Function at 0x47fe90
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5728d8
mov eax, dword fs:[0]
push eax
mov eax, 0x1e3a0
call fcn.00556dd0
mov eax, dword [0x5abc48]
xor eax, ebp
mov dword [ebp - 0x28], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1e354], ecx
push 1
mov ecx, dword [ebp - 0x1e354]
call fcn.0053f2c4
mov dword [ebp - 0x1dfac], 5
mov eax, dword [ebp - 0x1e354]
cmp dword [eax + 0x1e0], 0
je 0x47fef9
mov dword [ebp - 0x1dfac], 3
jmp 0x47ff2d
mov ecx, dword [ebp - 0x1e354]
cmp dword [ecx + 0x1e4], 0
je 0x47ff14
mov dword [ebp - 0x1dfac], 4
jmp 0x47ff2d
mov edx, dword [ebp - 0x1e354]
cmp dword [edx + 0x1e8], 0
je 0x47ff2d
mov dword [ebp - 0x1dfac], 5
mov dword [ebp - 0x494], 0
mov dword [ebp - 0x1dfa8], 0
mov dword [ebp - 0x1ccb8], 0
mov dword [ebp - 0x42c], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x457c], 0
mov dword [ebp - 0x3578], 0
mov dword [ebp - 0x438], 0
lea ecx, [ebp - 0x1df58]
call fcn.004154f0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1dc60]
call fcn.004154f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x428]
call fcn.004154f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4578]
call fcn.004154f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4574]
call fcn.004154f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x424]
call fcn.004154f0
mov byte [ebp - 4], 5
lea eax, [ebp - 0x1df58]
push eax
push 0x413
mov ecx, dword [ebp - 0x1e354]
call fcn.00542213
push 0xa
lea ecx, [ebp - 0x45cc]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x1e328], esp
lea edx, [ebp - 0x1df58]
push edx
call fcn.00415510
mov dword [ebp - 0x1e358], eax
call fcn.00406160
add esp, 0xc
mov dword [ebp - 0x1e35c], eax
mov eax, dword [ebp - 0x1e35c]
add eax, 1
mov dword [ebp - 0x2bbc], eax
mov ecx, dword [ebp - 0x2bbc]
cmp ecx, dword [ebp - 0x1dfac]
je 0x4800b6
push 0
push 0
push 0x581ef0
mov ecx, dword [ebp - 0x1e354]
call fcn.0053e812
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x424]
call fcn.0052ee60
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4574]
call fcn.0052ee60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4578]
call fcn.0052ee60
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x428]
call fcn.0052ee60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1dc60]
call fcn.0052ee60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1df58]
call fcn.0052ee60
jmp 0x482bc2
call fcn.00415420
mov dword [ebp - 0x1e360], eax
push 1
mov edx, dword [ebp - 0x1e360]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1e360]
mov edx, dword [eax + 0x9c]
call edx
mov eax, dword [ebp - 0x1dfac]
sub eax, 1
mov dword [ebp - 0x3574], eax
mov ecx, dword [ebp - 0x3574]
sub ecx, 1
mov dword [ebp - 0x1df54], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x1dfac]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00534acf
add esp, 4
mov dword [ebp - 0x1e32c], eax
mov eax, dword [ebp - 0x1e32c]
mov dword [ebp - 0x4570], eax
mov dword [ebp - 0x494], 0
jmp 0x480143
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x1dfac]
jge 0x480178
push 8
call fcn.00534acf
add esp, 4
mov dword [ebp - 0x1e330], eax
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp - 0x4570]
mov edx, dword [ebp - 0x1e330]
mov dword [ecx + eax*4], edx
jmp 0x480134
mov dword [ebp - 0x3570], 1
mov eax, dword [ebp - 0x3574]
mov dword [ebp - 0x42c], eax
jmp 0x48019f
mov ecx, dword [ebp - 0x42c]
sub ecx, 1
mov dword [ebp - 0x42c], ecx
cmp dword [ebp - 0x42c], 0
jl 0x480203
mov dword [ebp - 0x494], 0
jmp 0x4801c3
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 2
jge 0x4801f3
mov eax, dword [ebp - 0x494]
imul eax, dword [ebp - 0x3570]
mov ecx, dword [ebp - 0x42c]
mov edx, dword [ebp - 0x4570]
mov ecx, dword [edx + ecx*4]
mov edx, dword [ebp - 0x494]
mov dword [ecx + edx*4], eax
jmp 0x4801b4
mov eax, dword [ebp - 0x3570]
shl eax, 1
mov dword [ebp - 0x3570], eax
jmp 0x480190
mov ecx, dword [ebp - 0x3570]
mov dword [ebp - 0x490], ecx
mov dword [ebp - 0x494], 0
jmp 0x48022a
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
mov eax, dword [ebp - 0x494]
cmp eax, dword [ebp - 0x1dfac]
jge 0x48024b
mov ecx, dword [ebp - 0x494]
mov dword [ebp + ecx*4 - 0x484], 0
jmp 0x48021b
mov dword [ebp - 0x420], 0xffffffff
mov edx, 1
test edx, edx
je 0x48033e
mov eax, dword [ebp - 0x420]
add eax, 1
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x494], 0
jmp 0x48028c
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x1dfac]
jge 0x4802c4
mov eax, dword [ebp - 0x420]
imul eax, eax, 0x14
lea ecx, [ebp + eax - 0x1dc5c]
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp - 0x494]
mov ax, word [ebp + eax*4 - 0x484]
mov word [ecx + edx*2], ax
jmp 0x48027d
mov ecx, dword [ebp - 0x3574]
mov dword [ebp - 0x1dfa8], ecx
jmp 0x4802e1
mov edx, dword [ebp - 0x1dfa8]
sub edx, 1
mov dword [ebp - 0x1dfa8], edx
cmp dword [ebp - 0x1dfa8], 0
jl 0x48032e
mov eax, dword [ebp - 0x1dfa8]
mov ecx, dword [ebp + eax*4 - 0x484]
add ecx, 1
mov edx, dword [ebp - 0x1dfa8]
mov dword [ebp + edx*4 - 0x484], ecx
mov eax, dword [ebp - 0x1dfa8]
cmp dword [ebp + eax*4 - 0x484], 1
jg 0x48031b
jmp 0x48032e
mov ecx, dword [ebp - 0x1dfa8]
mov dword [ebp + ecx*4 - 0x484], 0
jmp 0x4802d2
cmp dword [ebp - 0x1dfa8], 0
jge 0x480339
jmp 0x48033e
jmp 0x480255
mov dword [ebp - 0x494], 0
jmp 0x480359
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 5
jge 0x4803af
mov dword [ebp - 0x1dfa8], 0
jmp 0x48037d
mov eax, dword [ebp - 0x1dfa8]
add eax, 1
mov dword [ebp - 0x1dfa8], eax
mov ecx, dword [ebp - 0x1dfa8]
cmp ecx, dword [ebp - 0x490]
jge 0x4803ad
mov edx, dword [ebp - 0x494]
imul edx, edx, 0xc8
lea eax, [ebp + edx - 0x456c]
mov ecx, dword [ebp - 0x1dfa8]
mov dword [eax + ecx*4], 0
jmp 0x48036e
jmp 0x48034a
mov dword [ebp - 0x494], 0
jmp 0x4803ca
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 0x1f4
jge 0x4803f3
mov eax, dword [ebp - 0x494]
cdq
mov ecx, 0xa
idiv ecx
mov eax, dword [ebp - 0x494]
mov dword [ebp + eax*4 - 0x4184], edx
jmp 0x4803bb
mov dword [ebp - 0x420], 0xffffffff
mov dword [ebp - 0x494], 0
jmp 0x480418
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x1dfac]
jge 0x480496
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x1dfa8], eax
jmp 0x480446
mov ecx, dword [ebp - 0x1dfa8]
add ecx, 1
mov dword [ebp - 0x1dfa8], ecx
mov edx, dword [ebp - 0x1dfa8]
cmp edx, dword [ebp - 0x1dfac]
jge 0x480491
mov eax, dword [ebp - 0x420]
