Function at 0x41a4b4
Capabilities:
Check http status code
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push 0x4044c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x250
call fcn.004044c0
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401378
push 0x11
push 0x40baf8
lea eax, [ebp - 0x50]
push eax
call fcn.004048da
or dword [ebp - 0x180], 0xffffffff
mov dword [ebp - 0x188], 2
lea edx, [ebp - 0x188]
mov ecx, 0x5211c8
call fcn.004048d4
and dword [ebp - 0x180], 0
mov dword [ebp - 0x188], 2
lea edx, [ebp - 0x188]
mov ecx, 0x5211b8
call fcn.004048d4
and dword [ebp - 0x180], 0
mov dword [ebp - 0x188], 2
lea edx, [ebp - 0x188]
mov ecx, 0x5211e8
call fcn.004048d4
and dword [ebp - 0x180], 0
mov dword [ebp - 0x188], 2
lea edx, [ebp - 0x188]
mov ecx, 0x5211f8
call fcn.004048d4
and dword [ebp - 0x180], 0
mov dword [ebp - 0x188], 0xb
lea edx, [ebp - 0x188]
mov ecx, 0x5211d8
call fcn.004048d4
fldz
fstp qword [0x5210bc]
and word [0x52121e], 0
mov eax, dword [ebp + 8]
push dword [eax]
push 0x40a6cc
call fcn.004048ce
mov esi, eax
neg esi
sbb esi, esi
neg esi
mov eax, dword [ebp + 8]
push dword [eax]
push 0x40aeb4
call fcn.004048ce
neg eax
sbb eax, eax
inc eax
or esi, eax
test esi, esi
jne 0x41a7a9
cmp dword [0x52139c], 0
jne 0x41a601
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0x250], 0x52139c
jmp 0x41a60b
mov dword [ebp - 0x250], 0x52139c
mov eax, dword [ebp - 0x250]
mov eax, dword [eax]
mov dword [ebp - 0x20c], eax
lea eax, [ebp - 0x204]
push eax
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax]
push dword [ebp - 0x20c]
call dword [eax + 0x58]
fnclex
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0
jge 0x41a662
push 0x58
push 0x40aeb8
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
call fcn.004048c2
mov dword [ebp - 0x254], eax
jmp 0x41a669
and dword [ebp - 0x254], 0
push 0
lea eax, [ebp - 0xc8]
push eax
call fcn.004048bc
push 0
lea eax, [ebp - 0xf8]
push eax
call fcn.004048bc
mov edx, 0x40a6cc
lea ecx, [ebp - 0xb8]
call fcn.004048b0
mov dword [ebp - 0x180], 0x40b8e0
mov dword [ebp - 0x188], 8
mov dword [ebp - 0x190], 0x40b92c
mov dword [ebp - 0x198], 8
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.004048a4
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.004048a4
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.004048a4
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov edx, 0x40b8c8
lea ecx, [ebp - 0xb0]
call fcn.004048b0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x208], eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x208]
push eax
call fcn.004ea3c5
mov edx, eax
mov ecx, 0x5211b4
call fcn.004048b6
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xb0]
push eax
push 3
call fcn.0040489e
add esp, 0x10
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 5
call fcn.00404898
add esp, 0x18
jmp 0x41a7cb
mov eax, dword [ebp + 8]
push dword [eax]
push 0x40aeb4
call fcn.004048ce
test eax, eax
je 0x41a7cb
call fcn.00526416
mov ecx, 0x5211b4
call fcn.004048b0
push dword [0x5211b4]
push 0x40a6cc
call fcn.004048ce
test eax, eax
jne 0x41a7e4
jmp 0x41e707
mov dword [ebp - 0x180], 0x5211b4
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
mov dword [ebp - 0x190], 0x40b9a8
mov dword [ebp - 0x198], 0x8008
mov dword [ebp - 0x1a0], 0x5211b4
mov dword [ebp - 0x1a8], 0x4008
push 4
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00404880
mov dword [ebp - 0x1b0], 0x40b9b8
mov dword [ebp - 0x1b8], 0x8008
mov dword [ebp - 0x1c0], 0x5211b4
mov dword [ebp - 0x1c8], 0x4008
push 4
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.0040487a
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x148]
push eax
call fcn.00404880
mov dword [ebp - 0x1d0], 0x40b9c8
mov dword [ebp - 0x1d8], 0x8008
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.0040488c
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x158]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x168]
push eax
call fcn.0040488c
push eax
call fcn.00404892
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 6
call fcn.00404898
add esp, 0x1c
movsx eax, word [ebp - 0x20c]
test eax, eax
je 0x41a9ae
or word [0x52121e], 0xffff
push 0x52128c
push 0x5212b0
call fcn.004cb703
or word [0x52121e], 0xffff
