Function at 0x43500a
Capabilities:
Check for software breakpoints
Check http status code

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x4044c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x240
call fcn.004044c0
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x4024d8
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0
push 1
call fcn.00404754
movsx eax, word [0x5210c4]
test eax, eax
jne 0x435063
mov word [0x5210c4], 1
mov esi, 0x40a6cc
push 1
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
and dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 0xb
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xa0]
call fcn.004048d4
cmp word [0x521220], 0x1e
jge 0x4350d1
mov dword [ebp - 0x174], 0x46
mov dword [ebp - 0x17c], 2
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x88]
call fcn.004048d4
jmp 0x4350f6
mov dword [ebp - 0x174], 0x43
mov dword [ebp - 0x17c], 2
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x88]
call fcn.004048d4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xfb
jne 0x435132
lea eax, [ebp - 0xcc]
push eax
call fcn.00444696
lea edx, [ebp - 0xcc]
lea ecx, [ebp - 0x40]
call fcn.004048d4
jmp 0x443cbb
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xfc
jne 0x435167
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x435199
push 1
push dword [0x5210c8]
call fcn.00404832
mov eax, dword [eax]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 8
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x40]
call fcn.00404766
jmp 0x443cbb
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
mov word [0x5210d4], ax
and word [ebp - 0x8c], 0
cmp word [0x5210d4], 0xfd
je 0x443b76
cmp word [0x5210d4], 0xfe
je 0x443b76
mov ax, word [0x5210d4]
mov word [ebp - 0x214], ax
movsx eax, word [ebp - 0x214]
test eax, eax
jne 0x43520f
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 1
jne 0x435311
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cab4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 3
jne 0x4353cc
push 0x40c110
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
push 0x40c0dc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 4
jne 0x4354ce
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40aeb4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 5
jne 0x4355d0
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cac0
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 6
jne 0x4356d2
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cac8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 8
jne 0x4357d4
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cad0
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 9
jne 0x4358d6
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cad8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xa
jne 0x435a04
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x10
je 0x43597c
push 0x40c320
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
jmp 0x4359e9
push 0x40caec
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xb
jne 0x435b06
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40caf8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xc
jne 0x435c08
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cb0c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xd
jne 0x435d0a
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cb14
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xe
jne 0x435e0c
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cb20
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xf
jne 0x435f2d
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cb30
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
push 0x40bffc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xbc]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 3
call fcn.0040489e
add esp, 0x10
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0x10
jne 0x43602f
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c774
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0x11
jne 0x436131
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cb3c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0x12
jne 0x436233
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cb48
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0x14
jne 0x4363f1
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x18c], 0x8002
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047fc
push eax
push 0x5211c8
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x4363a9
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cb58
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x4363ec
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x4363ec
jmp 0x443b76
jmp 0x443b54
cmp word [ebp - 0x214], 0x18
jne 0x4364f4
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x18c], 0x8002
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047fc
push eax
push 0x5211c8
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x4364ac
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
or dword [ebp - 0x174], 0xffffffff
mov dword [ebp - 0x17c], 0xb
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xa0]
call fcn.004048d4
jmp 0x4364ef
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x4364ef
jmp 0x443b76
jmp 0x443b54
cmp word [ebp - 0x214], 0x2d
jne 0x43665f
cmp word [0x521220], 0x1e
jl 0x436617
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x18c], 0x8002
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047fc
push eax
push 0x5211c8
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x4365d2
mov esi, 0x40cb68
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x436615
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x436615
jmp 0x443b76
jmp 0x43665a
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x43665a
jmp 0x443b76
jmp 0x443b54
cmp word [ebp - 0x214], 0x2f
jne 0x4367ca
cmp word [0x521220], 0x1e
jge 0x436782
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x18c], 0x8002
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047fc
push eax
push 0x5211c8
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x43673d
mov esi, 0x40cb68
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x436780
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x436780
jmp 0x443b76
jmp 0x4367c5
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x4367c5
jmp 0x443b76
jmp 0x443b54
lea eax, [ebp - 0x88]
push eax
call fcn.0040484a
cmp word [ebp - 0x214], ax
jne 0x436c1d
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x18c], 0x8002
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047fc
push eax
push 0x5211c8
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x436bd5
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x18c], 0x8002
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0x15
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0x13
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x1a4], ax
mov dword [ebp - 0x1ac], 0xb
mov dword [ebp - 0x1b4], 2
mov dword [ebp - 0x1bc], 0x8002
mov dword [ebp - 0x1c4], 7
mov dword [ebp - 0x1cc], 0x8002
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xd0
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x1d4], ax
mov dword [ebp - 0x1dc], 0xb
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xd1
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x1e4], ax
mov dword [ebp - 0x1ec], 0xb
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047fc
push eax
push 0x5211c8
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.00404808
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.0040488c
push eax
push 0x5211c8
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x13c]
push eax
call fcn.0040488c
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.00404808
push eax
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x15c]
push eax
call fcn.0040488c
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.0040488c
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x19c]
push eax
push 4
call fcn.00404898
add esp, 0x14
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x436ae4
mov esi, 0x40cb74
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x436bbd
mov esi, 0x40c818
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx eax, byte [eax]
test eax, eax
jne 0x436b35
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 4
jne 0x436bbd
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40aeb4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x436c18
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x436c18
jmp 0x443b76
jmp 0x443b54
cmp word [ebp - 0x214], 0x49
jne 0x436ddb
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x18c], 0x8002
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.0040488c
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x436d93
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cb58
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x436dd6
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x436dd6
jmp 0x443b76
jmp 0x443b54
cmp word [ebp - 0x214], 0x61
jne 0x436f46
cmp word [0x521220], 0x1e
jl 0x436efe
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x18c], 0x8002
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047fc
push eax
push 0x5211c8
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x436eb9
mov esi, 0x40cb7c
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x436efc
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x436efc
jmp 0x443b76
jmp 0x436f41
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x436f41
jmp 0x443b76
jmp 0x443b54
cmp word [ebp - 0x214], 0x63
jne 0x437051
cmp word [0x521220], 0x1e
jl 0x436fe7
push 0x40cad0
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43702a
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x43702a
jmp 0x443b76
and dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 0xb
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xa0]
call fcn.004048d4
jmp 0x443b54
cmp word [ebp - 0x214], 0x65
jne 0x4371bc
cmp word [0x521220], 0x1e
jge 0x437174
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x18c], 0x8002
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047fc
push eax
push 0x5211c8
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x43712f
mov esi, 0x40cb7c
