Function at 0x410805
Capabilities:
Contain obfuscated stackstrings
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bd995
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x638
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2d0], 0x174e
mov dword [ebp - 0x368], 0xac71c0
cmp dword [ebp - 0x2d0], 0x195e
jle 0x4108f4
and dword [ebp - 0x90], 0
jmp 0x410864
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xe12
jge 0x4108e4
and dword [ebp - 0x164], 0
jmp 0x410886
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x2c25
jge 0x4108df
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x164]
cdq
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], edx
push dword [ebp - 0x33c]
push dword [ebp - 0x340]
lea ecx, [ebp - 0x648]
call fcn.004019dd
pop ecx
pop ecx
mov ecx, eax
call fcn.004195e5
push eax
call fcn.004a813a
pop ecx
lea ecx, [ebp - 0x648]
call fcn.004195db
jmp 0x410879
jmp 0x410857
push 0x2238
push 0x208
call dword [0xaec124]
and dword [ebp - 4], 0
cmp dword [ebp - 0x2d0], 0x137d
jge 0x410910
push dword [ebp - 0x368]
call fcn.004a813a
pop ecx
jmp 0x41092c
or dword [ebp - 4], 0xffffffff
jmp 0x410936
mov dword [ebp - 0x7c], 0xfffffffe
mov dword [ebp - 0x328], 0xdc1b6eab
mov dword [ebp - 0x7c], 0
jmp 0x410957
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xfffffff2
jle 0x410970
mov byte [ebp - 0x4a], 0
movzx eax, byte [ebp - 0x4a]
test eax, eax
je 0x41096e
call fcn.00410179
jmp 0x410950
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.0041018b
pop ecx
pop ecx
mov dword [ebp - 0x98], 0xad313dd3
mov dword [ebp - 0x98], 4
jmp 0x4109a5
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0xfffffff6
jne 0x410cd3
push 2
lea ecx, [ebp - 0x4b0]
call fcn.0041981b
push 4
lea ecx, [ebp - 0x498]
call fcn.0041981b
mov dword [ebp - 0xa8], 0xfffffffe
lea eax, [ebp - 0x4b0]
push eax
lea eax, [ebp - 0x40c]
push eax
call fcn.004102ad
pop ecx
pop ecx
mov dword [ebp - 0x290], 0x3142
mov dword [ebp - 0x334], 0xac7218
cmp dword [ebp - 0x290], 0x32e7
jle 0x410ab7
and dword [ebp - 0x114], 0
jmp 0x410a25
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x3827
jge 0x410ab7
and dword [ebp - 0xa0], 0
jmp 0x410a4b
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x5602
jge 0x410ab2
and dword [ebp - 0x144], 0
jmp 0x410a6d
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x422d
jge 0x410ab0
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0xa0]
and eax, dword [ebp - 0x144]
cdq
mov dword [ebp - 0x34c], eax
mov dword [ebp - 0x348], edx
push dword [ebp - 0x348]
push dword [ebp - 0x34c]
mov ecx, 0xae9678
call fcn.004195f0
jmp 0x410a60
jmp 0x410a3e
jmp 0x410a18
mov dword [ebp - 4], 2
cmp dword [ebp - 0x290], 0x2f8e
jge 0x410ada
mov edx, dword [ebp - 0x334]
mov ecx, 0xae9678
call fcn.0041bb1d
jmp 0x410af6
or dword [ebp - 4], 0xffffffff
jmp 0x410b00
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0x40c]
push eax
call fcn.004102f5
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x4b0]
call fcn.00419909
mov esi, eax
push 3
lea ecx, [ebp - 0x498]
call fcn.00419909
mov ecx, dword [esi]
mov dword [eax], ecx
mov dword [ebp - 0xa8], 0
jmp 0x410b4e
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jg 0x410cb8
mov dword [ebp - 0x31c], 0x7793
mov dword [ebp - 0x330], 0xac7250
cmp dword [ebp - 0x31c], 0x79ee
jle 0x410c5c
and dword [ebp - 0xc8], 0
jmp 0x410b95
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x73eb
jge 0x410c5c
and dword [ebp - 0x11c], 0
jmp 0x410bbb
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x661d
jge 0x410c57
and dword [ebp - 0xb0], 0
jmp 0x410be1
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x16a4
jge 0x410c52
and dword [ebp - 0xb8], 0
jmp 0x410c03
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x74a9
jge 0x410c50
mov ecx, dword [ebp - 0x11c]
sub ecx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xc8]
sar eax, cl
mov ecx, dword [ebp - 0xb8]
sar eax, cl
cdq
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], edx
push dword [ebp - 0x354]
push dword [ebp - 0x358]
mov ecx, 0xae9678
call fcn.004195f0
jmp 0x410bf6
jmp 0x410bd4
jmp 0x410bae
jmp 0x410b88
mov byte [ebp - 0x47], 0
mov dword [ebp - 4], 4
cmp dword [ebp - 0x31c], 0x7554
jge 0x410c83
mov edx, dword [ebp - 0x330]
mov ecx, 0xae9678
call fcn.0041bb1d
jmp 0x410c9f
or dword [ebp - 4], 0xffffffff
jmp 0x410ca9
lea eax, [ebp - 0x47]
push eax
call fcn.0041033a
pop ecx
jmp 0x410b41
lea ecx, [ebp - 0x498]
call fcn.004198ed
lea ecx, [ebp - 0x4b0]
call fcn.004198ed
jmp 0x410998
mov byte [ebp - 0x1d8], 0x16
mov byte [ebp - 0x1d7], 0x24
mov byte [ebp - 0x1d6], 9
mov byte [ebp - 0x1d5], 0x1d
mov byte [ebp - 0x1d4], 0xc
mov byte [ebp - 0x1d3], 7
mov byte [ebp - 0x1d2], 0xd
mov byte [ebp - 0x1d1], 3
mov byte [ebp - 0x1d0], 7
mov byte [ebp - 0x1cf], 6
mov byte [ebp - 0x1ce], 0x15
mov byte [ebp - 0x1cd], 0x1e
mov byte [ebp - 0x1cc], 0x17
mov byte [ebp - 0x1cb], 0xe
mov byte [ebp - 0x1ca], 0x13
mov byte [ebp - 0x1c9], 0xc
mov byte [ebp - 0x1c8], 0x12
mov byte [ebp - 0x1c7], 7
mov byte [ebp - 0x1c6], 6
mov byte [ebp - 0x1c5], 0x14
mov byte [ebp - 0x1c4], 0x11
mov byte [ebp - 0x1c3], 0x15
mov byte [ebp - 0x1c2], 8
mov byte [ebp - 0x1c1], 0x1b