jmp 0x41aa72
push dword [0x52128c]
push dword [0x5211b4]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.004048b6
push eax
push 2
push 0xffffffffffffffff
push 0x20
call fcn.00404874
lea ecx, [ebp - 0xb0]
call fcn.00404868
push 0
push dword [0x5211b4]
call fcn.0040485c
push eax
push 1
push 0x11
push 0x52126c
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push 2
push 0x52126c
push 0x40b9d8
call fcn.00404856
push 2
call fcn.00404850
movsx eax, word [0x521220]
test eax, eax
jne 0x41aa6a
cmp word [0x521248], 0xffff
jne 0x41aa41
mov word [0x521220], 0x3c
jmp 0x41aa6a
lea eax, [ebp - 0xc8]
push eax
call fcn.004d40f4
lea eax, [ebp - 0xc8]
push eax
call fcn.0040484a
mov word [0x521220], ax
lea ecx, [ebp - 0xc8]
call fcn.00404844
and word [0x52121e], 0
movsx eax, word [0x521274]
test eax, eax
jne 0x41ab2e
push dword [0x52128c]
push dword [0x5211b4]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.004048b6
push eax
push 1
push 0xffffffffffffffff
push 0x20
call fcn.00404874
lea ecx, [ebp - 0xb0]
call fcn.00404868
push 1
call fcn.0040483e
mov dword [0x52124c], eax
mov eax, dword [0x52124c]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x188], 3
lea edx, [ebp - 0x188]
mov ecx, 0x5211b8
call fcn.004048d4
mov eax, dword [0x52124c]
mov dword [0x521244], eax
push 1
push dword [0x52124c]
push 1
push 0x11
push 0x5210b0
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push 1
push 0x5210b0
push 0x40b9d8
call fcn.00404856
push 1
call fcn.00404850
jmp 0x41abe1
push 1
push dword [0x52126c]
push 1
call fcn.00404838
add eax, 1
jo 0x41e857
push eax
push 1
push 0x11
push 0x5210b0
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [0x52126c]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
push dword [0x5210b0]
lea eax, [ebp - 0xa8]
push eax
call fcn.0040482c
push dword [0x52126c]
push 1
call fcn.00404838
push eax
push 0
push dword [ebp - 0xac]
call fcn.00404832
push eax
push 1
push dword [ebp - 0xa8]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0xa8]
push eax
call fcn.00404820
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
push dword [0x52126c]
push 1
call fcn.00404838
mov dword [0x52124c], eax
cmp dword [0x52124c], 0x2a
jge 0x41abef
jmp 0x41e707
cmp word [0x52121e], 0xffff
je 0x41d528
cmp word [0x521248], 0xffff
je 0x41c88e
fldz
fstp qword [0x5210bc]
push 1
push 5
push 1
push 0x11
lea eax, [ebp - 0x94]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [0x5210b0]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
push dword [ebp - 0x94]
lea eax, [ebp - 0xa8]
push eax
call fcn.0040482c
push 5
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x41e852
call fcn.0040481a
push eax
push dword [ebp - 0xac]
call fcn.00404832
push eax
push 1
push dword [ebp - 0xa8]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0xa8]
push eax
call fcn.00404820
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
fld qword [0x5210bc]
fadd qword [0x401368]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x41e852
push 1
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xfe
setne bl
push 2
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0x2a
setne cl
or ebx, ecx
test ebx, ebx
jne 0x41ad32
or word [ebp - 0x200], 0xffff
and word [ebp - 0x1fc], 0
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x1fc]
push eax
push 0x5211b4
call fcn.004c58ec
jmp 0x41bb92
push 1
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xfe
setne bl
push 2
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0x2b
setne cl
or ebx, ecx
test ebx, ebx
jne 0x41ad99
or word [ebp - 0x200], 0xffff
or word [ebp - 0x1fc], 0xffff
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x1fc]
push eax
push 0x5211b4
call fcn.004c58ec
jmp 0x41bb92
push 1
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xfb
setne bl
push 2
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0x2a
setne cl
or ebx, ecx
test ebx, ebx
jne 0x41ae2f
and word [0x52121e], 0
push 0x52126c
call fcn.004cef66
mov dword [ebp - 0x180], 2
mov dword [ebp - 0x188], 2
lea edx, [ebp - 0x188]
mov ecx, 0x5211c8
call fcn.004048d4
or dword [ebp - 0x180], 0xffffffff
mov dword [ebp - 0x188], 0xb
lea edx, [ebp - 0x188]
mov ecx, 0x5211d8
call fcn.004048d4
jmp 0x41bb92
push 1