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x437172
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x437172
jmp 0x443b76
jmp 0x4371b7
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x4371b7
jmp 0x443b76
jmp 0x443b54
cmp word [ebp - 0x214], 0x67
jne 0x437361
cmp word [0x521220], 0x1e
jge 0x437319
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x18c], 0x8002
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047fc
push eax
push 0x5211c8
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x4372d4
push 0x40cad0
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x437317
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x437317
jmp 0x443b76
jmp 0x43735c
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x43735c
jmp 0x443b76
jmp 0x443b54
cmp word [ebp - 0x214], 0x77
jne 0x4374b3
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x18c], 0x8002
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.0040488c
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x43746b
push 0x40cad0
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x4374ae
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x4374ae
jmp 0x443b76
jmp 0x443b54
cmp word [ebp - 0x214], 0x78
jne 0x4378cb
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x18c], 0x8002
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.0040488c
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x437883
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x18c], 0x8002
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0x15
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0x13
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x1a4], ax
mov dword [ebp - 0x1ac], 0xb
mov dword [ebp - 0x1b4], 2
mov dword [ebp - 0x1bc], 0x8002
mov dword [ebp - 0x1c4], 7
mov dword [ebp - 0x1cc], 0x8002
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xd0
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x1d4], ax
mov dword [ebp - 0x1dc], 0xb
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xd1
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x1e4], ax
mov dword [ebp - 0x1ec], 0xb
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047fc
push eax
push 0x5211c8
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.00404808
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.0040488c
push eax
push 0x5211c8
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x13c]
push eax
call fcn.0040488c
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.00404808
push eax
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x15c]
push eax
call fcn.0040488c
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.0040488c
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x19c]
push eax
push 4
call fcn.00404898
add esp, 0x14
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x4377c2
mov esi, 0x40cb74
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43786b
mov esi, 0x40c818
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 4
jne 0x43786b
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40aeb4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x4378c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x4378c6
jmp 0x443b76
jmp 0x443b54
cmp word [ebp - 0x214], 0xc7
jne 0x4379e4
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x18c], 0x8002
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.0040488c
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x43799c
mov esi, 0x40cb7c
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x4379df
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x4379df
jmp 0x443b76
jmp 0x443b54
cmp word [ebp - 0x214], 0xc8
jne 0x437afd
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x184], 7
mov dword [ebp - 0x18c], 0x8002
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.0040488c
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x437ab5
mov esi, 0x40cb68
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x437af8
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x437af8
jmp 0x443b76
jmp 0x443b54
cmp word [ebp - 0x214], 0xd9
jne 0x437bcf
cmp word [0x521220], 0x1e
jl 0x437b87
lea eax, [ebp - 0xcc]
push eax
call fcn.00443e26
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x437bca
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x437bca
jmp 0x443b76
jmp 0x443b54
cmp word [ebp - 0x214], 0xde
jne 0x437c8b
cmp word [0x521220], 0x19
je 0x437c59
lea eax, [ebp - 0xcc]
push eax
call fcn.0042e196
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x437c86
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
jmp 0x443b54
cmp word [ebp - 0x214], 0xdf
jne 0x437d54
cmp word [0x521220], 0x1e
jl 0x437cbf
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x437d4f
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x437d0d
cmp word [0x5210d4], 0xdb
je 0x437d0d
jmp 0x443b76
cmp word [0x5210d4], 0xdb
jne 0x437d4f
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xe1
jne 0x4397f3
cmp word [0x521220], 0x1e
jge 0x437ee3
mov ax, word [0x5210c4]
sub ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c818
call fcn.004048ce
test eax, eax
jne 0x437ec8
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.004d8bec
sub eax, 2
jo 0x443e21
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 3
push dword [0x5210c8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [ebp - 0xac]
call fcn.00404832
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0xcc]
push eax
push 2
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047f0
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
lea eax, [ebp - 0xdc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x4397ee
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx eax, byte [eax]
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x100
jae 0x437f20
and dword [ebp - 0x244], 0
jmp 0x437f2b
call fcn.004046d0
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x174], 0x40c0e4
mov dword [ebp - 0x17c], 8
mov eax, dword [ebp - 0x1f0]
shl eax, 4
mov ecx, dword [0x52117c]
add ecx, eax
push ecx
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf6
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf7
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf8
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe0
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe1
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe5
setne cl
and ebx, ecx
test ebx, ebx
jne 0x4397a8
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x218], al
mov cx, 0xd9
call fcn.004046b8
cmp byte [ebp - 0x218], al
jne 0x438147
lea eax, [ebp - 0xcc]
push eax
call fcn.00443e26
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
jmp 0x439789
mov cx, 0xe0
call fcn.004046b8
cmp byte [ebp - 0x218], al
jne 0x43841b
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.004047e4
mov word [ebp - 0x1f0], ax
lea ecx, [ebp - 0xcc]
call fcn.00404844
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x4382d0
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x4383be
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x19c], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0x19c]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x439789
mov cx, 0xe1
call fcn.004046b8
cmp byte [ebp - 0x218], al
jne 0x4384e6
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx eax, byte [eax]
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x100
jae 0x438480
and dword [ebp - 0x248], 0
jmp 0x43848b
call fcn.004046d0
mov dword [ebp - 0x248], eax
lea eax, [ebp - 0x17c]
push eax
mov eax, dword [ebp - 0x1f0]
shl eax, 4
mov ecx, dword [0x52117c]
add ecx, eax
push ecx
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x439789
mov cx, 0xe2
call fcn.004046b8
cmp byte [ebp - 0x218], al
jne 0x438599
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.004047e4
mov word [ebp - 0x1f0], ax
lea ecx, [ebp - 0xcc]
call fcn.00404844
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43857e
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x439789
mov cx, 0xe5
call fcn.004046b8
cmp byte [ebp - 0x218], al
jne 0x438ee0
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.004047e4
mov word [ebp - 0x1f0], ax
lea ecx, [ebp - 0xcc]
call fcn.00404844
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x438722
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x438810
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x19c], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0x19c]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
call fcn.004d8187
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov edx, dword [eax]
lea ecx, [ebp - 0x6c]
call fcn.004048b0
mov esi, 0x40a6cc
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf7
jne 0x438bd1
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x68], si
lea eax, [ebp - 0x68]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4002
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x438b05
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x438b83
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov esi, dword [ebp - 0x6c]
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf6
jne 0x438edb
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x68], si
lea eax, [ebp - 0x68]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4002
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x438e0a
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x438e88
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
mov esi, dword [ebp - 0x6c]
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
call fcn.004d8187
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
jmp 0x439789
mov cx, 0xf4
call fcn.004046b8
cmp byte [ebp - 0x218], al
je 0x438f06
mov cx, 0xf5
call fcn.004046b8
cmp byte [ebp - 0x218], al
jne 0x4391d9
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x68], si
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x439103
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
lea eax, [ebp - 0x68]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4002
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x4391be
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0x68]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4002
mov dword [ebp - 0x194], 0x40c0e4
mov dword [ebp - 0x19c], 8
