mov [esp+6C], 0000002E
:0041671B 741E                    je 0041673B
:0041671D 8B442420                mov eax, dword ptr [esp+20]
:00416721 80E7FB                  and bh, FB
:00416724 83C0F4                  add eax, FFFFFFF4
:00416727 895C2410                mov dword ptr [esp+10], ebx
:0041672B 8B08                    mov ecx, dword ptr [eax]
:0041672D 49                      dec ecx
:0041672E 8908                    mov dword ptr [eax], ecx
:00416730 7509                    jne 0041673B
:00416732 50                      push eax
:00416733 E8C8AB1C00              call 005E1300
:00416738 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041671B(C), :00416730(C)
|
:0041673B F6C702                  test bh, 02
:0041673E C744246C2D000000        mov [esp+6C], 0000002D
:00416746 741F                    je 00416767
:00416748 8B4C2424                mov ecx, dword ptr [esp+24]
:0041674C 80E7FD                  and bh, FD
:0041674F 895C2410                mov dword ptr [esp+10], ebx
:00416753 8D41F4                  lea eax, dword ptr [ecx-0C]
:00416756 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00416759 49                      dec ecx
:0041675A 8908                    mov dword ptr [eax], ecx
:0041675C 7509                    jne 00416767
:0041675E 50                      push eax
:0041675F E89CAB1C00              call 005E1300
:00416764 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416746(C), :0041675C(C)
|
:00416767 F6C701                  test bh, 01
:0041676A C744246C2C000000        mov [esp+6C], 0000002C
:00416772 741F                    je 00416793
:00416774 8B542474                mov edx, dword ptr [esp+74]
:00416778 80E7FE                  and bh, FE
:0041677B 895C2410                mov dword ptr [esp+10], ebx
:0041677F 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00416782 8D42F4                  lea eax, dword ptr [edx-0C]
:00416785 49                      dec ecx
:00416786 8908                    mov dword ptr [eax], ecx
:00416788 7509                    jne 00416793
:0041678A 50                      push eax
:0041678B E870AB1C00              call 005E1300
:00416790 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416772(C), :00416788(C)
|
:00416793 F6C380                  test bl, 80
:00416796 C744246C2B000000        mov [esp+6C], 0000002B
:0041679E 741E                    je 004167BE
:004167A0 8B44247C                mov eax, dword ptr [esp+7C]
:004167A4 80E37F                  and bl, 7F
:004167A7 83C0F4                  add eax, FFFFFFF4
:004167AA 895C2410                mov dword ptr [esp+10], ebx
:004167AE 8B08                    mov ecx, dword ptr [eax]
:004167B0 49                      dec ecx
:004167B1 8908                    mov dword ptr [eax], ecx
:004167B3 7509                    jne 004167BE
:004167B5 50                      push eax
:004167B6 E845AB1C00              call 005E1300
:004167BB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041679E(C), :004167B3(C)
|
:004167BE F6C340                  test bl, 40
:004167C1 C744246C2A000000        mov [esp+6C], 0000002A
:004167C9 741F                    je 004167EA
:004167CB 8B4C2478                mov ecx, dword ptr [esp+78]
:004167CF 83E3BF                  and ebx, FFFFFFBF
:004167D2 895C2410                mov dword ptr [esp+10], ebx
:004167D6 8D41F4                  lea eax, dword ptr [ecx-0C]
:004167D9 8B49F4                  mov ecx, dword ptr [ecx-0C]
:004167DC 49                      dec ecx
:004167DD 8908                    mov dword ptr [eax], ecx
:004167DF 7509                    jne 004167EA
:004167E1 50                      push eax
:004167E2 E819AB1C00              call 005E1300
:004167E7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004167C9(C), :004167DF(C)
|
:004167EA F6C320                  test bl, 20
:004167ED C744246C0D000000        mov [esp+6C], 0000000D
:004167F5 741B                    je 00416812
:004167F7 8B542414                mov edx, dword ptr [esp+14]
:004167FB 83E3DF                  and ebx, FFFFFFDF
:004167FE 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00416801 8D42F4                  lea eax, dword ptr [edx-0C]
:00416804 49                      dec ecx
:00416805 8908                    mov dword ptr [eax], ecx
:00416807 7509                    jne 00416812
:00416809 50                      push eax
:0041680A E8F1AA1C00              call 005E1300
:0041680F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004167F5(C), :00416807(C)
|
:00416812 A128FE7200              mov eax, dword ptr [0072FE28]
:00416817 8BBEFA000000            mov edi, dword ptr [esi+000000FA]
:0041681D 50                      push eax

* Possible StringData Ref from Data Obj ->"end_turn"
                                  |
:0041681E 6860BC7800              push 0078BC60
:00416823 8D4C247C                lea ecx, dword ptr [esp+7C]
:00416827 83C728                  add edi, 00000028
:0041682A E881481D00              call 005EB0B0
:0041682F 50                      push eax
:00416830 8BCF                    mov ecx, edi
:00416832 C644247031              mov [esp+70], 31
:00416837 E8E44A1D00              call 005EB320
:0041683C 8B4C2474                mov ecx, dword ptr [esp+74]
:00416840 C644246C0D              mov [esp+6C], 0D
:00416845 8D41F4                  lea eax, dword ptr [ecx-0C]
:00416848 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0041684B 49                      dec ecx
:0041684C 8908                    mov dword ptr [eax], ecx
:0041684E 7509                    jne 00416859
:00416850 50                      push eax
:00416851 E8AAAA1C00              call 005E1300
:00416856 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041684E(C)
|
:00416859 8B1528FE7200            mov edx, dword ptr [0072FE28]
:0041685F 8BBEFA000000            mov edi, dword ptr [esi+000000FA]
:00416865 52                      push edx

* Possible StringData Ref from Data Obj ->"sound/guiButtSmallIn.wav"
                                  |
:00416866 6844BC7800              push 0078BC44
:0041686B 8D4C247C                lea ecx, dword ptr [esp+7C]
:0041686F 81C7F2000000            add edi, 000000F2
:00416875 E836481D00              call 005EB0B0
:0041687A 50                      push eax
:0041687B 8BCF                    mov ecx, edi
:0041687D C644247032              mov [esp+70], 32
:00416882 E8994A1D00              call 005EB320
:00416887 8B442474                mov eax, dword ptr [esp+74]
:0041688B C644246C0D              mov [esp+6C], 0D
:00416890 83C0F4                  add eax, FFFFFFF4
:00416893 8B08                    mov ecx, dword ptr [eax]
:00416895 49                      dec ecx
:00416896 8908                    mov dword ptr [eax], ecx
:00416898 7509                    jne 004168A3
:0041689A 50                      push eax
:0041689B E860AA1C00              call 005E1300
:004168A0 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416898(C)
|
:004168A3 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:004168A9 8BBEFA000000            mov edi, dword ptr [esi+000000FA]
:004168AF 51                      push ecx

* Possible StringData Ref from Data Obj ->"sound/guiButtSmallOut.wav"
                                  |
:004168B0 6828BC7800              push 0078BC28
:004168B5 8D4C247C                lea ecx, dword ptr [esp+7C]
:004168B9 81C7F6000000            add edi, 000000F6
:004168BF E8EC471D00              call 005EB0B0
:004168C4 50                      push eax
:004168C5 8BCF                    mov ecx, edi
:004168C7 C644247033              mov [esp+70], 33
:004168CC E84F4A1D00              call 005EB320
:004168D1 8B542474                mov edx, dword ptr [esp+74]
:004168D5 C644246C0D              mov [esp+6C], 0D
:004168DA 8B4AF4                  mov ecx, dword ptr [edx-0C]
:004168DD 8D42F4                  lea eax, dword ptr [edx-0C]
:004168E0 49                      dec ecx
:004168E1 8908                    mov dword ptr [eax], ecx
:004168E3 7509                    jne 004168EE
:004168E5 50                      push eax
:004168E6 E815AA1C00              call 005E1300
:004168EB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004168E3(C)
|
:004168EE 6837010000              push 00000137
:004168F3 E888A91C00              call 005E1280
:004168F8 8BF8                    mov edi, eax
:004168FA 83C404                  add esp, 00000004
:004168FD 897C242C                mov dword ptr [esp+2C], edi
:00416901 85FF                    test edi, edi
:00416903 C644246C34              mov [esp+6C], 34
:00416908 0F84C1010000            je 00416ACF
:0041690E A128FE7200              mov eax, dword ptr [0072FE28]
:00416913 8D4C2414                lea ecx, dword ptr [esp+14]
:00416917 50                      push eax

* Possible StringData Ref from Data Obj ->"misc_scombat"
                                  |
:00416918 6818BC7800              push 0078BC18
:0041691D E88E471D00              call 005EB0B0
:00416922 80CF10                  or bh, 10
:00416925 895C2410                mov dword ptr [esp+10], ebx
:00416929 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:0041692F C644246C35              mov [esp+6C], 35
:00416934 51                      push ecx

* Possible StringData Ref from Data Obj ->"misc_end"
                                  |
:00416935 6894BC7800              push 0078BC94
:0041693A 8D8C2480000000          lea ecx, dword ptr [esp+00000080]
:00416941 E86A471D00              call 005EB0B0
:00416946 80CF20                  or bh, 20
:00416949 895C2410                mov dword ptr [esp+10], ebx
:0041694D 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00416953 8D4C247C                lea ecx, dword ptr [esp+7C]
:00416957 52                      push edx

* Possible StringData Ref from Data Obj ->"gui/btn/endtrn_dn"
                                  |
:00416958 6880BC7800              push 0078BC80
:0041695D C744247436000000        mov [esp+74], 00000036
:00416965 E846471D00              call 005EB0B0
:0041696A 80CF40                  or bh, 40
:0041696D 895C2410                mov dword ptr [esp+10], ebx
:00416971 A128FE7200              mov eax, dword ptr [0072FE28]
:00416976 8D4C2474                lea ecx, dword ptr [esp+74]
:0041697A 50                      push eax

* Possible StringData Ref from Data Obj ->"gui/btn/endtrn_up"
                                  |
:0041697B 686CBC7800              push 0078BC6C
:00416980 C744247437000000        mov [esp+74], 00000037
:00416988 E823471D00              call 005EB0B0
:0041698D 80CF80                  or bh, 80
:00416990 895C2410                mov dword ptr [esp+10], ebx
:00416994 8D4C2414                lea ecx, dword ptr [esp+14]
:00416998 8D542418                lea edx, dword ptr [esp+18]
:0041699C 51                      push ecx
:0041699D 52                      push edx
:0041699E B9B0AF7A00              mov ecx, 007AAFB0
:004169A3 C744247438000000        mov [esp+74], 00000038
:004169AB BDE0704100              mov ebp, 004170E0
:004169B0 E8EB2DFFFF              call 004097A0
:004169B5 89442424                mov dword ptr [esp+24], eax
:004169B9 81CB00000100            or ebx, 00010000
:004169BF 8D442478                lea eax, dword ptr [esp+78]
:004169C3 8D4C241C                lea ecx, dword ptr [esp+1C]
:004169C7 50                      push eax
:004169C8 81CB00000200            or ebx, 00020000
:004169CE 51                      push ecx
:004169CF B9B0AF7A00              mov ecx, 007AAFB0
:004169D4 C744247439000000        mov [esp+74], 00000039
:004169DC 895C2418                mov dword ptr [esp+18], ebx
:004169E0 E8BB2DFFFF              call 004097A0
:004169E5 89442420                mov dword ptr [esp+20], eax
:004169E9 33C0                    xor eax, eax
:004169EB 8D542450                lea edx, dword ptr [esp+50]
:004169EF 50                      push eax
:004169F0 81CB00000400            or ebx, 00040000
:004169F6 55                      push ebp
:004169F7 52                      push edx
:004169F8 8BCE                    mov ecx, esi
:004169FA C74424783A000000        mov [esp+78], 0000003A
:00416A02 895C241C                mov dword ptr [esp+1C], ebx
:00416A06 E825080000              call 00417230
:00416A0B 8D4C247C                lea ecx, dword ptr [esp+7C]
:00416A0F 6A00                    push 00000000
:00416A11 8D542478                lea edx, dword ptr [esp+78]
:00416A15 51                      push ecx
:00416A16 52                      push edx
:00416A17 50                      push eax
:00416A18 8D442444                lea eax, dword ptr [esp+44]
:00416A1C C744247C3B000000        mov [esp+7C], 0000003B
:00416A24 50                      push eax
:00416A25 C74424484E000000        mov [esp+48], 0000004E
:00416A2D C744244C15000000        mov [esp+4C], 00000015
:00416A35 56                      push esi
:00416A36 8BCF                    mov ecx, edi
:00416A38 E833891E00              call 005FF370
:00416A3D A188DA7900              mov eax, dword ptr [0079DA88]
:00416A42 8D8F33010000            lea ecx, dword ptr [edi+00000133]
:00416A48 40                      inc eax
:00416A49 C744246C3C000000        mov [esp+6C], 0000003C
:00416A51 A388DA7900              mov dword ptr [0079DA88], eax
:00416A56 C70194DA7900            mov dword ptr [ecx], 0079DA94
:00416A5C 8B542424                mov edx, dword ptr [esp+24]
:00416A60 C644246C3D              mov [esp+6C], 3D
:00416A65 52                      push edx
:00416A66 C707209F7000            mov dword ptr [edi], 00709F20
:00416A6C C74708189F7000          mov [edi+08], 00709F18
:00416A73 E8A8481D00              call 005EB320
:00416A78 8B442420                mov eax, dword ptr [esp+20]
:00416A7C 8BCF                    mov ecx, edi
:00416A7E 50                      push eax
:00416A7F E81C841E00              call 005FEEA0
:00416A84 8B8FD4000000            mov ecx, dword ptr [edi+000000D4]
:00416A8A 8B5124                  mov edx, dword ptr [ecx+24]
:00416A8D 8BCF                    mov ecx, edi
:00416A8F 52                      push edx
:00416A90 E8CB841E00              call 005FEF60
:00416A95 8B87D4000000            mov eax, dword ptr [edi+000000D4]
:00416A9B 8BCF                    mov ecx, edi
:00416A9D 83C04C                  add eax, 0000004C
:00416AA0 D94008                  fld dword ptr [eax+08]
:00416AA3 DCC0                    fadd st(0), st(0)
:00416AA5 D94004                  fld dword ptr [eax+04]
:00416AA8 DCC0                    fadd st(0), st(0)
:00416AAA D900                    fld dword ptr [eax]
:00416AAC DCC0                    fadd st(0), st(0)
:00416AAE 8D442440                lea eax, dword ptr [esp+40]
:00416AB2 50                      push eax
:00416AB3 D95C2444                fstp dword ptr [esp+44]
:00416AB7 D95C2448                fstp dword ptr [esp+48]
:00416ABB D95C244C                fstp dword ptr [esp+4C]
:00416ABF E86C841E00              call 005FEF30
:00416AC4 6A02                    push 00000002
:00416AC6 8BCF                    mov ecx, edi
:00416AC8 E823841E00              call 005FEEF0
:00416ACD EB02                    jmp 00416AD1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416908(C)
|
:00416ACF 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416ACD(U)
|
:00416AD1 F7C300000400            test ebx, 00040000
:00416AD7 89BEFE000000            mov dword ptr [esi+000000FE], edi
:00416ADD C744246C43000000        mov [esp+6C], 00000043
:00416AE5 741C                    je 00416B03
:00416AE7 8B4C2450                mov ecx, dword ptr [esp+50]
:00416AEB 81E3FFFFFBFF            and ebx, FFFBFFFF
:00416AF1 85C9                    test ecx, ecx
:00416AF3 895C2410                mov dword ptr [esp+10], ebx
:00416AF7 740A                    je 00416B03
:00416AF9 8D542450                lea edx, dword ptr [esp+50]
:00416AFD 52                      push edx
:00416AFE E81D781E00              call 005FE320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416AE5(C), :00416AF7(C)
|
:00416B03 F7C300000200            test ebx, 00020000
:00416B09 C744246C42000000        mov [esp+6C], 00000042
:00416B11 7421                    je 00416B34
:00416B13 8B44241C                mov eax, dword ptr [esp+1C]
:00416B17 81E3FFFFFDFF            and ebx, FFFDFFFF
:00416B1D 83C0F4                  add eax, FFFFFFF4
:00416B20 895C2410                mov dword ptr [esp+10], ebx
:00416B24 8B08                    mov ecx, dword ptr [eax]
:00416B26 49                      dec ecx
:00416B27 8908                    mov dword ptr [eax], ecx
:00416B29 7509                    jne 00416B34
:00416B2B 50                      push eax
:00416B2C E8CFA71C00              call 005E1300
:00416B31 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416B11(C), :00416B29(C)
|
:00416B34 F7C300000100            test ebx, 00010000
:00416B3A C744246C41000000        mov [esp+6C], 00000041
:00416B42 7422                    je 00416B66
:00416B44 8B4C2418                mov ecx, dword ptr [esp+18]
:00416B48 81E3FFFFFEFF            and ebx, FFFEFFFF
:00416B4E 895C2410                mov dword ptr [esp+10], ebx
:00416B52 8D41F4                  lea eax, dword ptr [ecx-0C]
:00416B55 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00416B58 49                      dec ecx
:00416B59 8908                    mov dword ptr [eax], ecx
:00416B5B 7509                    jne 00416B66
:00416B5D 50                      push eax
:00416B5E E89DA71C00              call 005E1300
:00416B63 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416B42(C), :00416B5B(C)
|
:00416B66 F6C780                  test bh, 80
:00416B69 C744246C40000000        mov [esp+6C], 00000040
:00416B71 741F                    je 00416B92
:00416B73 8B542474                mov edx, dword ptr [esp+74]
:00416B77 80E77F                  and bh, 7F
:00416B7A 895C2410                mov dword ptr [esp+10], ebx
:00416B7E 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00416B81 8D42F4                  lea eax, dword ptr [edx-0C]
:00416B84 49                      dec ecx
:00416B85 8908                    mov dword ptr [eax], ecx
:00416B87 7509                    jne 00416B92
:00416B89 50                      push eax
:00416B8A E871A71C00              call 005E1300
:00416B8F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416B71(C), :00416B87(C)
|
:00416B92 F6C740                  test bh, 40
:00416B95 C744246C3F000000        mov [esp+6C], 0000003F
:00416B9D 741E                    je 00416BBD
:00416B9F 8B44247C                mov eax, dword ptr [esp+7C]
:00416BA3 80E7BF                  and bh, BF
:00416BA6 83C0F4                  add eax, FFFFFFF4
:00416BA9 895C2410                mov dword ptr [esp+10], ebx
:00416BAD 8B08                    mov ecx, dword ptr [eax]
:00416BAF 49                      dec ecx
:00416BB0 8908                    mov dword ptr [eax], ecx
:00416BB2 7509                    jne 00416BBD
:00416BB4 50                      push eax
:00416BB5 E846A71C00              call 005E1300
:00416BBA 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416B9D(C), :00416BB2(C)
|
:00416BBD F6C720                  test bh, 20
:00416BC0 C744246C3E000000        mov [esp+6C], 0000003E
:00416BC8 741F                    je 00416BE9
:00416BCA 8B4C2478                mov ecx, dword ptr [esp+78]
:00416BCE 80E7DF                  and bh, DF
:00416BD1 895C2410                mov dword ptr [esp+10], ebx
:00416BD5 8D41F4                  lea eax, dword ptr [ecx-0C]
:00416BD8 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00416BDB 49                      dec ecx
:00416BDC 8908                    mov dword ptr [eax], ecx
:00416BDE 7509                    jne 00416BE9
:00416BE0 50                      push eax
:00416BE1 E81AA71C00              call 005E1300
:00416BE6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416BC8(C), :00416BDE(C)
|
:00416BE9 F6C710                  test bh, 10
:00416BEC C744246C0D000000        mov [esp+6C], 0000000D
:00416BF4 7418                    je 00416C0E
:00416BF6 8B542414                mov edx, dword ptr [esp+14]
:00416BFA 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00416BFD 8D42F4                  lea eax, dword ptr [edx-0C]
:00416C00 49                      dec ecx
:00416C01 8908                    mov dword ptr [eax], ecx
:00416C03 7509                    jne 00416C0E
:00416C05 50                      push eax
:00416C06 E8F5A61C00              call 005E1300
:00416C0B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416BF4(C), :00416C03(C)
|
:00416C0E A128FE7200              mov eax, dword ptr [0072FE28]
:00416C13 8BBEFE000000            mov edi, dword ptr [esi+000000FE]
:00416C19 50                      push eax