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xfb
setne bl
push 2
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0x2b
setne cl
or ebx, ecx
test ebx, ebx
jne 0x41b289
fld qword [0x401360]
fstp qword [0x5210bc]
push 1
push 2
push 1
push 0x11
lea eax, [ebp - 0x94]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x41e852
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov esi, eax
push 1
push dword [ebp - 0x94]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
fld qword [0x5210bc]
fadd qword [0x401358]
fnstsw ax
test al, 0xd
jne 0x41e852
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov esi, eax
push 2
push dword [ebp - 0x94]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x41e852
push 1
push dword [ebp - 0x94]
call fcn.00404832
movzx si, byte [eax]
push 2
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x41e857
add si, ax
jo 0x41e857
push esi
call fcn.00404814
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
push dword [0x5210b0]
lea eax, [ebp - 0xa8]
push eax
call fcn.0040482c
push 4
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x41e852
call fcn.0040481a
push eax
push dword [ebp - 0xa8]
call fcn.00404832
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0xa8]
push eax
call fcn.00404820
fld qword [0x5210bc]
fadd qword [0x401360]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x41e852
or dword [ebp - 0x180], 0xffffffff
mov dword [ebp - 0x188], 0x8002
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41b031
or dword [ebp - 0x180], 0xffffffff
mov dword [ebp - 0x188], 2
lea edx, [ebp - 0x188]
mov ecx, 0x5211c8
call fcn.004048d4
push dword [ebp - 0x88]
call fcn.00404802
fcomp qword [0x401350]
fnstsw ax
sahf
jne 0x41b053
mov dword [ebp - 0x258], 1
jmp 0x41b05a
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
neg eax
mov word [ebp - 0x190], ax
mov dword [ebp - 0x198], 0xb
and dword [ebp - 0x180], 0
mov dword [ebp - 0x188], 0x8002
push dword [ebp - 0x88]
call fcn.00404802
fcomp qword [0x401350]
fnstsw ax
sahf
je 0x41b0a6
mov dword [ebp - 0x25c], 1
jmp 0x41b0ad
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
neg eax
mov word [ebp - 0x1b0], ax
mov dword [ebp - 0x1b8], 0xb
and dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1a8], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404808
push eax
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.00404808
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.0040488c
push eax
lea eax, [ebp - 0x84]
push eax
push 0x5211b8
lea eax, [ebp - 0x118]
push eax
call fcn.004047f6
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.0040488c
push eax
call fcn.00404892
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x198]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x20c]
test eax, eax
je 0x41b1bb
mov dword [ebp - 0x180], 0xa
mov dword [ebp - 0x188], 2
lea edx, [ebp - 0x188]
mov ecx, 0x5211c8
call fcn.004048d4
mov dword [ebp - 0xc0], 0x80020004
mov dword [ebp - 0xc8], 0xa
mov dword [ebp - 0x180], 0x5211b4
mov dword [ebp - 0x188], 0x4008
lea eax, [ebp - 0xc8]
push eax
push 1
push dword [0x5211b4]
push 0x40b9f4
push 0
call fcn.004047ea
add eax, 1
jo 0x41e857
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.004047f0
lea edx, [ebp - 0xd8]
lea ecx, [ebp - 0x84]
call fcn.004048d4
lea ecx, [ebp - 0xc8]
call fcn.00404844
or dword [ebp - 0x180], 0xffffffff
mov dword [ebp - 0x188], 0xb
lea edx, [ebp - 0x188]
mov ecx, 0x5211d8
call fcn.004048d4
mov dword [ebp - 0x180], 1
mov dword [ebp - 0x188], 2
lea edx, [ebp - 0x188]
mov ecx, 0x5211c8
call fcn.004048d4
and word [0x52121e], 0
jmp 0x41bb92
push 5
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xc
setne bl
push 5
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xb
setne cl
and ebx, ecx
test ebx, ebx
jne 0x41b307
push 4
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
mov cx, 0xff
sub cx, ax
jo 0x41e857
mov word [ebp - 0x180], cx
mov dword [ebp - 0x188], 2
lea edx, [ebp - 0x188]
mov ecx, 0x5211f8
call fcn.004048d4
jmp 0x41bb92
push 3
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xfe
setne bl
push 3
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xfc
setne cl
and ebx, ecx
test ebx, ebx
jne 0x41b43f
mov dword [ebp - 0x180], 0x5211b4