mov byte [ebp - 0x1c0], 5
mov byte [ebp - 0x1bf], 0xf
mov byte [ebp - 0x1be], 0
mov byte [ebp - 0x1bd], 7
mov byte [ebp - 0x1bc], 0x10
mov byte [ebp - 0x1bb], 0x10
mov byte [ebp - 0x1ba], 2
mov byte [ebp - 0x1b9], 0x12
mov byte [ebp - 0x1b8], 1
mov byte [ebp - 0x1b7], 1
mov byte [ebp - 0x1b6], 0x19
mov byte [ebp - 0x1b5], 0x18
mov byte [ebp - 0x1b4], 0xa
mov byte [ebp - 0x1b3], 0x11
mov byte [ebp - 0x1b2], 3
mov byte [ebp - 0x1b1], 0xf
mov byte [ebp - 0x1b0], 0xe
mov byte [ebp - 0x1af], 0xb
mov byte [ebp - 0x1ae], 0xf
mov byte [ebp - 0x1ad], 0x1f
mov byte [ebp - 0x1ac], 4
mov byte [ebp - 0x1ab], 0x15
mov byte [ebp - 0x1aa], 0x33
mov byte [ebp - 0x1a9], 0xd6
mov byte [ebp - 0x1a8], 0xa8
mov byte [ebp - 0x1a7], 0xaa
mov byte [ebp - 0x1a6], 0xd2
mov byte [ebp - 0x1a5], 0xc7
mov byte [ebp - 0x1a4], 0x7a
mov byte [ebp - 0x1a3], 0xef
mov byte [ebp - 0x1a2], 0x61
mov byte [ebp - 0x1a1], 0xd9
mov byte [ebp - 0x1a0], 0x81
mov byte [ebp - 0x19f], 0x3c
mov byte [ebp - 0x19e], 0x86
mov byte [ebp - 0x19d], 0x35
mov byte [ebp - 0x19c], 0x46
mov byte [ebp - 0x19b], 0x33
mov byte [ebp - 0x19a], 0xed
mov byte [ebp - 0x199], 0x5f
mov byte [ebp - 0x198], 0xe2
mov byte [ebp - 0x197], 0x4b
mov byte [ebp - 0x196], 0x8e
mov byte [ebp - 0x195], 0x95
mov byte [ebp - 0x194], 0xf9
mov byte [ebp - 0x193], 0xd0
mov byte [ebp - 0x192], 0x42
mov byte [ebp - 0x191], 0x56
mov byte [ebp - 0x190], 0xb4
mov byte [ebp - 0x18f], 0x9c
mov byte [ebp - 0x18e], 0xa7
mov byte [ebp - 0x18d], 0x82
mov byte [ebp - 0x18c], 0x5e
mov byte [ebp - 0x18b], 0x30
mov byte [ebp - 0x18a], 0xe4
mov byte [ebp - 0x189], 0xfd
mov byte [ebp - 0x188], 0x2d
mov byte [ebp - 0x187], 0x93
mov byte [ebp - 0x186], 0xd
mov byte [ebp - 0x185], 0xaa
mov byte [ebp - 0x184], 0x48
mov byte [ebp - 0x183], 0xa5
mov byte [ebp - 0x182], 0x5d
mov byte [ebp - 0x181], 0x25
mov byte [ebp - 0x180], 0x2d
mov byte [ebp - 0x17f], 0x2b
mov byte [ebp - 0x17e], 0x7f
mov byte [ebp - 0x17d], 0xb4
mov byte [ebp - 0x17c], 0xf5
mov byte [ebp - 0x17b], 0xdb
mov byte [ebp - 0x17a], 7
mov byte [ebp - 0x179], 0xb1
mov byte [ebp - 0x178], 0xa4
mov byte [ebp - 0x177], 0xbf
mov byte [ebp - 0x176], 0x14
mov byte [ebp - 0x175], 0x10
mov byte [ebp - 0x174], 0xb
mov byte [ebp - 0x173], 0x19
mov byte [ebp - 0x172], 0x18
mov byte [ebp - 0x171], 0x15
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x48c], 0xb64d
mov dword [ebp - 0x488], 0xb64d
mov dword [ebp - 0x484], 0xb64d
mov dword [ebp - 0x480], 0xb64d
lea ecx, [ebp - 0x1e9]
call fcn.00419918
push eax
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x590]
call fcn.0041991b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x4f4]
call fcn.004198c7
mov dword [ebp - 0xd0], 0
jmp 0x411028
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jge 0x411044
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x4a4], 1
jmp 0x41101b
mov dword [ebp - 0x30], 2
jmp 0x411054
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x4111e5
mov dword [ebp - 0x50], 0xfffffffa
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x4a4], 0
je 0x4111b3
xor eax, eax
inc eax
je 0x4111b3
mov dword [ebp - 0x1e4], 0xc0de
mov byte [ebp - 0x52], 0
movzx eax, byte [ebp - 0x52]
test eax, eax
je 0x41109a
call fcn.0041035a
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x208], eax
push 3
lea ecx, [ebp - 0x4f4]
call fcn.00419909
mov ecx, dword [ebp - 0x208]
mov dword [eax], ecx
mov eax, 0xa089
sub eax, dword [ebp - 0x1e4]
imul eax, dword [ebp - 0x1e4]
imul eax, dword [ebp - 0x208]
cmp eax, dword [ebp - 0x50]
jne 0x4110e5
mov dword [ebp - 0x2d8], 1
jmp 0x4110ec
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x2d8], eax
jge 0x411103
mov dword [ebp - 0x210], 1
jmp 0x41110a
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x210], eax
jge 0x411121
mov dword [ebp - 0x298], 1
jmp 0x411128
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
neg eax
cmp eax, dword [ebp - 0x30]
je 0x411141
mov dword [ebp - 0x318], 1
jmp 0x411148
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x4a4]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x4a4], ecx
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x318]
jl 0x411182
mov dword [ebp - 0x220], 1
jmp 0x411189
and dword [ebp - 0x220], 0
cmp dword [ebp - 0x220], 0xfa9e
jle 0x4111a1
mov dword [ebp - 0x2a0], 1
jmp 0x4111a8
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x50], eax
jmp 0x4111e0
mov dword [ebp - 0x50], 0x17
jmp 0x4111c3
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xfffffff2
jl 0x4111e0
mov dword [ebp - 0x3d4], 0xd9e9
cmp dword [ebp - 0x3d4], 0
je 0x4111de
jmp 0x4111e0
jmp 0x4111bc
jmp 0x41104d
lea ecx, [ebp - 0x4f4]
call fcn.004198ed
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x1d8]
or eax, 0x53
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x1d8]
and ecx, 0x53
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x1d8]
mov byte [ebp + ecx - 0x4d8], al
mov dword [ebp - 0x14], 2
and dword [ebp - 0x6c], 0
jmp 0x41123e
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x68
jae 0x411a86
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1d8]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x411312