* Possible StringData Ref from Data Obj ->"end_combat"
                                  |
:00416C1A 680CBC7800              push 0078BC0C
:00416C1F 8D4C247C                lea ecx, dword ptr [esp+7C]
:00416C23 83C728                  add edi, 00000028
:00416C26 E885441D00              call 005EB0B0
:00416C2B 50                      push eax
:00416C2C 8BCF                    mov ecx, edi
:00416C2E C644247045              mov [esp+70], 45
:00416C33 E8E8461D00              call 005EB320
:00416C38 8B4C2474                mov ecx, dword ptr [esp+74]
:00416C3C C644246C0D              mov [esp+6C], 0D
:00416C41 8D41F4                  lea eax, dword ptr [ecx-0C]
:00416C44 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00416C47 49                      dec ecx
:00416C48 8908                    mov dword ptr [eax], ecx
:00416C4A 7509                    jne 00416C55
:00416C4C 50                      push eax
:00416C4D E8AEA61C00              call 005E1300
:00416C52 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416C4A(C)
|
:00416C55 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00416C5B 8BBEFE000000            mov edi, dword ptr [esi+000000FE]
:00416C61 52                      push edx

* Possible StringData Ref from Data Obj ->"sound/guiButtSmallIn.wav"
                                  |
:00416C62 6844BC7800              push 0078BC44
:00416C67 8D4C247C                lea ecx, dword ptr [esp+7C]
:00416C6B 81C7F2000000            add edi, 000000F2
:00416C71 E83A441D00              call 005EB0B0
:00416C76 50                      push eax
:00416C77 8BCF                    mov ecx, edi
:00416C79 C644247046              mov [esp+70], 46
:00416C7E E89D461D00              call 005EB320
:00416C83 8B442474                mov eax, dword ptr [esp+74]
:00416C87 C644246C0D              mov [esp+6C], 0D
:00416C8C 83C0F4                  add eax, FFFFFFF4
:00416C8F 8B08                    mov ecx, dword ptr [eax]
:00416C91 49                      dec ecx
:00416C92 8908                    mov dword ptr [eax], ecx
:00416C94 7509                    jne 00416C9F
:00416C96 50                      push eax
:00416C97 E864A61C00              call 005E1300
:00416C9C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416C94(C)
|
:00416C9F 8B0D28FE7200            mov ecx, dword ptr [0072FE28]
:00416CA5 8BBEFE000000            mov edi, dword ptr [esi+000000FE]
:00416CAB 51                      push ecx

* Possible StringData Ref from Data Obj ->"sound/guiButtSmallOut.wav"
                                  |
:00416CAC 6828BC7800              push 0078BC28
:00416CB1 8D4C247C                lea ecx, dword ptr [esp+7C]
:00416CB5 81C7F6000000            add edi, 000000F6
:00416CBB E8F0431D00              call 005EB0B0
:00416CC0 50                      push eax
:00416CC1 8BCF                    mov ecx, edi
:00416CC3 C644247047              mov [esp+70], 47
:00416CC8 E853461D00              call 005EB320
:00416CCD 8B542474                mov edx, dword ptr [esp+74]
:00416CD1 C644246C0D              mov [esp+6C], 0D
:00416CD6 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00416CD9 8D42F4                  lea eax, dword ptr [edx-0C]
:00416CDC 49                      dec ecx
:00416CDD 8908                    mov dword ptr [eax], ecx
:00416CDF 7509                    jne 00416CEA
:00416CE1 50                      push eax
:00416CE2 E819A61C00              call 005E1300
:00416CE7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416CDF(C)
|
:00416CEA 8B4C2464                mov ecx, dword ptr [esp+64]
:00416CEE 8BC6                    mov eax, esi
:00416CF0 5F                      pop edi
:00416CF1 5E                      pop esi
:00416CF2 5D                      pop ebp
:00416CF3 5B                      pop ebx
:00416CF4 64890D00000000          mov dword ptr fs:[00000000], ecx
:00416CFB 83C460                  add esp, 00000060
:00416CFE C20C00                  ret 000C


:00416D01 90                      nop
:00416D02 90                      nop
:00416D03 90                      nop
:00416D04 90                      nop
:00416D05 90                      nop
:00416D06 90                      nop
:00416D07 90                      nop
:00416D08 90                      nop
:00416D09 90                      nop
:00416D0A 90                      nop
:00416D0B 90                      nop
:00416D0C 90                      nop
:00416D0D 90                      nop
:00416D0E 90                      nop
:00416D0F 90                      nop
:00416D10 8A810E010000            mov al, byte ptr [ecx+0000010E]
:00416D16 83EC08                  sub esp, 00000008
:00416D19 33D2                    xor edx, edx
:00416D1B 3AC2                    cmp al, dl
:00416D1D 56                      push esi
:00416D1E 742A                    je 00416D4A
:00416D20 8B81F2000000            mov eax, dword ptr [ecx+000000F2]
:00416D26 3BC2                    cmp eax, edx
:00416D28 7443                    je 00416D6D
:00416D2A 8B4C2410                mov ecx, dword ptr [esp+10]
:00416D2E 52                      push edx
:00416D2F 89542408                mov dword ptr [esp+08], edx
:00416D33 8954240C                mov dword ptr [esp+0C], edx
:00416D37 8B31                    mov esi, dword ptr [ecx]
:00416D39 52                      push edx
:00416D3A 8D54240C                lea edx, dword ptr [esp+0C]
:00416D3E 52                      push edx
:00416D3F 50                      push eax
:00416D40 FF5628                  call [esi+28]
:00416D43 5E                      pop esi
:00416D44 83C408                  add esp, 00000008
:00416D47 C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416D1E(C)
|
:00416D4A 8B81F6000000            mov eax, dword ptr [ecx+000000F6]
:00416D50 3BC2                    cmp eax, edx
:00416D52 7419                    je 00416D6D
:00416D54 8B4C2410                mov ecx, dword ptr [esp+10]
:00416D58 52                      push edx
:00416D59 89542408                mov dword ptr [esp+08], edx
:00416D5D 8954240C                mov dword ptr [esp+0C], edx
:00416D61 8B31                    mov esi, dword ptr [ecx]
:00416D63 52                      push edx
:00416D64 8D54240C                lea edx, dword ptr [esp+0C]
:00416D68 52                      push edx
:00416D69 50                      push eax
:00416D6A FF5628                  call [esi+28]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416D28(C), :00416D52(C)
|
:00416D6D 5E                      pop esi
:00416D6E 83C408                  add esp, 00000008
:00416D71 C20400                  ret 0004


:00416D74 90                      nop
:00416D75 90                      nop
:00416D76 90                      nop
:00416D77 90                      nop
:00416D78 90                      nop
:00416D79 90                      nop
:00416D7A 90                      nop
:00416D7B 90                      nop
:00416D7C 90                      nop
:00416D7D 90                      nop
:00416D7E 90                      nop
:00416D7F 90                      nop
:00416D80 64A100000000            mov eax, dword ptr fs:[00000000]
:00416D86 6AFF                    push FFFFFFFF
:00416D88 683A176D00              push 006D173A
:00416D8D 50                      push eax
:00416D8E A1089C7A00              mov eax, dword ptr [007A9C08]
:00416D93 64892500000000          mov dword ptr fs:[00000000], esp
:00416D9A 83EC1C                  sub esp, 0000001C
:00416D9D 85C0                    test eax, eax
:00416D9F 56                      push esi
:00416DA0 57                      push edi
:00416DA1 8BF1                    mov esi, ecx
:00416DA3 0F841D030000            je 004170C6
:00416DA9 8B887A030000            mov ecx, dword ptr [eax+0000037A]
:00416DAF 85C9                    test ecx, ecx
:00416DB1 7518                    jne 00416DCB
:00416DB3 8B06                    mov eax, dword ptr [esi]
:00416DB5 8BCE                    mov ecx, esi
:00416DB7 FF5020                  call [eax+20]
:00416DBA 5F                      pop edi
:00416DBB 5E                      pop esi
:00416DBC 8B4C241C                mov ecx, dword ptr [esp+1C]
:00416DC0 64890D00000000          mov dword ptr fs:[00000000], ecx
:00416DC7 83C428                  add esp, 00000028
:00416DCA C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416DB1(C)
|
:00416DCB 8B4E0C                  mov ecx, dword ptr [esi+0C]
:00416DCE 8B86C4000000            mov eax, dword ptr [esi+000000C4]
:00416DD4 8BBECC000000            mov edi, dword ptr [esi+000000CC]
:00416DDA 8B91CC000000            mov edx, dword ptr [ecx+000000CC]
:00416DE0 2BC7                    sub eax, edi
:00416DE2 8BBEC8000000            mov edi, dword ptr [esi+000000C8]
:00416DE8 03C2                    add eax, edx
:00416DEA 8B91C8000000            mov edx, dword ptr [ecx+000000C8]
:00416DF0 8B8EC0000000            mov ecx, dword ptr [esi+000000C0]
:00416DF6 2BCF                    sub ecx, edi
:00416DF8 8944241C                mov dword ptr [esp+1C], eax
:00416DFC 03CA                    add ecx, edx
:00416DFE 8B16                    mov edx, dword ptr [esi]
:00416E00 8D442418                lea eax, dword ptr [esp+18]
:00416E04 894C2418                mov dword ptr [esp+18], ecx
:00416E08 50                      push eax
:00416E09 8BCE                    mov ecx, esi
:00416E0B FF524C                  call [edx+4C]
:00416E0E 8B16                    mov edx, dword ptr [esi]
:00416E10 8BCE                    mov ecx, esi
:00416E12 FF5224                  call [edx+24]
:00416E15 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00416E1B E8B0880700              call 0048F6D0
:00416E20 8B8E13010000            mov ecx, dword ptr [esi+00000113]
:00416E26 8BF8                    mov edi, eax
:00416E28 E8134B1700              call 0058B940
:00416E2D 8A8E0E010000            mov cl, byte ptr [esi+0000010E]
:00416E33 3BF8                    cmp edi, eax
:00416E35 0F94C0                  sete al
:00416E38 3AC8                    cmp cl, al
:00416E3A 740D                    je 00416E49
:00416E3C 88860E010000            mov byte ptr [esi+0000010E], al
:00416E42 8B06                    mov eax, dword ptr [esi]
:00416E44 8BCE                    mov ecx, esi
:00416E46 FF500C                  call [eax+0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416E3A(C)
|
:00416E49 8B8EFA000000            mov ecx, dword ptr [esi+000000FA]
:00416E4F 8A860E010000            mov al, byte ptr [esi+0000010E]
:00416E55 50                      push eax
:00416E56 8B11                    mov edx, dword ptr [ecx]
:00416E58 FF5228                  call [edx+28]
:00416E5B 8B8EFE000000            mov ecx, dword ptr [esi+000000FE]
:00416E61 8A860E010000            mov al, byte ptr [esi+0000010E]
:00416E67 50                      push eax
:00416E68 8B11                    mov edx, dword ptr [ecx]
:00416E6A FF5228                  call [edx+28]
:00416E6D 8B8E02010000            mov ecx, dword ptr [esi+00000102]
:00416E73 8A860E010000            mov al, byte ptr [esi+0000010E]
:00416E79 50                      push eax
:00416E7A 8B11                    mov edx, dword ptr [ecx]
:00416E7C FF5228                  call [edx+28]
:00416E7F 8A860E010000            mov al, byte ptr [esi+0000010E]
:00416E85 8B8E06010000            mov ecx, dword ptr [esi+00000106]
:00416E8B 84C0                    test al, al
:00416E8D 8B11                    mov edx, dword ptr [ecx]
:00416E8F 0F94C0                  sete al
:00416E92 50                      push eax
:00416E93 FF5228                  call [edx+28]
:00416E96 8A860E010000            mov al, byte ptr [esi+0000010E]
:00416E9C 84C0                    test al, al
:00416E9E 0F84B5000000            je 00416F59
:00416EA4 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00416EAA E8C1850700              call 0048F470
:00416EAF E8DC7A2A00              call 006BE990
:00416EB4 8B8E0A010000            mov ecx, dword ptr [esi+0000010A]
:00416EBA 8BF8                    mov edi, eax
:00416EBC 83FFFF                  cmp edi, FFFFFFFF
:00416EBF 7516                    jne 00416ED7
:00416EC1 8B11                    mov edx, dword ptr [ecx]
:00416EC3 FF5220                  call [edx+20]
:00416EC6 5F                      pop edi
:00416EC7 5E                      pop esi
:00416EC8 8B4C241C                mov ecx, dword ptr [esp+1C]
:00416ECC 64890D00000000          mov dword ptr fs:[00000000], ecx
:00416ED3 83C428                  add esp, 00000028
:00416ED6 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416EBF(C)
|
:00416ED7 8B01                    mov eax, dword ptr [ecx]
:00416ED9 FF5024                  call [eax+24]
:00416EDC 8B0D88DA7900            mov ecx, dword ptr [0079DA88]
:00416EE2 C744240894DA7900        mov [esp+08], 0079DA94
:00416EEA 41                      inc ecx
:00416EEB 890D88DA7900            mov dword ptr [0079DA88], ecx
:00416EF1 8BC7                    mov eax, edi
:00416EF3 B93C000000              mov ecx, 0000003C
:00416EF8 99                      cdq
:00416EF9 F7F9                    idiv ecx
:00416EFB B889888888              mov eax, 88888889
:00416F00 8D4C2408                lea ecx, dword ptr [esp+08]
:00416F04 C744242C00000000        mov [esp+2C], 00000000
:00416F0C 52                      push edx
:00416F0D F7EF                    imul edi
:00416F0F 03D7                    add edx, edi
:00416F11 C1FA05                  sar edx, 05
:00416F14 8BC2                    mov eax, edx
:00416F16 C1E81F                  shr eax, 1F
:00416F19 03D0                    add edx, eax
:00416F1B 52                      push edx