mov dword [ebp - 0x188], 0x4008
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.00404880
mov dword [ebp - 0x190], 0x40b9a8
mov dword [ebp - 0x198], 8
and dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1a8], 0x8002
push 1
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x198]
push eax
push 0
lea eax, [ebp - 0xd8]
push eax
call fcn.004047de
push eax
lea eax, [ebp - 0x1a8]
push eax
call fcn.004047e4
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x20c]
test eax, eax
je 0x41b40c
mov dword [ebp - 0x180], 0xe
mov dword [ebp - 0x188], 2
lea edx, [ebp - 0x188]
mov ecx, 0x5211c8
call fcn.004048d4
jmp 0x41b43a
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
lea edx, [ebp - 0x188]
mov ecx, 0x5211c8
call fcn.004048d4
push 0x52126c
call fcn.004cef66
jmp 0x41bb92
push 1
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xff
setne bl
push 2
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xfd
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
push 3
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
mov dword [ebp - 0x260], ebx
xor ebx, ebx
cmp ax, 0xb
setne bl
push 4
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xc
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
push 5
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xd
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
mov eax, dword [ebp - 0x260]
or eax, ebx
test eax, eax
jne 0x41ba5a
mov dword [ebp - 0x180], 6
mov dword [ebp - 0x188], 2
lea eax, [ebp - 0x188]
push eax
push 0x5211e8
lea eax, [ebp - 0xc8]
push eax
call fcn.004047d2
push eax
call fcn.004047d8
fstp qword [0x5210bc]
lea ecx, [ebp - 0xc8]
call fcn.00404844
push 1
push 4
push 1
push 0x11
lea eax, [ebp - 0x94]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [0x5210b0]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
push dword [ebp - 0x94]
lea eax, [ebp - 0xa8]
push eax
call fcn.0040482c
push 4
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x41e852
call fcn.0040481a
push eax
push dword [ebp - 0xac]
call fcn.00404832
push eax
push 1
push dword [ebp - 0xa8]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0xa8]
push eax
call fcn.00404820
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
fld qword [0x5210bc]
fadd qword [0x401360]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x41e852
lea eax, [ebp - 0x94]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x188], 0x6011
push 1
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.004047c0
mov dword [ebp - 0xd0], 1
mov dword [ebp - 0xd8], 2
lea eax, [ebp - 0x94]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x198], 0x6011
lea eax, [ebp - 0xd8]
push eax
push 2
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.004047f0
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.004047c6
push eax
call fcn.004047cc
mov si, ax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004047c6
push eax
call fcn.004047cc
imul ax, ax, 0x100
jo 0x41e857
add si, ax
jo 0x41e857
mov word [ebp - 0x1b0], si
mov dword [ebp - 0x1b8], 2
lea edx, [ebp - 0x1b8]
lea ecx, [ebp - 0x64]
call fcn.004048d4
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xb0]
push eax
push 2
call fcn.0040489e
add esp, 0xc
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0xc8], 2
lea eax, [ebp - 0x94]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x188], 0x6011
lea eax, [ebp - 0xc8]
push eax
push 3
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.004047f0
lea eax, [ebp - 0x94]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a8], 0x6011
push 1
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.004047c6
push eax
call fcn.004047cc
mov si, ax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004047c6
push eax
call fcn.004047cc
imul ax, ax, 0x100
jo 0x41e857
add si, ax
jo 0x41e857
mov word [ebp - 0x1b0], si
mov dword [ebp - 0x1b8], 0x8002
mov dword [ebp - 0x1c0], 1
mov dword [ebp - 0x1c8], 0x8002
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.004047ba
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.004047b4
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.0040488c
push eax
call fcn.00404892
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xb0]
push eax
push 2
call fcn.0040489e
add esp, 0xc