mov dword [ebp - 0x3c], 0xea5d6c05
mov dword [ebp - 0xc0], 0
jmp 0x411283
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jge 0x41129f
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x518], 0xc66f5a9c
jmp 0x411276
mov dword [ebp - 0x3c], 8
jmp 0x4112af
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfffffff5
jle 0x4112cc
mov dword [ebp - 0x338], 2
cmp dword [ebp - 0x338], 0
je 0x4112ca
jmp 0x4112cc
jmp 0x4112a8
mov dword [ebp - 0x3c], 0
jmp 0x4112dc
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x4112e9
call fcn.0041036a
jmp 0x4112d5
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x1d8]
inc eax
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x1d8]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x411236
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x1d7]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x6c]
movzx ecx, byte [ebp + ecx - 0x1da]
movsx ecx, byte [ebp + ecx - 0x4d8]
add eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x1d7]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x6c]
movzx edx, byte [ebp + edx - 0x1da]
movsx edx, byte [ebp + edx - 0x4d8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x1d7]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x6c]
movzx edx, byte [ebp + edx - 0x1da]
movsx edx, byte [ebp + edx - 0x4d8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x1d8]
mov byte [ebp + ecx - 0x4d8], al
lea eax, [ebp - 0x6c]
push eax
push 0
push 0x5e95
push 0x597d
call fcn.00413657
add esp, 0x10
mov dword [ebp - 0x18], 2
mov dword [ebp - 0x1dc], 0xa626aece
mov dword [ebp - 0x2f8], 0xa9daee1d
mov dword [ebp - 0x344], 6
mov dword [ebp - 0x3e0], 4
mov dword [ebp - 0xd8], 0
jmp 0x4113f1
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jge 0x41140a
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x20], 0xa53aa9ac
jmp 0x4113e4
xor eax, eax
inc eax
je 0x4115ce
mov dword [ebp - 0x228], 1
mov dword [ebp - 0x1f4], 5
mov dword [ebp - 0x18], 0
jmp 0x411437
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x4115c9
mov dword [ebp - 0x52c], 0x9d9e177c
mov dword [ebp - 0x534], 0xffffffff
mov dword [ebp - 0x53c], 0xffffffff
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x20], 0xdd44ad37
jb 0x411485
mov dword [ebp - 0x2b0], 1
jmp 0x41148c
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x20], 0
je 0x4114f5
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x1f4], eax
jge 0x4114b0
mov dword [ebp - 0x2e0], 1
jmp 0x4114b7
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x2e0]
sub ecx, dword [ebp + eax*4 - 0x20]
mov eax, dword [ebp - 0x18]
cmp ecx, dword [ebp + eax*4 - 0x20]
jg 0x4114d9
mov dword [ebp - 0x230], 1
jmp 0x4114e0
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 0xfffffff8
jb 0x4114f5
mov dword [ebp - 0x2a8], 1
jmp 0x4114fc
and dword [ebp - 0x2a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x2a8], eax
jle 0x41151a
mov dword [ebp - 0x238], 1
jmp 0x411521
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 0x5d76270
je 0x411539
mov dword [ebp - 0x300], 1
jmp 0x411540
and dword [ebp - 0x300], 0
imul eax, dword [ebp - 0x300], 0x53a3
test eax, eax
je 0x411567
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
je 0x411567
mov dword [ebp - 0x240], 1
jmp 0x41156e
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x20]
add eax, dword [ebp - 0x240]
imul eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x2b0]
sub ecx, eax
cmp ecx, dword [ebp - 0x1f4]
jg 0x41159f
mov byte [ebp - 0x45], 0
lea eax, [ebp - 0x45]
push eax
call fcn.004104b3
pop ecx
jmp 0x4115c4
mov dword [ebp - 0x248], 0xfffffffa
mov eax, dword [ebp - 0x248]
dec eax
mov dword [ebp - 0x248], eax
mov byte [ebp - 0x54], 0
lea eax, [ebp - 0x54]
push eax
call fcn.004104da
pop ecx
jmp 0x411430
jmp 0x411a81
mov dword [ebp - 0x40], 0xfffffffa
mov dword [ebp - 0x64], 1
mov dword [ebp - 0x2e8], 0x4c08
mov dword [ebp - 0x414], 0xac72a0
cmp dword [ebp - 0x2e8], 0x4f45
jle 0x4116e9
and dword [ebp - 0xd4], 0
jmp 0x411616
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x7f8c
jge 0x4116dc
and dword [ebp - 0x84], 0
jmp 0x41163c
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x1105
jge 0x4116d7
and dword [ebp - 0xe0], 0
jmp 0x411662
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x643d
jge 0x4116d2
and dword [ebp - 0x15c], 0
jmp 0x411684
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x39d9
jge 0x4116d0
mov eax, dword [ebp - 0x84]
cdq
idiv dword [ebp - 0xe0]
xor edx, dword [ebp - 0x15c]
or edx, dword [ebp - 0xd4]
mov eax, edx
cdq
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x360], edx
push dword [ebp - 0x360]
push dword [ebp - 0x364]
mov ecx, 0xae9678
call fcn.004195f0
jmp 0x411677
jmp 0x411655
jmp 0x41162f
jmp 0x411609
push 0
push 0x503
call dword [0xaec508]
mov dword [ebp - 0x478], 5
mov dword [ebp - 0x474], 5
mov dword [ebp - 0x470], 5
mov dword [ebp - 0x46c], 5
lea ecx, [ebp - 0x1f5]
call fcn.00419918
push eax
lea eax, [ebp - 0x468]
push eax
lea eax, [ebp - 0x478]
push eax
lea ecx, [ebp - 0x588]
call fcn.0041991b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x448]
call fcn.004198c7
mov dword [ebp - 4], 6
cmp dword [ebp - 0x2e8], 0x4831
jge 0x411769