* Possible StringData Ref from Data Obj ->"%d:%02d"
                                  |
:00416F1C 680CBD7800              push 0078BD0C
:00416F21 51                      push ecx
:00416F22 E8A94D1D00              call 005EBCD0
:00416F27 8B8E0A010000            mov ecx, dword ptr [esi+0000010A]
:00416F2D 83C410                  add esp, 00000010
:00416F30 8D542408                lea edx, dword ptr [esp+08]
:00416F34 52                      push edx
:00416F35 E8961A1F00              call 006089D0
:00416F3A 8B442408                mov eax, dword ptr [esp+08]
:00416F3E C744242CFFFFFFFF        mov [esp+2C], FFFFFFFF
:00416F46 83C0F4                  add eax, FFFFFFF4
:00416F49 8B08                    mov ecx, dword ptr [eax]
:00416F4B 49                      dec ecx
:00416F4C 8908                    mov dword ptr [eax], ecx
:00416F4E 0F8572010000            jne 004170C6
:00416F54 E964010000              jmp 004170BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416E9E(C)
|
:00416F59 8B8E0A010000            mov ecx, dword ptr [esi+0000010A]
:00416F5F 8B11                    mov edx, dword ptr [ecx]
:00416F61 FF5220                  call [edx+20]
:00416F64 8BCF                    mov ecx, edi
:00416F66 E8E5590500              call 0046C950
:00416F6B 84C0                    test al, al
:00416F6D A128FE7200              mov eax, dword ptr [0072FE28]
:00416F72 50                      push eax
:00416F73 0F84D6000000            je 0041704F

* Possible StringData Ref from Data Obj ->"misc_otherturn"
                                  |
:00416F79 68FCBC7800              push 0078BCFC
:00416F7E 8D4C2410                lea ecx, dword ptr [esp+10]
:00416F82 E829411D00              call 005EB0B0
:00416F87 8D4C2408                lea ecx, dword ptr [esp+08]
:00416F8B 8D542418                lea edx, dword ptr [esp+18]
:00416F8F 51                      push ecx
:00416F90 52                      push edx
:00416F91 B9B0AF7A00              mov ecx, 007AAFB0
:00416F96 C744243401000000        mov [esp+34], 00000001
:00416F9E E8FD27FFFF              call 004097A0

* Possible StringData Ref from Data Obj ->": "
                                  |
:00416FA3 68F8BC7800              push 0078BCF8
:00416FA8 50                      push eax
:00416FA9 8D44241C                lea eax, dword ptr [esp+1C]
:00416FAD C644243402              mov [esp+34], 02
:00416FB2 50                      push eax
:00416FB3 E808F3FEFF              call 004062C0
:00416FB8 83C70C                  add edi, 0000000C
:00416FBB 8D4C241C                lea ecx, dword ptr [esp+1C]
:00416FBF 57                      push edi
:00416FC0 50                      push eax
:00416FC1 51                      push ecx
:00416FC2 C644244403              mov [esp+44], 03
:00416FC7 E8F4F2FEFF              call 004062C0
:00416FCC 83C418                  add esp, 00000018
:00416FCF 8B8E06010000            mov ecx, dword ptr [esi+00000106]
:00416FD5 50                      push eax
:00416FD6 C644243004              mov [esp+30], 04
:00416FDB E8F0191F00              call 006089D0
:00416FE0 8B542410                mov edx, dword ptr [esp+10]
:00416FE4 C644242C03              mov [esp+2C], 03
:00416FE9 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00416FEC 8D42F4                  lea eax, dword ptr [edx-0C]
:00416FEF 49                      dec ecx
:00416FF0 8908                    mov dword ptr [eax], ecx
:00416FF2 7509                    jne 00416FFD
:00416FF4 50                      push eax
:00416FF5 E806A31C00              call 005E1300
:00416FFA 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416FF2(C)
|
:00416FFD 8B442414                mov eax, dword ptr [esp+14]
:00417001 C644242C02              mov [esp+2C], 02
:00417006 83C0F4                  add eax, FFFFFFF4
:00417009 8B08                    mov ecx, dword ptr [eax]
:0041700B 49                      dec ecx
:0041700C 8908                    mov dword ptr [eax], ecx
:0041700E 7509                    jne 00417019
:00417010 50                      push eax
:00417011 E8EAA21C00              call 005E1300
:00417016 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041700E(C)
|
:00417019 8B4C2418                mov ecx, dword ptr [esp+18]
:0041701D C644242C01              mov [esp+2C], 01
:00417022 8D41F4                  lea eax, dword ptr [ecx-0C]
:00417025 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00417028 49                      dec ecx
:00417029 8908                    mov dword ptr [eax], ecx
:0041702B 7509                    jne 00417036
:0041702D 50                      push eax
:0041702E E8CDA21C00              call 005E1300
:00417033 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041702B(C)
|
:00417036 8B542408                mov edx, dword ptr [esp+08]
:0041703A C744242CFFFFFFFF        mov [esp+2C], FFFFFFFF
:00417042 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00417045 8D42F4                  lea eax, dword ptr [edx-0C]
:00417048 49                      dec ecx
:00417049 8908                    mov dword ptr [eax], ecx
:0041704B 7579                    jne 004170C6
:0041704D EB6E                    jmp 004170BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416F73(C)
|

* Possible StringData Ref from Data Obj ->"misc_computer"
                                  |
:0041704F 68E8BC7800              push 0078BCE8
:00417054 8D4C2414                lea ecx, dword ptr [esp+14]
:00417058 E853401D00              call 005EB0B0
:0041705D 8D4C240C                lea ecx, dword ptr [esp+0C]
:00417061 8D542420                lea edx, dword ptr [esp+20]
:00417065 51                      push ecx
:00417066 52                      push edx
:00417067 B9B0AF7A00              mov ecx, 007AAFB0
:0041706C C744243405000000        mov [esp+34], 00000005
:00417074 E82727FFFF              call 004097A0
:00417079 8B8E06010000            mov ecx, dword ptr [esi+00000106]
:0041707F 50                      push eax
:00417080 C644243006              mov [esp+30], 06
:00417085 E846191F00              call 006089D0
:0041708A 8B442420                mov eax, dword ptr [esp+20]
:0041708E C644242C05              mov [esp+2C], 05
:00417093 83C0F4                  add eax, FFFFFFF4
:00417096 8B08                    mov ecx, dword ptr [eax]
:00417098 49                      dec ecx
:00417099 8908                    mov dword ptr [eax], ecx
:0041709B 7509                    jne 004170A6
:0041709D 50                      push eax
:0041709E E85DA21C00              call 005E1300
:004170A3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041709B(C)
|
:004170A6 8B4C240C                mov ecx, dword ptr [esp+0C]
:004170AA C744242CFFFFFFFF        mov [esp+2C], FFFFFFFF
:004170B2 8D41F4                  lea eax, dword ptr [ecx-0C]
:004170B5 8B49F4                  mov ecx, dword ptr [ecx-0C]
:004170B8 49                      dec ecx
:004170B9 8908                    mov dword ptr [eax], ecx
:004170BB 7509                    jne 004170C6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416F54(U), :0041704D(U)
|
:004170BD 50                      push eax
:004170BE E83DA21C00              call 005E1300
:004170C3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416DA3(C), :00416F4E(C), :0041704B(C), :004170BB(C)
|
:004170C6 8B4C2424                mov ecx, dword ptr [esp+24]
:004170CA 5F                      pop edi
:004170CB 5E                      pop esi
:004170CC 64890D00000000          mov dword ptr fs:[00000000], ecx
:004170D3 83C428                  add esp, 00000028
:004170D6 C3                      ret


:004170D7 90                      nop
:004170D8 90                      nop
:004170D9 90                      nop
:004170DA 90                      nop
:004170DB 90                      nop
:004170DC 90                      nop
:004170DD 90                      nop
:004170DE 90                      nop
:004170DF 90                      nop
:004170E0 51                      push ecx
:004170E1 56                      push esi
:004170E2 8BF1                    mov esi, ecx
:004170E4 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:004170EA 85C9                    test ecx, ecx
:004170EC 7447                    je 00417135
:004170EE 8B817A030000            mov eax, dword ptr [ecx+0000037A]
:004170F4 83F801                  cmp eax, 00000001
:004170F7 7405                    je 004170FE
:004170F9 83F802                  cmp eax, 00000002
:004170FC 7537                    jne 00417135

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004170F7(C)
|
:004170FE E8CD850700              call 0048F6D0
:00417103 8B8E0F010000            mov ecx, dword ptr [esi+0000010F]
:00417109 50                      push eax
:0041710A E881E81500              call 00575990
:0041710F 84C0                    test al, al
:00417111 7422                    je 00417135
:00417113 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00417119 8D442404                lea eax, dword ptr [esp+04]
:0041711D 50                      push eax
:0041711E E8DD850700              call 0048F700
:00417123 8D4C2404                lea ecx, dword ptr [esp+04]
:00417127 6A1D                    push 0000001D
:00417129 51                      push ecx
:0041712A 8B8E0F010000            mov ecx, dword ptr [esi+0000010F]
:00417130 E87BA71500              call 005718B0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004170EC(C), :004170FC(C), :00417111(C)
|
:00417135 5E                      pop esi
:00417136 59                      pop ecx
:00417137 C20400                  ret 0004


:0041713A 90                      nop
:0041713B 90                      nop
:0041713C 90                      nop
:0041713D 90                      nop
:0041713E 90                      nop
:0041713F 90                      nop
:00417140 51                      push ecx
:00417141 56                      push esi
:00417142 8BF1                    mov esi, ecx
:00417144 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0041714A 85C9                    test ecx, ecx
:0041714C 7447                    je 00417195
:0041714E 8B817A030000            mov eax, dword ptr [ecx+0000037A]
:00417154 83F801                  cmp eax, 00000001
:00417157 7405                    je 0041715E
:00417159 83F802                  cmp eax, 00000002
:0041715C 7537                    jne 00417195

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417157(C)
|
:0041715E E86D850700              call 0048F6D0
:00417163 8B8E0F010000            mov ecx, dword ptr [esi+0000010F]
:00417169 50                      push eax
:0041716A E821E81500              call 00575990
:0041716F 84C0                    test al, al
:00417171 7422                    je 00417195
:00417173 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00417179 8D442404                lea eax, dword ptr [esp+04]
:0041717D 50                      push eax
:0041717E E87D850700              call 0048F700
:00417183 8D4C2404                lea ecx, dword ptr [esp+04]
:00417187 6A21                    push 00000021
:00417189 51                      push ecx
:0041718A 8B8E0F010000            mov ecx, dword ptr [esi+0000010F]
:00417190 E81BA71500              call 005718B0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041714C(C), :0041715C(C), :00417171(C)
|
:00417195 5E                      pop esi
:00417196 59                      pop ecx
:00417197 C20400                  ret 0004


:0041719A 90                      nop
:0041719B 90                      nop
:0041719C 90                      nop
:0041719D 90                      nop
:0041719E 90                      nop
:0041719F 90                      nop
:004171A0 B001                    mov al, 01
:004171A2 C20C00                  ret 000C


:004171A5 90                      nop
:004171A6 90                      nop
:004171A7 90                      nop
:004171A8 90                      nop
:004171A9 90                      nop
:004171AA 90                      nop
:004171AB 90                      nop
:004171AC 90                      nop
:004171AD 90                      nop
:004171AE 90                      nop
:004171AF 90                      nop
:004171B0 B001                    mov al, 01
:004171B2 C20C00                  ret 000C


:004171B5 90                      nop
:004171B6 90                      nop
:004171B7 90                      nop
:004171B8 90                      nop
:004171B9 90                      nop
:004171BA 90                      nop
:004171BB 90                      nop
:004171BC 90                      nop
:004171BD 90                      nop
:004171BE 90                      nop
:004171BF 90                      nop
:004171C0 B001                    mov al, 01
:004171C2 C20C00                  ret 000C


:004171C5 90                      nop
:004171C6 90                      nop
:004171C7 90                      nop
:004171C8 90                      nop
:004171C9 90                      nop
:004171CA 90                      nop
:004171CB 90                      nop
:004171CC 90                      nop
:004171CD 90                      nop
:004171CE 90                      nop
:004171CF 90                      nop
:004171D0 E90B000000              jmp 004171E0
:004171D5 90                      nop
:004171D6 90                      nop
:004171D7 90                      nop
:004171D8 90                      nop
:004171D9 90                      nop
:004171DA 90                      nop
:004171DB 90                      nop
:004171DC 90                      nop
:004171DD 90                      nop
:004171DE 90                      nop
:004171DF 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004171D0(U)
|
:004171E0 D90560837000            fld dword ptr [00708360]
:004171E6 D835109F7000            fdiv dword ptr [00709F10]
:004171EC D91D20997A00            fstp dword ptr [007A9920]
:004171F2 C3                      ret


:004171F3 90                      nop
:004171F4 90                      nop
:004171F5 90                      nop
:004171F6 90                      nop
:004171F7 90                      nop
:004171F8 90                      nop
:004171F9 90                      nop
:004171FA 90                      nop
:004171FB 90                      nop
:004171FC 90                      nop
:004171FD 90                      nop
:004171FE 90                      nop
:004171FF 90                      nop
:00417200 8A0DA8D47A00            mov cl, byte ptr [007AD4A8]
:00417206 B001                    mov al, 01
:00417208 84C8                    test al, cl
:0041720A 7508                    jne 00417214
:0041720C 0AC8                    or cl, al
:0041720E 880DA8D47A00            mov byte ptr [007AD4A8], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041720A(C)
|
:00417214 E907000000              jmp 00417220
:00417219 90                      nop
:0041721A 90                      nop
:0041721B 90                      nop
:0041721C 90                      nop
:0041721D 90                      nop
:0041721E 90                      nop
:0041721F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417214(U)
|
:00417220 6880104000              push 00401080
:00417225 E833722A00              call 006BE45D
:0041722A 59                      pop ecx
:0041722B C3                      ret