add eax, 1
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0x420]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x494]
mov dword [ebp + ecx - 0x28c], edx
mov eax, dword [ebp - 0x420]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x1dfa8]
mov dword [ebp + eax - 0x288], ecx
jmp 0x480437
jmp 0x480409
mov edx, dword [ebp - 0x420]
add edx, 1
mov dword [ebp - 0x48c], edx
mov dword [ebp - 0x420], 0xffffffff
mov dword [ebp - 0x494], 0
jmp 0x4804ca
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [ebp - 0x1dfac]
jge 0x480599
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x1dfa8], edx
jmp 0x4804fc
mov eax, dword [ebp - 0x1dfa8]
add eax, 1
mov dword [ebp - 0x1dfa8], eax
mov ecx, dword [ebp - 0x1dfa8]
cmp ecx, dword [ebp - 0x1dfac]
jge 0x480594
mov edx, dword [ebp - 0x1dfa8]
add edx, 1
mov dword [ebp - 0x1ccb8], edx
jmp 0x48052e
mov eax, dword [ebp - 0x1ccb8]
add eax, 1
mov dword [ebp - 0x1ccb8], eax
mov ecx, dword [ebp - 0x1ccb8]
cmp ecx, dword [ebp - 0x1dfac]
jge 0x48058f
mov edx, dword [ebp - 0x420]
add edx, 1
mov dword [ebp - 0x420], edx
mov eax, dword [ebp - 0x420]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x494]
mov dword [ebp + eax - 0x39b4], ecx
mov edx, dword [ebp - 0x420]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x1dfa8]
mov dword [ebp + edx - 0x39b0], eax
mov ecx, dword [ebp - 0x420]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x1ccb8]
mov dword [ebp + ecx - 0x39ac], edx
jmp 0x48051f
jmp 0x4804ed
jmp 0x4804bb
mov eax, dword [ebp - 0x420]
add eax, 1
mov dword [ebp - 0x1df50], eax
mov dword [ebp - 0x420], 0xffffffff
mov dword [ebp - 0x494], 0
jmp 0x4805cd
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x1dfac]
jge 0x4806ec
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x1dfa8], eax
jmp 0x4805ff
mov ecx, dword [ebp - 0x1dfa8]
add ecx, 1
mov dword [ebp - 0x1dfa8], ecx
mov edx, dword [ebp - 0x1dfa8]
cmp edx, dword [ebp - 0x1dfac]
jge 0x4806e7
mov eax, dword [ebp - 0x1dfa8]
add eax, 1
mov dword [ebp - 0x1ccb8], eax
jmp 0x480631
mov ecx, dword [ebp - 0x1ccb8]
add ecx, 1
mov dword [ebp - 0x1ccb8], ecx
mov edx, dword [ebp - 0x1ccb8]
cmp edx, dword [ebp - 0x1dfac]
jge 0x4806e2
mov eax, dword [ebp - 0x1ccb8]
add eax, 1
mov dword [ebp - 0x42c], eax
jmp 0x480663
mov ecx, dword [ebp - 0x42c]
add ecx, 1
mov dword [ebp - 0x42c], ecx
mov edx, dword [ebp - 0x42c]
cmp edx, dword [ebp - 0x1dfac]
jge 0x4806dd
mov eax, dword [ebp - 0x420]
add eax, 1
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0x420]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x494]
mov dword [ebp + ecx - 0x356c], edx
mov eax, dword [ebp - 0x420]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x1dfa8]
mov dword [ebp + eax - 0x3568], ecx
mov edx, dword [ebp - 0x420]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x1ccb8]
mov dword [ebp + edx - 0x3564], eax
mov ecx, dword [ebp - 0x420]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x42c]
mov dword [ebp + ecx - 0x3560], edx
jmp 0x480654
jmp 0x480622
jmp 0x4805f0
jmp 0x4805be
mov eax, dword [ebp - 0x420]
add eax, 1
mov dword [ebp - 0x2bb8], eax
mov dword [ebp - 0x420], 0xffffffff
mov dword [ebp - 0x4a0], 0xffffffff
mov dword [ebp - 0x494], 0
jmp 0x48072a
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
cmp dword [ebp - 0x494], 0xa
jge 0x4807dc
mov dword [ebp - 0x1dfa8], 0
jmp 0x480752
mov edx, dword [ebp - 0x1dfa8]
add edx, 1
mov dword [ebp - 0x1dfa8], edx
cmp dword [ebp - 0x1dfa8], 0xa
jge 0x4807d7
mov eax, dword [ebp - 0x420]
add eax, 1
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [ebp - 0x1dfa8]
jg 0x4807d2
mov edx, dword [ebp - 0x4a0]
add edx, 1
mov dword [ebp - 0x4a0], edx
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x14
lea ecx, [ebp + eax - 0xf4]
mov edx, dword [ebp - 0x1dfa8]
mov ax, word [ebp - 0x4a0]
mov word [ecx + edx*2], ax
mov ecx, dword [ebp - 0x4a0]
mov dx, word [ebp - 0x494]
mov word [ebp + ecx*4 - 0x3824], dx
mov eax, dword [ebp - 0x4a0]
mov cx, word [ebp - 0x1dfa8]
mov word [ebp + eax*4 - 0x3822], cx
jmp 0x480743
jmp 0x48071b
mov edx, dword [ebp - 0x4a0]
add edx, 1
mov dword [ebp - 0x2bc4], edx
mov dword [ebp - 0x494], 0
jmp 0x480806
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0xa
jge 0x48087c
mov dword [ebp - 0x1dfa8], 0
jmp 0x48082a
mov ecx, dword [ebp - 0x1dfa8]
add ecx, 1
mov dword [ebp - 0x1dfa8], ecx
cmp dword [ebp - 0x1dfa8], 0xa
jge 0x480877
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x1dfa8]
jle 0x480875
mov eax, dword [ebp - 0x1dfa8]
imul eax, eax, 0x14
lea ecx, [ebp + eax - 0xf4]
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x14
lea eax, [ebp + edx - 0xf4]
mov edx, dword [ebp - 0x1dfa8]
mov esi, dword [ebp - 0x494]
mov cx, word [ecx + esi*2]
mov word [eax + edx*2], cx
jmp 0x48081b
jmp 0x4807f7
push fcn.0052ee60
push fcn.004154f0
push 0x14
push 4
lea edx, [ebp - 0x3694]
push edx
call fcn.00557db7
mov byte [ebp - 4], 6
push 0x581f04
lea ecx, [ebp - 0x3694]
call fcn.004155d0
push 0x581f10
lea ecx, [ebp - 0x3690]
call fcn.004155d0
push 0x581f1c
lea ecx, [ebp - 0x368c]
call fcn.004155d0
push 0x581f28
lea ecx, [ebp - 0x3688]
call fcn.004155d0
push 0x581f34
lea ecx, [ebp - 0x3684]
call fcn.004155d0
push 0x581f40
lea ecx, [ebp - 0x3680]
call fcn.004155d0
push 0x581f4c
lea ecx, [ebp - 0x367c]
call fcn.004155d0
push 0x581f58
lea ecx, [ebp - 0x3678]
call fcn.004155d0
push 0x581f64
lea ecx, [ebp - 0x3674]
call fcn.004155d0
push 0x581f70
lea ecx, [ebp - 0x3670]
call fcn.004155d0
mov dword [ebp - 0x494], 0
jmp 0x480955
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0x32
jge 0x4809b4
mov ecx, dword [ebp - 0x494]
mov dword [ebp + ecx*4 - 0x1df4c], 0xffffffff
mov dword [ebp - 0x1dfa8], 0
jmp 0x48098a
mov edx, dword [ebp - 0x1dfa8]
add edx, 1
mov dword [ebp - 0x1dfa8], edx
cmp dword [ebp - 0x1dfa8], 0xa
jge 0x4809b2
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
lea ecx, [ebp + eax - 0x1d48c]
mov edx, dword [ebp - 0x1dfa8]
mov dword [ecx + edx*4], 0xffffffff
jmp 0x48097b
jmp 0x480946
lea eax, [ebp - 0x1df58]
push eax
mov ecx, dword [ebp - 0x1e354]
add ecx, 0x1d64
call fcn.0045da50
push eax
push 0
mov ecx, dword [ebp - 0x1e354]
add ecx, 0x1d64
call fcn.0053c5de
lea ecx, [ebp - 0x1df58]
call fcn.00415630
add eax, 3
xor ecx, ecx
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00534acf
add esp, 4
mov dword [ebp - 0x1e334], eax
mov eax, dword [ebp - 0x1e334]