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [ebp - 0x20c]
test eax, eax
je 0x41b895
mov dword [ebp - 0x180], 0xa
mov dword [ebp - 0x188], 2
lea edx, [ebp - 0x188]
mov ecx, 0x5211c8
call fcn.004048d4
and word [ebp - 0x90], 0
jmp 0x41ba3e
push dword [0x5210b0]
lea eax, [ebp - 0xa8]
push eax
call fcn.0040482c
push 4
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x41e852
call fcn.0040481a
push eax
push dword [ebp - 0xa8]
call fcn.00404832
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0xa8]
push eax
call fcn.00404820
fld qword [0x5210bc]
fadd qword [0x401360]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x41e852
push dword [0x5210b0]
lea eax, [ebp - 0xa8]
push eax
call fcn.0040482c
push 4
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x41e852
call fcn.0040481a
push eax
push dword [ebp - 0xa8]
call fcn.00404832
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0xa8]
push eax
call fcn.00404820
fld qword [0x5210bc]
fadd qword [0x401360]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x41e852
lea eax, [ebp - 0x74]
push eax
push 0x5211e8
lea eax, [ebp - 0xc8]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048d4
lea eax, [ebp - 0xa4]
push eax
push 0x5211e8
lea eax, [ebp - 0xc8]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xa4]
call fcn.004048d4
lea eax, [ebp - 0x74]
push eax
push 0x5211b8
lea eax, [ebp - 0xc8]
push eax
call fcn.004047f6
push eax
lea eax, [ebp - 0xa4]
push eax
push 0x5211b8
lea eax, [ebp - 0xd8]
push eax
call fcn.004047f6
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.0040488c
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x41ba36
mov dword [ebp - 0x180], 0xa
mov dword [ebp - 0x188], 2
lea edx, [ebp - 0x188]
mov ecx, 0x5211c8
call fcn.004048d4
and word [ebp - 0x90], 0
jmp 0x41ba3e
or word [ebp - 0x90], 0xffff
cmp word [ebp - 0x90], 0xffff
je 0x41ba55
and word [0x52121e], 0
jmp 0x41e707
jmp 0x41bb92
push 1
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xfe
setne bl
push 2
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf2
setne cl
or ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
push 3
push dword [ebp - 0x94]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xee
setne cl
or ebx, ecx
test ebx, ebx
jne 0x41bb92
mov dword [ebp - 0x180], 0x5211b4
mov dword [ebp - 0x188], 0x4008
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.004047c0
mov dword [ebp - 0x190], 0x40b9fc
mov dword [ebp - 0x198], 8
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x8c]
call fcn.004048b6
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 2
call fcn.00404898
add esp, 0xc
and word [0x52121e], 0
push 0x52126c
call fcn.004cef66
mov edx, dword [ebp - 0x8c]
mov ecx, 0x5211b4
call fcn.004048b0
and dword [ebp - 0x180], 0
mov dword [ebp - 0x188], 0xb
lea edx, [ebp - 0x188]
mov ecx, 0x5211d8
call fcn.004048d4
push 0
push 1
push 0
push 6
push 2
push 0x5210f4
push 0x200c
call fcn.004047ae
add esp, 0x1c
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 1
mov dword [ebp - 0x188], 2
mov eax, dword [0x5211b4]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1c8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1c8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 2
mov dword [ebp - 0x188], 2
push 0
lea eax, [ebp - 0xc8]
push eax
call fcn.004048bc
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x1d0], 1
mov dword [ebp - 0x1d8], 2
mov dword [ebp - 0x1b0], 3
mov dword [ebp - 0x1b8], 2
mov dword [ebp - 0xd0], 0x2a
mov dword [ebp - 0xd8], 2
mov dword [ebp - 0xc0], 0x29
mov dword [ebp - 0xc8], 2
xor eax, eax
cmp word [0x521220], 0x1e
setge al
neg eax
mov word [ebp - 0x180], ax
mov dword [ebp - 0x188], 0xb
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.004047a2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1d8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xe8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x188]
push eax
push 4
call fcn.00404898
add esp, 0x14
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 4
mov dword [ebp - 0x188], 2
and dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1c8], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1c8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