:0041722C 90                      nop
:0041722D 90                      nop
:0041722E 90                      nop
:0041722F 90                      nop

* Referenced by a CALL at Addresses:
|:00416619   , :00416A06   
|
:00417230 51                      push ecx
:00417231 8B44240C                mov eax, dword ptr [esp+0C]
:00417235 53                      push ebx
:00417236 56                      push esi
:00417237 57                      push edi
:00417238 83EC10                  sub esp, 00000010
:0041723B 33D2                    xor edx, edx
:0041723D 8BDC                    mov ebx, esp
:0041723F 33F6                    xor esi, esi
:00417241 33FF                    xor edi, edi
:00417243 8903                    mov dword ptr [ebx], eax
:00417245 897C241C                mov dword ptr [esp+1C], edi
:00417249 895304                  mov dword ptr [ebx+04], edx
:0041724C 897308                  mov dword ptr [ebx+08], esi
:0041724F 8B742424                mov esi, dword ptr [esp+24]
:00417253 56                      push esi
:00417254 897B0C                  mov dword ptr [ebx+0C], edi
:00417257 E804C4FEFF              call 00403660
:0041725C 8BC6                    mov eax, esi
:0041725E 5F                      pop edi
:0041725F 5E                      pop esi
:00417260 5B                      pop ebx
:00417261 59                      pop ecx
:00417262 C20C00                  ret 000C


:00417265 90                      nop
:00417266 90                      nop
:00417267 90                      nop
:00417268 90                      nop
:00417269 90                      nop
:0041726A 90                      nop
:0041726B 90                      nop
:0041726C 90                      nop
:0041726D 90                      nop
:0041726E 90                      nop
:0041726F 90                      nop
:00417270 6AFF                    push FFFFFFFF
:00417272 6868176D00              push 006D1768
:00417277 64A100000000            mov eax, dword ptr fs:[00000000]
:0041727D 50                      push eax
:0041727E 64892500000000          mov dword ptr fs:[00000000], esp
:00417285 83EC1C                  sub esp, 0000001C
:00417288 A188DA7900              mov eax, dword ptr [0079DA88]
:0041728D 53                      push ebx
:0041728E 55                      push ebp
:0041728F 56                      push esi
:00417290 8BF1                    mov esi, ecx
:00417292 40                      inc eax
:00417293 B994DA7900              mov ecx, 0079DA94
:00417298 894C240C                mov dword ptr [esp+0C], ecx
:0041729C 40                      inc eax
:0041729D C744243000000000        mov [esp+30], 00000000
:004172A5 8D9EFF000000            lea ebx, dword ptr [esi+000000FF]
:004172AB 894C2410                mov dword ptr [esp+10], ecx
:004172AF A388DA7900              mov dword ptr [0079DA88], eax
:004172B4 53                      push ebx
:004172B5 8D4C2410                lea ecx, dword ptr [esp+10]
:004172B9 C644243401              mov [esp+34], 01
:004172BE E85D401D00              call 005EB320
:004172C3 8D442410                lea eax, dword ptr [esp+10]
:004172C7 8BCB                    mov ecx, ebx
:004172C9 50                      push eax
:004172CA E851401D00              call 005EB320
:004172CF 8B4C2410                mov ecx, dword ptr [esp+10]
:004172D3 C644243000              mov [esp+30], 00
:004172D8 8D41F4                  lea eax, dword ptr [ecx-0C]
:004172DB 8B49F4                  mov ecx, dword ptr [ecx-0C]
:004172DE 49                      dec ecx
:004172DF 8908                    mov dword ptr [eax], ecx
:004172E1 7509                    jne 004172EC
:004172E3 50                      push eax
:004172E4 E817A01C00              call 005E1300
:004172E9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004172E1(C)
|
:004172EC 8B542438                mov edx, dword ptr [esp+38]
:004172F0 8BCE                    mov ecx, esi
:004172F2 52                      push edx
:004172F3 E858841E00              call 005FF750
:004172F8 8B44240C                mov eax, dword ptr [esp+0C]
:004172FC 89442410                mov dword ptr [esp+10], eax
:00417300 FF40F4                  inc [eax-0C]
:00417303 53                      push ebx
:00417304 8D4C2410                lea ecx, dword ptr [esp+10]
:00417308 C644243402              mov [esp+34], 02
:0041730D E80E401D00              call 005EB320
:00417312 8D442410                lea eax, dword ptr [esp+10]
:00417316 8BCB                    mov ecx, ebx
:00417318 50                      push eax
:00417319 E802401D00              call 005EB320
:0041731E 8B4C2410                mov ecx, dword ptr [esp+10]
:00417322 C644243000              mov [esp+30], 00
:00417327 8D41F4                  lea eax, dword ptr [ecx-0C]
:0041732A 8B49F4                  mov ecx, dword ptr [ecx-0C]
:0041732D 49                      dec ecx
:0041732E 8908                    mov dword ptr [eax], ecx
:00417330 7509                    jne 0041733B
:00417332 50                      push eax
:00417333 E8C89F1C00              call 005E1300
:00417338 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417330(C)
|
:0041733B 8B13                    mov edx, dword ptr [ebx]
:0041733D 8B42FC                  mov eax, dword ptr [edx-04]
:00417340 85C0                    test eax, eax
:00417342 0F84CF000000            je 00417417
:00417348 8A8608010000            mov al, byte ptr [esi+00000108]
:0041734E 8B8EC8000000            mov ecx, dword ptr [esi+000000C8]
:00417354 F6D8                    neg al
:00417356 1BC0                    sbb eax, eax
:00417358 8B96C0000000            mov edx, dword ptr [esi+000000C0]
:0041735E 24FD                    and al, FD
:00417360 57                      push edi
:00417361 8BBEC4000000            mov edi, dword ptr [esi+000000C4]
:00417367 83C002                  add eax, 00000002
:0041736A 8BE8                    mov ebp, eax
:0041736C 8B86CC000000            mov eax, dword ptr [esi+000000CC]
:00417372 2BC7                    sub eax, edi
:00417374 2BCA                    sub ecx, edx
:00417376 99                      cdq
:00417377 2BC2                    sub eax, edx
:00417379 6A00                    push 00000000
:0041737B 8BF8                    mov edi, eax
:0041737D 03CD                    add ecx, ebp
:0041737F D1FF                    sar edi, 1
:00417381 894C241C                mov dword ptr [esp+1C], ecx
:00417385 894C2428                mov dword ptr [esp+28], ecx
:00417389 8D4702                  lea eax, dword ptr [edi+02]
:0041738C 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:00417392 89442418                mov dword ptr [esp+18], eax
:00417396 8944242C                mov dword ptr [esp+2C], eax
:0041739A 8B8603010000            mov eax, dword ptr [esi+00000103]
:004173A0 896C2420                mov dword ptr [esp+20], ebp
:004173A4 50                      push eax
:004173A5 8D442424                lea eax, dword ptr [esp+24]
:004173A9 53                      push ebx
:004173AA 8B5C2448                mov ebx, dword ptr [esp+48]
:004173AE 50                      push eax
:004173AF 8D861E010000            lea eax, dword ptr [esi+0000011E]
:004173B5 50                      push eax
:004173B6 8B86FB000000            mov eax, dword ptr [esi+000000FB]
:004173BC C744243402000000        mov [esp+34], 00000002
:004173C4 8B11                    mov edx, dword ptr [ecx]
:004173C6 50                      push eax
:004173C7 53                      push ebx
:004173C8 FF521C                  call [edx+1C]
:004173CB 8B8603010000            mov eax, dword ptr [esi+00000103]
:004173D1 8B4C2414                mov ecx, dword ptr [esp+14]
:004173D5 6A00                    push 00000000
:004173D7 50                      push eax
:004173D8 8B542420                mov edx, dword ptr [esp+20]
:004173DC 8D8633010000            lea eax, dword ptr [esi+00000133]
:004173E2 50                      push eax
:004173E3 8D442428                lea eax, dword ptr [esp+28]
:004173E7 50                      push eax
:004173E8 8D861E010000            lea eax, dword ptr [esi+0000011E]
:004173EE 894C2430                mov dword ptr [esp+30], ecx
:004173F2 8B8ED4000000            mov ecx, dword ptr [esi+000000D4]
:004173F8 8D7C3F02                lea edi, dword ptr [edi+edi+02]
:004173FC 50                      push eax
:004173FD 8B86FB000000            mov eax, dword ptr [esi+000000FB]
:00417403 896C2430                mov dword ptr [esp+30], ebp
:00417407 89542438                mov dword ptr [esp+38], edx
:0041740B 897C243C                mov dword ptr [esp+3C], edi
:0041740F 8B11                    mov edx, dword ptr [ecx]
:00417411 50                      push eax
:00417412 53                      push ebx
:00417413 FF521C                  call [edx+1C]
:00417416 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417342(C)
|
:00417417 8B4C240C                mov ecx, dword ptr [esp+0C]
:0041741B 5E                      pop esi
:0041741C 5D                      pop ebp
:0041741D C7442428FFFFFFFF        mov [esp+28], FFFFFFFF
:00417425 8D41F4                  lea eax, dword ptr [ecx-0C]
:00417428 5B                      pop ebx
:00417429 8B08                    mov ecx, dword ptr [eax]
:0041742B 49                      dec ecx
:0041742C 8908                    mov dword ptr [eax], ecx
:0041742E 7509                    jne 00417439
:00417430 50                      push eax
:00417431 E8CA9E1C00              call 005E1300
:00417436 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041742E(C)
|
:00417439 8B4C241C                mov ecx, dword ptr [esp+1C]
:0041743D 64890D00000000          mov dword ptr fs:[00000000], ecx
:00417444 83C428                  add esp, 00000028
:00417447 C20400                  ret 0004


:0041744A 90                      nop
:0041744B 90                      nop
:0041744C 90                      nop
:0041744D 90                      nop
:0041744E 90                      nop
:0041744F 90                      nop
:00417450 B001                    mov al, 01
:00417452 C3                      ret


:00417453 90                      nop
:00417454 90                      nop
:00417455 90                      nop
:00417456 90                      nop
:00417457 90                      nop
:00417458 90                      nop
:00417459 90                      nop
:0041745A 90                      nop
:0041745B 90                      nop
:0041745C 90                      nop
:0041745D 90                      nop
:0041745E 90                      nop
:0041745F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417623(U)
|
:00417460 56                      push esi
:00417461 8BF1                    mov esi, ecx
:00417463 E888000000              call 004174F0
:00417468 F644240801              test [esp+08], 01
:0041746D 7409                    je 00417478
:0041746F 56                      push esi
:00417470 E88B9E1C00              call 005E1300
:00417475 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041746D(C)
|
:00417478 8BC6                    mov eax, esi
:0041747A 5E                      pop esi
:0041747B C20400                  ret 0004


:0041747E 90                      nop
:0041747F 90                      nop

* Referenced by a CALL at Address:
|:006002C3   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:006D15E5(U), :006D16CD(U), :006D17A3(U), :006D2AC3(U), :006F12E3(U)
|:006F1F83(U)
|
:00417480 6AFF                    push FFFFFFFF
:00417482 6896176D00              push 006D1796
:00417487 64A100000000            mov eax, dword ptr fs:[00000000]
:0041748D 50                      push eax
:0041748E 64892500000000          mov dword ptr fs:[00000000], esp
:00417495 51                      push ecx
:00417496 56                      push esi
:00417497 8BF1                    mov esi, ecx
:00417499 89742404                mov dword ptr [esp+04], esi
:0041749D 8B8E2E010000            mov ecx, dword ptr [esi+0000012E]
:004174A3 C744241001000000        mov [esp+10], 00000001
:004174AB 85C9                    test ecx, ecx
:004174AD 7405                    je 004174B4
:004174AF 8B01                    mov eax, dword ptr [ecx]
:004174B1 FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004174AD(C)
|
:004174B4 8B8E2A010000            mov ecx, dword ptr [esi+0000012A]
:004174BA C644241000              mov [esp+10], 00
:004174BF 85C9                    test ecx, ecx
:004174C1 7405                    je 004174C8
:004174C3 8B11                    mov edx, dword ptr [ecx]
:004174C5 FF5204                  call [edx+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004174C1(C)
|
:004174C8 8BCE                    mov ecx, esi
:004174CA C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:004174D2 E899781E00              call 005FED70
:004174D7 8B4C2408                mov ecx, dword ptr [esp+08]
:004174DB 5E                      pop esi
:004174DC 64890D00000000          mov dword ptr fs:[00000000], ecx
:004174E3 83C410                  add esp, 00000010
:004174E6 C3                      ret


:004174E7 90                      nop
:004174E8 90                      nop
:004174E9 90                      nop
:004174EA 90                      nop
:004174EB 90                      nop
:004174EC 90                      nop
:004174ED 90                      nop
:004174EE 90                      nop
:004174EF 90                      nop

* Referenced by a CALL at Address:
|:00417463   
|
:004174F0 6AFF                    push FFFFFFFF
:004174F2 68BE176D00              push 006D17BE
:004174F7 64A100000000            mov eax, dword ptr fs:[00000000]
:004174FD 50                      push eax
:004174FE 64892500000000          mov dword ptr fs:[00000000], esp
:00417505 51                      push ecx
:00417506 56                      push esi
:00417507 8BF1                    mov esi, ecx
:00417509 89742404                mov dword ptr [esp+04], esi
:0041750D 8B8633010000            mov eax, dword ptr [esi+00000133]
:00417513 C744241000000000        mov [esp+10], 00000000
:0041751B 83E80C                  sub eax, 0000000C
:0041751E 8B08                    mov ecx, dword ptr [eax]
:00417520 49                      dec ecx
:00417521 8908                    mov dword ptr [eax], ecx
:00417523 7509                    jne 0041752E
:00417525 50                      push eax
:00417526 E8D59D1C00              call 005E1300
:0041752B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417523(C)
|
:0041752E 8B8E2E010000            mov ecx, dword ptr [esi+0000012E]
:00417534 C744241002000000        mov [esp+10], 00000002
:0041753C 85C9                    test ecx, ecx
:0041753E 7405                    je 00417545
:00417540 8B01                    mov eax, dword ptr [ecx]
:00417542 FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041753E(C)
|
:00417545 8B8E2A010000            mov ecx, dword ptr [esi+0000012A]
:0041754B C644241001              mov [esp+10], 01
:00417550 85C9                    test ecx, ecx
:00417552 7405                    je 00417559
:00417554 8B11                    mov edx, dword ptr [ecx]
:00417556 FF5204                  call [edx+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417552(C)
|
:00417559 8BCE                    mov ecx, esi
:0041755B C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:00417563 E808781E00              call 005FED70
:00417568 8B4C2408                mov ecx, dword ptr [esp+08]
:0041756C 5E                      pop esi
:0041756D 64890D00000000          mov dword ptr fs:[00000000], ecx
:00417574 83C410                  add esp, 00000010
:00417577 C3                      ret


:00417578 90                      nop
:00417579 90                      nop
:0041757A 90                      nop
:0041757B 90                      nop
:0041757C 90                      nop
:0041757D 90                      nop
:0041757E 90                      nop
:0041757F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417613(U)
|
:00417580 56                      push esi
:00417581 8BF1                    mov esi, ecx
:00417583 E818000000              call 004175A0
:00417588 F644240801              test [esp+08], 01
:0041758D 7409                    je 00417598
:0041758F 56                      push esi
:00417590 E86B9D1C00              call 005E1300
:00417595 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041758D(C)
|
:00417598 8BC6                    mov eax, esi
:0041759A 5E                      pop esi
:0041759B C20400                  ret 0004