lea eax, [ebp - 0x18c]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x439789
mov cx, 0xf6
call fcn.004046b8
cmp byte [ebp - 0x218], al
jne 0x4393c9
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x68], si
movsx esi, word [ebp - 0x68]
push 0x5210e4
call fcn.00404730
push dword [eax]
push 1
call fcn.00404838
cmp esi, eax
jg 0x439350
lea eax, [ebp - 0x68]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4002
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x439367
push dword [ebp - 0x6c]
push 0x40cb88
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
call fcn.004d8187
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
jmp 0x439789
mov cx, 0xf7
call fcn.004046b8
cmp byte [ebp - 0x218], al
jne 0x4396d1
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x68], si
lea eax, [ebp - 0x68]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4002
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x4395f6
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x439674
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x439789
mov cx, 0xf8
call fcn.004046b8
cmp byte [ebp - 0x218], al
jne 0x439789
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 8
lea eax, [ebp - 0xcc]
push eax
call fcn.00445689
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
movsx esi, word [0x5210dc]
push dword [0x5210d8]
push 1
call fcn.00404838
cmp esi, eax
jl 0x4397a3
jmp 0x4397a8
jmp 0x437f95
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
test eax, eax
je 0x4397ee
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xe2
jne 0x43afce
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
push 0
call fcn.00404814
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
mov esi, 0x40c0e4
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xe0
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe2
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe5
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf4
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf6
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf7
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
mov dword [ebp - 0x24c], ebx
xor ebx, ebx
cmp ax, 0xf8
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xfd
neg ax
sbb eax, eax
inc eax
or ebx, eax
neg ebx
sbb ebx, ebx
neg ebx
mov eax, dword [ebp - 0x24c]
and eax, ebx
test eax, eax
jne 0x43afc9
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe0
jne 0x4399e0
lea eax, [ebp - 0xcc]
push eax
call fcn.004f5619
lea ecx, [ebp - 0xcc]
call fcn.00404844
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe2
jne 0x439a4f
mov esi, 0x40c0e4
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xe5
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf7
setne cl
or ebx, ecx
test ebx, ebx
jne 0x439b8b
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004047c6
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004f5562
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
call fcn.004d8187
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xe5
setne bl
mov ax, word [0x5210dc]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe2
setne cl
or ebx, ecx
test ebx, ebx
jne 0x439bfe
lea eax, [ebp - 0xcc]
push eax
call fcn.004f5619
lea ecx, [ebp - 0xcc]
call fcn.00404844
call fcn.004d8187
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe5
jne 0x439c3c
lea eax, [ebp - 0xcc]
push eax
call fcn.004f5619
lea ecx, [ebp - 0xcc]
call fcn.00404844
call fcn.004d8187
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf7
setne cl
or ebx, ecx
test ebx, ebx
jne 0x439d73
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004047c6
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004f5562
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf4
setne cl
or ebx, ecx
test ebx, ebx
jne 0x439f39
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xfc
setne cl
or ebx, ecx
test ebx, ebx
jne 0x439fa7
lea eax, [ebp - 0xcc]
push eax
call fcn.004f5619
lea ecx, [ebp - 0xcc]
call fcn.00404844
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xf7
neg ax
sbb eax, eax
inc eax
or ebx, eax
test ebx, ebx
jne 0x43a124
mov ax, word [0x5210dc]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe2
jne 0x43a043
lea eax, [ebp - 0xcc]
push eax
call fcn.004f5619
lea ecx, [ebp - 0xcc]
call fcn.00404844
jmp 0x43a11f
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004047c6
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004f5562
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe0
setne cl
or ebx, ecx
test ebx, ebx
jne 0x43a25b
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004047c6
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004f5562
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf6
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf4
setne cl
or ebx, ecx
test ebx, ebx
jne 0x43a426
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
call fcn.004d8187
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf6
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe5
setne cl
or ebx, ecx
test ebx, ebx
jne 0x43a5f1
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
call fcn.004d8187
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf6
setne bl
mov ax, word [0x5210dc]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe2
setne cl
or ebx, ecx
test ebx, ebx
jne 0x43a664
lea eax, [ebp - 0xcc]
push eax
call fcn.004f5619
lea ecx, [ebp - 0xcc]
call fcn.00404844
call fcn.004d8187
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf6
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf7
setne cl
or ebx, ecx
test ebx, ebx
jne 0x43a895
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xfd
setne bl
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf8
setne cl
and ebx, ecx
test ebx, ebx
jne 0x43a874
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
call fcn.004d8187
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xfd
jne 0x43a872
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x43a890
lea eax, [ebp - 0xcc]
push eax
call fcn.004f5619
lea ecx, [ebp - 0xcc]
call fcn.00404844
call fcn.004d8187
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf6
jne 0x43a99c
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004047c6
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004f5562
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
call fcn.004d8187
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf7
setne bl
mov ax, word [0x5210dc]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe2
setne cl
or ebx, ecx
test ebx, ebx
jne 0x43aa0a
lea eax, [ebp - 0xcc]
push eax
call fcn.004f5619
lea ecx, [ebp - 0xcc]
call fcn.00404844
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf7
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe5
setne cl
or ebx, ecx
test ebx, ebx
jne 0x43abd0
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf7
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf4
setne cl
or ebx, ecx
test ebx, ebx
jne 0x43ad96
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf7
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xf4
neg ax
sbb eax, eax
inc eax
or ebx, eax
neg ebx
sbb ebx, ebx
neg ebx
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xe5
neg ax
sbb eax, eax
inc eax
or ebx, eax
neg ebx
sbb ebx, ebx
neg ebx
mov ax, word [0x5210dc]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xe2
neg ax
sbb eax, eax
inc eax
or ebx, eax
test ebx, ebx
jne 0x43af38
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004047c6
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004f5562
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x43afc4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf8
jne 0x43afc4
lea eax, [ebp - 0xcc]
push eax
call fcn.00445689
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x439860
jmp 0x443b54
cmp word [ebp - 0x214], 0xe3
jne 0x43c198
cmp word [0x521220], 0x1e
jge 0x43affd
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
push dword [ebp - 0x6c]
push 0x40cba8
call fcn.004048ce
test eax, eax
jne 0x43b01b
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x19c], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0x19c]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x21c], al
mov cx, 0xf4
call fcn.004046b8
cmp byte [ebp - 0x21c], al
jne 0x43b17a
lea eax, [ebp - 0xcc]
push eax
call fcn.004334a1
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x4c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
jmp 0x43b1f8
mov cx, 0xf6
call fcn.004046b8
cmp byte [ebp - 0x21c], al
jne 0x43b1ba
lea eax, [ebp - 0xcc]
push eax
call fcn.0044506b
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x4c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
jmp 0x43b1f8
mov cx, 0xf7
call fcn.004046b8
cmp byte [ebp - 0x21c], al
jne 0x43b1f8
lea eax, [ebp - 0xcc]
push eax
call fcn.0044506b
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x4c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push dword [ebp - 0x6c]
push 0x40c80c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
push dword [ebp - 0x4c]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048b6
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c818
call fcn.004048ce
mov esi, eax
neg esi
sbb esi, esi
inc esi
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xf4
neg ax
sbb eax, eax
inc eax
or esi, eax
neg esi
sbb esi, esi
neg esi
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xfd
neg ax
sbb eax, eax
inc eax
or esi, eax
test esi, esi
jne 0x43b331
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push dword [ebp - 0x90]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048b6
mov esi, 0x40a6cc
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
or dword [ebp - 0x174], 0xffffffff
mov dword [ebp - 0x17c], 2
mov dword [ebp - 0x184], 1
mov dword [ebp - 0x18c], 2
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 2
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404736
mov dword [ebp - 0x240], eax
jmp 0x43b421
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c818
call fcn.004048ce
test eax, eax
jne 0x43b404
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cbb8
call fcn.004048ce
test eax, eax
jne 0x43b402
mov edx, 0x40aeb4
lea ecx, [ebp - 0x50]
call fcn.004048b0
jmp 0x43b42a
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040471e