mov dword [ebp - 0x180], 0x5211b4
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
lea edx, [ebp - 0xd8]
lea ecx, [ebp - 0x220]
call fcn.004048d4
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x180], 0x40ba0c
mov dword [ebp - 0x188], 0x8008
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x41bf00
mov dword [ebp - 0x190], 0x40ba1c
mov dword [ebp - 0x198], 0x8008
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x198]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41c0f1
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.004048b6
push eax
push 0x40ba2c
call fcn.0040486e
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea ecx, [ebp - 0xb0]
call fcn.00404868
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x1b8], 2
mov dword [ebp - 0x190], 6
mov dword [ebp - 0x198], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], 8
mov dword [ebp - 0x180], 0x5211b4
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x198]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x41c868
mov dword [ebp - 0x180], 0x40ba3c
mov dword [ebp - 0x188], 0x8008
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41c314
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.004048b6
push eax
push 0x40ba4c
call fcn.0040486e
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea ecx, [ebp - 0xb0]
call fcn.00404868
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x1b8], 2
mov dword [ebp - 0x190], 6
mov dword [ebp - 0x198], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], 8
mov dword [ebp - 0x180], 0x5211b4
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x198]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x41c868
mov dword [ebp - 0x180], 0x40ba5c
mov dword [ebp - 0x188], 0x8008
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41c537
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.004048b6
push eax
push 0x40ba6c
call fcn.0040486e
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea ecx, [ebp - 0xb0]
call fcn.00404868
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x1b8], 2
mov dword [ebp - 0x190], 6
mov dword [ebp - 0x198], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], 8
mov dword [ebp - 0x180], 0x5211b4
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x198]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x41c868
mov dword [ebp - 0x180], 0x40ba7c
mov dword [ebp - 0x188], 0x8008
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41c75a
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.004048b6
push eax
push 0x40ba8c
call fcn.0040486e
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea ecx, [ebp - 0xb0]
call fcn.00404868
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x1b8], 2
mov dword [ebp - 0x190], 6
mov dword [ebp - 0x198], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], 8
mov dword [ebp - 0x180], 0x5211b4
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x198]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x41c868
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
mov dword [ebp - 0x1c0], 0x40a6cc
mov dword [ebp - 0x1c8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1c8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 6
mov dword [ebp - 0x188], 2
mov dword [ebp - 0x1c0], 0x40a6cc
mov dword [ebp - 0x1c8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1c8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
and dword [ebp - 0x180], 0
mov dword [ebp - 0x188], 2
lea edx, [ebp - 0x188]
mov ecx, 0x5211f8
call fcn.004048d4
jmp 0x41d523
push 0
push 1
push 0
push 6
push 2
push 0x5210f4
push 0x200c
call fcn.004047ae
add esp, 0x1c
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 1
mov dword [ebp - 0x188], 2
mov eax, dword [0x5211b4]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1c8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1c8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 2
mov dword [ebp - 0x188], 2
push 0
lea eax, [ebp - 0xc8]
push eax
call fcn.004048bc
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 3
mov dword [ebp - 0x188], 2
and dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1c8], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1c8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 4