mov edx, dword [ebp - 0x414]
mov ecx, 0xae9678
call fcn.0041bb1d
jmp 0x411785
or dword [ebp - 4], 0xffffffff
jmp 0x41178f
mov dword [ebp - 0x58], 3
mov dword [ebp - 0x280], 0xffffffff
mov dword [ebp - 0x40], 0x4b693050
cmp dword [ebp - 0x40], 0
je 0x411860
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jg 0x4117d2
mov dword [ebp - 0x250], 1
jmp 0x4117d9
and dword [ebp - 0x250], 0
push 2
lea ecx, [ebp - 0x448]
call fcn.00419909
mov ecx, dword [ebp - 0x250]
mov dword [eax], ecx
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x500], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x20], 0xffff
cmp eax, 1
jg 0x411816
mov dword [ebp - 0x2b8], 1
jmp 0x41181d
and dword [ebp - 0x2b8], 0
cmp dword [ebp - 0x2b8], 0xffff
je 0x411835
mov dword [ebp - 0x258], 1
jmp 0x41183c
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x58], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x58], eax
jne 0x411860
mov dword [ebp - 0x310], 1
jmp 0x411867
and dword [ebp - 0x310], 0
cmp dword [ebp - 0x310], 0xffff
jbe 0x41187f
mov dword [ebp - 0x260], 1
jmp 0x411886
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x64]
add eax, dword [ebp - 0x260]
cmp dword [ebp - 0x18], eax
jl 0x4118a0
mov dword [ebp - 0x2c0], 1
jmp 0x4118a7
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x1dc]
cmp eax, dword [ebp - 0x64]
jne 0x4118d7
mov dword [ebp - 0x268], 1
jmp 0x4118de
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x268], eax
jle 0x4118fb
cmp dword [ebp - 0x58], 0
je 0x4118fb
mov dword [ebp - 0x1e0], 1
jmp 0x411902
and dword [ebp - 0x1e0], 0
push 2
lea ecx, [ebp - 0x448]
call fcn.00419909
mov ecx, dword [ebp - 0x1e0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1e0]
sub eax, 0x435f069d
imul eax, eax, 0xe406
test eax, eax
jne 0x411942
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
jne 0x411942
and dword [ebp - 0x2f0], 0
jmp 0x41194c
mov dword [ebp - 0x2f0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp eax, dword [ebp - 0x2f0]
jne 0x41196a
mov dword [ebp - 0x270], 1
jmp 0x411971
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
add eax, 4
cmp eax, 0xdc0bf288
ja 0x41198d
mov dword [ebp - 0x2c8], 1
jmp 0x411994
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x2c8]
cmp eax, dword [ebp - 0x40]
jl 0x4119af
mov dword [ebp - 0x278], 1
jmp 0x4119b6
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x278], eax
jg 0x4119cd
mov dword [ebp - 0x308], 1
jmp 0x4119d4
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x280], eax
jg 0x4119f7
mov dword [ebp - 0x1fc], 1
jmp 0x4119fe
and dword [ebp - 0x1fc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1fc]
sub ecx, dword [ebp + eax - 0x20]
imul ecx, dword [ebp - 0x58]
test ecx, ecx
je 0x411a34
push 3
lea ecx, [ebp - 0x448]
call fcn.00419909
cmp dword [eax], 0
je 0x411a34
mov dword [ebp - 0x288], 1
jmp 0x411a3b
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x504], eax
mov eax, 0x41209775
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x3e0], eax
lea ecx, [ebp - 0x448]
call fcn.004198ed
jmp 0x411236
mov dword [ebp - 0x200], 0x6063
mov dword [ebp - 0x350], 0xac7328
cmp dword [ebp - 0x200], 0x6272
jle 0x411b43
and dword [ebp - 0x124], 0
jmp 0x411ac0
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x3819
jge 0x411b43
and dword [ebp - 0xdc], 0
jmp 0x411ae2
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x21fd
jge 0x411b3e
mov eax, dword [ebp - 0x124]
cdq
idiv dword [ebp - 0xdc]
mov eax, edx
cdq
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], edx
push dword [ebp - 0x36c]
push dword [ebp - 0x370]
lea ecx, [ebp - 0x618]
call fcn.004019dd
pop ecx
pop ecx
mov ecx, eax
call fcn.004195e5
push eax
call fcn.004a813a
pop ecx
lea ecx, [ebp - 0x618]
call fcn.004195db
jmp 0x411ad5
jmp 0x411ab3
mov dword [ebp - 4], 8
cmp dword [ebp - 0x200], 0x5dd8
jge 0x411b62
push dword [ebp - 0x350]
call fcn.004a813a
pop ecx
jmp 0x411b7e
or dword [ebp - 4], 0xffffffff
jmp 0x411b88
mov dword [ebp - 0x28], 0xe871d976
mov dword [ebp - 0x2c], 0x3cf95751
push 4
lea ecx, [ebp - 0x454]
call fcn.0041981b
mov dword [ebp - 0x14c], 0
jmp 0x411bbc
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 4
jge 0x411bde
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x454]
call fcn.00419909
mov dword [eax], 4
jmp 0x411baf
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x2c], 0
jne 0x411c0b
cmp dword [ebp - 0x2c], 0
jne 0x411c0b
and dword [ebp - 0x204], 0
jmp 0x411c15
mov dword [ebp - 0x204], 1
mov eax, dword [ebp - 0x204]
sub eax, 0x30a574fa
je 0x411c34
cmp dword [ebp - 0x2c], 0
je 0x411c34
mov dword [ebp - 0x20c], 1
jmp 0x411c3b
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x20c], eax
jg 0x411c52
mov dword [ebp - 0x214], 1
jmp 0x411c59
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x214], eax
jl 0x411c70
mov dword [ebp - 0x21c], 1
jmp 0x411c77
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x21c]
jne 0x411c98
push 0
lea ecx, [ebp - 0x454]
call fcn.00419909
cmp dword [eax], 0
je 0x411daa
mov dword [ebp - 0x28], 0xffffffe9
jmp 0x411ca8
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x32
je 0x411da5
mov dword [ebp - 0x224], 0x49d3
mov dword [ebp - 0x41c], 0xac7384