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jne 0x43b3ab
xor eax, eax
cmp word [0x5210d4], 0x4a
sete al
neg eax
mov word [ebp - 0x184], ax
mov dword [ebp - 0x18c], 0xb
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 0x8002
mov dword [ebp - 0x194], 7
mov dword [ebp - 0x19c], 0x8002
xor eax, eax
cmp word [0x5210d4], 0xa5
sete al
neg eax
mov word [ebp - 0x1c4], ax
mov dword [ebp - 0x1cc], 0xb
mov dword [ebp - 0x1a4], 2
mov dword [ebp - 0x1ac], 0x8002
mov dword [ebp - 0x1b4], 7
mov dword [ebp - 0x1bc], 0x8002
lea eax, [ebp - 0x18c]
push eax
push 0x5211c8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00404808
push eax
push 0x5211c8
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.00404808
push eax
lea eax, [ebp - 0x1cc]
push eax
push 0x5211c8
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.0040488c
push eax
lea eax, [ebp - 0x13c]
push eax
call fcn.00404808
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.0040488c
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x18c]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43bc5a
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x17c], 2
push dword [0x5210c8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
mov edx, 0x40cbc8
lea ecx, [ebp - 0xb4]
call fcn.004048b0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
call fcn.00404772
push eax
push dword [ebp - 0xac]
call fcn.00404832
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004519e6
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
lea eax, [ebp - 0xdc]
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43b74b
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x17c], 2
mov dword [ebp - 0x184], 1
mov dword [ebp - 0x18c], 2
push 0x40c110
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
push 0x40c0dc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 2
push dword [0x5210c8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
mov edx, 0x40cbc8
lea ecx, [ebp - 0xb4]
call fcn.004048b0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
call fcn.00404772
push eax
push dword [ebp - 0xac]
call fcn.00404832
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004519e6
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
lea eax, [ebp - 0xdc]
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43b94b
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 2
mov dword [ebp - 0x184], 2
mov dword [ebp - 0x18c], 2
push 0x40c110
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
push 0x40c0dc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 2
mov esi, 0x40a6cc
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x17c], 2
mov dword [ebp - 0x184], 2
mov dword [ebp - 0x18c], 2
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cbd8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x17c], 2
mov esi, 0x40a6cc
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 2
mov esi, 0x40a6cc
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov dword [ebp - 0x184], 0x40cbfc
mov dword [ebp - 0x18c], 8
push dword [0x5210d8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
movsx eax, word [0x5210dc]
push eax
push dword [ebp - 0xac]
call fcn.00404832
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4011
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404670
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004046ca
and dword [ebp - 0x194], 0
mov dword [ebp - 0x19c], 0x8002
push 1
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
push 0
lea eax, [ebp - 0xec]
push eax
call fcn.004047de
push eax
lea eax, [ebp - 0x19c]
push eax
call fcn.004047e4
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43bc55
push 0x40c110
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
push 0x40c0dc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
jmp 0x43c151
push dword [ebp - 0x90]
push 0x40c110
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
push dword [ebp - 0x50]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [ebp - 0x224], ax
mov word [ebp - 0x220], 1
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
call fcn.0040484a
mov word [ebp - 0x48], ax
lea ecx, [ebp - 0xcc]
call fcn.00404844
jmp 0x43bd3c
mov ax, word [ebp - 0x48]
add ax, word [ebp - 0x220]
jo 0x443e21
mov word [ebp - 0x48], ax
mov ax, word [ebp - 0x48]
cmp ax, word [ebp - 0x224]
jg 0x43c0d7
mov ax, word [ebp - 0x48]
mov word [ebp - 0x184], ax
mov dword [ebp - 0x18c], 0x8002
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x17c], 2
push dword [0x5210c8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
mov ax, word [ebp - 0x48]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [ebp - 0xac]
call fcn.00404832
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x19c], 0x4008
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404880
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
mov dword [ebp - 0x1a4], 0x40cc64
mov dword [ebp - 0x1ac], 0x8008
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43bef8
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
movsx eax, word [ebp - 0x48]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov esi, 0x40a6cc
movsx eax, word [ebp - 0x48]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
jmp 0x43c0d2
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
mov eax, dword [eax]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1bc], 8
mov dword [ebp - 0x1a4], 0x40a6cc
mov dword [ebp - 0x1ac], 8
lea edx, [ebp - 0x1ac]
lea ecx, [ebp - 0x10c]
call fcn.0040478a
mov dword [ebp - 0x194], 0x40bf4c
mov dword [ebp - 0x19c], 8
lea edx, [ebp - 0x19c]
lea ecx, [ebp - 0xfc]
call fcn.0040478a
mov ax, word [ebp - 0x48]
mov word [ebp - 0x184], ax
mov dword [ebp - 0x18c], 0x8002
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
mov edx, eax
lea ecx, [ebp - 0xec]
call fcn.004048d4
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.004047a2
movsx eax, word [ebp - 0x48]
push eax
push dword [0x5210c8]
call fcn.00404832
mov eax, dword [eax]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1cc], 8
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x13c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
push 7
call fcn.00404898
add esp, 0x20
mov esi, 0x40a6cc
movsx eax, word [ebp - 0x48]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
jmp 0x43bd27
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c0dc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
call fcn.0040484a
mov word [0x5210c4], ax
lea ecx, [ebp - 0xcc]
call fcn.00404844
jmp 0x443b54
cmp word [ebp - 0x214], 0xe4
jne 0x43c248
cmp word [0x521220], 0x1e
jl 0x43c200
mov esi, 0x40cc7c
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43c243
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x43c243
jmp 0x443b76
jmp 0x443b54
cmp word [ebp - 0x214], 0xe5
jne 0x43dab6
cmp word [0x521220], 0x1e
jge 0x43c3d7
mov ax, word [0x5210c4]
sub ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c818
call fcn.004048ce
test eax, eax
jne 0x43c3bc
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.004d8bec
sub eax, 2
jo 0x443e21
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 3
push dword [0x5210c8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [ebp - 0xac]
call fcn.00404832
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0xcc]
push eax
push 2
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047f0
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
lea eax, [ebp - 0xdc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43c779
push 0x5210dc
lea eax, [ebp - 0xcc]
push eax
call fcn.005069ad
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xec]
push eax
call fcn.00404778
add esp, 0x1c
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
push dword [0x5210c8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [ebp - 0xac]
call fcn.00404832
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
mov dword [ebp - 0x184], 0x40cc90
mov dword [ebp - 0x18c], 0x8008
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.0040480e
mov word [ebp - 0x1f0], ax
lea ecx, [ebp - 0xcc]
call fcn.00404844
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43c5df
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
jmp 0x43c5f5
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf7
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe5
setne cl
and ebx, ecx
test ebx, ebx
jne 0x43c74b
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe5
jne 0x43c683
call fcn.004d8187
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], 8
lea eax, [ebp - 0xcc]
push eax
call fcn.004334a1
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe5
jne 0x43c779
call fcn.004d8187
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf6
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf7
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe0
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe2
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe1
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe5
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xd9
setne cl
and ebx, ecx
test ebx, ebx
jne 0x43c91b
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov edx, dword [eax]
lea ecx, [ebp - 0x6c]
call fcn.004048b0
mov esi, 0x40a6cc
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf6
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf7
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe0
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe2
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe1
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe5
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xd9
setne cl
and ebx, ecx
test ebx, ebx
jne 0x43d9c5
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf7
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe5
setne cl
and ebx, ecx
test ebx, ebx
jne 0x43cc39
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43cbd3
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], 8
lea eax, [ebp - 0xcc]
push eax
call fcn.004334a1
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x43cc34
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 8
lea eax, [ebp - 0xcc]
push eax
call fcn.004334a1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x43d9c0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf4