:0041759E 90                      nop
:0041759F 90                      nop

* Referenced by a CALL at Address:
|:00417583   
|
:004175A0 6AFF                    push FFFFFFFF
:004175A2 68E6176D00              push 006D17E6
:004175A7 64A100000000            mov eax, dword ptr fs:[00000000]
:004175AD 50                      push eax
:004175AE 64892500000000          mov dword ptr fs:[00000000], esp
:004175B5 51                      push ecx
:004175B6 56                      push esi
:004175B7 8BF1                    mov esi, ecx
:004175B9 89742404                mov dword ptr [esp+04], esi
:004175BD 8B8EF6000000            mov ecx, dword ptr [esi+000000F6]
:004175C3 C744241001000000        mov [esp+10], 00000001
:004175CB 85C9                    test ecx, ecx
:004175CD 7405                    je 004175D4
:004175CF 8B01                    mov eax, dword ptr [ecx]
:004175D1 FF5004                  call [eax+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004175CD(C)
|
:004175D4 8B8EF2000000            mov ecx, dword ptr [esi+000000F2]
:004175DA C644241000              mov [esp+10], 00
:004175DF 85C9                    test ecx, ecx
:004175E1 7405                    je 004175E8
:004175E3 8B11                    mov edx, dword ptr [ecx]
:004175E5 FF5204                  call [edx+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004175E1(C)
|
:004175E8 8BCE                    mov ecx, esi
:004175EA C7442410FFFFFFFF        mov [esp+10], FFFFFFFF
:004175F2 E8E9531E00              call 005FC9E0
:004175F7 8B4C2408                mov ecx, dword ptr [esp+08]
:004175FB 5E                      pop esi
:004175FC 64890D00000000          mov dword ptr fs:[00000000], ecx
:00417603 83C410                  add esp, 00000010
:00417606 C3                      ret


:00417607 90                      nop
:00417608 90                      nop
:00417609 90                      nop
:0041760A 90                      nop
:0041760B 90                      nop
:0041760C 90                      nop
:0041760D 90                      nop
:0041760E 90                      nop
:0041760F 90                      nop
:00417610 83E908                  sub ecx, 00000008
:00417613 E968FFFFFF              jmp 00417580
:00417618 CC                      int 03
:00417619 CC                      int 03
:0041761A CC                      int 03
:0041761B CC                      int 03
:0041761C CC                      int 03
:0041761D CC                      int 03
:0041761E CC                      int 03
:0041761F CC                      int 03
:00417620 83E908                  sub ecx, 00000008
:00417623 E938FEFFFF              jmp 00417460
:00417628 CC                      int 03
:00417629 CC                      int 03
:0041762A CC                      int 03
:0041762B CC                      int 03
:0041762C CC                      int 03
:0041762D CC                      int 03
:0041762E CC                      int 03
:0041762F CC                      int 03

* Referenced by a CALL at Address:
|:0041AD34   
|
:00417630 8B442410                mov eax, dword ptr [esp+10]
:00417634 8B542408                mov edx, dword ptr [esp+08]
:00417638 56                      push esi
:00417639 8BF1                    mov esi, ecx
:0041763B 8B4C2410                mov ecx, dword ptr [esp+10]
:0041763F 50                      push eax
:00417640 8B44240C                mov eax, dword ptr [esp+0C]
:00417644 51                      push ecx
:00417645 52                      push edx
:00417646 50                      push eax
:00417647 8BCE                    mov ecx, esi
:00417649 E812070200              call 00437D60
:0041764E C7060CA27000            mov dword ptr [esi], 0070A20C
:00417654 C7460804A27000          mov [esi+08], 0070A204
:0041765B 8BC6                    mov eax, esi
:0041765D 5E                      pop esi
:0041765E C21000                  ret 0010


:00417661 90                      nop
:00417662 90                      nop
:00417663 90                      nop
:00417664 90                      nop
:00417665 90                      nop
:00417666 90                      nop
:00417667 90                      nop
:00417668 90                      nop
:00417669 90                      nop
:0041766A 90                      nop
:0041766B 90                      nop
:0041766C 90                      nop
:0041766D 90                      nop
:0041766E 90                      nop
:0041766F 90                      nop

* Referenced by a CALL at Addresses:
|:00406F66   , :00418060   , :0043CAA4   , :00469AAB   
|
:00417670 6AFF                    push FFFFFFFF
:00417672 6814196D00              push 006D1914
:00417677 64A100000000            mov eax, dword ptr fs:[00000000]
:0041767D 50                      push eax
:0041767E 64892500000000          mov dword ptr fs:[00000000], esp
:00417685 83EC08                  sub esp, 00000008
:00417688 53                      push ebx
:00417689 55                      push ebp
:0041768A 56                      push esi
:0041768B 8BF1                    mov esi, ecx
:0041768D 57                      push edi
:0041768E 89742414                mov dword ptr [esp+14], esi
:00417692 8D442413                lea eax, dword ptr [esp+13]
:00417696 33FF                    xor edi, edi
:00417698 50                      push eax
:00417699 8D4E04                  lea ecx, dword ptr [esi+04]
:0041769C 897C2424                mov dword ptr [esp+24], edi
:004176A0 E85B500000              call 0041C700
:004176A5 C70690877000            mov dword ptr [esi], 00708790
:004176AB C744242001000000        mov [esp+20], 00000001
:004176B3 897E0C                  mov dword ptr [esi+0C], edi
:004176B6 897E10                  mov dword ptr [esi+10], edi
:004176B9 897E14                  mov dword ptr [esi+14], edi
:004176BC 897E18                  mov dword ptr [esi+18], edi
:004176BF 897E1C                  mov dword ptr [esi+1C], edi
:004176C2 C7460878877000          mov [esi+08], 00708778
:004176C9 8B1D88DA7900            mov ebx, dword ptr [0079DA88]
:004176CF B894DA7900              mov eax, 0079DA94
:004176D4 43                      inc ebx
:004176D5 891D88DA7900            mov dword ptr [0079DA88], ebx
:004176DB 894624                  mov dword ptr [esi+24], eax
:004176DE 8B1588DA7900            mov edx, dword ptr [0079DA88]
:004176E4 42                      inc edx
:004176E5 891588DA7900            mov dword ptr [0079DA88], edx
:004176EB 894628                  mov dword ptr [esi+28], eax
:004176EE 8B0D88DA7900            mov ecx, dword ptr [0079DA88]
:004176F4 41                      inc ecx
:004176F5 890D88DA7900            mov dword ptr [0079DA88], ecx
:004176FB 89462C                  mov dword ptr [esi+2C], eax
:004176FE 8D6E3B                  lea ebp, dword ptr [esi+3B]
:00417701 33C0                    xor eax, eax
:00417703 33C9                    xor ecx, ecx
:00417705 33D2                    xor edx, edx
:00417707 894500                  mov dword ptr [ebp+00], eax
:0041770A 83CBFF                  or ebx, FFFFFFFF
:0041770D 897E37                  mov dword ptr [esi+37], edi
:00417710 894D04                  mov dword ptr [ebp+04], ecx
:00417713 895508                  mov dword ptr [ebp+08], edx
:00417716 895D0C                  mov dword ptr [ebp+0C], ebx
:00417719 8D5E4F                  lea ebx, dword ptr [esi+4F]
:0041771C 83CAFF                  or edx, FFFFFFFF
:0041771F 897E4B                  mov dword ptr [esi+4B], edi
:00417722 8903                    mov dword ptr [ebx], eax
:00417724 894B04                  mov dword ptr [ebx+04], ecx
:00417727 897B08                  mov dword ptr [ebx+08], edi
:0041772A 89530C                  mov dword ptr [ebx+0C], edx
:0041772D 8D5E63                  lea ebx, dword ptr [esi+63]
:00417730 83CAFF                  or edx, FFFFFFFF
:00417733 897E5F                  mov dword ptr [esi+5F], edi
:00417736 8903                    mov dword ptr [ebx], eax
:00417738 894B04                  mov dword ptr [ebx+04], ecx
:0041773B 897B08                  mov dword ptr [ebx+08], edi
:0041773E 89530C                  mov dword ptr [ebx+0C], edx
:00417741 8D5E77                  lea ebx, dword ptr [esi+77]
:00417744 83CAFF                  or edx, FFFFFFFF
:00417747 897E73                  mov dword ptr [esi+73], edi
:0041774A 8903                    mov dword ptr [ebx], eax
:0041774C 894B04                  mov dword ptr [ebx+04], ecx
:0041774F 897B08                  mov dword ptr [ebx+08], edi
:00417752 89530C                  mov dword ptr [ebx+0C], edx
:00417755 8D8E87000000            lea ecx, dword ptr [esi+00000087]
:0041775B C644242009              mov [esp+20], 09
:00417760 E85BBFFEFF              call 004036C0
:00417765 8D8E9B000000            lea ecx, dword ptr [esi+0000009B]
:0041776B C64424200A              mov [esp+20], 0A
:00417770 E84BBFFEFF              call 004036C0
:00417775 89BEE8000000            mov dword ptr [esi+000000E8], edi
:0041777B 89BEEC000000            mov dword ptr [esi+000000EC], edi
:00417781 8BCE                    mov ecx, esi
:00417783 C64424200B              mov [esp+20], 0B
:00417788 C7060C867000            mov dword ptr [esi], 0070860C
:0041778E C7460804867000          mov [esi+08], 00708604
:00417795 E896511E00              call 005FC930
:0041779A 8B54242C                mov edx, dword ptr [esp+2C]
:0041779E 8D8EC0000000            lea ecx, dword ptr [esi+000000C0]
:004177A4 8B02                    mov eax, dword ptr [edx]
:004177A6 8901                    mov dword ptr [ecx], eax
:004177A8 8B4204                  mov eax, dword ptr [edx+04]
:004177AB 894104                  mov dword ptr [ecx+04], eax
:004177AE 8B4208                  mov eax, dword ptr [edx+08]
:004177B1 894108                  mov dword ptr [ecx+08], eax
:004177B4 8B520C                  mov edx, dword ptr [edx+0C]
:004177B7 89510C                  mov dword ptr [ecx+0C], edx
:004177BA 8B4C2428                mov ecx, dword ptr [esp+28]
:004177BE 3BCF                    cmp ecx, edi
:004177C0 7407                    je 004177C9
:004177C2 8B01                    mov eax, dword ptr [ecx]
:004177C4 57                      push edi
:004177C5 56                      push esi
:004177C6 FF503C                  call [eax+3C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004177C0(C)
|
:004177C9 8A4C2430                mov cl, byte ptr [esp+30]
:004177CD 6689BEF2000000          mov word ptr [esi+000000F2], di
:004177D4 6689BEF4000000          mov word ptr [esi+000000F4], di
:004177DB 6689BEF7000000          mov word ptr [esi+000000F7], di
:004177E2 6689BEF9000000          mov word ptr [esi+000000F9], di
:004177E9 C7068CA37000            mov dword ptr [esi], 0070A38C
:004177EF C7460884A37000          mov [esi+08], 0070A384
:004177F6 888EF6000000            mov byte ptr [esi+000000F6], cl
:004177FC 8B4C2418                mov ecx, dword ptr [esp+18]
:00417800 C786FF000000F0D8FFFF    mov dword ptr [esi+000000FF], FFFFD8F0
:0041780A 8BC6                    mov eax, esi
:0041780C 5F                      pop edi
:0041780D 5E                      pop esi
:0041780E 5D                      pop ebp
:0041780F 5B                      pop ebx
:00417810 64890D00000000          mov dword ptr fs:[00000000], ecx
:00417817 83C414                  add esp, 00000014
:0041781A C20C00                  ret 000C


:0041781D 90                      nop
:0041781E 90                      nop
:0041781F 90                      nop
:00417820 83EC48                  sub esp, 00000048
:00417823 53                      push ebx
:00417824 55                      push ebp
:00417825 56                      push esi
:00417826 8BF1                    mov esi, ecx
:00417828 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:0041782E 57                      push edi
:0041782F 668B86F4000000          mov ax, word ptr [esi+000000F4]
:00417836 8BB9CD050000            mov edi, dword ptr [ecx+000005CD]
:0041783C 8BD0                    mov edx, eax
:0041783E 81E2FFFF0000            and edx, 0000FFFF
:00417844 668B54D706              mov dx, word ptr [edi+8*edx+06]
:00417849 663B96F2000000          cmp dx, word ptr [esi+000000F2]
:00417850 0F858A030000            jne 00417BE0
:00417856 33ED                    xor ebp, ebp
:00417858 663BC5                  cmp ax, bp
:0041785B 0F847F030000            je 00417BE0
:00417861 33C0                    xor eax, eax
:00417863 8BD7                    mov edx, edi
:00417865 668B86F4000000          mov ax, word ptr [esi+000000F4]
:0041786C 8D04C2                  lea eax, dword ptr [edx+8*eax]
:0041786F 668B5006                mov dx, word ptr [eax+06]
:00417873 663B96F2000000          cmp dx, word ptr [esi+000000F2]
:0041787A 741A                    je 00417896
:0041787C 6689AEF2000000          mov word ptr [esi+000000F2], bp
:00417883 6689AEF4000000          mov word ptr [esi+000000F4], bp
:0041788A 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00417890 8B81CD050000            mov eax, dword ptr [ecx+000005CD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041787A(C)
|
:00417896 8B00                    mov eax, dword ptr [eax]
:00417898 896C2430                mov dword ptr [esp+30], ebp
:0041789C 896C243C                mov dword ptr [esp+3C], ebp
:004178A0 C74424500000803F        mov [esp+50], 3F800000
:004178A8 C644245400              mov [esp+54], 00
:004178AD C644245500              mov [esp+55], 00
:004178B2 C644245600              mov [esp+56], 00
:004178B7 C644245700              mov [esp+57], 00
:004178BC C744244C00000000        mov [esp+4C], 00000000
:004178C4 668B9007010000          mov dx, word ptr [eax+00000107]
:004178CB 6689542428              mov word ptr [esp+28], dx
:004178D0 668BB815010000          mov di, word ptr [eax+00000115]
:004178D7 66897C242A              mov word ptr [esp+2A], di
:004178DC 668BB835010000          mov di, word ptr [eax+00000135]
:004178E3 8B5C2428                mov ebx, dword ptr [esp+28]
:004178E7 05B7000000              add eax, 000000B7
:004178EC 663BD5                  cmp dx, bp
:004178EF 66897C242C              mov word ptr [esp+2C], di
:004178F4 89442430                mov dword ptr [esp+30], eax
:004178F8 7446                    je 00417940
:004178FA 8DB90E020000            lea edi, dword ptr [ecx+0000020E]
:00417900 81E3FFFF0000            and ebx, 0000FFFF
:00417906 57                      push edi
:00417907 8D4F10                  lea ecx, dword ptr [edi+10]
:0041790A E8A14F0000              call 0041C8B0
:0041790F 3BD8                    cmp ebx, eax
:00417911 732D                    jnb 00417940
:00417913 8B0F                    mov ecx, dword ptr [edi]
:00417915 8B5704                  mov edx, dword ptr [edi+04]
:00417918 8B4708                  mov eax, dword ptr [edi+08]
:0041791B 894C2418                mov dword ptr [esp+18], ecx
:0041791F 8B4F0C                  mov ecx, dword ptr [edi+0C]
:00417922 53                      push ebx
:00417923 894C2428                mov dword ptr [esp+28], ecx
:00417927 8D4C241C                lea ecx, dword ptr [esp+1C]
:0041792B 89542420                mov dword ptr [esp+20], edx
:0041792F 89442424                mov dword ptr [esp+24], eax
:00417933 E8B84F0000              call 0041C8F0
:00417938 8B542418                mov edx, dword ptr [esp+18]
:0041793C 8B1A                    mov ebx, dword ptr [edx]
:0041793E EB02                    jmp 00417942