cmp dword [ebp - 0x224], 0x4b7b
jle 0x411d49
and dword [ebp - 0xe4], 0
jmp 0x411ce8
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x5aa5
jge 0x411d49
and dword [ebp - 0x12c], 0
jmp 0x411d0a
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x2736
jge 0x411d47
mov eax, dword [ebp - 0xe4]
add eax, dword [ebp - 0x12c]
cdq
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x378], edx
push dword [ebp - 0x378]
push dword [ebp - 0x37c]
mov ecx, 0xae9678
call fcn.004195f0
jmp 0x411cfd
jmp 0x411cdb
mov byte [ebp - 0x53], 0
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x224], 0x49c2
jge 0x411d70
mov edx, dword [ebp - 0x41c]
mov ecx, 0xae9678
call fcn.0041bb1d
jmp 0x411d8c
or dword [ebp - 4], 0xffffffff
jmp 0x411d96
lea eax, [ebp - 0x53]
push eax
call fcn.004104fc
pop ecx
jmp 0x411ca1
jmp 0x411e79
mov dword [ebp - 0xec], 0xffbe
mov dword [ebp - 0x35c], 0xffffffff
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x969b42c5
jb 0x411df1
mov dword [ebp - 0x22c], 1
jmp 0x411df8
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0x22c]
jl 0x411e12
mov dword [ebp - 0x234], 1
jmp 0x411e19
and dword [ebp - 0x234], 0
mov esi, dword [ebp - 0xec]
push 0
lea ecx, [ebp - 0x454]
call fcn.00419909
mov ecx, dword [ebp - 0x234]
imul ecx, dword [eax]
add ecx, dword [ebp - 0x28]
cmp esi, ecx
je 0x411e48
mov dword [ebp - 0x23c], 1
jmp 0x411e4f
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x23c]
sub eax, dword [ebp - 0x28]
jne 0x411e66
mov dword [ebp - 0x244], 1
jmp 0x411e6d
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x35c], eax
lea ecx, [ebp - 0x454]
call fcn.004198ed
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x4d8], 0
lea eax, [ebp - 0x4d8]
push eax
lea ecx, [ebp - 0x580]
call fcn.00419705
mov dword [ebp - 0x43c], 0xbdde
mov dword [ebp - 0x438], 0xbdde
mov dword [ebp - 0x434], 0xbdde
mov dword [ebp - 0x430], 0xbdde
mov dword [ebp - 0x44], 0xe56f9b2c
mov dword [ebp - 0x3f0], 0xfeb9
call fcn.00410523
mov dword [ebp - 0x44], 3
jmp 0x411ef2
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x41206e
push 2
lea ecx, [ebp - 0x3ec]
call fcn.0041981b
mov dword [ebp - 0x320], 0x29ef4a04
mov dword [ebp - 0x16c], 0
jmp 0x411f2c
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 2
jge 0x411f4b
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x3ec]
call fcn.00419909
or dword [eax], 0xffffffff
jmp 0x411f1f
push 1
lea ecx, [ebp - 0x3ec]
call fcn.00419909
and dword [eax], 0
jmp 0x411f81
push 1
lea ecx, [ebp - 0x3ec]
call fcn.00419909
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x24c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x3ec]
call fcn.00419909
cmp dword [eax], 3
jg 0x41205e
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x43c], 0x4f545ee2
jl 0x411fb3
mov dword [ebp - 0x25c], 1
jmp 0x411fba
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x3f0]
cmp dword [ebp + eax*4 - 0x43c], ecx
jl 0x411fd8
mov dword [ebp - 0x254], 1
jmp 0x411fdf
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x254]
sub eax, 0x29f5ddeb
cmp eax, 0xfffffff8
jl 0x411ffb
mov dword [ebp - 0x264], 1
jmp 0x412002
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x25c]
cmp eax, dword [ebp - 0x264]
jl 0x41201c
mov dword [ebp - 0x26c], 1
jmp 0x412023
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
sub eax, 0x6ee9
mov ecx, dword [ebp - 0x44]
cmp eax, dword [ebp + ecx*4 - 0x43c]
jl 0x412046
mov dword [ebp - 0x274], 1
jmp 0x41204d
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x320], eax
jmp 0x411f5d
lea ecx, [ebp - 0x3ec]
call fcn.004198ed
jmp 0x411eeb
and dword [ebp - 0x154], 0
jmp 0x412084
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x1b
jae 0x41227f
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x380], 0xffffffff
mov dword [ebp - 0x5c], 0xffffffed
jmp 0x4120b2
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xb
jg 0x41226c
mov dword [ebp - 0x68], 0x6f9b2cfb
mov dword [ebp - 0x27c], 9
mov dword [ebp - 0x74], 0x15256ee9
mov dword [ebp - 0x68], 0x15
jmp 0x4120e4
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x4121fa
mov dword [ebp - 0x134], 0xffffffff
mov dword [ebp - 0x38], 0
jmp 0x412108
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x41211e
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x5a0], 0x15de05da
jmp 0x412101
mov dword [ebp - 0x38], 0
jmp 0x41212e
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x412144
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xf4], 0x5b7f37c0
jmp 0x412127
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf4], 0
jmp 0x412172
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf4], 1
jg 0x412189
call fcn.0041053f
jmp 0x412157
mov dword [ebp - 0x134], 0xffffffe6
jmp 0x4121a2
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0xffffffea
je 0x4121f5
mov dword [ebp - 0xfc], 0xffffffff
mov dword [ebp - 0xfc], 0x10
jmp 0x4121ce
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 5
jg 0x4121f3
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x27c], eax
mov byte [ebp - 0x48], 0
movzx eax, byte [ebp - 0x48]
test eax, eax
je 0x4121f1
call fcn.0041056a
jmp 0x4121c1
jmp 0x412195
jmp 0x4120dd
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 9