jne 0x43cf31
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43ce25
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xec], 8
push 0x5210dc
lea eax, [ebp - 0xcc]
push eax
call fcn.005069ad
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x17c], 2
mov dword [ebp - 0x194], 0x40c0e4
mov dword [ebp - 0x19c], 8
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xfc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 6
call fcn.00404898
add esp, 0x1c
jmp 0x43cf16
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x19c], 8
push 0x5210dc
lea eax, [ebp - 0xcc]
push eax
call fcn.005069ad
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x17c], 2
mov dword [ebp - 0x1a4], 0x40c0e4
mov dword [ebp - 0x1ac], 8
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xec]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 5
call fcn.00404898
add esp, 0x18
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43d9c0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf6
jne 0x43d21e
push 0x5210dc
lea eax, [ebp - 0xcc]
push eax
call fcn.005069ad
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xec]
push eax
call fcn.00404778
add esp, 0x1c
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43d13e
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x43d1bc
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
call fcn.004d8187
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
jmp 0x43d9c0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xd9
jne 0x43d2af
lea eax, [ebp - 0xcc]
push eax
call fcn.00443e26
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
jmp 0x43d9c0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe0
jne 0x43d537
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.004047e4
mov word [ebp - 0x1f0], ax
lea ecx, [ebp - 0xcc]
call fcn.00404844
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43d418
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xec], 8
push 0x5210dc
lea eax, [ebp - 0xcc]
push eax
call fcn.005069ad
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xfc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 5
call fcn.00404898
add esp, 0x18
jmp 0x43d4da
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x19c], 8
push 0x5210dc
lea eax, [ebp - 0xcc]
push eax
call fcn.005069ad
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xec]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 4
call fcn.00404898
add esp, 0x14
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43d9c0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe1
jne 0x43d60e
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx eax, byte [eax]
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x100
jae 0x43d5a8
and dword [ebp - 0x250], 0
jmp 0x43d5b3
call fcn.004046d0
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x17c]
push eax
mov eax, dword [ebp - 0x1f0]
shl eax, 4
mov ecx, dword [0x52117c]
add ecx, eax
push ecx
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43d9c0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe2
jne 0x43d6cd
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.004047e4
mov word [ebp - 0x1f0], ax
lea ecx, [ebp - 0xcc]
call fcn.00404844
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43d6b2
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43d9c0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe5
jne 0x43d9c0
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43d8b9
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xec], 8
push 0x5210dc
lea eax, [ebp - 0xcc]
push eax
call fcn.005069ad
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x17c], 2
mov dword [ebp - 0x194], 0x40c110
mov dword [ebp - 0x19c], 8
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xfc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 6
call fcn.00404898
add esp, 0x1c
jmp 0x43d9aa
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x19c], 8
push 0x5210dc
lea eax, [ebp - 0xcc]
push eax
call fcn.005069ad
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x17c], 2
mov dword [ebp - 0x1a4], 0x40c110
mov dword [ebp - 0x1ac], 8
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xec]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 5
call fcn.00404898
add esp, 0x18
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43c91b
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
test eax, eax
je 0x43dab1
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c818
call fcn.004048ce
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40a6cc
call fcn.004048ce
test eax, eax
je 0x43da48
cmp word [0x5210c4], 1
jne 0x43da48
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push dword [ebp - 0x6c]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xe6
jne 0x43dde0
mov ax, word [0x5210dc]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xfc
jne 0x43db44
call fcn.004d8f48
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x43dddb
mov ax, word [0x5210c4]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c818
call fcn.004048ce
test eax, eax
jne 0x43ddc5
mov ax, word [0x5210c4]
sub ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40bffc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xa
jne 0x43dc94
mov ax, word [0x5210c4]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cc9c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
mov ax, word [0x5210c4]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40ccac
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210c4]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
push 0x40bffc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov ax, word [0x5210c4]
sub ax, 2
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xe7
jne 0x43de5f
lea eax, [ebp - 0xcc]
push eax
call fcn.004462cf
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xe8
jne 0x43ea01
and word [0x5210cc], 0
push 0
push 0x78
push 1
push 8
push 0x5210d0
push 4
push 0x180
call fcn.00404862
add esp, 0x1c
cmp word [0x521094], 0xffff
jne 0x43e962
lea eax, [ebp - 0xcc]
push eax
call fcn.00445bbb
lea eax, [ebp - 0xcc]
push eax
call fcn.0040484a
mov word [ebp - 0xa4], ax
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210dc]
add ax, word [ebp - 0xa4]
jo 0x443e21
mov word [ebp - 0xa8], ax
push dword [0x5210d8]
push 1
call fcn.00404838
mov ecx, eax
call fcn.0040479c
mov word [ebp - 0x74], ax
push 1
movsx eax, word [ebp - 0x74]
push eax
push 1
push 0x11
lea eax, [ebp - 0x58]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [0x5210d8]
lea eax, [ebp - 0xb0]
push eax
call fcn.0040482c
push dword [ebp - 0x58]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x74]
push eax
push 1
push dword [ebp - 0xb0]
call fcn.00404832
push eax
push 1
push dword [ebp - 0xac]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
lea eax, [ebp - 0xb0]
push eax
call fcn.00404820
push 1
movsx eax, word [ebp - 0xa4]
push eax
push 1
push 0x11
lea eax, [ebp - 0x60]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [0x5210d8]
lea eax, [ebp - 0xb0]
push eax
call fcn.0040482c
push dword [ebp - 0x60]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0xa4]
push eax
movsx eax, word [0x5210dc]
push eax
push dword [ebp - 0xb0]
call fcn.00404832
push eax
push 1
push dword [ebp - 0xac]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
lea eax, [ebp - 0xb0]
push eax
call fcn.00404820
push 1
mov ax, word [ebp - 0xa4]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push 1
push 0x11
push 0x5210d8
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [ebp - 0x60]
lea eax, [ebp - 0xb0]
push eax
call fcn.0040482c
push dword [0x5210d8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0xa4]
push eax
push 1
push dword [ebp - 0xb0]
call fcn.00404832
push eax
push 2
push dword [ebp - 0xac]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
lea eax, [ebp - 0xb0]
push eax
call fcn.00404820
push 1
push dword [ebp - 0x58]
call fcn.00404832
mov esi, eax
push 1
push dword [0x5210d8]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
mov cx, 0xfe
call fcn.004046b8
mov bl, al
mov ax, word [ebp - 0xa4]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
mov byte [eax], bl
call fcn.005068bd
mov dword [ebp - 0x174], 0x40c110
mov dword [ebp - 0x17c], 8
lea eax, [ebp - 0xcc]
push eax
call fcn.00493b89
mov dword [ebp - 0x184], 0x40c0dc
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
call fcn.00506935
push 1
movsx eax, word [ebp - 0x74]
push eax
push 1
push 0x11
push 0x5210d8
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [ebp - 0x58]
lea eax, [ebp - 0xb0]
push eax
call fcn.0040482c
push dword [0x5210d8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
movsx eax, word [ebp - 0x74]
push eax
push 1
push dword [ebp - 0xb0]
call fcn.00404832
push eax
push 1
push dword [ebp - 0xac]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
lea eax, [ebp - 0xb0]
push eax
call fcn.00404820
mov ax, word [ebp - 0xa8]
mov word [0x5210dc], ax
mov esi, dword [ebp - 0x54]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
push dword [ebp - 0x54]
push 0x40ccbc
call fcn.004048ce
test eax, eax
je 0x43e95d
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x228], al
mov cx, 0xf6
call fcn.004046b8
cmp byte [ebp - 0x228], al
jne 0x43e314
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xa
jne 0x43e2df
mov edx, 0x40ccc8
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43e302
mov edx, 0x40cce0
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
mov edx, 0x40cce0
lea ecx, [ebp - 0x44]
call fcn.004048b0
jmp 0x43e95d
mov cx, 0xf7
call fcn.004046b8
cmp byte [ebp - 0x228], al
jne 0x43e39b
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xa
jne 0x43e373
mov edx, 0x40c320
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43e389
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
mov edx, 0x40ccf0
lea ecx, [ebp - 0x44]
call fcn.004048b0
jmp 0x43e95d
mov cx, 0xf8
call fcn.004046b8
cmp byte [ebp - 0x228], al
jne 0x43e8db
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 3
jne 0x43e3ef
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x22c], al
mov cx, 0xa
call fcn.004046b8
cmp byte [ebp - 0x22c], al
jne 0x43e6ae
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 9