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004178F8(C), :00417911(C)
|
:00417940 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041793E(U)
|
:00417942 8B44242A                mov eax, dword ptr [esp+2A]
:00417946 8BCB                    mov ecx, ebx
:00417948 25FFFF0000              and eax, 0000FFFF
:0041794D 50                      push eax
:0041794E E8DD8F1F00              call 00610930
:00417953 8BC8                    mov ecx, eax
:00417955 8B86FF000000            mov eax, dword ptr [esi+000000FF]
:0041795B 83F89C                  cmp eax, FFFFFF9C
:0041795E 7D12                    jge 00417972
:00417960 8D0449                  lea eax, dword ptr [ecx+2*ecx]
:00417963 99                      cdq
:00417964 83E203                  and edx, 00000003
:00417967 03C2                    add eax, edx
:00417969 C1F802                  sar eax, 02
:0041796C 8986FF000000            mov dword ptr [esi+000000FF], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041795E(C)
|
:00417972 39AEFF000000            cmp dword ptr [esi+000000FF], ebp
:00417978 7D09                    jge 00417983
:0041797A 8D51FF                  lea edx, dword ptr [ecx-01]
:0041797D 8996FF000000            mov dword ptr [esi+000000FF], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417978(C)
|
:00417983 398EFF000000            cmp dword ptr [esi+000000FF], ecx
:00417989 7C06                    jl 00417991
:0041798B 89AEFF000000            mov dword ptr [esi+000000FF], ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417989(C)
|
:00417991 668B86FF000000          mov ax, word ptr [esi+000000FF]
:00417998 8B96C0000000            mov edx, dword ptr [esi+000000C0]
:0041799E 668944242E              mov word ptr [esp+2E], ax
:004179A3 8B86C8000000            mov eax, dword ptr [esi+000000C8]
:004179A9 8B8ECC000000            mov ecx, dword ptr [esi+000000CC]
:004179AF 2BC2                    sub eax, edx
:004179B1 99                      cdq
:004179B2 2BC2                    sub eax, edx
:004179B4 8B96C4000000            mov edx, dword ptr [esi+000000C4]
:004179BA 8B7B0F                  mov edi, dword ptr [ebx+0F]
:004179BD 8B6B13                  mov ebp, dword ptr [ebx+13]
:004179C0 2BCA                    sub ecx, edx
:004179C2 8BD8                    mov ebx, eax
:004179C4 894C2410                mov dword ptr [esp+10], ecx
:004179C8 DB442410                fild dword ptr [esp+10]
:004179CC F7DF                    neg edi
:004179CE F7DD                    neg ebp
:004179D0 DC0DF8A47000            fmul qword ptr [0070A4F8]
:004179D6 D1FB                    sar ebx, 1
:004179D8 E8B36F2A00              call 006BE990
:004179DD 03C5                    add eax, ebp
:004179DF 8D0C1F                  lea ecx, dword ptr [edi+ebx]
:004179E2 89442438                mov dword ptr [esp+38], eax
:004179E6 8A86F6000000            mov al, byte ptr [esi+000000F6]
:004179EC 84C0                    test al, al
:004179EE 894C2434                mov dword ptr [esp+34], ecx
:004179F2 7522                    jne 00417A16
:004179F4 8B15089C7A00            mov edx, dword ptr [007A9C08]
:004179FA 8B4A28                  mov ecx, dword ptr [edx+28]
:004179FD 8D542428                lea edx, dword ptr [esp+28]
:00417A01 52                      push edx
:00417A02 8B542460                mov edx, dword ptr [esp+60]
:00417A06 8B01                    mov eax, dword ptr [ecx]
:00417A08 52                      push edx
:00417A09 FF5034                  call [eax+34]
:00417A0C 5F                      pop edi
:00417A0D 5E                      pop esi
:00417A0E 5D                      pop ebp
:00417A0F 5B                      pop ebx
:00417A10 83C448                  add esp, 00000048
:00417A13 C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004179F2(C)
|
:00417A16 A028997A00              mov al, byte ptr [007A9928]
:00417A1B A801                    test al, 01
:00417A1D 754F                    jne 00417A6E
:00417A1F 0C01                    or al, 01
:00417A21 B904000000              mov ecx, 00000004
:00417A26 A228997A00              mov byte ptr [007A9928], al
:00417A2B B878997A00              mov eax, 007A9978

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417A5F(C)
|
:00417A30 8B3D38B67A00            mov edi, dword ptr [007AB638]
:00417A36 8D50F0                  lea edx, dword ptr [eax-10]
:00417A39 83C014                  add eax, 00000014
:00417A3C 49                      dec ecx
:00417A3D 893A                    mov dword ptr [edx], edi
:00417A3F 8B3D3CB67A00            mov edi, dword ptr [007AB63C]
:00417A45 897A04                  mov dword ptr [edx+04], edi
:00417A48 8B3D40B67A00            mov edi, dword ptr [007AB640]
:00417A4E C740E800000000          mov [eax-18], 00000000
:00417A55 C740EC00000000          mov [eax-14], 00000000
:00417A5C 897A08                  mov dword ptr [edx+08], edi
:00417A5F 75CF                    jne 00417A30
:00417A61 68007C4100              push 00417C00
:00417A66 E8F2692A00              call 006BE45D
:00417A6B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417A1D(C)
|
:00417A6E 8B442430                mov eax, dword ptr [esp+30]
:00417A72 BA68997A00              mov edx, 007A9968
:00417A77 8BFA                    mov edi, edx
:00417A79 BB6C997A00              mov ebx, 007A996C
:00417A7E BD70997A00              mov ebp, 007A9970
:00417A83 2BF8                    sub edi, eax
:00417A85 2BD8                    sub ebx, eax
:00417A87 2BE8                    sub ebp, eax
:00417A89 8D4808                  lea ecx, dword ptr [eax+08]
:00417A8C 896C2414                mov dword ptr [esp+14], ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417B07(C)
|
:00417A90 8B86D4000000            mov eax, dword ptr [esi+000000D4]
:00417A96 8B6904                  mov ebp, dword ptr [ecx+04]
:00417A99 D941F8                  fld dword ptr [ecx-08]
:00417A9C D84864                  fmul dword ptr [eax+64]
:00417A9F D941FC                  fld dword ptr [ecx-04]
:00417AA2 D84868                  fmul dword ptr [eax+68]
:00417AA5 896C2410                mov dword ptr [esp+10], ebp
:00417AA9 83C214                  add edx, 00000014
:00417AAC 83C114                  add ecx, 00000014
:00417AAF 81FAB8997A00            cmp edx, 007A99B8
:00417AB5 D95C241C                fstp dword ptr [esp+1C]
:00417AB9 D9406C                  fld dword ptr [eax+6C]
:00417ABC D849EC                  fmul dword ptr [ecx-14]
:00417ABF D95C2420                fstp dword ptr [esp+20]
:00417AC3 D86064                  fsub dword ptr [eax+64]
:00417AC6 D84C2410                fmul dword ptr [esp+10]
:00417ACA D84064                  fadd dword ptr [eax+64]
:00417ACD D95AEC                  fstp dword ptr [edx-14]
:00417AD0 D944241C                fld dword ptr [esp+1C]
:00417AD4 D86068                  fsub dword ptr [eax+68]
:00417AD7 D84C2410                fmul dword ptr [esp+10]
:00417ADB D84068                  fadd dword ptr [eax+68]
:00417ADE D95AF0                  fstp dword ptr [edx-10]
:00417AE1 D9442420                fld dword ptr [esp+20]
:00417AE5 D8606C                  fsub dword ptr [eax+6C]
:00417AE8 D84C2410                fmul dword ptr [esp+10]
:00417AEC D8406C                  fadd dword ptr [eax+6C]
:00417AEF 8B442414                mov eax, dword ptr [esp+14]
:00417AF3 D95C39EC                fstp dword ptr [ecx+edi-14]
:00417AF7 C74419EC0000803F        mov [ecx+ebx-14], 3F800000
:00417AFF C74401EC0000803F        mov [ecx+eax-14], 3F800000
:00417B07 7C87                    jl 00417A90
:00417B09 8A0D28997A00            mov cl, byte ptr [007A9928]
:00417B0F B002                    mov al, 02
:00417B11 84C8                    test al, cl
:00417B13 C744243068997A00        mov [esp+30], 007A9968
:00417B1B 7517                    jne 00417B34
:00417B1D 8AD1                    mov dl, cl
:00417B1F 68F07B4100              push 00417BF0
:00417B24 0AD0                    or dl, al
:00417B26 881528997A00            mov byte ptr [007A9928], dl
:00417B2C E82C692A00              call 006BE45D
:00417B31 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417B1B(C)
|
:00417B34 D90538B67A00            fld dword ptr [007AB638]
:00417B3A D80D7C877000            fmul dword ptr [0070877C]
:00417B40 C744243C30997A00        mov [esp+3C], 007A9930
:00417B48 C605F3B77A0001          mov byte ptr [007AB7F3], 01
:00417B4F D95C2418                fstp dword ptr [esp+18]
:00417B53 D9053CB67A00            fld dword ptr [007AB63C]
:00417B59 D80D7C877000            fmul dword ptr [0070877C]
:00417B5F 8B442418                mov eax, dword ptr [esp+18]
:00417B63 A354997A00              mov dword ptr [007A9954], eax
:00417B68 A348997A00              mov dword ptr [007A9948], eax
:00417B6D D95C241C                fstp dword ptr [esp+1C]
:00417B71 D90540B67A00            fld dword ptr [007AB640]
:00417B77 D80D7C877000            fmul dword ptr [0070877C]
:00417B7D 8B4C241C                mov ecx, dword ptr [esp+1C]
:00417B81 A33C997A00              mov dword ptr [007A993C], eax
:00417B86 890D58997A00            mov dword ptr [007A9958], ecx
:00417B8C 890D4C997A00            mov dword ptr [007A994C], ecx
:00417B92 D95C2420                fstp dword ptr [esp+20]
:00417B96 8B542420                mov edx, dword ptr [esp+20]
:00417B9A 890D40997A00            mov dword ptr [007A9940], ecx
:00417BA0 890D34997A00            mov dword ptr [007A9934], ecx
:00417BA6 8B0D089C7A00            mov ecx, dword ptr [007A9C08]
:00417BAC A330997A00              mov dword ptr [007A9930], eax
:00417BB1 89155C997A00            mov dword ptr [007A995C], edx
:00417BB7 891550997A00            mov dword ptr [007A9950], edx
:00417BBD 891544997A00            mov dword ptr [007A9944], edx
:00417BC3 891538997A00            mov dword ptr [007A9938], edx
:00417BC9 8B4928                  mov ecx, dword ptr [ecx+28]
:00417BCC 8D442428                lea eax, dword ptr [esp+28]
:00417BD0 8B11                    mov edx, dword ptr [ecx]
:00417BD2 50                      push eax
:00417BD3 8B442460                mov eax, dword ptr [esp+60]
:00417BD7 50                      push eax
:00417BD8 FF5234                  call [edx+34]
:00417BDB E8706B1F00              call 0060E750

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00417850(C), :0041785B(C)
|
:00417BE0 5F                      pop edi
:00417BE1 5E                      pop esi
:00417BE2 5D                      pop ebp
:00417BE3 5B                      pop ebx
:00417BE4 83C448                  add esp, 00000048
:00417BE7 C20400                  ret 0004


:00417BEA 90                      nop
:00417BEB 90                      nop
:00417BEC 90                      nop
:00417BED 90                      nop
:00417BEE 90                      nop
:00417BEF 90                      nop
:00417BF0 C3                      ret


:00417BF1 90                      nop
:00417BF2 90                      nop
:00417BF3 90                      nop
:00417BF4 90                      nop
:00417BF5 90                      nop
:00417BF6 90                      nop
:00417BF7 90                      nop
:00417BF8 90                      nop
:00417BF9 90                      nop
:00417BFA 90                      nop
:00417BFB 90                      nop
:00417BFC 90                      nop
:00417BFD 90                      nop
:00417BFE 90                      nop
:00417BFF 90                      nop
:00417C00 C3                      ret


:00417C01 90                      nop
:00417C02 90                      nop
:00417C03 90                      nop
:00417C04 90                      nop
:00417C05 90                      nop
:00417C06 90                      nop
:00417C07 90                      nop
:00417C08 90                      nop
:00417C09 90                      nop
:00417C0A 90                      nop
:00417C0B 90                      nop
:00417C0C 90                      nop
:00417C0D 90                      nop
:00417C0E 90                      nop
:00417C0F 90                      nop
:00417C10 56                      push esi
:00417C11 8BF1                    mov esi, ecx
:00417C13 DB86FF000000            fild dword ptr [esi+000000FF]
:00417C19 D844240C                fadd dword ptr [esp+0C]
:00417C1D E86E6D2A00              call 006BE990
:00417C22 8986FF000000            mov dword ptr [esi+000000FF], eax
:00417C28 8B06                    mov eax, dword ptr [esi]
:00417C2A 8BCE                    mov ecx, esi
:00417C2C FF500C                  call [eax+0C]
:00417C2F B001                    mov al, 01
:00417C31 5E                      pop esi
:00417C32 C20C00                  ret 000C


:00417C35 90                      nop
:00417C36 90                      nop
:00417C37 90                      nop
:00417C38 90                      nop
:00417C39 90                      nop
:00417C3A 90                      nop
:00417C3B 90                      nop
:00417C3C 90                      nop
:00417C3D 90                      nop
:00417C3E 90                      nop
:00417C3F 90                      nop
:00417C40 8A442408                mov al, byte ptr [esp+08]
:00417C44 3C02                    cmp al, 02
:00417C46 8B81FF000000            mov eax, dword ptr [ecx+000000FF]
:00417C4C 7511                    jne 00417C5F
:00417C4E 48                      dec eax
:00417C4F 8981FF000000            mov dword ptr [ecx+000000FF], eax
:00417C55 8B01                    mov eax, dword ptr [ecx]
:00417C57 FF500C                  call [eax+0C]
:00417C5A B001                    mov al, 01
:00417C5C C20C00                  ret 000C



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417C4C(C)
|
:00417C5F 40                      inc eax
:00417C60 8981FF000000            mov dword ptr [ecx+000000FF], eax
:00417C66 8B01                    mov eax, dword ptr [ecx]
:00417C68 FF500C                  call [eax+0C]
:00417C6B B001                    mov al, 01
:00417C6D C20C00                  ret 000C


:00417C70 56                      push esi
:00417C71 8BF1                    mov esi, ecx
:00417C73 57                      push edi
:00417C74 33FF                    xor edi, edi
:00417C76 668B86F9000000          mov ax, word ptr [esi+000000F9]
:00417C7D 663B86F4000000          cmp ax, word ptr [esi+000000F4]
:00417C84 7568                    jne 00417CEE
:00417C86 668B8EF7000000          mov cx, word ptr [esi+000000F7]
:00417C8D 663B8EF2000000          cmp cx, word ptr [esi+000000F2]
:00417C94 7558                    jne 00417CEE
:00417C96 A1089C7A00              mov eax, dword ptr [007A9C08]
:00417C9B 33D2                    xor edx, edx
:00417C9D 668B96F4000000          mov dx, word ptr [esi+000000F4]
:00417CA4 8B88CD050000            mov ecx, dword ptr [eax+000005CD]
:00417CAA 8D04D1                  lea eax, dword ptr [ecx+8*edx]
:00417CAD 668B54D106              mov dx, word ptr [ecx+8*edx+06]
:00417CB2 663B96F2000000          cmp dx, word ptr [esi+000000F2]
:00417CB9 741D                    je 00417CD8
:00417CBB 6689BEF2000000          mov word ptr [esi+000000F2], di
:00417CC2 6689BEF4000000          mov word ptr [esi+000000F4], di
:00417CC9 A1089C7A00              mov eax, dword ptr [007A9C08]
:00417CCE 8B88CD050000            mov ecx, dword ptr [eax+000005CD]
:00417CD4 8B01                    mov eax, dword ptr [ecx]
:00417CD6 EB02                    jmp 00417CDA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417CB9(C)
|
:00417CD8 8B00                    mov eax, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417CD6(U)
|
:00417CDA 8B96FB000000            mov edx, dword ptr [esi+000000FB]
:00417CE0 8B8838010000            mov ecx, dword ptr [eax+00000138]
:00417CE6 3BD1                    cmp edx, ecx
:00417CE8 0F84AA000000            je 00417D98