jne 0x412212
lea eax, [ebp - 0x74]
push eax
call fcn.00410577
pop ecx
jmp 0x412267
mov dword [ebp - 0x42c], 0xfffffff7
mov dword [ebp - 0x374], 0xfffffffc
mov dword [ebp - 0x424], 4
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x374]
push eax
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.004105be
add esp, 0x20
jmp 0x4120ab
mov eax, dword [ebp - 0x154]
mov byte [ebp + eax - 0x4d8], 0
jmp 0x412077
push 0xac4325
lea ecx, [ebp - 0x568]
call fcn.00419705
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x104], 0
jmp 0x4122b2
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0xfffffff8
jge 0x4123d4
mov dword [ebp - 0x284], 0x335f
mov dword [ebp - 0x3f8], 0xac73c0
cmp dword [ebp - 0x284], 0x368f
jle 0x412379
and dword [ebp - 0x13c], 0
jmp 0x4122f9
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x45ce
jge 0x412379
and dword [ebp - 0x10c], 0
jmp 0x41231b
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x409c
jge 0x412374
mov eax, dword [ebp - 0x13c]
sub eax, dword [ebp - 0x10c]
cdq
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], edx
push dword [ebp - 0x384]
push dword [ebp - 0x388]
lea ecx, [ebp - 0x5b8]
call fcn.004019dd
pop ecx
pop ecx
mov ecx, eax
call fcn.004195e5
push eax
call fcn.004a813a
pop ecx
lea ecx, [ebp - 0x5b8]
call fcn.004195db
jmp 0x41230e
jmp 0x4122ec
mov byte [ebp - 0x49], 0
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x284], 0x3331
jge 0x41239c
push dword [ebp - 0x3f8]
call fcn.004a813a
pop ecx
jmp 0x4123b8
or dword [ebp - 4], 0xffffffff
jmp 0x4123c2
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x4123cf
call fcn.00410735
jmp 0x4122a5
mov dword [ebp - 0x28c], 0x757e
mov dword [ebp - 0x38c], 0xac7450
cmp dword [ebp - 0x28c], 0x76a3
jle 0x4124f7
and dword [ebp - 0x88], 0
jmp 0x41240e
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x2af
jge 0x4124f7
and dword [ebp - 0x8c], 0
jmp 0x412434
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x6030
jge 0x4124f2
and dword [ebp - 0x94], 0
jmp 0x41245a
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xe0f
jge 0x4124ed
and dword [ebp - 0x9c], 0
jmp 0x412480
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x5342
jge 0x4124e8
mov eax, dword [ebp - 0x88]
imul eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x94]
and ecx, dword [ebp - 0x9c]
xor eax, ecx
cdq
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x390], edx
push dword [ebp - 0x390]
push dword [ebp - 0x394]
lea ecx, [ebp - 0x630]
call fcn.004019dd
pop ecx
pop ecx
mov ecx, eax
call fcn.004195e5
push eax
call fcn.004a813a
pop ecx
lea ecx, [ebp - 0x630]
call fcn.004195db
jmp 0x412473
jmp 0x41244d
jmp 0x412427
jmp 0x412401
mov byte [ebp - 0x51], 0
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x28c], 0x71ea
jge 0x41251a
push dword [ebp - 0x38c]
call fcn.004a813a
pop ecx
jmp 0x412536
or dword [ebp - 4], 0xffffffff
jmp 0x412540
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x41254d
call fcn.0041074d
mov dword [ebp - 0x294], 0x24b7
mov dword [ebp - 0x428], 0xac74d0
cmp dword [ebp - 0x294], 0x2666
jle 0x412682
push 0
push 0
call dword [0xaec334]
and dword [ebp - 0xbc], 0
jmp 0x412591
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x1de8
jge 0x41267c
and dword [ebp - 0xa4], 0
jmp 0x4125b7
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x19da
jge 0x412677
and dword [ebp - 0xac], 0
jmp 0x4125dd
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x5310
jge 0x412672
and dword [ebp - 0xb4], 0
jmp 0x412603
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x723b
jge 0x41266d
mov eax, dword [ebp - 0xa4]
cdq
idiv dword [ebp - 0xac]
sub edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xbc]
mov ecx, edx
sar eax, cl
cdq
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], edx
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
lea ecx, [ebp - 0x600]
call fcn.004019dd
pop ecx
pop ecx
mov ecx, eax
call fcn.004195e5
push eax
call fcn.004a813a
pop ecx
lea ecx, [ebp - 0x600]
call fcn.004195db
jmp 0x4125f6
jmp 0x4125d0
jmp 0x4125aa
jmp 0x412584
call dword [0xaec380]
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x294], 0x23b1
jge 0x4126a1
push dword [ebp - 0x428]
call fcn.004a813a
pop ecx
jmp 0x4126bd
or dword [ebp - 4], 0xffffffff
jmp 0x4126c7
mov dword [ebp - 0x1c], 0xfe0a8eac
mov dword [ebp - 0x29c], 0x972
mov dword [ebp - 0x398], 0xac7550
cmp dword [ebp - 0x29c], 0xa2a
jle 0x4127d7
and dword [ebp - 0xc4], 0
jmp 0x412708
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x6f04
jge 0x4127d7
and dword [ebp - 0xe8], 0
jmp 0x41272e
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x4444
jge 0x4127d2
and dword [ebp - 0xf0], 0
jmp 0x412754
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x366e
jge 0x4127cd
and dword [ebp - 0xf8], 0
jmp 0x412776
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x2ce5
jge 0x4127c8
mov esi, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xe8]
shl esi, cl
mov eax, dword [ebp - 0xf0]
cdq
idiv dword [ebp - 0xf8]
mov ecx, edx
sar esi, cl
mov eax, esi
cdq
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0x3a8], edx
push dword [ebp - 0x3a8]
push dword [ebp - 0x3ac]