jne 0x43e583
push 0x40cd00
mov ax, word [0x5210c4]
sub ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
push 0x40bdcc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
push eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xbc]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 3
call fcn.0040489e
add esp, 0x10
mov esi, 0x40a6cc
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43e6a9
push 0x40c320
mov ax, word [0x5210c4]
sub ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
push 0x40bdcc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
push eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xbc]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 3
call fcn.0040489e
add esp, 0x10
mov esi, 0x40a6cc
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43e8d6
mov cx, 9
call fcn.004046b8
cmp byte [ebp - 0x22c], al
jne 0x43e7cf
mov ax, word [0x5210c4]
sub ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40bdcc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43e8d6
mov ax, word [0x5210c4]
sub ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40bdcc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43e95d
mov cx, 0xf9
call fcn.004046b8
cmp byte [ebp - 0x228], al
jne 0x43e95d
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xa
jne 0x43e93a
mov edx, 0x40c320
lea ecx, [ebp - 0x20]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x43e950
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
mov edx, 0x40cd1c
lea ecx, [ebp - 0x44]
call fcn.004048b0
jmp 0x43e9fc
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
cmp word [0x521220], 0x1e
jl 0x43e9fc
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x43e9ba
cmp word [0x5210d4], 0xdb
je 0x43e9ba
jmp 0x443b8c
cmp word [0x5210d4], 0xdb
jne 0x43e9fc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xe9
jne 0x43ea80
lea eax, [ebp - 0xcc]
push eax
call fcn.00445df9
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xea
jne 0x43edbb
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf5
setle bl
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xfa
setge cl
or ebx, ecx
test ebx, ebx
jne 0x43ecd9
lea eax, [ebp - 0xcc]
push eax
call fcn.004455db
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea ecx, [ebp - 0xcc]
call fcn.00404844
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40cd34
call fcn.004048ce
test eax, eax
jne 0x43ecbe
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xa
jne 0x43ebf9
push 0x40cc9c
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40bffc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 2
call fcn.0040489e
add esp, 0xc
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
jmp 0x43ecd4
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x43edb6
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xff
jne 0x43ed73
lea eax, [ebp - 0xcc]
push eax
call fcn.00448599
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x43edb6
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x43edb6
jmp 0x443b76
jmp 0x443b54
cmp word [ebp - 0x214], 0xeb
jne 0x43ede1
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xec
je 0x43edfb
cmp word [ebp - 0x214], 0xed
jne 0x43f165
mov dword [ebp - 0x184], 0x40a6cc
mov dword [ebp - 0x18c], 8
lea edx, [ebp - 0x18c]
lea ecx, [ebp - 0xdc]
call fcn.0040478a
mov dword [ebp - 0x174], 0x40cd40
mov dword [ebp - 0x17c], 8
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xcc]
call fcn.0040478a
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047a2
lea eax, [ebp - 0xfc]
push eax
call fcn.004334a1
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 5
call fcn.00404898
add esp, 0x18
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xea
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x174], ax
mov dword [ebp - 0x17c], 0xb
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 9
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x184], ax
mov dword [ebp - 0x18c], 0xb
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404808
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x17c]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43f096
mov dword [ebp - 0xc4], 0x80020004
mov dword [ebp - 0xcc], 0xa
push dword [0x5210c8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
movsx eax, word [0x5210c4]
push eax
push dword [ebp - 0xac]
call fcn.00404832
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0xcc]
push eax
push 2
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047f0
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
lea eax, [ebp - 0xdc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x63
jne 0x43f128
cmp word [0x521220], 0x1e
jl 0x43f128
push 0x40cad0
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
and dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 0xb
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xa0]
call fcn.004048d4
jmp 0x443b54
cmp word [ebp - 0x214], 0xee
jne 0x43f1e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00449127
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xf0
jl 0x43f513
cmp word [ebp - 0x214], 0xf3
jg 0x43f513
cmp word [0x5210d4], 0xf0
jne 0x43f27d
or word [0x521010], 0xffff
push dword [0x5210d8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
push 2
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [ebp - 0xac]
call fcn.00404832
push eax
push 0x521014
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
mov ax, word [0x5210dc]
add ax, word [0x521014]
jo 0x443e21
mov word [0x521016], ax
cmp word [0x5210d4], 0xf1
jne 0x43f2f8
or word [0x521012], 0xffff
push dword [0x5210d8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
push 2
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [ebp - 0xac]
call fcn.00404832
push eax
push 0x521014
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
mov ax, word [0x5210dc]
add ax, word [0x521014]
jo 0x443e21
mov word [0x521016], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 1
jne 0x43f335
cmp word [0x5210d4], 0xf0
jne 0x43f335
and dword [ebp - 0x254], 0
jmp 0x43f33f
mov dword [ebp - 0x254], 1
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx eax, byte [eax]
neg eax
sbb eax, eax
neg eax
mov esi, dword [ebp - 0x254]
or esi, eax
neg esi
sbb esi, esi
neg esi
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xfa
setne cl
or esi, ecx
neg esi
sbb esi, esi
neg esi
mov ax, word [0x5210dc]
add ax, 4
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xfd
setne cl
or esi, ecx
neg esi
sbb esi, esi
neg esi
mov ax, word [0x5210dc]
add ax, 5
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf9
setne cl
or esi, ecx
test esi, esi
jne 0x43f425
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
mov ax, word [0x5210dc]
mov word [ebp - 0x1a4], ax
mov dword [ebp - 0x1ac], 2
mov dword [ebp - 0xf4], 3
mov dword [ebp - 0xfc], 2
mov dword [ebp - 0xe4], 2
mov dword [ebp - 0xec], 2
or dword [ebp - 0x174], 0xffffffff
mov dword [ebp - 0x17c], 0x800b
push 0x5211d8
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404886
mov edx, eax
lea ecx, [ebp - 0xdc]
call fcn.004048d4
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004047a2
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.004047d2
push eax
call fcn.0040484a
mov word [0x5210dc], ax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
push 5
call fcn.00404898
add esp, 0x18
jmp 0x443b54
cmp word [ebp - 0x214], 0xf4
jne 0x4415a5
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
push dword [0x5210c8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [ebp - 0xac]
call fcn.00404832
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
mov dword [ebp - 0x184], 0x40cc90
mov dword [ebp - 0x18c], 0x8008
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.0040480e
mov word [ebp - 0x1f0], ax
lea ecx, [ebp - 0xcc]
call fcn.00404844
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43f617
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov edx, 0x40cc90
lea ecx, [ebp - 0x6c]
call fcn.004048b0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf6
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf7
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf8
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe0
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe2
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe3
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe5
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xd9
setne cl
and ebx, ecx
test ebx, ebx
jne 0x4414f4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xd9
jne 0x43f80a
lea eax, [ebp - 0xcc]
push eax
call fcn.00443e26
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
jmp 0x4414d5
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe0
jne 0x43faea
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.004047e4
mov word [ebp - 0x1f0], ax
lea ecx, [ebp - 0xcc]
call fcn.00404844
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43f99f
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x43fa8d
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x19c], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0x19c]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x4414d5
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe1
jne 0x43fbc1
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx eax, byte [eax]
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x100
jae 0x43fb5b
and dword [ebp - 0x258], 0
jmp 0x43fb66
call fcn.004046d0
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0x17c]
push eax
mov eax, dword [ebp - 0x1f0]
shl eax, 4
mov ecx, dword [0x52117c]
add ecx, eax
push ecx
lea eax, [ebp - 0xcc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x4414d5
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe2
jne 0x43fc80
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.004047e4
mov word [ebp - 0x1f0], ax
lea ecx, [ebp - 0xcc]
call fcn.00404844
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43fc65
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x4414d5
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe3
jne 0x43fdaa
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x19c], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0x19c]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x4414d5