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00417C84(C), :00417C94(C)
|
:00417CEE 8B06                    mov eax, dword ptr [esi]
:00417CF0 8BCE                    mov ecx, esi
:00417CF2 FF500C                  call [eax+0C]
:00417CF5 668B8EF9000000          mov cx, word ptr [esi+000000F9]
:00417CFC 663B8EF4000000          cmp cx, word ptr [esi+000000F4]
:00417D03 7510                    jne 00417D15
:00417D05 668B96F7000000          mov dx, word ptr [esi+000000F7]
:00417D0C 663B96F2000000          cmp dx, word ptr [esi+000000F2]
:00417D13 740A                    je 00417D1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417D03(C)
|
:00417D15 C786FF000000FFFFFFFF    mov dword ptr [esi+000000FF], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417D13(C)
|
:00417D1F 668B86F2000000          mov ax, word ptr [esi+000000F2]
:00417D26 33D2                    xor edx, edx
:00417D28 668986F7000000          mov word ptr [esi+000000F7], ax
:00417D2F 668B8EF4000000          mov cx, word ptr [esi+000000F4]
:00417D36 66898EF9000000          mov word ptr [esi+000000F9], cx
:00417D3D A1089C7A00              mov eax, dword ptr [007A9C08]
:00417D42 668B96F4000000          mov dx, word ptr [esi+000000F4]
:00417D49 8B88CD050000            mov ecx, dword ptr [eax+000005CD]
:00417D4F 8D04D1                  lea eax, dword ptr [ecx+8*edx]
:00417D52 668B54D106              mov dx, word ptr [ecx+8*edx+06]
:00417D57 663B96F2000000          cmp dx, word ptr [esi+000000F2]
:00417D5E 742A                    je 00417D8A
:00417D60 6689BEF2000000          mov word ptr [esi+000000F2], di
:00417D67 6689BEF4000000          mov word ptr [esi+000000F4], di
:00417D6E A1089C7A00              mov eax, dword ptr [007A9C08]
:00417D73 5F                      pop edi
:00417D74 8B88CD050000            mov ecx, dword ptr [eax+000005CD]
:00417D7A 8B01                    mov eax, dword ptr [ecx]
:00417D7C 8B9038010000            mov edx, dword ptr [eax+00000138]
:00417D82 8996FB000000            mov dword ptr [esi+000000FB], edx
:00417D88 5E                      pop esi
:00417D89 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417D5E(C)
|
:00417D8A 8B00                    mov eax, dword ptr [eax]
:00417D8C 8B9038010000            mov edx, dword ptr [eax+00000138]
:00417D92 8996FB000000            mov dword ptr [esi+000000FB], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417CE8(C)
|
:00417D98 5F                      pop edi
:00417D99 5E                      pop esi
:00417D9A C3                      ret


:00417D9B 90                      nop
:00417D9C 90                      nop
:00417D9D 90                      nop
:00417D9E 90                      nop
:00417D9F 90                      nop

* Referenced by a CALL at Address:
|:0041902B   
|
:00417DA0 8B442404                mov eax, dword ptr [esp+04]
:00417DA4 53                      push ebx
:00417DA5 56                      push esi
:00417DA6 8B7104                  mov esi, dword ptr [ecx+04]
:00417DA9 8B5004                  mov edx, dword ptr [eax+04]
:00417DAC 3BD6                    cmp edx, esi
:00417DAE 0F85AE000000            jne 00417E62
:00417DB4 8B5008                  mov edx, dword ptr [eax+08]
:00417DB7 8B7108                  mov esi, dword ptr [ecx+08]
:00417DBA 3BD6                    cmp edx, esi
:00417DBC 0F85A0000000            jne 00417E62
:00417DC2 8B500C                  mov edx, dword ptr [eax+0C]
:00417DC5 8B710C                  mov esi, dword ptr [ecx+0C]
:00417DC8 3BD6                    cmp edx, esi
:00417DCA 0F8592000000            jne 00417E62
:00417DD0 8B5010                  mov edx, dword ptr [eax+10]
:00417DD3 8B7110                  mov esi, dword ptr [ecx+10]
:00417DD6 3BD6                    cmp edx, esi
:00417DD8 0F8584000000            jne 00417E62
:00417DDE 8B5014                  mov edx, dword ptr [eax+14]
:00417DE1 8B7114                  mov esi, dword ptr [ecx+14]
:00417DE4 3BD6                    cmp edx, esi
:00417DE6 757A                    jne 00417E62
:00417DE8 8B5018                  mov edx, dword ptr [eax+18]
:00417DEB 8B7118                  mov esi, dword ptr [ecx+18]
:00417DEE 3BD6                    cmp edx, esi
:00417DF0 7570                    jne 00417E62
:00417DF2 8B501C                  mov edx, dword ptr [eax+1C]
:00417DF5 8B711C                  mov esi, dword ptr [ecx+1C]
:00417DF8 3BD6                    cmp edx, esi
:00417DFA 7566                    jne 00417E62
:00417DFC 8B5120                  mov edx, dword ptr [ecx+20]
:00417DFF 8B7020                  mov esi, dword ptr [eax+20]
:00417E02 3BD6                    cmp edx, esi
:00417E04 755C                    jne 00417E62
:00417E06 8B5124                  mov edx, dword ptr [ecx+24]
:00417E09 8B7024                  mov esi, dword ptr [eax+24]
:00417E0C 3BD6                    cmp edx, esi
:00417E0E 7552                    jne 00417E62
:00417E10 8B5129                  mov edx, dword ptr [ecx+29]
:00417E13 8B7029                  mov esi, dword ptr [eax+29]
:00417E16 3BD6                    cmp edx, esi
:00417E18 7548                    jne 00417E62
:00417E1A 8B512D                  mov edx, dword ptr [ecx+2D]
:00417E1D 8B702D                  mov esi, dword ptr [eax+2D]
:00417E20 3BD6                    cmp edx, esi
:00417E22 753E                    jne 00417E62
:00417E24 8B5131                  mov edx, dword ptr [ecx+31]
:00417E27 8B7031                  mov esi, dword ptr [eax+31]
:00417E2A 3BD6                    cmp edx, esi
:00417E2C 7534                    jne 00417E62
:00417E2E 8A5128                  mov dl, byte ptr [ecx+28]
:00417E31 8A5828                  mov bl, byte ptr [eax+28]
:00417E34 3AD3                    cmp dl, bl
:00417E36 752A                    jne 00417E62
:00417E38 8B5135                  mov edx, dword ptr [ecx+35]
:00417E3B 8B7035                  mov esi, dword ptr [eax+35]
:00417E3E 3BD6                    cmp edx, esi
:00417E40 7520                    jne 00417E62
:00417E42 33F6                    xor esi, esi
:00417E44 8D5139                  lea edx, dword ptr [ecx+39]
:00417E47 2BC1                    sub eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417E59(C)
|
:00417E49 8B0A                    mov ecx, dword ptr [edx]
:00417E4B 8B1C10                  mov ebx, dword ptr [eax+edx]
:00417E4E 3BCB                    cmp ecx, ebx
:00417E50 7510                    jne 00417E62
:00417E52 46                      inc esi
:00417E53 83C204                  add edx, 00000004
:00417E56 83FE0C                  cmp esi, 0000000C
:00417E59 7CEE                    jl 00417E49
:00417E5B 5E                      pop esi
:00417E5C B001                    mov al, 01
:00417E5E 5B                      pop ebx
:00417E5F C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00417DAE(C), :00417DBC(C), :00417DCA(C), :00417DD8(C), :00417DE6(C)
|:00417DF0(C), :00417DFA(C), :00417E04(C), :00417E0E(C), :00417E18(C)
|:00417E22(C), :00417E2C(C), :00417E36(C), :00417E40(C), :00417E50(C)
|
:00417E62 5E                      pop esi
:00417E63 32C0                    xor al, al
:00417E65 5B                      pop ebx
:00417E66 C20400                  ret 0004


:00417E69 90                      nop
:00417E6A 90                      nop
:00417E6B 90                      nop
:00417E6C 90                      nop
:00417E6D 90                      nop
:00417E6E 90                      nop
:00417E6F 90                      nop

* Referenced by a CALL at Address:
|:0041AF1F   
|
:00417E70 6AFF                    push FFFFFFFF
:00417E72 68ED196D00              push 006D19ED
:00417E77 64A100000000            mov eax, dword ptr fs:[00000000]
:00417E7D 50                      push eax
:00417E7E 64892500000000          mov dword ptr fs:[00000000], esp
:00417E85 83EC18                  sub esp, 00000018
:00417E88 53                      push ebx
:00417E89 56                      push esi
:00417E8A 8BF1                    mov esi, ecx
:00417E8C 57                      push edi
:00417E8D 89742410                mov dword ptr [esp+10], esi
:00417E91 8D44240F                lea eax, dword ptr [esp+0F]
:00417E95 33FF                    xor edi, edi
:00417E97 50                      push eax
:00417E98 8D4E04                  lea ecx, dword ptr [esi+04]
:00417E9B 897C2430                mov dword ptr [esp+30], edi
:00417E9F E85C480000              call 0041C700
:00417EA4 C70690877000            mov dword ptr [esi], 00708790
:00417EAA C744242C01000000        mov [esp+2C], 00000001
:00417EB2 897E0C                  mov dword ptr [esi+0C], edi
:00417EB5 897E10                  mov dword ptr [esi+10], edi
:00417EB8 897E14                  mov dword ptr [esi+14], edi
:00417EBB 897E18                  mov dword ptr [esi+18], edi
:00417EBE 897E1C                  mov dword ptr [esi+1C], edi
:00417EC1 C7460878877000          mov [esi+08], 00708778
:00417EC8 8B1D88DA7900            mov ebx, dword ptr [0079DA88]
:00417ECE 43                      inc ebx
:00417ECF 891D88DA7900            mov dword ptr [0079DA88], ebx
:00417ED5 BB94DA7900              mov ebx, 0079DA94
:00417EDA 895E24                  mov dword ptr [esi+24], ebx
:00417EDD 8B1588DA7900            mov edx, dword ptr [0079DA88]
:00417EE3 42                      inc edx
:00417EE4 891588DA7900            mov dword ptr [0079DA88], edx
:00417EEA 895E28                  mov dword ptr [esi+28], ebx
:00417EED 8B0D88DA7900            mov ecx, dword ptr [0079DA88]
:00417EF3 41                      inc ecx
:00417EF4 890D88DA7900            mov dword ptr [0079DA88], ecx
:00417EFA 895E2C                  mov dword ptr [esi+2C], ebx
:00417EFD 8D4E37                  lea ecx, dword ptr [esi+37]
:00417F00 C644242C05              mov [esp+2C], 05
:00417F05 E8B6B7FEFF              call 004036C0
:00417F0A 8D4E4B                  lea ecx, dword ptr [esi+4B]
:00417F0D C644242C06              mov [esp+2C], 06
:00417F12 E8A9B7FEFF              call 004036C0
:00417F17 8D4E5F                  lea ecx, dword ptr [esi+5F]
:00417F1A C644242C07              mov [esp+2C], 07
:00417F1F E89CB7FEFF              call 004036C0
:00417F24 8D4E73                  lea ecx, dword ptr [esi+73]
:00417F27 C644242C08              mov [esp+2C], 08
:00417F2C E88FB7FEFF              call 004036C0
:00417F31 8D8E87000000            lea ecx, dword ptr [esi+00000087]
:00417F37 C644242C09              mov [esp+2C], 09
:00417F3C E87FB7FEFF              call 004036C0
:00417F41 8D8E9B000000            lea ecx, dword ptr [esi+0000009B]
:00417F47 C644242C0A              mov [esp+2C], 0A
:00417F4C E86FB7FEFF              call 004036C0
:00417F51 89BEE8000000            mov dword ptr [esi+000000E8], edi
:00417F57 89BEEC000000            mov dword ptr [esi+000000EC], edi
:00417F5D 8BCE                    mov ecx, esi
:00417F5F C644242C0B              mov [esp+2C], 0B
:00417F64 C7060C867000            mov dword ptr [esi], 0070860C
:00417F6A C7460804867000          mov [esi+08], 00708604
:00417F71 E8BA491E00              call 005FC930
:00417F76 8B542438                mov edx, dword ptr [esp+38]
:00417F7A 8D8EC0000000            lea ecx, dword ptr [esi+000000C0]
:00417F80 8B02                    mov eax, dword ptr [edx]
:00417F82 8901                    mov dword ptr [ecx], eax
:00417F84 8B4204                  mov eax, dword ptr [edx+04]
:00417F87 894104                  mov dword ptr [ecx+04], eax
:00417F8A 8B4208                  mov eax, dword ptr [edx+08]
:00417F8D 894108                  mov dword ptr [ecx+08], eax
:00417F90 8B520C                  mov edx, dword ptr [edx+0C]
:00417F93 89510C                  mov dword ptr [ecx+0C], edx
:00417F96 8B4C2434                mov ecx, dword ptr [esp+34]
:00417F9A 3BCF                    cmp ecx, edi
:00417F9C 7407                    je 00417FA5
:00417F9E 8B01                    mov eax, dword ptr [ecx]
:00417FA0 57                      push edi
:00417FA1 56                      push esi
:00417FA2 FF503C                  call [eax+3C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417F9C(C)
|
:00417FA5 6689BEF2000000          mov word ptr [esi+000000F2], di
:00417FAC 6689BEF4000000          mov word ptr [esi+000000F4], di
:00417FB3 A188DA7900              mov eax, dword ptr [0079DA88]
:00417FB8 C744242C0C000000        mov [esp+2C], 0000000C
:00417FC0 40                      inc eax
:00417FC1 A388DA7900              mov dword ptr [0079DA88], eax
:00417FC6 899EFA000000            mov dword ptr [esi+000000FA], ebx
:00417FCC 8B1588DA7900            mov edx, dword ptr [0079DA88]
:00417FD2 42                      inc edx
:00417FD3 891588DA7900            mov dword ptr [0079DA88], edx
:00417FD9 899EFE000000            mov dword ptr [esi+000000FE], ebx
:00417FDF 8B0D88DA7900            mov ecx, dword ptr [0079DA88]
:00417FE5 41                      inc ecx
:00417FE6 890D88DA7900            mov dword ptr [0079DA88], ecx
:00417FEC 899E02010000            mov dword ptr [esi+00000102], ebx
:00417FF2 A188DA7900              mov eax, dword ptr [0079DA88]
:00417FF7 40                      inc eax
:00417FF8 A388DA7900              mov dword ptr [0079DA88], eax
:00417FFD 899E06010000            mov dword ptr [esi+00000106], ebx
:00418003 8D8E0A010000            lea ecx, dword ptr [esi+0000010A]
:00418009 C644242C10              mov [esp+2C], 10
:0041800E E8CDFF1300              call 00557FE0
:00418013 6803010000              push 00000103
:00418018 C7060CA57000            mov dword ptr [esi], 0070A50C
:0041801E C7460804A57000          mov [esi+08], 0070A504
:00418025 E856921C00              call 005E1280
:0041802A 83C404                  add esp, 00000004
:0041802D 89442438                mov dword ptr [esp+38], eax
:00418031 3BC7                    cmp eax, edi
:00418033 C644242C11              mov [esp+2C], 11
:00418038 7433                    je 0041806D
:0041803A 8D4C2414                lea ecx, dword ptr [esp+14]
:0041803E 6A01                    push 00000001
:00418040 51                      push ecx
:00418041 56                      push esi
:00418042 8BC8                    mov ecx, eax
:00418044 897C2420                mov dword ptr [esp+20], edi
:00418048 C74424240E000000        mov [esp+24], 0000000E
:00418050 C74424285D000000        mov [esp+28], 0000005D
:00418058 C744242C6B000000        mov [esp+2C], 0000006B
:00418060 E80BF6FFFF              call 00417670
:00418065 8986F6000000            mov dword ptr [esi+000000F6], eax
:0041806B EB06                    jmp 00418073