mov dword [ebp - 0x188], 2
and dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1c8], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1c8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
movsx eax, word [0x521220]
test eax, eax
jne 0x41cada
mov word [0x521220], 0x3c
or word [0x52121e], 0xffff
mov dword [ebp - 0x180], 0x5211b4
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
lea edx, [ebp - 0xd8]
lea ecx, [ebp - 0x230]
call fcn.004048d4
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x180], 0x40ba0c
mov dword [ebp - 0x188], 0x8008
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x41cb9a
mov dword [ebp - 0x190], 0x40ba1c
mov dword [ebp - 0x198], 0x8008
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x198]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41cd8b
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.004048b6
push eax
push 0x40ba2c
call fcn.0040486e
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea ecx, [ebp - 0xb0]
call fcn.00404868
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x1b8], 2
mov dword [ebp - 0x190], 6
mov dword [ebp - 0x198], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], 8
mov dword [ebp - 0x180], 0x5211b4
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x198]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x41d502
mov dword [ebp - 0x180], 0x40ba3c
mov dword [ebp - 0x188], 0x8008
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41cfae
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.004048b6
push eax
push 0x40ba4c
call fcn.0040486e
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea ecx, [ebp - 0xb0]
call fcn.00404868
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x1b8], 2
mov dword [ebp - 0x190], 6
mov dword [ebp - 0x198], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], 8
mov dword [ebp - 0x180], 0x5211b4
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x198]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x41d502
mov dword [ebp - 0x180], 0x40ba5c
mov dword [ebp - 0x188], 0x8008
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41d1d1
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.004048b6
push eax
push 0x40ba6c
call fcn.0040486e
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea ecx, [ebp - 0xb0]
call fcn.00404868
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x1b8], 2
mov dword [ebp - 0x190], 6
mov dword [ebp - 0x198], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], 8
mov dword [ebp - 0x180], 0x5211b4
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x198]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x41d502
mov dword [ebp - 0x180], 0x40ba7c
mov dword [ebp - 0x188], 0x8008
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41d3f4
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.004048b6
push eax
push 0x40ba8c
call fcn.0040486e
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea ecx, [ebp - 0xb0]
call fcn.00404868
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x1b8], 2
mov dword [ebp - 0x190], 6
mov dword [ebp - 0x198], 2
push dword [0x5211b4]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
push dword [0x5211b4]
call fcn.004d8c9a
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], 8
mov dword [ebp - 0x180], 0x5211b4
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x198]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x41d502
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
mov dword [ebp - 0x1c0], 0x40a6cc
mov dword [ebp - 0x1c8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1c8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 6
mov dword [ebp - 0x188], 2
mov dword [ebp - 0x1c0], 0x40a6cc
mov dword [ebp - 0x1c8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1c8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
and dword [ebp - 0x180], 0
mov dword [ebp - 0x188], 2
lea edx, [ebp - 0x188]
mov ecx, 0x5211f8
call fcn.004048d4
jmp 0x41e458
push 1
push dword [0x5212c4]
push 0
push 6
push 2
push 0x5210f4
push 0x200c
call fcn.004047ae
add esp, 0x1c
mov ecx, dword [0x5212c4]
call fcn.0040479c
mov word [ebp - 0x248], ax
mov word [ebp - 0x244], 1
mov word [ebp - 0x18], 1
jmp 0x41d580
jmp fcn.004044cc