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe5
jne 0x440973
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.004047e4
mov word [ebp - 0x1f0], ax
lea ecx, [ebp - 0xcc]
call fcn.00404844
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x43ff3f
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x44002d
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x19c], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0x19c]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
call fcn.004d8187
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf6
setne cl
and ebx, ecx
test ebx, ebx
jne 0x440121
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov edx, dword [eax]
lea ecx, [ebp - 0x6c]
call fcn.004048b0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf4
jne 0x44011f
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x44012e
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf7
jne 0x440664
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x68], si
lea eax, [ebp - 0x68]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4002
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x440367
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x4403e5
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40a6cc
call fcn.004048ce
test eax, eax
jne 0x440444
mov esi, dword [ebp - 0x6c]
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
jmp 0x440641
push dword [0x5210c8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [ebp - 0xac]
call fcn.00404832
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov eax, dword [eax]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1bc], 8
mov dword [ebp - 0x1a4], 0x40a6cc
mov dword [ebp - 0x1ac], 8
lea edx, [ebp - 0x1ac]
lea ecx, [ebp - 0x10c]
call fcn.0040478a
mov dword [ebp - 0x194], 0x40c0e4
mov dword [ebp - 0x19c], 8
lea edx, [ebp - 0x19c]
lea ecx, [ebp - 0xfc]
call fcn.0040478a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
mov edx, eax
lea ecx, [ebp - 0xec]
call fcn.004048d4
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.004047a2
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1cc], 8
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x13c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
push 7
call fcn.00404898
add esp, 0x20
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf6
jne 0x44096e
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x68], si
lea eax, [ebp - 0x68]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4002
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x44089d
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x44091b
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
mov esi, dword [ebp - 0x6c]
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
call fcn.004d8187
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
jmp 0x4414d5
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf5
setne cl
and ebx, ecx
test ebx, ebx
jne 0x440ceb
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x68], si
movsx esi, word [ebp - 0x68]
push 0x5210e4
call fcn.00404730
push dword [eax]
push 1
call fcn.00404838
cmp esi, eax
jg 0x440c96
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x440bd9
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
lea eax, [ebp - 0x68]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4002
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x440c94
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0x68]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4002
mov dword [ebp - 0x194], 0x40c0e4
mov dword [ebp - 0x19c], 8
lea eax, [ebp - 0x18c]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x440cd0
push dword [ebp - 0x6c]
push 0x40cb88
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
push eax
push 0x40c0e4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x4414d5
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf6
jne 0x4410fd
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x68], si
movsx esi, word [ebp - 0x68]
push 0x5210e4
call fcn.00404730
push dword [eax]
push 1
call fcn.00404838
cmp esi, eax
jg 0x441084
lea eax, [ebp - 0x68]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4002
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x441004
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe3
jne 0x440f73
push dword [ebp - 0x6c]
push 0x40c80c
call fcn.0040486e
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x441002
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x441082
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x44109b
push dword [ebp - 0x6c]
push 0x40cb88
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
call fcn.004d8187
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
jmp 0x4414d5
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf7
jne 0x441411
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x68], si
lea eax, [ebp - 0x68]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4002
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x441336
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x4413b4
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0x90]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404880
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x4414d5
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf8
jne 0x4414d5
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 8
lea eax, [ebp - 0xcc]
push eax
call fcn.00445689
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
movsx esi, word [0x5210dc]
push dword [0x5210d8]
push 1
call fcn.00404838
cmp esi, eax
jl 0x4414ef
jmp 0x4414f4
jmp 0x43f617
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xfe
jne 0x44152b
push dword [0x5210d8]
push 1
call fcn.00404838
mov ecx, eax
call fcn.0040479c
mov word [0x5210dc], ax
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
test eax, eax
je 0x44157e
mov esi, dword [ebp - 0x6c]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
and dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 0xb
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xa0]
call fcn.004048d4
jmp 0x443b54
cmp word [ebp - 0x214], 0xf5
jne 0x44190b
mov dword [ebp - 0x184], 0x40a6cc
mov dword [ebp - 0x18c], 8
lea edx, [ebp - 0x18c]
lea ecx, [ebp - 0xdc]
call fcn.0040478a
mov dword [ebp - 0x174], 0x40cd40
mov dword [ebp - 0x17c], 8
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xcc]
call fcn.0040478a
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047a2
lea eax, [ebp - 0xfc]
push eax
call fcn.004334a1
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 5
call fcn.00404898
add esp, 0x18
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xea
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x174], ax
mov dword [ebp - 0x17c], 0xb
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 9
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x184], ax
mov dword [ebp - 0x18c], 0xb
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.00404808
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x17c]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x44184f
mov dword [ebp - 0xc4], 0x80020004
mov dword [ebp - 0xcc], 0xa
push dword [0x5210c8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
movsx eax, word [0x5210c4]
push eax
push dword [ebp - 0xac]
call fcn.00404832
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea eax, [ebp - 0xcc]
push eax
push 2
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047f0
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
lea eax, [ebp - 0xdc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf6
jne 0x4418e4
movsx esi, word [0x5210dc]
push dword [0x5210d8]
push 1
call fcn.00404838
sub eax, 3
jo 0x443e21
cmp esi, eax
jge 0x4418df
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf6
je 0x4418dd
call fcn.004d8187
jmp 0x4418e4
call fcn.004d8187
and dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 0xb
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xa0]
call fcn.004048d4
jmp 0x443b54
cmp word [ebp - 0x214], 0xf6
jne 0x441932
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea ecx, [ebp - 0xcc]
call fcn.00404844
jmp 0x443b54
cmp word [ebp - 0x214], 0xf7
jne 0x44374b
mov edx, 0x40a6cc
lea ecx, [ebp - 0x6c]
call fcn.004048b0
mov dword [ebp - 0x184], 0x40a6cc
mov dword [ebp - 0x18c], 8
lea edx, [ebp - 0x18c]
lea ecx, [ebp - 0xdc]
call fcn.0040478a
mov dword [ebp - 0x174], 0x40cd40
mov dword [ebp - 0x17c], 8
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xcc]
call fcn.0040478a
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047a2
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x194], si
mov dword [ebp - 0x19c], 2
lea eax, [ebp - 0xec]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x19c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xfc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004047c6
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.004f5562
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 6
call fcn.00404898
add esp, 0x1c
and dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 0xb
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xa0]
call fcn.004048d4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf8
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf7
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf6
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf4
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe5
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe2
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
mov dword [ebp - 0x25c], ebx
xor ebx, ebx
cmp ax, 0xe0
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xfd
neg ax
sbb eax, eax
inc eax
or ebx, eax
neg ebx
sbb ebx, ebx
neg ebx
mov eax, dword [ebp - 0x25c]
and eax, ebx
test eax, eax
jne 0x443746
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe0
jne 0x441c67
lea eax, [ebp - 0xcc]
push eax
call fcn.004f5619
lea ecx, [ebp - 0xcc]
call fcn.00404844
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe2
jne 0x441e3d
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe5
jne 0x441deb
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
push dword [ebp - 0x6c]
lea eax, [ebp - 0xcc]
push eax
call fcn.004f5562
lea ecx, [ebp - 0xcc]
call fcn.00404844
call fcn.004d8187