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418038(C)
|
:0041806D 89BEF6000000            mov dword ptr [esi+000000F6], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041806B(U)
|
:00418073 8B4C2424                mov ecx, dword ptr [esp+24]
:00418077 8BC6                    mov eax, esi
:00418079 5F                      pop edi
:0041807A 5E                      pop esi
:0041807B 5B                      pop ebx
:0041807C 64890D00000000          mov dword ptr fs:[00000000], ecx
:00418083 83C424                  add esp, 00000024
:00418086 C20800                  ret 0008


:00418089 90                      nop
:0041808A 90                      nop
:0041808B 90                      nop
:0041808C 90                      nop
:0041808D 90                      nop
:0041808E 90                      nop
:0041808F 90                      nop
:00418090 55                      push ebp
:00418091 8BEC                    mov ebp, esp
:00418093 6AFF                    push FFFFFFFF
:00418095 68A71A6D00              push 006D1AA7
:0041809A 64A100000000            mov eax, dword ptr fs:[00000000]
:004180A0 50                      push eax
:004180A1 64892500000000          mov dword ptr fs:[00000000], esp
:004180A8 83EC34                  sub esp, 00000034
:004180AB 53                      push ebx
:004180AC 8B1D88DA7900            mov ebx, dword ptr [0079DA88]
:004180B2 56                      push esi
:004180B3 43                      inc ebx
:004180B4 57                      push edi
:004180B5 8BF9                    mov edi, ecx
:004180B7 891D88DA7900            mov dword ptr [0079DA88], ebx
:004180BD C745EC94DA7900          mov [ebp-14], 0079DA94
:004180C4 8B87D4000000            mov eax, dword ptr [edi+000000D4]
:004180CA 33DB                    xor ebx, ebx
:004180CC 895DFC                  mov dword ptr [ebp-04], ebx
:004180CF 8B4818                  mov ecx, dword ptr [eax+18]
:004180D2 83C064                  add eax, 00000064
:004180D5 50                      push eax
:004180D6 8B11                    mov edx, dword ptr [ecx]
:004180D8 FF5230                  call [edx+30]
:004180DB 8B97D4000000            mov edx, dword ptr [edi+000000D4]
:004180E1 8B7508                  mov esi, dword ptr [ebp+08]
:004180E4 8D8FFE000000            lea ecx, dword ptr [edi+000000FE]
:004180EA 53                      push ebx
:004180EB 8B06                    mov eax, dword ptr [esi]
:004180ED 895DD8                  mov dword ptr [ebp-28], ebx
:004180F0 895DDC                  mov dword ptr [ebp-24], ebx
:004180F3 51                      push ecx
:004180F4 8B4A18                  mov ecx, dword ptr [edx+18]
:004180F7 8D55D8                  lea edx, dword ptr [ebp-28]
:004180FA 51                      push ecx
:004180FB 52                      push edx
:004180FC 8BCE                    mov ecx, esi
:004180FE FF5014                  call [eax+14]
:00418101 8B8FD4000000            mov ecx, dword ptr [edi+000000D4]
:00418107 83C164                  add ecx, 00000064
:0041810A D901                    fld dword ptr [ecx]
:0041810C D80D0C8C7000            fmul dword ptr [00708C0C]
:00418112 D95DE4                  fstp dword ptr [ebp-1C]
:00418115 D945E4                  fld dword ptr [ebp-1C]
:00418118 9B                      wait
:00418119 D97DF2                  fstcw word ptr [ebp-0E]
:0041811C 9B                      wait
:0041811D 668B45F2                mov ax, word ptr [ebp-0E]
:00418121 80CC0C                  or ah, 0C
:00418124 6689450A                mov word ptr [ebp+0A], ax
:00418128 D96D0A                  fldcw  [ebp+0A]
:0041812B DB5DDC                  fistp dword ptr [ebp-24]
:0041812E D96DF2                  fldcw  [ebp-0E]
:00418131 8B45DC                  mov eax, dword ptr [ebp-24]
:00418134 BAFF000000              mov edx, 000000FF
:00418139 894508                  mov dword ptr [ebp+08], eax
:0041813C 3BC2                    cmp eax, edx
:0041813E 8955E4                  mov dword ptr [ebp-1C], edx
:00418141 895DDC                  mov dword ptr [ebp-24], ebx
:00418144 8D4508                  lea eax, dword ptr [ebp+08]
:00418147 7C03                    jl 0041814C
:00418149 8D45E4                  lea eax, dword ptr [ebp-1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418147(C)
|
:0041814C 3918                    cmp dword ptr [eax], ebx
:0041814E 7F03                    jg 00418153
:00418150 8D45DC                  lea eax, dword ptr [ebp-24]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041814E(C)
|
:00418153 8B00                    mov eax, dword ptr [eax]
:00418155 8845EA                  mov byte ptr [ebp-16], al
:00418158 D94104                  fld dword ptr [ecx+04]
:0041815B D80D0C8C7000            fmul dword ptr [00708C0C]
:00418161 D95DDC                  fstp dword ptr [ebp-24]
:00418164 D945DC                  fld dword ptr [ebp-24]
:00418167 9B                      wait
:00418168 D97DF2                  fstcw word ptr [ebp-0E]
:0041816B 9B                      wait
:0041816C 668B45F2                mov ax, word ptr [ebp-0E]
:00418170 80CC0C                  or ah, 0C
:00418173 6689450A                mov word ptr [ebp+0A], ax
:00418177 D96D0A                  fldcw  [ebp+0A]
:0041817A DB5DE4                  fistp dword ptr [ebp-1C]
:0041817D D96DF2                  fldcw  [ebp-0E]
:00418180 8B45E4                  mov eax, dword ptr [ebp-1C]
:00418183 8955DC                  mov dword ptr [ebp-24], edx
:00418186 894508                  mov dword ptr [ebp+08], eax
:00418189 3BC2                    cmp eax, edx
:0041818B 895DE4                  mov dword ptr [ebp-1C], ebx
:0041818E 8D4508                  lea eax, dword ptr [ebp+08]
:00418191 7C03                    jl 00418196
:00418193 8D45DC                  lea eax, dword ptr [ebp-24]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418191(C)
|
:00418196 3918                    cmp dword ptr [eax], ebx
:00418198 7F03                    jg 0041819D
:0041819A 8D45E4                  lea eax, dword ptr [ebp-1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418198(C)
|
:0041819D 8B00                    mov eax, dword ptr [eax]
:0041819F 8845E9                  mov byte ptr [ebp-17], al
:004181A2 D94108                  fld dword ptr [ecx+08]
:004181A5 D80D0C8C7000            fmul dword ptr [00708C0C]
:004181AB D95DDC                  fstp dword ptr [ebp-24]
:004181AE D945DC                  fld dword ptr [ebp-24]
:004181B1 9B                      wait
:004181B2 D97DF2                  fstcw word ptr [ebp-0E]
:004181B5 9B                      wait
:004181B6 668B45F2                mov ax, word ptr [ebp-0E]
:004181BA 80CC0C                  or ah, 0C
:004181BD 6689450A                mov word ptr [ebp+0A], ax
:004181C1 D96D0A                  fldcw  [ebp+0A]
:004181C4 DB5DE4                  fistp dword ptr [ebp-1C]
:004181C7 D96DF2                  fldcw  [ebp-0E]
:004181CA 8B45E4                  mov eax, dword ptr [ebp-1C]
:004181CD 8955DC                  mov dword ptr [ebp-24], edx
:004181D0 894508                  mov dword ptr [ebp+08], eax
:004181D3 3BC2                    cmp eax, edx
:004181D5 895DE4                  mov dword ptr [ebp-1C], ebx
:004181D8 8D4508                  lea eax, dword ptr [ebp+08]
:004181DB 7C03                    jl 004181E0
:004181DD 8D45DC                  lea eax, dword ptr [ebp-24]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004181DB(C)
|
:004181E0 3918                    cmp dword ptr [eax], ebx
:004181E2 7F03                    jg 004181E7
:004181E4 8D45E4                  lea eax, dword ptr [ebp-1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004181E2(C)
|
:004181E7 8B00                    mov eax, dword ptr [eax]
:004181E9 8855EB                  mov byte ptr [ebp-15], dl
:004181EC 6A00                    push 00000000
:004181EE 8D4DE8                  lea ecx, dword ptr [ebp-18]
:004181F1 8845E8                  mov byte ptr [ebp-18], al
:004181F4 8B06                    mov eax, dword ptr [esi]
:004181F6 6A01                    push 00000001
:004181F8 8D55C0                  lea edx, dword ptr [ebp-40]
:004181FB 51                      push ecx
:004181FC 52                      push edx
:004181FD 8BCE                    mov ecx, esi
:004181FF C745C000000000          mov [ebp-40], 00000000
:00418206 C745C40C000000          mov [ebp-3C], 0000000C
:0041820D C745C891000000          mov [ebp-38], 00000091
:00418214 C745CC0D000000          mov [ebp-34], 0000000D
:0041821B FF5024                  call [eax+24]
:0041821E C745D063000000          mov [ebp-30], 00000063
:00418225 C745D418000000          mov [ebp-2C], 00000018

* Possible Indirect StringData Ref from Data Obj ->"strength"
                                  |
:0041822C BB38677900              mov ebx, 00796738

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418299(C)
|
:00418231 8B03                    mov eax, dword ptr [ebx]
:00418233 50                      push eax

* Possible StringData Ref from Data Obj ->"short_%s"
                                  |
:00418234 6838BE7800              push 0078BE38
:00418239 E8723B1D00              call 005EBDB0
:0041823E 83C408                  add esp, 00000008
:00418241 8D4D08                  lea ecx, dword ptr [ebp+08]
:00418244 50                      push eax
:00418245 51                      push ecx
:00418246 B9D7AF7A00              mov ecx, 007AAFD7
:0041824B E880C41E00              call 006046D0
:00418250 8B16                    mov edx, dword ptr [esi]
:00418252 6A00                    push 00000000
:00418254 50                      push eax
:00418255 8B87D4000000            mov eax, dword ptr [edi+000000D4]
:0041825B C645FC01                mov [ebp-04], 01
:0041825F 8B4818                  mov ecx, dword ptr [eax+18]
:00418262 8D45D0                  lea eax, dword ptr [ebp-30]
:00418265 51                      push ecx
:00418266 50                      push eax
:00418267 8BCE                    mov ecx, esi
:00418269 FF5214                  call [edx+14]
:0041826C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041826F C645FC00                mov [ebp-04], 00
:00418273 8D41F4                  lea eax, dword ptr [ecx-0C]
:00418276 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00418279 49                      dec ecx
:0041827A 8908                    mov dword ptr [eax], ecx
:0041827C 7509                    jne 00418287
:0041827E 50                      push eax
:0041827F E87C901C00              call 005E1300
:00418284 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041827C(C)
|
:00418287 8B55D4                  mov edx, dword ptr [ebp-2C]
:0041828A 83C304                  add ebx, 00000004
:0041828D 83C20A                  add edx, 0000000A
:00418290 81FB54677900            cmp ebx, 00796754
:00418296 8955D4                  mov dword ptr [ebp-2C], edx
:00418299 7C96                    jl 00418231
:0041829B 8D970E010000            lea edx, dword ptr [edi+0000010E]
:004182A1 C745D07F000000          mov [ebp-30], 0000007F
:004182A8 C745D418000000          mov [ebp-2C], 00000018
:004182AF 895508                  mov dword ptr [ebp+08], edx
:004182B2 C745E807000000          mov [ebp-18], 00000007

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004182FD(C)
|
:004182B9 8B4508                  mov eax, dword ptr [ebp+08]
:004182BC 8B1E                    mov ebx, dword ptr [esi]
:004182BE 6A00                    push 00000000
:004182C0 8B08                    mov ecx, dword ptr [eax]
:004182C2 51                      push ecx

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:004182C3 6888B77800              push 0078B788
:004182C8 E8E33A1D00              call 005EBDB0
:004182CD 8B97D4000000            mov edx, dword ptr [edi+000000D4]
:004182D3 83C408                  add esp, 00000008
:004182D6 8D4DD0                  lea ecx, dword ptr [ebp-30]
:004182D9 50                      push eax
:004182DA 8B4218                  mov eax, dword ptr [edx+18]
:004182DD 50                      push eax
:004182DE 51                      push ecx
:004182DF 8BCE                    mov ecx, esi
:004182E1 FF5314                  call [ebx+14]
:004182E4 8B55D4                  mov edx, dword ptr [ebp-2C]
:004182E7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004182EA 8B45E8                  mov eax, dword ptr [ebp-18]
:004182ED 83C20A                  add edx, 0000000A
:004182F0 83C104                  add ecx, 00000004
:004182F3 48                      dec eax
:004182F4 8955D4                  mov dword ptr [ebp-2C], edx
:004182F7 894D08                  mov dword ptr [ebp+08], ecx
:004182FA 8945E8                  mov dword ptr [ebp-18], eax
:004182FD 75BA                    jne 004182B9
:004182FF 8B1528FE7200            mov edx, dword ptr [0072FE28]
:00418305 8D4D08                  lea ecx, dword ptr [ebp+08]
:00418308 52                      push edx

* Possible StringData Ref from Data Obj ->"equipMenu_HP"
                                  |
:00418309 6828BE7800              push 0078BE28
:0041830E E89D2D1D00              call 005EB0B0
:00418313 8D4508                  lea eax, dword ptr [ebp+08]
:00418316 8D4DDC                  lea ecx, dword ptr [ebp-24]
:00418319 50                      push eax
:0041831A 51                      push ecx
:0041831B B9B0AF7A00              mov ecx, 007AAFB0
:00418320 C645FC02                mov [ebp-04], 02
:00418324 E8A7C31E00              call 006046D0
:00418329 33DB                    xor ebx, ebx
:0041832B 8B16                    mov edx, dword ptr [esi]
:0041832D 53                      push ebx
:0041832E 50                      push eax
:0041832F 8B87D4000000            mov eax, dword ptr [edi+000000D4]
:00418335 B903000000              mov ecx, 00000003
:0041833A 884DFC                  mov byte ptr [ebp-04], cl
:0041833D 894DE0                  mov dword ptr [ebp-20], ecx
:00418340 C745E46A000000          mov [ebp-1C], 0000006A
:00418347 8B4818                  mov ecx, dword ptr [eax+18]
:0041834A 8D45E0                  lea eax, dword ptr [ebp-20]
:0041834D 51                      push ecx
:0041834E 50                      push eax
:0041834F 8BCE                    mov ecx, esi
:00418351 FF5214                  call [edx+14]
:00418354 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00418357 C645FC02                mov [ebp-04], 02
:0041835B 8D41F4                  lea eax, dword ptr [ecx-0C]
:0041835E 8B49F4                  mov ecx, dword ptr [ecx-0C]
:00418361 49                      dec ecx
:00418362 8908                    mov dword ptr [eax], ecx
:00418364 7509                    jne 0041836F
:00418366 50                      push eax
:00418367 E8948F1C00              call 005E1300
:0041836C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418364(C)
|
:0041836F 8B5508                  mov edx, dword ptr [ebp+08]
:00418372 885DFC                  mov byte ptr [ebp-04], bl
:00418375 8B4AF4                  mov ecx, dword ptr [edx-0C]
:00418378 8D42F4                  lea eax, dword ptr [edx-0C]
:0041837B 49                      dec ecx
:0041837C 8908                    mov dword ptr [eax], ecx
:0041837E 7509                    jne 00418389
:00418380 50                      push eax
:00418381 E87A8F1C00              call 005E1300
:00418386 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041837E(C)
|
:00418389 8B872E010000            mov eax, dword ptr [edi+0000012E]