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x1df58]
call fcn.00415630
add eax, 1
push eax
mov ecx, dword [ebp - 0x24]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x1e338], esp
lea edx, [ebp - 0x1df58]
push edx
call fcn.00415510
mov dword [ebp - 0x1e364], eax
call fcn.00406160
add esp, 0xc
mov dword [ebp - 0x1e368], eax
mov eax, dword [ebp - 0x1e368]
add eax, 1
mov dword [ebp - 0x2c0c], eax
mov eax, dword [ebp - 0x2c0c]
cdq
idiv dword [ebp - 0x1dfac]
mov dword [ebp - 0x488], eax
mov ecx, dword [ebp - 0x2c0c]
imul ecx, ecx, 0x12
add ecx, 0xd9038
push ecx
call fcn.00534acf
add esp, 4
mov dword [ebp - 0x1e33c], eax
mov edx, dword [ebp - 0x1e33c]
mov dword [ebp - 0x49c], edx
mov dword [ebp - 0x2c08], 0
mov dword [ebp - 0x4610], 0
mov dword [ebp - 0x460c], 0
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x494], 0
jmp 0x480ae1
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [ebp - 0x1dfac]
jge 0x480b8e
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp + eax*4 - 0x45cc]
mov dword [ebp + edx*4 - 0x1de84], ecx
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp - 0x4610]
add eax, dword [ebp + edx*4 - 0x1de84]
mov dword [ebp - 0x4610], eax
mov ecx, dword [ebp - 0x494]
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp + edx*4 - 0x1de84]
mov dword [ebp + ecx*4 - 0x1dfa4], eax
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov edx, dword [ebp - 0x494]
imul ecx, dword [ebp + edx*4 - 0x1de84]
add ecx, dword [ebp - 0x460c]
mov dword [ebp - 0x460c], ecx
mov eax, dword [ebp - 0x1dfac]
sub eax, dword [ebp - 0x494]
mov ecx, dword [ebp - 0x494]
imul eax, dword [ebp + ecx*4 - 0x1de84]
add eax, dword [ebp - 0x434]
mov dword [ebp - 0x434], eax
jmp 0x480ad2
mov dword [ebp - 0x1dfa8], 0
jmp 0x480ba9
mov edx, dword [ebp - 0x1dfa8]
add edx, 1
mov dword [ebp - 0x1dfa8], edx
cmp dword [ebp - 0x1dfa8], 5
jge 0x480c70
mov dword [ebp - 0x1dfb0], 0
mov dword [ebp - 0x494], 0
jmp 0x480bdb
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [ebp - 0x1dfac]
jge 0x480c30
mov edx, dword [ebp - 0x1dfa8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x1ec]
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp + edx*4 - 0x1de84]
movsx ecx, word [ecx + eax*2]
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp - 0x4570]
mov edx, dword [eax + edx*4]
mov eax, dword [ebp - 0x1dfb0]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1dfb0], eax
jmp 0x480bcc
mov ecx, dword [ebp - 0x1dfa8]
imul ecx, ecx, 0xc8
lea edx, [ebp + ecx - 0x456c]
mov eax, dword [ebp - 0x1dfb0]
mov ecx, dword [edx + eax*4]
add ecx, 1
mov edx, dword [ebp - 0x1dfa8]
imul edx, edx, 0xc8
lea eax, [ebp + edx - 0x456c]
mov edx, dword [ebp - 0x1dfb0]
mov dword [eax + edx*4], ecx
jmp 0x480b9a
mov eax, dword [ebp - 0x3574]
push eax
lea ecx, [ebp - 0x1dfa4]
push ecx
call fcn.004014c0
add esp, 8
mov edx, dword [ebp - 0x3574]
mov eax, dword [ebp + edx*4 - 0x1dfa4]
sub eax, dword [ebp - 0x1dfa4]
mov dword [ebp - 0x4580], eax
mov dword [ebp - 0x494], 0
jmp 0x480cba
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x1dfac]
jge 0x480cf3
mov eax, dword [ebp - 0x1df4c]
add eax, 1
mov dword [ebp - 0x1df4c], eax
mov ecx, dword [ebp - 0x1df4c]
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp + edx*4 - 0x1de84]
mov dword [ebp + ecx*4 - 0x2bb4], eax
jmp 0x480cab
mov dword [ebp - 0x494], 0
jmp 0x480d0e
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x48c]
jge 0x4811b3
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x28c]
mov edx, dword [ebp + ecx*4 - 0x1de84]
imul edx, edx, 0x14
lea eax, [ebp + edx - 0xf4]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov ecx, dword [ebp + edx*4 - 0x1de84]
movsx edx, word [eax + ecx*2]
mov eax, dword [ebp - 0x494]
mov dword [ebp + eax*4 - 0x41c], edx
mov ecx, dword [ebp - 0x1df48]
add ecx, 1
mov dword [ebp - 0x1df48], ecx
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x288]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x28c]
mov ecx, dword [ebp + edx*4 - 0x1de84]
add ecx, dword [ebp + eax*4 - 0x1de84]
mov edx, dword [ebp - 0x1df48]
mov eax, dword [ebp + ecx*4 - 0x4184]
mov dword [ebp + edx*4 - 0x2aec], eax
mov ecx, dword [ebp - 0x1df44]
add ecx, 1
mov dword [ebp - 0x1df44], ecx
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x288]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x28c]
mov ecx, dword [ebp + edx*4 - 0x1de84]
sub ecx, dword [ebp + eax*4 - 0x1de84]
push ecx
call fcn.0055a0b3
add esp, 4
mov edx, dword [ebp - 0x1df44]
mov dword [ebp + edx*4 - 0x2a24], eax
mov eax, dword [ebp - 0x1df3c]
add eax, 1
mov dword [ebp - 0x1df3c], eax
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x28c]
mov eax, dword [ebp + ecx*4 - 0x1de84]
add eax, dword [ebp + edx*4 - 0x1de84]
mov ecx, dword [ebp - 0x1df3c]
mov edx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp + ecx*4 - 0x2894], edx
mov eax, dword [ebp - 0x1df3c]
add eax, 1
mov dword [ebp - 0x1df3c], eax
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x28c]
mov eax, dword [ebp + ecx*4 - 0x1de84]
sub eax, dword [ebp + edx*4 - 0x1de84]
push eax
call fcn.0055a0b3
add esp, 4
mov ecx, dword [ebp - 0x1df3c]
mov dword [ebp + ecx*4 - 0x2894], eax
mov edx, dword [ebp - 0x1df40]
add edx, 1
mov dword [ebp - 0x1df40], edx
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x288]
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x28c]
mov edx, dword [ebp + eax*4 - 0x1de84]
sub edx, dword [ebp + ecx*4 - 0x1de84]
push edx
call fcn.0055a0b3
add esp, 4
mov ecx, dword [ebp - 0x1df40]
mov dword [ebp + ecx*4 - 0x295c], eax
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x28c]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov eax, dword [ebp + eax*4 - 0x1de84]
cmp eax, dword [ebp + edx*4 - 0x1de84]
jge 0x480f8a
mov ecx, dword [ebp - 0x1df40]
add ecx, 1
mov dword [ebp - 0x1df40], ecx
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x288]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x28c]
mov ecx, dword [ebp + edx*4 - 0x1de84]
add ecx, 0xa
sub ecx, dword [ebp + eax*4 - 0x1de84]
mov edx, dword [ebp - 0x1df40]
mov eax, dword [ebp + ecx*4 - 0x4184]
mov dword [ebp + edx*4 - 0x295c], eax
jmp 0x480fde
mov ecx, dword [ebp - 0x1df40]
add ecx, 1
mov dword [ebp - 0x1df40], ecx
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x28c]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov ecx, dword [ebp + edx*4 - 0x1de84]
add ecx, 0xa
sub ecx, dword [ebp + eax*4 - 0x1de84]
mov edx, dword [ebp - 0x1df40]
mov eax, dword [ebp + ecx*4 - 0x4184]
mov dword [ebp + edx*4 - 0x295c], eax
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x28c]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x288]
mov edx, dword [ebp + edx*4 - 0x1de84]
cmp edx, dword [ebp + ecx*4 - 0x1de84]
jge 0x481064
mov eax, dword [ebp - 0x1df38]
add eax, 1
mov dword [ebp - 0x1df38], eax
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x28c]
mov eax, dword [ebp + ecx*4 - 0x1de84]
add eax, 0xa
sub eax, dword [ebp + edx*4 - 0x1de84]
mov ecx, dword [ebp - 0x1df38]
mov edx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp + ecx*4 - 0x27cc], edx
jmp 0x4810b8
mov eax, dword [ebp - 0x1df38]
add eax, 1
mov dword [ebp - 0x1df38], eax
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x28c]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x288]
mov eax, dword [ebp + ecx*4 - 0x1de84]
add eax, 0xa
sub eax, dword [ebp + edx*4 - 0x1de84]
mov ecx, dword [ebp - 0x1df38]
mov edx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp + ecx*4 - 0x27cc], edx
mov eax, dword [ebp - 0x1df38]
add eax, 1
mov dword [ebp - 0x1df38], eax
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x28c]
mov eax, dword [ebp + ecx*4 - 0x1de84]
add eax, dword [ebp + edx*4 - 0x1de84]
mov ecx, dword [ebp - 0x1df38]
mov edx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp + ecx*4 - 0x27cc], edx
mov eax, dword [ebp - 0x1df38]
add eax, 1
mov dword [ebp - 0x1df38], eax
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x28c]
mov eax, dword [ebp + ecx*4 - 0x1de84]
sub eax, dword [ebp + edx*4 - 0x1de84]
push eax
call fcn.0055a0b3
add esp, 4
mov ecx, dword [ebp - 0x1df38]
mov dword [ebp + ecx*4 - 0x27cc], eax
mov edx, dword [ebp - 0x1df34]
add edx, 1
mov dword [ebp - 0x1df34], edx
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x288]
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x28c]
mov edx, dword [ebp + eax*4 - 0x1de84]
imul edx, dword [ebp + ecx*4 - 0x1de84]
mov eax, dword [ebp - 0x1df34]
mov ecx, dword [ebp + edx*4 - 0x4184]
mov dword [ebp + eax*4 - 0x2704], ecx
jmp 0x480cff
mov edx, dword [ebp - 0x4610]
mov eax, dword [ebp + edx*4 - 0x4184]
mov dword [ebp - 0x4610], eax
mov ecx, dword [ebp - 0x1df30]
add ecx, 1
mov dword [ebp - 0x1df30], ecx
mov edx, dword [ebp - 0x1df30]
mov eax, dword [ebp - 0x4610]
mov dword [ebp + edx*4 - 0x263c], eax
mov ecx, dword [ebp - 0x1df2c]
add ecx, 1
mov dword [ebp - 0x1df2c], ecx
mov edx, dword [ebp - 0x1df2c]
mov eax, dword [ebp - 0x4580]
mov dword [ebp + edx*4 - 0x2574], eax
mov ecx, dword [ebp - 0x1df28]
add ecx, 1
mov dword [ebp - 0x1df28], ecx
mov edx, dword [ebp - 0x4610]
add edx, dword [ebp - 0x4580]
mov eax, dword [ebp - 0x1df28]
mov ecx, dword [ebp + edx*4 - 0x4184]
mov dword [ebp + eax*4 - 0x24ac], ecx
mov edx, dword [ebp - 0x1df24]
add edx, 1
mov dword [ebp - 0x1df24], edx
mov eax, dword [ebp - 0x4610]
sub eax, dword [ebp - 0x4580]
push eax
call fcn.0055a0b3
add esp, 4
mov ecx, dword [ebp - 0x1df24]
mov dword [ebp + ecx*4 - 0x23e4], eax
mov edx, dword [ebp - 0x1df20]
add edx, 1
mov dword [ebp - 0x1df20], edx
mov eax, dword [ebp - 0x1de84]
add eax, dword [ebp - 0x1de80]
mov ecx, dword [ebp - 0x1df54]
add eax, dword [ebp + ecx*4 - 0x1de84]
mov edx, dword [ebp - 0x3574]
add eax, dword [ebp + edx*4 - 0x1de84]
mov ecx, dword [ebp - 0x1df20]
mov edx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp + ecx*4 - 0x231c], edx
mov eax, dword [ebp - 0x1de84]
add eax, 0xa
sub eax, dword [ebp - 0x1de80]
mov ecx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp - 0x357c], ecx
mov edx, dword [ebp - 0x1df54]
mov eax, dword [ebp + edx*4 - 0x1de84]
add eax, 0xa
mov ecx, dword [ebp - 0x3574]
sub eax, dword [ebp + ecx*4 - 0x1de84]
mov edx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp - 0x498], edx
mov eax, dword [ebp - 0x1df1c]
add eax, 1
mov dword [ebp - 0x1df1c], eax
mov ecx, dword [ebp - 0x357c]
add ecx, 0xa
sub ecx, dword [ebp - 0x498]
mov edx, dword [ebp - 0x1df1c]
mov eax, dword [ebp + ecx*4 - 0x4184]
mov dword [ebp + edx*4 - 0x2254], eax
mov ecx, dword [ebp - 0x1df18]
add ecx, 1
mov dword [ebp - 0x1df18], ecx
mov edx, dword [ebp - 0x1df18]
mov eax, dword [ebp - 0x460c]
mov ecx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp + edx*4 - 0x218c], ecx
mov edx, dword [ebp - 0x1df14]
add edx, 1
mov dword [ebp - 0x1df14], edx
mov eax, dword [ebp - 0x1df14]
mov ecx, dword [ebp - 0x434]
mov edx, dword [ebp + ecx*4 - 0x4184]
mov dword [ebp + eax*4 - 0x20c4], edx
mov eax, dword [ebp - 0x1df10]
add eax, 1
mov dword [ebp - 0x1df10], eax
mov ecx, dword [ebp - 0x4610]
shl ecx, 1
mov edx, dword [ebp - 0x1df10]
mov eax, dword [ebp + ecx*4 - 0x4184]
mov dword [ebp + edx*4 - 0x1ffc], eax
mov ecx, dword [ebp - 0x1df0c]
add ecx, 1
mov dword [ebp - 0x1df0c], ecx
mov edx, dword [ebp - 0x4580]
shl edx, 1
mov eax, dword [ebp - 0x1df0c]
mov ecx, dword [ebp + edx*4 - 0x4184]
mov dword [ebp + eax*4 - 0x1f34], ecx
mov dword [ebp - 0x494], 0
jmp 0x4813ee
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
mov eax, dword [ebp - 0x494]
cmp eax, dword [ebp - 0x1dfac]
jge 0x48144b
mov ecx, dword [ebp - 0x494]
mov edx, dword [ebp + ecx*4 - 0x1d48c]
add edx, 1
mov eax, dword [ebp - 0x494]
mov dword [ebp + eax*4 - 0x1d48c], edx
mov ecx, dword [ebp - 0x494]
mov edx, dword [ebp + ecx*4 - 0x1d48c]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0xc8
lea ecx, [ebp + eax - 0x1ccb4]
mov eax, dword [ebp - 0x494]
mov eax, dword [ebp + eax*4 - 0x1de84]
mov dword [ecx + edx*4], eax
jmp 0x4813df
cmp dword [ebp - 0x1dfac], 3
jne 0x4815ec
mov dword [ebp - 0x494], 0
jmp 0x481473
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x48c]
jge 0x4815ec
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp + eax*4 - 0x1d464]
add ecx, 1
mov edx, dword [ebp - 0x494]
mov dword [ebp + edx*4 - 0x1d464], ecx
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp + eax*4 - 0x1d464]
mov edx, dword [ebp - 0x494]
imul edx, edx, 0xc8
lea eax, [ebp + edx - 0x1c4e4]
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov edx, dword [ebp + edx - 0x288]
mov esi, dword [ebp - 0x494]
imul esi, esi, 0x28
mov esi, dword [ebp + esi - 0x28c]
mov esi, dword [ebp + esi*4 - 0x1de84]
add esi, dword [ebp + edx*4 - 0x1de84]
mov edx, dword [ebp + esi*4 - 0x4184]
mov dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp + eax*4 - 0x1d43c]
add ecx, 1
mov edx, dword [ebp - 0x494]
mov dword [ebp + edx*4 - 0x1d43c], ecx
mov eax, dword [ebp - 0x494]
mov esi, dword [ebp + eax*4 - 0x1d43c]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0xc8
lea edi, [ebp + ecx - 0x1bd14]
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x288]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x28c]
mov ecx, dword [ebp + edx*4 - 0x1de84]
sub ecx, dword [ebp + eax*4 - 0x1de84]
push ecx
call fcn.0055a0b3
add esp, 4
mov dword [edi + esi*4], eax
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp + edx*4 - 0x1d414]
add eax, 1
mov ecx, dword [ebp - 0x494]
mov dword [ebp + ecx*4 - 0x1d414], eax
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp + edx*4 - 0x1d414]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0xc8
lea edx, [ebp + ecx - 0x1b544]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov ecx, dword [ebp + ecx - 0x288]
mov esi, dword [ebp - 0x494]
imul esi, esi, 0x28
mov esi, dword [ebp + esi - 0x28c]
mov esi, dword [ebp + esi*4 - 0x1de84]
imul esi, dword [ebp + ecx*4 - 0x1de84]
mov ecx, dword [ebp + esi*4 - 0x4184]
mov dword [edx + eax*4], ecx
jmp 0x481464
cmp dword [ebp - 0x1dfac], 4
jl 0x481703
mov dword [ebp - 0x494], 0
jmp 0x481614
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
mov eax, dword [ebp - 0x494]
cmp eax, dword [ebp - 0x1df50]
jge 0x481703
mov dword [ebp - 0x1dfb4], 0
mov dword [ebp - 0x1dfa8], 0
jmp 0x48164b
mov ecx, dword [ebp - 0x1dfa8]
add ecx, 1
mov dword [ebp - 0x1dfa8], ecx
cmp dword [ebp - 0x1dfa8], 3
jge 0x48169c
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
lea eax, [ebp + edx - 0x39b4]
mov ecx, dword [ebp - 0x1dfa8]
mov edx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x1dfa8]
mov ecx, dword [ebp + edx*4 - 0x1de84]
mov dword [ebp + eax*4 - 0x1dcac], ecx
mov edx, dword [ebp - 0x1dfa8]
mov eax, dword [ebp - 0x1dfb4]
add eax, dword [ebp + edx*4 - 0x1dcac]
mov dword [ebp - 0x1dfb4], eax
jmp 0x48163c
mov ecx, dword [ebp - 0x1df08]
add ecx, 1
mov dword [ebp - 0x1df08], ecx
mov edx, dword [ebp - 0x1df08]
mov eax, dword [ebp - 0x1dfb4]
mov ecx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp + edx*4 - 0x1e6c], ecx
push 2
lea edx, [ebp - 0x1dcac]
push edx
call fcn.004014c0
add esp, 8
mov eax, dword [ebp - 0x1df04]
add eax, 1
mov dword [ebp - 0x1df04], eax
mov ecx, dword [ebp - 0x1dca4]
sub ecx, dword [ebp - 0x1dcac]
mov edx, dword [ebp - 0x1df04]
mov dword [ebp + edx*4 - 0x1da4], ecx
jmp 0x481605
cmp dword [ebp - 0x1dfac], 5
jl 0x48181a
mov dword [ebp - 0x494], 0
jmp 0x48172b
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [ebp - 0x2bb8]
jge 0x48181a
mov dword [ebp - 0x1dfb8], 0
mov dword [ebp - 0x1dfa8], 0
jmp 0x481762
mov edx, dword [ebp - 0x1dfa8]
add edx, 1
mov dword [ebp - 0x1dfa8], edx
cmp dword [ebp - 0x1dfa8], 4
jge 0x4817b3
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
lea ecx, [ebp + eax - 0x356c]
mov edx, dword [ebp - 0x1dfa8]
mov eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x1dfa8]
mov edx, dword [ebp + eax*4 - 0x1de84]
mov dword [ebp + ecx*4 - 0x1dcac], edx
mov eax, dword [ebp - 0x1dfa8]
mov ecx, dword [ebp - 0x1dfb8]
add ecx, dword [ebp + eax*4 - 0x1dcac]
mov dword [ebp - 0x1dfb8], ecx
jmp 0x481753
mov edx, dword [ebp - 0x1df00]
add edx, 1
mov dword [ebp - 0x1df00], edx
mov eax, dword [ebp - 0x1df00]
mov ecx, dword [ebp - 0x1dfb8]
mov edx, dword [ebp + ecx*4 - 0x4184]
mov dword [ebp + eax*4 - 0x1cdc], edx
push 3
lea eax, [ebp - 0x1dcac]
push eax
call fcn.004014c0
add esp, 8
mov ecx, dword [ebp - 0x1defc]
add ecx, 1
mov dword [ebp - 0x1defc], ecx
mov edx, dword [ebp - 0x1dca0]
sub edx, dword [ebp - 0x1dcac]
mov eax, dword [ebp - 0x1defc]
mov dword [ebp + eax*4 - 0x1c14], edx
jmp 0x48171c
mov dword [ebp - 0xf8], 0
jmp 0x481835
mov ecx, dword [ebp - 0xf8]
add ecx, 1
mov dword [ebp - 0xf8], ecx
cmp dword [ebp - 0xf8], 0x10
jg 0x481ae7
push 0x3c
push 0
lea edx, [ebp - 0x1e00c]
push edx
call fcn.00556a10
add esp, 0xc
lea eax, [ebp - 0x1e00c]
push eax
mov ecx, dword [ebp - 0xf8]
imul ecx, ecx, 0x78
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x414]
call fcn.0053c4d3
mov dword [ebp - 0x1e00c], 0x3c
mov eax, dword [ebp - 0x1e004]
and eax, 0xbfffffff
mov dword [ebp - 0x1e004], eax
push 0x3c
push 0
lea ecx, [ebp - 0x1e00c]
push ecx
call fcn.00556a10
add esp, 0xc
push 0x3c
push 0
lea edx, [ebp - 0x1e048]
push edx
call fcn.00556a10
add esp, 0xc
mov dword [ebp - 0x1e038], 0x2bc
lea eax, [ebp - 0x1dff2]
push eax
lea ecx, [ebp - 0x1e02c]
push ecx
call fcn.0055842c
add esp, 8
mov edx, dword [ebp - 0x1e008]
or edx, 0x40000000
mov dword [ebp - 0x1e008], edx
mov eax, dword [ebp - 0x1e008]
or eax, 0x80000000
mov dword [ebp - 0x1e008], eax
mov ecx, dword [ebp - 0x1e008]
or ecx, 0x20000000
mov dword [ebp - 0x1e008], ecx
mov edx, dword [ebp - 0x1e00c]
shl edx, 1
mov dword [ebp - 0x1e00c], edx
mov dword [ebp - 0x1dff8], 0xff
mov dword [ebp - 0x1dfd0], 0xffffffff
mov dword [ebp - 0x1dfcc], 0
mov dword [ebp - 0x1dfc8], 0xffffffff
mov dword [ebp - 0x494], 0
jmp 0x48195e
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp + ecx*4 - 0x1df4c]
jg 0x481ae2
mov eax, dword [ebp - 0xf8]
imul eax, eax, 0xc8
lea ecx, [ebp + eax - 0x2bb4]
mov edx, dword [ebp - 0x494]
mov eax, dword [ecx + edx*4]
push eax
push 0x581f7c
lea ecx, [ebp - 0x424]
push ecx
call fcn.00416090
add esp, 0xc
call fcn.00415ea0
mov dword [ebp - 0x1e05c], eax
lea ecx, [ebp - 0x424]
call fcn.0052f0e0
mov dword [ebp - 0x1e060], eax
cmp dword [ebp - 0x1e060], 0
jne 0x4819d9
mov dword [ebp - 0x1e36c], 0
jmp 0x481a4d
mov edx, dword [ebp - 0x1e060]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x1e050], eax
cmp dword [ebp - 0x1e050], 0x3fffffff
jle 0x481a07
mov dword [ebp - 0x1e370], 0
jmp 0x481a41
mov eax, dword [ebp - 0x1e050]
shl eax, 1
call fcn.00558400
mov dword [ebp - 0x1e374], esp
mov eax, dword [ebp - 0x1e05c]
push eax
mov ecx, dword [ebp - 0x1e050]
push ecx
mov edx, dword [ebp - 0x1e060]
push edx
mov eax, dword [ebp - 0x1e374]
push eax
call fcn.004847d0
mov dword [ebp - 0x1e370], eax
mov ecx, dword [ebp - 0x1e370]
mov dword [ebp - 0x1e36c], ecx
mov edx, dword [ebp - 0x1e36c]
mov dword [ebp - 0x1e04c], edx
mov eax, dword [ebp - 0x1e04c]
mov dword [ebp - 0x1dfc4], eax
lea ecx, [ebp - 0x1dfcc]
push ecx
push 1
mov edx, dword [ebp - 0xf8]
imul edx, edx, 0x78
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x414]
call fcn.00484900
mov dword [ebp - 0x1e058], eax
mov ecx, dword [ebp - 0x1e058]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x1e058]
push edx
mov eax, dword [ebp - 0xf8]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c43f
lea edx, [ebp - 0x1e00c]
push edx
mov eax, dword [ebp - 0xf8]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c48d
jmp 0x48194f
jmp 0x481826
mov dword [ebp - 0xf8], 0
jmp 0x481b02
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x1dfac]
jge 0x481db3
mov ecx, dword [ebp - 0xf8]
add ecx, 0x13
mov dword [ebp - 0x1e084], ecx
cmp dword [ebp - 0x1dfac], 4
jne 0x481b3d
mov edx, dword [ebp - 0xf8]
add edx, 0x12
mov dword [ebp - 0x1e084], edx
jmp 0x481b55
cmp dword [ebp - 0x1dfac], 5
jne 0x481b55
mov eax, dword [ebp - 0xf8]
add eax, 0x11
mov dword [ebp - 0x1e084], eax
push 0x3c
push 0
lea ecx, [ebp - 0x1e0c4]
push ecx
call fcn.00556a10
add esp, 0xc
lea edx, [ebp - 0x1e0c4]
push edx
mov eax, dword [ebp - 0x1e084]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c4d3
mov dword [ebp - 0x1e0c4], 0x3c
mov edx, dword [ebp - 0x1e0bc]
and edx, 0xbfffffff
mov dword [ebp - 0x1e0bc], edx
push 0x3c
push 0
lea eax, [ebp - 0x1e0c4]
push eax
call fcn.00556a10
add esp, 0xc
push 0x3c
push 0
lea ecx, [ebp - 0x1e104]
push ecx
call fcn.00556a10
add esp, 0xc
mov dword [ebp - 0x1e0f4], 0x2bc
lea edx, [ebp - 0x1e0aa]
push edx
lea eax, [ebp - 0x1e0e8]
push eax
call fcn.0055842c
add esp, 8
mov ecx, dword [ebp - 0x1e0c0]
or ecx, 0x40000000
mov dword [ebp - 0x1e0c0], ecx
mov edx, dword [ebp - 0x1e0c0]
or edx, 0x80000000
mov dword [ebp - 0x1e0c0], edx
mov eax, dword [ebp - 0x1e0c0]
or eax, 0x20000000
mov dword [ebp - 0x1e0c0], eax
mov ecx, dword [ebp - 0x1e0c4]
shl ecx, 1
mov dword [ebp - 0x1e0c4], ecx
mov dword [ebp - 0x1e0b0], 0xff
mov dword [ebp - 0x1e088], 0xffffffff
mov dword [ebp - 0x1e078], 0
mov dword [ebp - 0x1e074], 0xffffffff
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp + edx*4 - 0x45cc]
push eax
push 0x581f80
lea ecx, [ebp - 0x424]
push ecx
call fcn.00416090
add esp, 0xc
call fcn.00415ea0
mov dword [ebp - 0x1e108], eax
lea ecx, [ebp - 0x424]
call fcn.0052f0e0
mov dword [ebp - 0x1e10c], eax
cmp dword [ebp - 0x1e10c], 0
jne 0x481caa
mov dword [ebp - 0x1e378], 0
jmp 0x481d1e
mov edx, dword [ebp - 0x1e10c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x1e07c], eax
cmp dword [ebp - 0x1e07c], 0x3fffffff
jle 0x481cd8
mov dword [ebp - 0x1e37c], 0
jmp 0x481d12
mov eax, dword [ebp - 0x1e07c]
shl eax, 1
call fcn.00558400
mov dword [ebp - 0x1e380], esp
mov eax, dword [ebp - 0x1e108]
push eax
mov ecx, dword [ebp - 0x1e07c]
push ecx
mov edx, dword [ebp - 0x1e10c]
push edx
mov eax, dword [ebp - 0x1e380]
push eax
call fcn.004847d0
mov dword [ebp - 0x1e37c], eax
mov ecx, dword [ebp - 0x1e37c]
mov dword [ebp - 0x1e378], ecx
mov edx, dword [ebp - 0x1e378]
mov dword [ebp - 0x1e064], edx
mov eax, dword [ebp - 0x1e064]
mov dword [ebp - 0x1e070], eax
lea ecx, [ebp - 0x1e078]
push ecx
push 1
mov edx, dword [ebp - 0x1e084]
imul edx, edx, 0x78
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x414]
call fcn.00484900
mov dword [ebp - 0x1e0c8], eax
mov ecx, dword [ebp - 0x1e0c8]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x1e0c8]
push edx
mov eax, dword [ebp - 0x1e084]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c43f
lea edx, [ebp - 0x1e0c4]
push edx
mov eax, dword [ebp - 0x1e084]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c48d
jmp 0x481af3
cmp dword [ebp - 0x1dfac], 3
jne 0x4820af
mov dword [ebp - 0xf8], 1
jmp 0x481ddb
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
cmp dword [ebp - 0xf8], 3
jg 0x4820af
mov eax, dword [ebp - 0xf8]
sub eax, 1
imul eax, eax, 3
add eax, 0x16
mov dword [ebp - 0x1e110], eax
mov dword [ebp - 0x494], 0
jmp 0x481e18
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
cmp dword [ebp - 0x494], 3
jge 0x4820aa
mov edx, dword [ebp - 0x1e110]
add edx, dword [ebp - 0x494]
mov dword [ebp - 0x1e1bc], edx
push 0x3c
push 0
lea eax, [ebp - 0x1e170]
push eax
call fcn.00556a10
add esp, 0xc
lea ecx, [ebp - 0x1e170]
push ecx
mov edx, dword [ebp - 0x1e1bc]
imul edx, edx, 0x78
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x414]
call fcn.0053c4d3
mov dword [ebp - 0x1e170], 0x3c
mov ecx, dword [ebp - 0x1e168]
and ecx, 0xbfffffff
mov dword [ebp - 0x1e168], ecx
push 0x3c
push 0
lea edx, [ebp - 0x1e170]
push edx
call fcn.00556a10
add esp, 0xc
push 0x3c
push 0
lea eax, [ebp - 0x1e1b0]
push eax
call fcn.00556a10
add esp, 0xc
mov dword [ebp - 0x1e1a0], 0x2bc
lea ecx, [ebp - 0x1e156]
push ecx
lea edx, [ebp - 0x1e194]
push edx
call fcn.0055842c
add esp, 8
mov eax, dword [ebp - 0x1e16c]
or eax, 0x40000000
mov dword [ebp - 0x1e16c], eax
mov ecx, dword [ebp - 0x1e16c]
or ecx, 0x80000000
mov dword [ebp - 0x1e16c], ecx
mov edx, dword [ebp - 0x1e16c]
or edx, 0x20000000
mov dword [ebp - 0x1e16c], edx
mov eax, dword [ebp - 0x1e170]
shl eax, 1
mov dword [ebp - 0x1e170], eax
mov dword [ebp - 0x1e15c], 0xff
mov dword [ebp - 0x1e134], 0xffffffff
mov dword [ebp - 0x1e128], 0
mov dword [ebp - 0x1e124], 0xffffffff
mov ecx, dword [ebp - 0xf8]
imul ecx, ecx, 0x7d0
lea edx, [ebp + ecx - 0x1ccb4]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0xc8
mov ecx, dword [edx + eax]
push ecx
push 0x581f84
lea edx, [ebp - 0x424]
push edx
call fcn.00416090
add esp, 0xc
call fcn.00415ea0
mov dword [ebp - 0x1e1b4], eax
lea ecx, [ebp - 0x424]
call fcn.0052f0e0
mov dword [ebp - 0x1e1b8], eax
cmp dword [ebp - 0x1e1b8], 0
jne 0x481fa1
mov dword [ebp - 0x1e384], 0
jmp 0x482015
mov eax, dword [ebp - 0x1e1b8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x1e12c], eax
cmp dword [ebp - 0x1e12c], 0x3fffffff
jle 0x481fcf
mov dword [ebp - 0x1e388], 0
jmp 0x482009
mov eax, dword [ebp - 0x1e12c]
shl eax, 1
call fcn.00558400
mov dword [ebp - 0x1e38c], esp
mov ecx, dword [ebp - 0x1e1b4]
push ecx
mov edx, dword [ebp - 0x1e12c]
push edx
mov eax, dword [ebp - 0x1e1b8]
push eax
mov ecx, dword [ebp - 0x1e38c]
push ecx
call fcn.004847d0
mov dword [ebp - 0x1e388], eax
mov edx, dword [ebp - 0x1e388]
mov dword [ebp - 0x1e384], edx
mov eax, dword [ebp - 0x1e384]
mov dword [ebp - 0x1e114], eax
mov ecx, dword [ebp - 0x1e114]
mov dword [ebp - 0x1e120], ecx
lea edx, [ebp - 0x1e128]
push edx
push 1
mov eax, dword [ebp - 0x1e1bc]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.00484900
mov dword [ebp - 0x1e174], eax
mov edx, dword [ebp - 0x1e174]
add edx, 1
push edx
mov eax, dword [ebp - 0x1e174]
push eax
mov ecx, dword [ebp - 0x1e1bc]
imul ecx, ecx, 0x78
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x414]
call fcn.0053c43f
lea eax, [ebp - 0x1e170]
push eax
mov ecx, dword [ebp - 0x1e1bc]
imul ecx, ecx, 0x78
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x414]
call fcn.0053c48d
jmp 0x481e09
jmp 0x481dcc
cmp dword [ebp - 0x1dfac], 4
jl 0x482398
mov dword [ebp - 0xf8], 0x11
jmp 0x4820d7
mov eax, dword [ebp - 0xf8]
add eax, 1
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x12
jg 0x482398
mov ecx, dword [ebp - 0xf8]
add ecx, 0xe
mov dword [ebp - 0x1e1d4], ecx
push 0x3c
push 0
lea edx, [ebp - 0x1e214]
push edx
call fcn.00556a10
add esp, 0xc
lea eax, [ebp - 0x1e214]
push eax
mov ecx, dword [ebp - 0x1e1d4]
imul ecx, ecx, 0x78
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x414]
call fcn.0053c4d3
mov dword [ebp - 0x1e214], 0x3c
mov eax, dword [ebp - 0x1e20c]
and eax, 0xbfffffff
mov dword [ebp - 0x1e20c], eax
push 0x3c
push 0
lea ecx, [ebp - 0x1e214]
push ecx
call fcn.00556a10
add esp, 0xc
push 0x3c
push 0
lea edx, [ebp - 0x1e250]
push edx
call fcn.00556a10
add esp, 0xc
mov dword [ebp - 0x1e240], 0x2bc
lea eax, [ebp - 0x1e1fa]
push eax
lea ecx, [ebp - 0x1e234]
push ecx
call fcn.0055842c
add esp, 8
mov edx, dword [ebp - 0x1e210]
or edx, 0x40000000
mov dword [ebp - 0x1e210], edx
mov eax, dword [ebp - 0x1e210]
or eax, 0x80000000
mov dword [ebp - 0x1e210], eax
mov ecx, dword [ebp - 0x1e210]
or ecx, 0x20000000
mov dword [ebp - 0x1e210], ecx
mov edx, dword [ebp - 0x1e214]
shl edx, 1
mov dword [ebp - 0x1e214], edx
mov dword [ebp - 0x1e200], 0xff
mov dword [ebp - 0x1e1d8], 0xffffffff
mov dword [ebp - 0x1e1d0], 0
mov dword [ebp - 0x1e1cc], 0xffffffff
mov dword [ebp - 0x494], 0
jmp 0x48220f
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp + ecx*4 - 0x1df4c]
jg 0x482393
mov eax, dword [ebp - 0xf8]
imul eax, eax, 0xc8
lea ecx, [ebp + eax - 0x2bb4]
mov edx, dword [ebp - 0x494]
mov eax, dword [ecx + edx*4]
push eax
push 0x581f88
lea ecx, [ebp - 0x424]
push ecx
call fcn.00416090
add esp, 0xc
call fcn.00415ea0
mov dword [ebp - 0x1e264], eax
lea ecx, [ebp - 0x424]
call fcn.0052f0e0
mov dword [ebp - 0x1e268], eax
cmp dword [ebp - 0x1e268], 0
jne 0x48228a
mov dword [ebp - 0x1e390], 0
jmp 0x4822fe
mov edx, dword [ebp - 0x1e268]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x1e258], eax
cmp dword [ebp - 0x1e258], 0x3fffffff
jle 0x4822b8
mov dword [ebp - 0x1e394], 0
jmp 0x4822f2
mov eax, dword [ebp - 0x1e258]
shl eax, 1
call fcn.00558400
mov dword [ebp - 0x1e398], esp
mov eax, dword [ebp - 0x1e264]
push eax
mov ecx, dword [ebp - 0x1e258]
push ecx
mov edx, dword [ebp - 0x1e268]
push edx
mov eax, dword [ebp - 0x1e398]
push eax
call fcn.004847d0
mov dword [ebp - 0x1e394], eax
mov ecx, dword [ebp - 0x1e394]
mov dword [ebp - 0x1e390], ecx
mov edx, dword [ebp - 0x1e390]
mov dword [ebp - 0x1e254], edx
mov eax, dword [ebp - 0x1e254]
mov dword [ebp - 0x1e1c8], eax
lea ecx, [ebp - 0x1e1d0]
push ecx
push 1
mov edx, dword [ebp - 0x1e1d4]
imul edx, edx, 0x78
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x414]
call fcn.00484900
mov dword [ebp - 0x1e260], eax
mov ecx, dword [ebp - 0x1e260]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x1e260]
push edx
mov eax, dword [ebp - 0x1e1d4]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c43f
lea edx, [ebp - 0x1e214]
push edx
mov eax, dword [ebp - 0x1e1d4]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c48d
jmp 0x482200
jmp 0x4820c8
cmp dword [ebp - 0x1dfac], 5
jl 0x482682
mov dword [ebp - 0xf8], 0x13
jmp 0x4823c0
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
cmp dword [ebp - 0xf8], 0x14
jg 0x482682
mov eax, dword [ebp - 0xf8]
add eax, 0xe
mov dword [ebp - 0x1e280], eax
push 0x3c
push 0
lea ecx, [ebp - 0x1e2c0]
push ecx
call fcn.00556a10
add esp, 0xc
lea edx, [ebp - 0x1e2c0]
push edx
mov eax, dword [ebp - 0x1e280]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c4d3
mov dword [ebp - 0x1e2c0], 0x3c
mov edx, dword [ebp - 0x1e2b8]
and edx, 0xbfffffff
mov dword [ebp - 0x1e2b8], edx
push 0x3c
push 0
lea eax, [ebp - 0x1e2c0]
push eax
call fcn.00556a10
add esp, 0xc
push 0x3c
push 0
lea ecx, [ebp - 0x1e2fc]
push ecx
call fcn.00556a10
add esp, 0xc
mov dword [ebp - 0x1e2ec], 0x2bc
lea edx, [ebp - 0x1e2a6]
push edx
lea eax, [ebp - 0x1e2e0]
push eax
call fcn.0055842c
add esp, 8
mov ecx, dword [ebp - 0x1e2bc]
or ecx, 0x40000000
mov dword [ebp - 0x1e2bc], ecx
mov edx, dword [ebp - 0x1e2bc]
or edx, 0x80000000
mov dword [ebp - 0x1e2bc], edx
mov eax, dword [ebp - 0x1e2bc]
or eax, 0x20000000
mov dword [ebp - 0x1e2bc], eax
mov ecx, dword [ebp - 0x1e2c0]
shl ecx, 1
mov dword [ebp - 0x1e2c0], ecx
mov dword [ebp - 0x1e2ac], 0xff
mov dword [ebp - 0x1e284], 0xffffffff
mov dword [ebp - 0x1e27c], 0
mov dword [ebp - 0x1e278], 0xffffffff
mov dword [ebp - 0x494], 0
jmp 0x4824f9
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [ebp + eax*4 - 0x1df4c]
jg 0x48267d
mov edx, dword [ebp - 0xf8]
imul edx, edx, 0xc8
lea eax, [ebp + edx - 0x2bb4]
mov ecx, dword [ebp - 0x494]
mov edx, dword [eax + ecx*4]
push edx
push 0x581f8c
lea eax, [ebp - 0x424]
push eax
call fcn.00416090
add esp, 0xc
call fcn.00415ea0
mov dword [ebp - 0x1e310], eax
lea ecx, [ebp - 0x424]
call fcn.0052f0e0
mov dword [ebp - 0x1e314], eax
cmp dword [ebp - 0x1e314], 0
jne 0x482574
mov dword [ebp - 0x1e39c], 0
jmp 0x4825e8
mov ecx, dword [ebp - 0x1e314]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x1e304], eax
cmp dword [ebp - 0x1e304], 0x3fffffff
jle 0x4825a2
mov dword [ebp - 0x1e3a0], 0
jmp 0x4825dc
mov eax, dword [ebp - 0x1e304]
shl eax, 1
call fcn.00558400
mov dword [ebp - 0x1e3a4], esp
mov edx, dword [ebp - 0x1e310]
push edx
mov eax, dword [ebp - 0x1e304]
push eax
mov ecx, dword [ebp - 0x1e314]
push ecx
mov edx, dword [ebp - 0x1e3a4]
push edx
call fcn.004847d0
mov dword [ebp - 0x1e3a0], eax
mov eax, dword [ebp - 0x1e3a0]
mov dword [ebp - 0x1e39c], eax
mov ecx, dword [ebp - 0x1e39c]
mov dword [ebp - 0x1e300], ecx
mov edx, dword [ebp - 0x1e300]
mov dword [ebp - 0x1e274], edx
lea eax, [ebp - 0x1e27c]
push eax
push 1
mov ecx, dword [ebp - 0x1e280]
imul ecx, ecx, 0x78
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x414]
call fcn.00484900
mov dword [ebp - 0x1e30c], eax
mov eax, dword [ebp - 0x1e30c]
add eax, 1
push eax
mov ecx, dword [ebp - 0x1e30c]
push ecx
mov edx, dword [ebp - 0x1e280]
imul edx, edx, 0x78
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x414]
call fcn.0053c43f
lea ecx, [ebp - 0x1e2c0]
push ecx
mov edx, dword [ebp - 0x1e280]
imul edx, edx, 0x78
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x414]
call fcn.0053c48d
jmp 0x4824ea
jmp 0x4823b1
mov dword [ebp - 0x2c08], 0
mov dword [ebp - 0x2bc0], 0x23
push 0x3c
push 0
lea ecx, [ebp - 0x2c04]
push ecx
call fcn.00556a10
add esp, 0xc
lea edx, [ebp - 0x2c04]
push edx
mov eax, dword [ebp - 0x2bc0]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c4d3
mov dword [ebp - 0x2c04], 0x3c
mov edx, dword [ebp - 0x2bfc]
and edx, 0xbfffffff
mov dword [ebp - 0x2bfc], edx
push 0x3c
push 0
lea eax, [ebp - 0x2c04]
push eax
call fcn.00556a10
add esp, 0xc
push 0x3c
push 0
lea ecx, [ebp - 0x4608]
push ecx
call fcn.00556a10
add esp, 0xc
mov dword [ebp - 0x45f8], 0x2bc
lea edx, [ebp - 0x2bea]
push edx
lea eax, [ebp - 0x45ec]
push eax
call fcn.0055842c
add esp, 8
mov ecx, dword [ebp - 0x2c00]
or ecx, 0x40000000
mov dword [ebp - 0x2c00], ecx
mov edx, dword [ebp - 0x2c00]
or edx, 0x80000000
mov dword [ebp - 0x2c00], edx
mov eax, dword [ebp - 0x2c00]
or eax, 0x20000000
mov dword [ebp - 0x2c00], eax
mov ecx, dword [ebp - 0x2c04]
shl ecx, 1
mov dword [ebp - 0x2c04], ecx
mov dword [ebp - 0x2bf0], 0xff
mov dword [ebp - 0x2bc8], 0xffffffff
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xffffffff
push 1
push 0
push 0x581f90
lea edx, [ebp - 0x424]
push edx
call fcn.00416090
add esp, 0x10
mov dword [ebp - 0x430], 4
mov dword [ebp - 0x494], 0
jmp 0x4827cf
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [ebp - 0x48c]
jge 0x4828c5
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp + edx*4 - 0x41c]
movsx ecx, word [ebp + eax*4 - 0x3822]
push ecx
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp + edx*4 - 0x41c]
movsx ecx, word [ebp + eax*4 - 0x3824]
push ecx
push 0x581f9c
lea edx, [ebp - 0x424]
push edx
call fcn.00416090
add esp, 0x10
lea ecx, [ebp - 0x424]
call fcn.00413d40
mov dword [ebp - 0x1e318], eax
mov eax, dword [ebp - 0x1e318]
mov dword [ebp - 0x18], eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x424]
call fcn.00415650
lea ecx, [ebp - 0x20]
push ecx
push 1
mov edx, dword [ebp - 0x2bc0]
imul edx, edx, 0x78
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x414]
call fcn.00484900
mov dword [ebp - 0x1e31c], eax
mov ecx, dword [ebp - 0x1e31c]
add ecx, dword [ebp - 0x430]
push ecx
mov edx, dword [ebp - 0x1e31c]
push edx
mov eax, dword [ebp - 0x2bc0]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c43f
lea edx, [ebp - 0x2c04]
push edx
mov eax, dword [ebp - 0x2bc0]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c48d
jmp 0x4827c0
mov dword [ebp - 0x438], 0
jmp 0x4828e0
mov edx, dword [ebp - 0x438]
add edx, 1
mov dword [ebp - 0x438], edx
cmp dword [ebp - 0x438], 5
jge 0x482a8c
mov dword [ebp - 0x2c08], 0
push 0x581fa8
lea eax, [ebp - 0x2c08]
push eax
mov ecx, dword [ebp - 0x49c]
push ecx
call fcn.00401a00
add esp, 0xc
mov dword [ebp - 0x1dfa8], 0
jmp 0x48292d
mov edx, dword [ebp - 0x1dfa8]
add edx, 1
mov dword [ebp - 0x1dfa8], edx
mov eax, dword [ebp - 0x1dfa8]
cmp eax, dword [ebp - 0x1dfac]
jge 0x4829a8
mov ecx, dword [ebp - 0x438]
mov edx, dword [ebp - 0x1e354]
lea eax, [edx + ecx*8 + 0x2b4]
mov ecx, dword [ebp - 0x438]
imul ecx, ecx, 0x14
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x1ec]
mov edx, dword [ebp - 0x1dfa8]
mov edx, dword [ebp + edx*4 - 0x45cc]
movsx ecx, word [ecx + edx*2]
lea edx, [eax + ecx*4]
push ecx
mov ecx, esp
mov dword [ebp - 0x1e340], esp
push edx
call fcn.00415510
mov dword [ebp - 0x1e3a8], eax
lea eax, [ebp - 0x2c08]
push eax
mov ecx, dword [ebp - 0x49c]
push ecx
call fcn.00401ff0
add esp, 0xc
jmp 0x48291e
push 0x581fac
lea edx, [ebp - 0x2c08]
push edx
mov eax, dword [ebp - 0x49c]
push eax
call fcn.00401a00
add esp, 0xc
mov ecx, dword [ebp - 0x49c]
add ecx, dword [ebp - 0x2c08]
mov byte [ecx], 0
mov edx, dword [ebp - 0x49c]
push edx
lea ecx, [ebp - 0x424]
call fcn.004155d0
lea ecx, [ebp - 0x424]
call fcn.00415630
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x1e320], eax
mov ecx, dword [ebp - 0x1e320]
mov dword [ebp - 0x18], ecx
lea edx, [ebp - 0x20]
push edx
push 1
mov eax, dword [ebp - 0x2bc0]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.00484900
mov dword [ebp - 0x1e324], eax
mov edx, dword [ebp - 0x1e324]
add edx, dword [ebp - 0x430]
push edx
mov eax, dword [ebp - 0x1e324]
push eax
mov ecx, dword [ebp - 0x2bc0]
imul ecx, ecx, 0x78
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x414]
call fcn.0053c43f
lea eax, [ebp - 0x2c04]
push eax
mov ecx, dword [ebp - 0x2bc0]
imul ecx, ecx, 0x78
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x414]
call fcn.0053c48d
jmp 0x4828d1
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1e344], eax
mov ecx, dword [ebp - 0x1e344]
push ecx
call fcn.00534ac4
add esp, 4
mov edx, dword [ebp - 0x49c]
mov dword [ebp - 0x1e348], edx
mov eax, dword [ebp - 0x1e348]
push eax
call fcn.00534ac4
add esp, 4
mov dword [ebp - 0x494], 0
jmp 0x482ada
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x1dfac]
jge 0x482b0e
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp - 0x4570]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0x1e34c], edx
mov eax, dword [ebp - 0x1e34c]
push eax
call fcn.00534ac4
add esp, 4
jmp 0x482acb
mov ecx, dword [ebp - 0x4570]
mov dword [ebp - 0x1e350], ecx
mov edx, dword [ebp - 0x1e350]
push edx
call fcn.00534ac4
add esp, 4
call fcn.00415420
mov dword [ebp - 0x1e3ac], eax
push 0xffffffffffffffff
mov eax, dword [ebp - 0x1e3ac]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1e3ac]
mov eax, dword [edx + 0x9c]
call eax
mov byte [ebp - 4], 5
push fcn.0052ee60
push 0x14
push 4
lea ecx, [ebp - 0x3694]
push ecx
call fcn.00557d54
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x424]
call fcn.0052ee60
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4574]
call fcn.0052ee60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4578]
call fcn.0052ee60
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x428]
call fcn.0052ee60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1dc60]
call fcn.0052ee60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1df58]
call fcn.0052ee60
lea esp, [ebp - 0x1e3b8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x28]
xor ecx, ebp
call fcn.00556710
mov esp, ebp
pop ebp
ret