jmp 0x441e38
mov esi, 0x40c0e4
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xe5
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf7
setne cl
or ebx, ecx
test ebx, ebx
jne 0x441f79
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004047c6
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004f5562
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
call fcn.004d8187
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xe5
jne 0x442458
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf7
je 0x441fe4
lea eax, [ebp - 0xcc]
push eax
call fcn.004f5619
lea ecx, [ebp - 0xcc]
call fcn.00404844
call fcn.004d8187
jmp 0x442453
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040487a
mov dword [ebp - 0x184], 0x40c0e4
mov dword [ebp - 0x18c], 0x8008
push dword [ebp - 0x6c]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x194], ax
mov dword [ebp - 0x19c], 0xb
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1f0], ax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1f0]
test eax, eax
je 0x4421ac
push dword [ebp - 0x6c]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x44229a
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x19c], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0x19c]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf4
jne 0x442434
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x44244e
push dword [ebp - 0x6c]
lea eax, [ebp - 0xcc]
push eax
call fcn.004f5562
lea ecx, [ebp - 0xcc]
call fcn.00404844
call fcn.004d8187
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf7
setne cl
or ebx, ecx
test ebx, ebx
jne 0x44258f
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004047c6
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004f5562
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf4
setne cl
or ebx, ecx
test ebx, ebx
jne 0x442755
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf6
setne cl
or ebx, ecx
test ebx, ebx
jne 0x44288c
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004047c6
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004f5562
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf8
setne cl
or ebx, ecx
test ebx, ebx
jne 0x4429c3
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004047c6
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004f5562
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf4
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xf7
neg ax
sbb eax, eax
inc eax
or ebx, eax
test ebx, ebx
jne 0x442a32
lea eax, [ebp - 0xcc]
push eax
call fcn.004f5619
lea ecx, [ebp - 0xcc]
call fcn.00404844
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf6
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf4
setne cl
or ebx, ecx
test ebx, ebx
jne 0x442bfd
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
call fcn.004d8187
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf6
setne bl
mov ax, word [0x5210dc]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe2
setne cl
or ebx, ecx
test ebx, ebx
jne 0x442c70
lea eax, [ebp - 0xcc]
push eax
call fcn.004f5619
lea ecx, [ebp - 0xcc]
call fcn.00404844
call fcn.004d8187
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf6
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf7
setne cl
or ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xf8
neg ax
sbb eax, eax
inc eax
or ebx, eax
test ebx, ebx
jne 0x442e17
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
call fcn.004d8187
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf6
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe5
setne cl
or ebx, ecx
test ebx, ebx
jne 0x442fe2
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
call fcn.004d8187
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf6
jne 0x4430e9
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004047c6
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004f5562
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
call fcn.004d8187
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf7
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xf4
neg ax
sbb eax, eax
inc eax
or ebx, eax
neg ebx
sbb ebx, ebx
neg ebx
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xe5
neg ax
sbb eax, eax
inc eax
or ebx, eax
neg ebx
sbb ebx, ebx
neg ebx
mov ax, word [0x5210dc]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xe2
neg ax
sbb eax, eax
inc eax
or ebx, eax
test ebx, ebx
jne 0x4432bb
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xcc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004047c6
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004f5562
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx eax, byte [eax]
test eax, eax
jne 0x4432b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf7
setne bl
mov ax, word [0x5210dc]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe2
setne cl
or ebx, ecx
test ebx, ebx
jne 0x443329
lea eax, [ebp - 0xcc]
push eax
call fcn.004f5619
lea ecx, [ebp - 0xcc]
call fcn.00404844
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf7
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xe5
setne cl
or ebx, ecx
test ebx, ebx
jne 0x4434ef
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xf7
setne bl
mov ax, word [0x5210dc]
sub ax, 3
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xf4
setne cl
or ebx, ecx
test ebx, ebx
jne 0x4436b5
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40c0e4
call fcn.0040486e
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
mov ax, word [0x5210dc]
add ax, 2
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x443e21
add si, ax
jo 0x443e21
add si, 1
jo 0x443e21
mov word [ebp - 0x174], si
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0xcc]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x17c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
lea eax, [ebp - 0xdc]
push eax
call fcn.00404778
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 3
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443741
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf8
jne 0x443741
lea eax, [ebp - 0xcc]
push eax
call fcn.00445689
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x441ae7
jmp 0x443b54
cmp word [ebp - 0x214], 0xf8
jne 0x4437ca
lea eax, [ebp - 0xcc]
push eax
call fcn.00445689
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xf9
jne 0x443849
lea eax, [ebp - 0xcc]
push eax
call fcn.00445a14
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xfa
jne 0x4438ff
lea eax, [ebp - 0xcc]
push eax
call fcn.004460d6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xcc
jne 0x4438fa
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xfb
jne 0x44397e
lea eax, [ebp - 0xcc]
push eax
call fcn.00443e26
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
mov esi, eax
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea ecx, [ebp - 0xb4]
call fcn.00404868
lea ecx, [ebp - 0xcc]
call fcn.00404844
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x443b54
cmp word [ebp - 0x214], 0xff
jne 0x443aa3
mov ax, word [0x5210dc]
add ax, 4
jo 0x443e21
mov word [0x5210dc], ax
mov edx, 0x40cd48
lea ecx, [ebp - 0x78]
call fcn.004048b0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xfd
je 0x443a69
push dword [0x5210d8]
lea eax, [ebp - 0xac]
push eax
call fcn.0040482c
movsx eax, word [0x5210dc]
push eax
push dword [ebp - 0xac]
call fcn.00404832
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4011
lea eax, [ebp - 0x17c]
push eax
call fcn.0040469a
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048b6
lea eax, [ebp - 0xac]
push eax
call fcn.00404820
push dword [ebp - 0x78]
push dword [ebp - 0xb4]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x78]
call fcn.004048b6
lea ecx, [ebp - 0xb4]
call fcn.00404868
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
jmp 0x4439b0
mov esi, dword [ebp - 0x78]
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
jmp 0x443b54
cmp word [0x5210d4], 0xe8
jne 0x443abd
cmp word [0x521094], 0xffff
jne 0x443abd
jmp 0x443b76
lea eax, [ebp - 0xcc]
push eax
call fcn.004466c6
lea eax, [ebp - 0xcc]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x6c]
call fcn.004048b6
lea ecx, [ebp - 0xcc]
call fcn.00404844
cmp word [0x521220], 0x1e
jl 0x443b54
push 0x40a6cc
push dword [ebp - 0x6c]
call fcn.004048ce
test eax, eax
jne 0x443b12
cmp word [0x5210d4], 0xdb
je 0x443b12
jmp 0x443b8c
cmp word [0x5210d4], 0xdb
jne 0x443b54
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [0x5210c4]
add ax, 1
jo 0x443e21
mov word [0x5210c4], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
mov word [0x5210d4], ax
jmp 0x4351be
mov ax, word [0x5210dc]
add ax, 1
jo 0x443e21
mov word [0x5210dc], ax
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
push dword [eax]
push 0x40a6cc
call fcn.004048ce
test eax, eax
je 0x443c29
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov eax, dword [eax]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 8
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x40]
call fcn.00404766
mov esi, 0x40a6cc
mov ax, word [0x5210c4]
sub ax, 1
jo 0x443e21
movsx eax, ax
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
jmp 0x443c7d
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov eax, dword [eax]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 8
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x40]
call fcn.00404766
mov esi, 0x40a6cc
movsx eax, word [0x5210c4]
push eax
push dword [0x5210c8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
jmp 0x443cbb
call fcn.0040473c
push 0x443e03
jmp 0x443d6b
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x200]
push eax
push 2
call fcn.00404898
add esp, 0xc
lea ecx, [ebp - 0x20]
call fcn.00404868
lea ecx, [ebp - 0x30]
call fcn.00404844
lea ecx, [ebp - 0x44]
call fcn.00404868
lea ecx, [ebp - 0x4c]
call fcn.00404868
lea ecx, [ebp - 0x50]
call fcn.00404868
lea ecx, [ebp - 0x54]
call fcn.00404868
lea eax, [ebp - 0x58]
push eax
push 0
call fcn.00404784
lea ecx, [ebp - 0x5c]
call fcn.00404868
lea eax, [ebp - 0x60]
push eax
push 0
call fcn.00404784
lea ecx, [ebp - 0x6c]
call fcn.00404868
lea ecx, [ebp - 0x78]
call fcn.00404868
lea ecx, [ebp - 0x88]
call fcn.00404844
lea ecx, [ebp - 0x90]
call fcn.00404868
lea ecx, [ebp - 0xa0]
call fcn.00404844
ret
call fcn.0040477e