mov ecx, 0xae9678
call fcn.004195f0
jmp 0x412769
jmp 0x412747
jmp 0x412721
jmp 0x4126fb
mov dword [ebp - 0x60], 1
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x29c], 0x733
jge 0x412801
mov edx, dword [ebp - 0x398]
mov ecx, 0xae9678
call fcn.0041bb1d
jmp 0x41281d
or dword [ebp - 4], 0xffffffff
jmp 0x412827
mov dword [ebp - 0x1f0], 5
mov dword [ebp - 0x420], 0x2ecc90c6
mov dword [ebp - 0x508], 0xffffffff
mov dword [ebp - 0x528], 0xad21dd8e
mov dword [ebp - 0x510], 0xb4373c94
mov dword [ebp - 0x2c4], 0x5309757a
mov dword [ebp - 0x538], 0x79f9f4ae
mov dword [ebp - 0x1c], 0xfffffff1
jmp 0x41287d
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe7
je 0x41289e
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x41289c
push 0
push 0x14d3
call dword [0xaec514]
jmp 0x412876
mov dword [ebp - 0x1c], 0
jmp 0x4128ae
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x16
je 0x412bc5
mov dword [ebp - 0x1e8], 0x7597a61e
mov dword [ebp - 0x4dc], 1
mov dword [ebp - 0x530], 0x5bc98072
mov eax, dword [ebp - 0x1e8]
neg eax
cmp eax, 0x7f6cc9ca
jg 0x4128f1
mov dword [ebp - 0x2a4], 1
jmp 0x4128f8
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x2a4], eax
jge 0x412912
mov dword [ebp - 0x2ac], 1
jmp 0x412919
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2ac]
cmp eax, dword [ebp - 0x1c]
jge 0x412933
mov dword [ebp - 0x410], 1
jmp 0x41293a
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x4e4], eax
cmp dword [ebp - 0x1e8], 3
jg 0x41296a
mov dword [ebp - 0x2b4], 1
jmp 0x412971
and dword [ebp - 0x2b4], 0
mov dword [ebp - 0x60], 0xfffffffc
mov eax, dword [ebp - 0x60]
add eax, 9
cmp eax, dword [ebp - 0x2b4]
jg 0x412992
mov dword [ebp - 0x2bc], 1
jmp 0x412999
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x1f0], eax
mov eax, 0xd0c1
test eax, eax
jne 0x4129b7
cmp dword [ebp - 0x1f0], 0
je 0x4129df
mov dword [ebp - 0x3a4], 0xfffffffd
cmp dword [ebp - 0x1c], 0
je 0x4129cc
jmp 0x412bc5
cmp dword [ebp - 0x3a4], 0
je 0x4129da
jmp 0x412bc5
jmp 0x412bc0
mov dword [ebp - 0x100], 0
jmp 0x4129f8
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jge 0x412a14
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x598], 0x56bf5ee8
jmp 0x4129eb
mov dword [ebp - 0x60], 0x19
jmp 0x412a24
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xffffffe6
jne 0x412ab4
mov dword [ebp - 0x3b0], 0x9a488d5
push 1
lea ecx, [ebp - 0x4bc]
call fcn.0041981b
mov dword [ebp - 0x108], 0
jmp 0x412a5e
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
jge 0x412a80
push dword [ebp - 0x108]
lea ecx, [ebp - 0x4bc]
call fcn.00419909
mov dword [eax], 0xfffb
jmp 0x412a51
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x3b0]
push eax
call fcn.0041075a
add esp, 0x10
lea ecx, [ebp - 0x4bc]
call fcn.004198ed
jmp 0x412a1d
mov dword [ebp - 0x2cc], 0x7534
mov dword [ebp - 0x418], 0xac75b4
cmp dword [ebp - 0x2cc], 0x75c9
jle 0x412b6e
and dword [ebp - 0x110], 0
jmp 0x412aee
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xd0b
jge 0x412b6e
and dword [ebp - 0x118], 0
jmp 0x412b10
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x2a47
jge 0x412b69
mov eax, dword [ebp - 0x110]
xor eax, dword [ebp - 0x118]
cdq
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3b4], edx
push dword [ebp - 0x3b4]
push dword [ebp - 0x3b8]
lea ecx, [ebp - 0x5d0]
call fcn.004019dd
pop ecx
pop ecx
mov ecx, eax
call fcn.004195e5
push eax
call fcn.004a813a
pop ecx
lea ecx, [ebp - 0x5d0]
call fcn.004195db
jmp 0x412b03
jmp 0x412ae1
mov eax, dword [ebp - 0x2c4]
dec eax
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x2cc], 0x7465
jge 0x412b9a
push dword [ebp - 0x418]
call fcn.004a813a
pop ecx
jmp 0x412bb6
or dword [ebp - 4], 0xffffffff
jmp 0x412bc0
jmp 0x4128a7
lea eax, [ebp - 0x568]
push eax
push 0x7297
push 0x1f61
push 0
lea eax, [ebp - 0x51c]
push eax
lea eax, [ebp - 0x580]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.00413ca7
add esp, 0x1c
mov dword [ebp - 0x80], 0xbbef7d65
mov dword [ebp - 0x524], 0xfffffff6
mov dword [ebp - 0x120], 0
jmp 0x412c1c
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 4
jge 0x412c38
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x408], 1
jmp 0x412c0f
mov dword [ebp - 0x2e4], 0xc00
mov dword [ebp - 0x3c8], 0xac7608
cmp dword [ebp - 0x2e4], 0xe21
jle 0x412d01
push 1
push 0x21c3
call dword [0xaec47c]
and dword [ebp - 0x128], 0
jmp 0x412c7f
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x6651
jge 0x412d01
and dword [ebp - 0x130], 0
jmp 0x412ca1
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x78bb
jge 0x412cfc
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x130]
shl eax, cl
cdq
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0x3c0], edx
push dword [ebp - 0x3c0]
push dword [ebp - 0x3c4]
lea ecx, [ebp - 0x5e8]
call fcn.004019dd
pop ecx
pop ecx
mov ecx, eax
call fcn.004195e5
push eax
call fcn.004a813a
pop ecx
lea ecx, [ebp - 0x5e8]
call fcn.004195db
jmp 0x412c94
jmp 0x412c72
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x408], 0
jmp 0x412d2c
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x408]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x408], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x408], 3
jne 0x413008
mov dword [ebp - 0x70], 0xfffffff7
mov dword [ebp - 0x2d4], 0x2b0e
mov dword [ebp - 0x3bc], 0xac765c
cmp dword [ebp - 0x2d4], 0x2b30
jle 0x412e46
and dword [ebp - 0x150], 0
jmp 0x412d80
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x56fc
jge 0x412e46
and dword [ebp - 0x138], 0
jmp 0x412da6
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x1ba3
jge 0x412e41
and dword [ebp - 0x140], 0
jmp 0x412dcc
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x6667
jge 0x412e3c
and dword [ebp - 0x148], 0
jmp 0x412dee
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xee2
jge 0x412e3a
mov ecx, dword [ebp - 0x138]
imul ecx, dword [ebp - 0x140]
add ecx, dword [ebp - 0x148]
mov eax, dword [ebp - 0x150]
shl eax, cl
cdq
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x3cc], edx
push dword [ebp - 0x3cc]
push dword [ebp - 0x3d0]
mov ecx, 0xae9678
call fcn.004195f0
jmp 0x412de1
jmp 0x412dbf
jmp 0x412d99
jmp 0x412d73
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x2d4], 0x2778
jge 0x412e69
mov edx, dword [ebp - 0x3bc]
mov ecx, 0xae9678
call fcn.0041bb1d
jmp 0x412e85
or dword [ebp - 4], 0xffffffff
jmp 0x412e8f
mov dword [ebp - 0x2dc], 0x3c5e
mov dword [ebp - 0x3f4], 0xac76b0
cmp dword [ebp - 0x2dc], 0x3e0c
jle 0x412f5f
and dword [ebp - 0x158], 0
jmp 0x412ec9
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x2769
jge 0x412f5f
and dword [ebp - 0x160], 0
jmp 0x412eef
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x36cd
jge 0x412f5a
and dword [ebp - 0x168], 0
jmp 0x412f11
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x1fea
jge 0x412f58
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x160]
sar eax, cl
mov ecx, dword [ebp - 0x168]
shl eax, cl
cdq
mov dword [ebp - 0x3dc], eax
mov dword [ebp - 0x3d8], edx
push dword [ebp - 0x3d8]
push dword [ebp - 0x3dc]
mov ecx, 0xae9678
call fcn.004195f0
jmp 0x412f04
jmp 0x412ee2
jmp 0x412ebc
mov dword [ebp - 0x170], 0
jmp 0x412f78
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 3
jge 0x412f94
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x550], 0x8b108f82
jmp 0x412f6b
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x2dc], 0x3b0e
jge 0x412fb7
mov edx, dword [ebp - 0x3f4]
mov ecx, 0xae9678
call fcn.0041bb1d
jmp 0x412fd3
or dword [ebp - 4], 0xffffffff
jmp 0x412fdd
mov dword [ebp - 0x70], 0
jmp 0x412fed
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x413003
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x550], 0xa6801fc3
jmp 0x412fe6
jmp 0x412d13
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x2e4], 0x996
jge 0x413027
push dword [ebp - 0x3c8]
call fcn.004a813a
pop ecx
jmp 0x413043
or dword [ebp - 4], 0xffffffff
jmp 0x41304d
mov dword [ebp - 0x80], 3
jmp 0x41305d
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x413275
mov dword [ebp - 0x34], 0x3281d21f
mov dword [ebp - 0xcc], 0
jmp 0x413087
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x4130a3
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x324], 0xfffffff6
jmp 0x41307a
mov dword [ebp - 0x34], 0
jmp 0x4130b3
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x4130c9
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x408], 0xfffffffd
jmp 0x4130ac
mov dword [ebp - 0x34], 0
jmp 0x4130d9
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x413270
mov dword [ebp - 0x24], 0x85ce96b7
mov dword [ebp - 0x78], 0x5f07c70a
mov dword [ebp - 0x24], 3
jmp 0x413101
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x413113
lea eax, [ebp - 0x78]
push eax
call fcn.004107ec
pop ecx
jmp 0x4130fa
mov dword [ebp - 0x78], 0
jmp 0x413123
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jg 0x41326b
mov dword [ebp - 0x32c], 0
mov dword [ebp - 0x24], 0
jmp 0x413147
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x413266
mov dword [ebp - 0x464], 0x3ec58f55
mov dword [ebp - 0x460], 0x3ec58f55
mov dword [ebp - 0x45c], 0x3ec58f55
mov dword [ebp - 0x458], 0x3ec58f55
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x464]
mov dword [ebp - 0x2ec], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2ec]
mov dword [ebp + eax - 0x324], ecx
cmp dword [ebp - 0x2ec], 0x809b
jl 0x4131b7
mov dword [ebp - 0x2fc], 1
jmp 0x4131be
and dword [ebp - 0x2fc], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x464], 1
jne 0x4131da
mov dword [ebp - 0x2f4], 1
jmp 0x4131e1
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x2f4]
jne 0x4131f8
mov dword [ebp - 0x304], 1
jmp 0x4131ff
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x408]
neg eax
sub eax, dword [ebp - 0x2fc]
cmp eax, dword [ebp - 0x304]
jle 0x413225
mov dword [ebp - 0x30c], 1
jmp 0x41322c
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0
jb 0x413247
cmp dword [ebp - 0x32c], 0
jne 0x413247
and dword [ebp - 0x314], 0
jmp 0x413251
mov dword [ebp - 0x314], 1
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x314]
mov dword [ebp + eax*4 - 0x408], ecx
jmp 0x413140
jmp 0x41311c
jmp 0x4130d2
jmp 0x413056
lea eax, [ebp - 0x568]
push eax
mov ecx, dword [ebp + 8]
call fcn.00419734
lea ecx, [ebp - 0x568]
call fcn.0041978d
lea ecx, [ebp - 0x580]
call fcn.0041978d
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret