Function at 0x412d00
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x4032b6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x214
call fcn.004040b0
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x401c40
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 0xffffffffffffffff
call dword [fcn.004010ac]
mov dword [ebp - 4], 3
mov eax, dword [ebp + 8]
push eax
call fcn.00416630
mov edx, eax
lea ecx, [ebp - 0x40]
call dword [fcn.00401244]
lea ecx, [ebp - 0x40]
push ecx
call fcn.004123d0
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [fcn.00401244]
lea ecx, [ebp - 0x40]
call dword [fcn.00401274]
mov dword [ebp - 4], 4
mov edx, dword [ebp - 0x30]
push edx
call dword [fcn.00401024]
test eax, eax
jne 0x412da6
jmp 0x416421
mov dword [ebp - 4], 7
push 0
push 0xffffffffffffffff
push 1
push 0x408114
push 0x40924c
mov eax, dword [ebp - 0x30]
push eax
call dword [0x401164]
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [fcn.00401244]
mov dword [ebp - 4], 8
push 0
push 0xffffffffffffffff
push 1
push 0x408114
push 0x409254
mov ecx, dword [ebp - 0x30]
push ecx
call dword [0x401164]
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [fcn.00401244]
mov dword [ebp - 4], 9
push 1
mov edx, dword [ebp - 0x30]
push edx
push 0x409260
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0xa
push 1
mov eax, dword [ebp - 0x30]
push eax
push 0x40926c
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x24], 0
jg 0x412e4f
cmp dword [ebp - 0x28], 0
jle 0x412ee6
mov dword [ebp - 4], 0xc
push 0
push 0xffffffffffffffff
push 1
push 0x409278
push 0x409260
mov ecx, dword [ebp - 0x30]
push ecx
call dword [0x401164]
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [fcn.00401244]
mov dword [ebp - 4], 0xd
push 0
push 0xffffffffffffffff
push 1
push 0x409280
push 0x40926c
mov edx, dword [ebp - 0x30]
push edx
call dword [0x401164]
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [fcn.00401244]
mov dword [ebp - 4], 0xe
push 1
mov eax, dword [ebp - 0x30]
push eax
push 0x409260
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0xf
push 1
mov ecx, dword [ebp - 0x30]
push ecx
push 0x40926c
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
jmp 0x412e38
mov dword [ebp - 4], 0x11
push 1
mov edx, dword [ebp - 0x30]
push edx
push 0x409288
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x24], 0
jne 0x412f15
jmp 0x416421
mov dword [ebp - 4], 0x15
mov eax, dword [ebp - 0x24]
add eax, 1
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x30]
push ecx
push 0x409280
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x16
mov edx, dword [ebp - 0x24]
add edx, 1
jo 0x4164c6
push edx
mov eax, dword [ebp - 0x30]
push eax
push 0x4092a0
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0x17
cmp dword [ebp - 0x28], 0
jne 0x412f77
jmp 0x416421
mov dword [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x24]
jo 0x4164c6
sub ecx, 1
jo 0x4164c6
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x58], 3
lea edx, [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x24]
add eax, 1
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call dword [fcn.004010d8]
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [fcn.00401244]
lea ecx, [ebp - 0x58]
call dword [fcn.0040101c]
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x94], 0x42c074
mov dword [ebp - 4], 0x1c
mov edx, dword [ebp - 0x94]
mov dword [edx], 0
mov dword [ebp - 4], 0x1d
mov eax, dword [ebp - 0x94]
add eax, 4
push eax
push 0x4065bc
call dword [0x4010d4]
mov dword [ebp - 4], 0x1e
push 1
mov ecx, dword [ebp - 0x30]
push ecx
push 0x4092bc
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x1f
cmp dword [ebp - 0x24], 0
jne 0x41303b
jmp 0x416421
mov dword [ebp - 4], 0x22
mov edx, dword [ebp - 0x24]
add edx, 1
jo 0x4164c6
push edx
mov eax, dword [ebp - 0x30]
push eax
push 0x4092d0
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0x23
cmp dword [ebp - 0x28], 0
jne 0x413075
jmp 0x416421
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x24], 0
jle 0x4154bf
cmp dword [ebp - 0x28], 0
jle 0x4154bf
mov dword [ebp - 4], 0x27
mov ecx, dword [ebp - 0x94]
mov edx, dword [ecx]
add edx, 1
jo 0x4164c6
mov eax, dword [ebp - 0x94]
mov dword [eax], edx
mov dword [ebp - 4], 0x28
push 1
mov ecx, dword [ebp - 0x94]
mov edx, dword [ecx]
push edx
push 1
push 0x4065bc
mov eax, dword [ebp - 0x94]
add eax, 4
push eax
push 0x24
push 0
call dword [0x401124]
add esp, 0x1c
mov dword [ebp - 4], 0x29
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x24]
jo 0x4164c6
sub ecx, 7
jo 0x4164c6
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x58], 3
lea edx, [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x24]
add eax, 7
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call dword [fcn.004010d8]
mov edx, eax
lea ecx, [ebp - 0x34]
call dword [fcn.00401244]
lea ecx, [ebp - 0x58]
call dword [fcn.0040101c]
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x50], 0x80020004
mov dword [ebp - 0x58], 0xa
mov edx, dword [ebp - 0x24]
sub edx, 1
jo 0x4164c6
push edx
mov eax, dword [ebp - 0x30]
push eax
call dword [fcn.0040122c]
mov edx, eax
lea ecx, [ebp - 0x40]
call dword [fcn.00401244]
push eax
lea ecx, [ebp - 0x58]
push ecx
mov edx, dword [ebp - 0x28]
add edx, 8
jo 0x4164c6
push edx
mov eax, dword [ebp - 0x30]
push eax
call dword [fcn.004010d8]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
call dword [fcn.00401068]
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [fcn.00401244]
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
push 2
call dword [fcn.004011dc]
add esp, 0xc
lea ecx, [ebp - 0x58]
call dword [fcn.0040101c]
mov dword [ebp - 4], 0x2b
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x84]
push edx
call dword [0x401208]
cmp dword [ebp - 0x84], 0
je 0x41323c
mov eax, dword [ebp - 0x84]
cmp word [eax], 1
jne 0x41323c
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x84]
mov eax, dword [ecx]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x80]
cmp edx, dword [ecx + 0x10]
jae 0x413222
mov dword [ebp - 0xf8], 0
jmp 0x41322e
call dword [fcn.004010f0]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0x80]
imul eax, eax, 0x24
mov dword [ebp - 0xfc], eax
jmp 0x413248
call dword [fcn.004010f0]
mov dword [ebp - 0xfc], eax
mov ecx, dword [ebp - 0x84]
mov edx, dword [ecx + 0xc]
add edx, dword [ebp - 0xfc]
mov dword [ebp - 0x98], edx
mov dword [ebp - 4], 0x2c
mov edx, 0x4092e8
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0x98]
call dword [fcn.004011d4]
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0x2d
mov edx, 0x4092f8
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
call dword [0x40109c]
mov ecx, dword [ebp - 0x98]
mov word [ecx + 4], ax
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x98]
movsx edx, word [ecx + 4]
test edx, edx
je 0x415457
mov dword [ebp - 4], 0x2f
mov edx, 0x409310
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x34]
call dword [fcn.00401244]
lea ecx, [ebp - 0x40]
call dword [fcn.00401274]
mov dword [ebp - 4], 0x30
mov edx, dword [ebp - 0x34]
push edx
call dword [fcn.00401024]
test eax, eax
jne 0x413373
mov dword [ebp - 4], 0x31
mov eax, dword [ebp - 0x98]
mov word [eax + 4], 0
mov dword [ebp - 4], 0x33
mov ecx, dword [ebp - 0x98]
movsx edx, word [ecx + 4]
test edx, edx
je 0x415457
mov dword [ebp - 4], 0x34
mov edx, 0x409324
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0x98]
add ecx, 8
call dword [fcn.004011d4]
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0x35
push 1
mov ecx, dword [ebp - 0x34]
push ecx
push 0x409334
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x36
mov edx, dword [ebp - 0x24]
add edx, 1
jo 0x4164c6
push edx
mov eax, dword [ebp - 0x34]
push eax
push 0x409170
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0x37
cmp dword [ebp - 0x24], 0
jle 0x413b97
cmp dword [ebp - 0x28], 0
jle 0x413b97
mov dword [ebp - 4], 0x38
mov ecx, dword [ebp - 0x98]
mov edx, dword [ecx + 0xc]
add edx, 1
jo 0x4164c6
mov eax, dword [ebp - 0x98]
mov dword [eax + 0xc], edx
mov dword [ebp - 4], 0x39
push 1
mov ecx, dword [ebp - 0x98]
mov edx, dword [ecx + 0xc]
push edx
push 1
push 0
mov eax, dword [ebp - 0x98]
add eax, 0x18
push eax
push 0x20
push 0
call dword [0x401124]
add esp, 0x1c
mov dword [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x24]
jo 0x4164c6
sub ecx, 7
jo 0x4164c6
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x58], 3
lea edx, [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x24]
add eax, 7
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x34]
push ecx
call dword [fcn.004010d8]
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [fcn.00401244]
lea ecx, [ebp - 0x58]
call dword [fcn.0040101c]
mov dword [ebp - 4], 0x3b
mov edx, dword [ebp - 0x98]
mov eax, dword [edx + 0x18]
push eax
lea ecx, [ebp - 0x88]
push ecx
call dword [0x401208]
cmp dword [ebp - 0x88], 0
je 0x41355e
mov edx, dword [ebp - 0x88]
cmp word [edx], 1
jne 0x41355e
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x88]
mov edx, dword [eax + 0xc]
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x80]
cmp ecx, dword [eax + 0x10]
jae 0x413544
mov dword [ebp - 0x100], 0
jmp 0x413550
call dword [fcn.004010f0]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x80]
shl edx, 5
mov dword [ebp - 0x104], edx
jmp 0x41356a
call dword [fcn.004010f0]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x88]
mov ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x104]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 4], 0x3c
lea edx, [ebp - 0x2c]
push edx
push 0
call dword [0x4010d4]
mov dword [ebp - 4], 0x3d
mov edx, 0x409188
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [fcn.00401244]
mov dword [ebp - 0x70], 0x409194
mov dword [ebp - 0x78], 8
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x58]
call dword [fcn.00401214]
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xd0], edx
mov dword [ebp - 0x48], 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x58]
push eax
mov edx, dword [ebp - 0xd0]
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
lea ecx, [ebp - 0x68]
push ecx
call dword [fcn.00401160]
lea edx, [ebp - 0x68]
push edx
push 0x2008
call dword [fcn.00401088]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call dword [fcn.00401240]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 3
call dword [fcn.004011dc]
add esp, 0x10
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 2
call dword [fcn.00401034]
add esp, 0xc
mov dword [ebp - 4], 0x3e
cmp dword [ebp - 0x2c], 0
je 0x4136a7
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x4136a7
mov edx, dword [ebp - 0x2c]
xor eax, eax
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x80]
cmp edx, dword [ecx + 0x10]
jae 0x41368d
mov dword [ebp - 0x108], 0
jmp 0x413699
call dword [fcn.004010f0]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x80]
shl eax, 2
mov dword [ebp - 0x10c], eax
jmp 0x4136b3
call dword [fcn.004010f0]
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x10c]
mov ecx, dword [edx + eax]
push ecx
call dword [0x4011d8]
mov edx, dword [ebp - 0x9c]
mov dword [edx], eax
mov dword [ebp - 4], 0x3f
cmp dword [ebp - 0x2c], 0
je 0x413726
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x413726
mov ecx, dword [ebp - 0x2c]
mov edx, 1
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x80]
cmp ecx, dword [eax + 0x10]
jae 0x41370c
mov dword [ebp - 0x110], 0
jmp 0x413718
call dword [fcn.004010f0]
mov dword [ebp - 0x110], eax
mov edx, dword [ebp - 0x80]
shl edx, 2
mov dword [ebp - 0x114], edx
jmp 0x413732
call dword [fcn.004010f0]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x114]
mov eax, dword [ecx + edx]
push eax
call dword [0x4011d8]
mov ecx, dword [ebp - 0x9c]
mov dword [ecx + 4], eax
mov dword [ebp - 4], 0x40
cmp dword [ebp - 0x2c], 0
je 0x4137a6
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x4137a6
mov eax, dword [ebp - 0x2c]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x41378c
mov dword [ebp - 0x118], 0
jmp 0x413798
call dword [fcn.004010f0]
mov dword [ebp - 0x118], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x11c], ecx
jmp 0x4137b2
call dword [fcn.004010f0]
mov dword [ebp - 0x11c], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x11c]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0x9c]
mov dword [ecx + 8], eax
mov dword [ebp - 4], 0x41
cmp dword [ebp - 0x2c], 0
je 0x413826
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x413826
mov eax, dword [ebp - 0x2c]
mov ecx, 3
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x41380c
mov dword [ebp - 0x120], 0
jmp 0x413818
call dword [fcn.004010f0]
mov dword [ebp - 0x120], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x124], ecx
jmp 0x413832
call dword [fcn.004010f0]
mov dword [ebp - 0x124], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x124]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0x9c]
mov dword [ecx + 0xc], eax
mov dword [ebp - 4], 0x42
lea edx, [ebp - 0x2c]
push edx
push 0
call dword [0x4010d4]
mov dword [ebp - 4], 0x43
mov edx, 0x40919c
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [fcn.00401244]
mov dword [ebp - 0x70], 0x409194
mov dword [ebp - 0x78], 8
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x58]
call dword [fcn.00401214]
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0x48], 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x58]
push eax
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
lea ecx, [ebp - 0x68]
push ecx
call dword [fcn.00401160]
lea edx, [ebp - 0x68]
push edx
push 0x2008
call dword [fcn.00401088]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call dword [fcn.00401240]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 3
call dword [fcn.004011dc]
add esp, 0x10
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 2
call dword [fcn.00401034]
add esp, 0xc
mov dword [ebp - 4], 0x44
cmp dword [ebp - 0x2c], 0
je 0x413979
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x413979
mov edx, dword [ebp - 0x2c]
xor eax, eax
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x80]
cmp edx, dword [ecx + 0x10]
jae 0x41395f
mov dword [ebp - 0x128], 0
jmp 0x41396b
call dword [fcn.004010f0]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x80]
shl eax, 2
mov dword [ebp - 0x12c], eax
jmp 0x413985
call dword [fcn.004010f0]
mov dword [ebp - 0x12c], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x12c]
mov ecx, dword [edx + eax]
push ecx
call dword [0x4011d8]
mov edx, dword [ebp - 0x9c]
mov dword [edx + 0x10], eax
mov dword [ebp - 4], 0x45
cmp dword [ebp - 0x2c], 0
je 0x4139f9
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x4139f9
mov ecx, dword [ebp - 0x2c]
mov edx, 1
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x80]
cmp ecx, dword [eax + 0x10]
jae 0x4139df
mov dword [ebp - 0x130], 0
jmp 0x4139eb
call dword [fcn.004010f0]
mov dword [ebp - 0x130], eax
mov edx, dword [ebp - 0x80]
shl edx, 2
mov dword [ebp - 0x134], edx
jmp 0x413a05
call dword [fcn.004010f0]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x134]
mov eax, dword [ecx + edx]
push eax
call dword [0x4011d8]
mov ecx, dword [ebp - 0x9c]
mov dword [ecx + 0x14], eax
mov dword [ebp - 4], 0x46
cmp dword [ebp - 0x2c], 0
je 0x413a79
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x413a79
mov eax, dword [ebp - 0x2c]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x413a5f
mov dword [ebp - 0x138], 0
jmp 0x413a6b
call dword [fcn.004010f0]
mov dword [ebp - 0x138], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x13c], ecx
jmp 0x413a85
call dword [fcn.004010f0]
mov dword [ebp - 0x13c], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x13c]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0x9c]
mov dword [ecx + 0x18], eax
mov dword [ebp - 4], 0x47
cmp dword [ebp - 0x2c], 0
je 0x413af9
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x413af9
mov eax, dword [ebp - 0x2c]
mov ecx, 3
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x413adf
mov dword [ebp - 0x140], 0
jmp 0x413aeb
call dword [fcn.004010f0]
mov dword [ebp - 0x140], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x144], ecx
jmp 0x413b05
call dword [fcn.004010f0]
mov dword [ebp - 0x144], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x144]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0x9c]
mov dword [ecx + 0x1c], eax
mov dword [ebp - 4], 0x48
mov edx, dword [ebp - 0x28]
add edx, 1
jo 0x4164c6
push edx
mov eax, dword [ebp - 0x34]
push eax
push 0x409334
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x49
mov ecx, dword [ebp - 0x24]
add ecx, 1
jo 0x4164c6
push ecx
mov edx, dword [ebp - 0x34]
push edx
push 0x409170
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0x4a
mov dword [ebp - 0x9c], 0
lea eax, [ebp - 0x88]
push eax
call dword [0x401268]
jmp 0x413422
mov dword [ebp - 4], 0x4c
push 1
mov ecx, dword [ebp - 0x34]
push ecx
push 0x409348
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x4d
mov edx, dword [ebp - 0x24]
add edx, 1
jo 0x4164c6
push edx
mov eax, dword [ebp - 0x34]
push eax
push 0x408d28
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0x4e
cmp dword [ebp - 0x24], 0
jle 0x4147f7
cmp dword [ebp - 0x28], 0
jle 0x4147f7
mov dword [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x98]
mov edx, dword [ecx + 0x10]
add edx, 1
jo 0x4164c6
mov eax, dword [ebp - 0x98]
mov dword [eax + 0x10], edx
mov dword [ebp - 4], 0x50
push 1
mov ecx, dword [ebp - 0x98]
mov edx, dword [ecx + 0x10]
push edx
push 1
push 0
mov eax, dword [ebp - 0x98]
add eax, 0x1c
push eax
push 0x38
push 0
call dword [0x401124]
add esp, 0x1c
mov dword [ebp - 4], 0x51
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x24]
jo 0x4164c6
sub ecx, 7
jo 0x4164c6
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x58], 3
lea edx, [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x24]
add eax, 7
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x34]
push ecx
call dword [fcn.004010d8]
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [fcn.00401244]
lea ecx, [ebp - 0x58]
call dword [fcn.0040101c]
mov dword [ebp - 4], 0x52
mov edx, dword [ebp - 0x98]
mov eax, dword [edx + 0x1c]
push eax
lea ecx, [ebp - 0x8c]
push ecx
call dword [0x401208]
cmp dword [ebp - 0x8c], 0
je 0x413d18
mov edx, dword [ebp - 0x8c]
cmp word [edx], 1
jne 0x413d18
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x8c]
mov edx, dword [eax + 0x10]
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x80]
cmp ecx, dword [eax + 0x10]
jae 0x413cfe
mov dword [ebp - 0x148], 0
jmp 0x413d0a
call dword [fcn.004010f0]
mov dword [ebp - 0x148], eax
mov edx, dword [ebp - 0x80]
imul edx, edx, 0x38
mov dword [ebp - 0x14c], edx
jmp 0x413d24
call dword [fcn.004010f0]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x8c]
mov ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x14c]
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 4], 0x53
lea edx, [ebp - 0x2c]
push edx
push 0
call dword [0x4010d4]
mov dword [ebp - 4], 0x54
mov edx, 0x408b58
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [fcn.00401244]
mov dword [ebp - 0x70], 0x409194
mov dword [ebp - 0x78], 8
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x58]
call dword [fcn.00401214]
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0x48], 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x58]
push eax
mov edx, dword [ebp - 0xd8]
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
lea ecx, [ebp - 0x68]
push ecx
call dword [fcn.00401160]
lea edx, [ebp - 0x68]
push edx
push 0x2008
call dword [fcn.00401088]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call dword [fcn.00401240]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 3
call dword [fcn.004011dc]
add esp, 0x10
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 2
call dword [fcn.00401034]
add esp, 0xc
mov dword [ebp - 4], 0x55
cmp dword [ebp - 0x2c], 0
je 0x413e61
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x413e61
mov edx, dword [ebp - 0x2c]
xor eax, eax
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x80]
cmp edx, dword [ecx + 0x10]
jae 0x413e47
mov dword [ebp - 0x150], 0
jmp 0x413e53
call dword [fcn.004010f0]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x80]
shl eax, 2
mov dword [ebp - 0x154], eax
jmp 0x413e6d
call dword [fcn.004010f0]
mov dword [ebp - 0x154], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x154]
mov ecx, dword [edx + eax]
push ecx
call dword [0x4011d8]
mov edx, dword [ebp - 0xa0]
mov dword [edx], eax
mov dword [ebp - 4], 0x56
cmp dword [ebp - 0x2c], 0
je 0x413ee0
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x413ee0
mov ecx, dword [ebp - 0x2c]
mov edx, 1
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x80]
cmp ecx, dword [eax + 0x10]
jae 0x413ec6
mov dword [ebp - 0x158], 0
jmp 0x413ed2
call dword [fcn.004010f0]
mov dword [ebp - 0x158], eax
mov edx, dword [ebp - 0x80]
shl edx, 2
mov dword [ebp - 0x15c], edx
jmp 0x413eec
call dword [fcn.004010f0]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x15c]
mov eax, dword [ecx + edx]
push eax
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 4], eax
mov dword [ebp - 4], 0x57
cmp dword [ebp - 0x2c], 0
je 0x413f60
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x413f60
mov eax, dword [ebp - 0x2c]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x413f46
mov dword [ebp - 0x160], 0
jmp 0x413f52
call dword [fcn.004010f0]
mov dword [ebp - 0x160], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x164], ecx
jmp 0x413f6c
call dword [fcn.004010f0]
mov dword [ebp - 0x164], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x164]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 8], eax
mov dword [ebp - 4], 0x58
cmp dword [ebp - 0x2c], 0
je 0x413fe0
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x413fe0
mov eax, dword [ebp - 0x2c]
mov ecx, 3
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x413fc6
mov dword [ebp - 0x168], 0
jmp 0x413fd2
call dword [fcn.004010f0]
mov dword [ebp - 0x168], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x16c], ecx
jmp 0x413fec
call dword [fcn.004010f0]
mov dword [ebp - 0x16c], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x16c]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 0xc], eax
mov dword [ebp - 4], 0x59
lea edx, [ebp - 0x2c]
push edx
push 0
call dword [0x4010d4]
mov dword [ebp - 4], 0x5a
mov edx, 0x409188
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [fcn.00401244]
mov dword [ebp - 0x70], 0x409194
mov dword [ebp - 0x78], 8
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x58]
call dword [fcn.00401214]
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xdc], edx
mov dword [ebp - 0x48], 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x58]
push eax
mov edx, dword [ebp - 0xdc]
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
lea ecx, [ebp - 0x68]
push ecx
call dword [fcn.00401160]
lea edx, [ebp - 0x68]
push edx
push 0x2008
call dword [fcn.00401088]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call dword [fcn.00401240]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 3
call dword [fcn.004011dc]
add esp, 0x10
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 2
call dword [fcn.00401034]
add esp, 0xc
mov dword [ebp - 4], 0x5b
cmp dword [ebp - 0x2c], 0
je 0x414133
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x414133
mov edx, dword [ebp - 0x2c]
xor eax, eax
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x80]
cmp edx, dword [ecx + 0x10]
jae 0x414119
mov dword [ebp - 0x170], 0
jmp 0x414125
call dword [fcn.004010f0]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x80]
shl eax, 2
mov dword [ebp - 0x174], eax
jmp 0x41413f
call dword [fcn.004010f0]
mov dword [ebp - 0x174], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x174]
mov ecx, dword [edx + eax]
push ecx
call dword [0x4011d8]
mov edx, dword [ebp - 0xa0]
mov dword [edx + 0x10], eax
mov dword [ebp - 4], 0x5c
cmp dword [ebp - 0x2c], 0
je 0x4141b3
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x4141b3
mov ecx, dword [ebp - 0x2c]
mov edx, 1
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x80]
cmp ecx, dword [eax + 0x10]
jae 0x414199
mov dword [ebp - 0x178], 0
jmp 0x4141a5
call dword [fcn.004010f0]
mov dword [ebp - 0x178], eax
mov edx, dword [ebp - 0x80]
shl edx, 2
mov dword [ebp - 0x17c], edx
jmp 0x4141bf
call dword [fcn.004010f0]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x17c]
mov eax, dword [ecx + edx]
push eax
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 0x14], eax
mov dword [ebp - 4], 0x5d
cmp dword [ebp - 0x2c], 0
je 0x414233
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x414233
mov eax, dword [ebp - 0x2c]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x414219
mov dword [ebp - 0x180], 0
jmp 0x414225
call dword [fcn.004010f0]
mov dword [ebp - 0x180], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x184], ecx
jmp 0x41423f
call dword [fcn.004010f0]
mov dword [ebp - 0x184], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x184]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 0x18], eax
mov dword [ebp - 4], 0x5e
cmp dword [ebp - 0x2c], 0
je 0x4142b3
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x4142b3
mov eax, dword [ebp - 0x2c]
mov ecx, 3
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x414299
mov dword [ebp - 0x188], 0
jmp 0x4142a5
call dword [fcn.004010f0]
mov dword [ebp - 0x188], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x18c], ecx
jmp 0x4142bf
call dword [fcn.004010f0]
mov dword [ebp - 0x18c], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x18c]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 0x1c], eax
mov dword [ebp - 4], 0x5f
lea edx, [ebp - 0x2c]
push edx
push 0
call dword [0x4010d4]
mov dword [ebp - 4], 0x60
mov edx, 0x40919c
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [fcn.00401244]
mov dword [ebp - 0x70], 0x409194
mov dword [ebp - 0x78], 8
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x58]
call dword [fcn.00401214]
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0x48], 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x58]
push eax
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
lea ecx, [ebp - 0x68]
push ecx
call dword [fcn.00401160]
lea edx, [ebp - 0x68]
push edx
push 0x2008
call dword [fcn.00401088]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call dword [fcn.00401240]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 3
call dword [fcn.004011dc]
add esp, 0x10
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 2
call dword [fcn.00401034]
add esp, 0xc
mov dword [ebp - 4], 0x61
cmp dword [ebp - 0x2c], 0
je 0x414406
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x414406
mov edx, dword [ebp - 0x2c]
xor eax, eax
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x80]
cmp edx, dword [ecx + 0x10]
jae 0x4143ec
mov dword [ebp - 0x190], 0
jmp 0x4143f8
call dword [fcn.004010f0]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x80]
shl eax, 2
mov dword [ebp - 0x194], eax
jmp 0x414412
call dword [fcn.004010f0]
mov dword [ebp - 0x194], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x194]
mov ecx, dword [edx + eax]
push ecx
call dword [0x4011d8]
mov edx, dword [ebp - 0xa0]
mov dword [edx + 0x20], eax
mov dword [ebp - 4], 0x62
cmp dword [ebp - 0x2c], 0
je 0x414486
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x414486
mov ecx, dword [ebp - 0x2c]
mov edx, 1
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x80]
cmp ecx, dword [eax + 0x10]
jae 0x41446c
mov dword [ebp - 0x198], 0
jmp 0x414478
call dword [fcn.004010f0]
mov dword [ebp - 0x198], eax
mov edx, dword [ebp - 0x80]
shl edx, 2
mov dword [ebp - 0x19c], edx
jmp 0x414492
call dword [fcn.004010f0]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x19c]
mov eax, dword [ecx + edx]
push eax
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 0x24], eax
mov dword [ebp - 4], 0x63
cmp dword [ebp - 0x2c], 0
je 0x414506
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x414506
mov eax, dword [ebp - 0x2c]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x4144ec
mov dword [ebp - 0x1a0], 0
jmp 0x4144f8
call dword [fcn.004010f0]
mov dword [ebp - 0x1a0], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x1a4], ecx
jmp 0x414512
call dword [fcn.004010f0]
mov dword [ebp - 0x1a4], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x1a4]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 0x28], eax
mov dword [ebp - 4], 0x64
cmp dword [ebp - 0x2c], 0
je 0x414586
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x414586
mov eax, dword [ebp - 0x2c]
mov ecx, 3
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x41456c
mov dword [ebp - 0x1a8], 0
jmp 0x414578
call dword [fcn.004010f0]
mov dword [ebp - 0x1a8], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x1ac], ecx
jmp 0x414592
call dword [fcn.004010f0]
mov dword [ebp - 0x1ac], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 0x2c], eax
mov dword [ebp - 4], 0x65
lea edx, [ebp - 0x2c]
push edx
push 0
call dword [0x4010d4]
mov dword [ebp - 4], 0x66
mov edx, 0x408bb0
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [fcn.00401244]
mov dword [ebp - 0x70], 0x409194
mov dword [ebp - 0x78], 8
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x58]
call dword [fcn.00401214]
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xe4], edx
mov dword [ebp - 0x48], 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x58]
push eax
mov edx, dword [ebp - 0xe4]
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
lea ecx, [ebp - 0x68]
push ecx
call dword [fcn.00401160]
lea edx, [ebp - 0x68]
push edx
push 0x2008
call dword [fcn.00401088]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call dword [fcn.00401240]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 3
call dword [fcn.004011dc]
add esp, 0x10
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 2
call dword [fcn.00401034]
add esp, 0xc
mov dword [ebp - 4], 0x67
cmp dword [ebp - 0x2c], 0
je 0x4146d9
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x4146d9
mov edx, dword [ebp - 0x2c]
xor eax, eax
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x80]
cmp edx, dword [ecx + 0x10]
jae 0x4146bf
mov dword [ebp - 0x1b0], 0
jmp 0x4146cb
call dword [fcn.004010f0]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x80]
shl eax, 2
mov dword [ebp - 0x1b4], eax
jmp 0x4146e5
call dword [fcn.004010f0]
mov dword [ebp - 0x1b4], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x1b4]
mov ecx, dword [edx + eax]
push ecx
call dword [0x4011d8]
mov edx, dword [ebp - 0xa0]
mov dword [edx + 0x30], eax
mov dword [ebp - 4], 0x68
cmp dword [ebp - 0x2c], 0
je 0x414759
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x414759
mov ecx, dword [ebp - 0x2c]
mov edx, 1
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x80]
cmp ecx, dword [eax + 0x10]
jae 0x41473f
mov dword [ebp - 0x1b8], 0
jmp 0x41474b
call dword [fcn.004010f0]
mov dword [ebp - 0x1b8], eax
mov edx, dword [ebp - 0x80]
shl edx, 2
mov dword [ebp - 0x1bc], edx
jmp 0x414765
call dword [fcn.004010f0]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x1bc]
mov eax, dword [ecx + edx]
push eax
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 0x34], eax
mov dword [ebp - 4], 0x69
mov edx, dword [ebp - 0x28]
add edx, 1
jo 0x4164c6
push edx
mov eax, dword [ebp - 0x34]
push eax
push 0x409348
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x6a
mov ecx, dword [ebp - 0x24]
add ecx, 1
jo 0x4164c6
push ecx
mov edx, dword [ebp - 0x34]
push edx
push 0x408d28
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0x6b
mov dword [ebp - 0xa0], 0
lea eax, [ebp - 0x8c]
push eax
call dword [0x401268]
jmp 0x413bdc
mov dword [ebp - 4], 0x6d
push 1
mov ecx, dword [ebp - 0x34]
push ecx
push 0x408aec
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x6e
mov edx, dword [ebp - 0x24]
add edx, 1
jo 0x4164c6
push edx
mov eax, dword [ebp - 0x34]
push eax
push 0x408a68
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0x6f
cmp dword [ebp - 0x24], 0
jle 0x415457
cmp dword [ebp - 0x28], 0
jle 0x415457
mov dword [ebp - 4], 0x70
mov ecx, dword [ebp - 0x98]
mov edx, dword [ecx + 0x14]
add edx, 1
jo 0x4164c6
mov eax, dword [ebp - 0x98]
mov dword [eax + 0x14], edx
mov dword [ebp - 4], 0x71
push 1
mov ecx, dword [ebp - 0x98]
mov edx, dword [ecx + 0x14]
push edx
push 1
push 0
mov eax, dword [ebp - 0x98]
add eax, 0x20
push eax
push 0x38
push 0
call dword [0x401124]
add esp, 0x1c
mov dword [ebp - 4], 0x72
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x24]
jo 0x4164c6
sub ecx, 8
jo 0x4164c6
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x58], 3
lea edx, [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x24]
add eax, 8
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x34]
push ecx
call dword [fcn.004010d8]
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [fcn.00401244]
lea ecx, [ebp - 0x58]
call dword [fcn.0040101c]
mov dword [ebp - 4], 0x73
mov edx, dword [ebp - 0x98]
mov eax, dword [edx + 0x20]
push eax
lea ecx, [ebp - 0x90]
push ecx
call dword [0x401208]
cmp dword [ebp - 0x90], 0
je 0x414978
mov edx, dword [ebp - 0x90]
cmp word [edx], 1
jne 0x414978
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x90]
mov edx, dword [eax + 0x14]
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x80]
cmp ecx, dword [eax + 0x10]
jae 0x41495e
mov dword [ebp - 0x1c0], 0
jmp 0x41496a
call dword [fcn.004010f0]
mov dword [ebp - 0x1c0], eax
mov edx, dword [ebp - 0x80]
imul edx, edx, 0x38
mov dword [ebp - 0x1c4], edx
jmp 0x414984
call dword [fcn.004010f0]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x1c4]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 4], 0x74
lea edx, [ebp - 0x2c]
push edx
push 0
call dword [0x4010d4]
mov dword [ebp - 4], 0x75
mov edx, 0x408b58
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [fcn.00401244]
mov dword [ebp - 0x70], 0x409194
mov dword [ebp - 0x78], 8
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x58]
call dword [fcn.00401214]
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xe8], edx
mov dword [ebp - 0x48], 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x58]
push eax
mov edx, dword [ebp - 0xe8]
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
lea ecx, [ebp - 0x68]
push ecx
call dword [fcn.00401160]
lea edx, [ebp - 0x68]
push edx
push 0x2008
call dword [fcn.00401088]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call dword [fcn.00401240]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 3
call dword [fcn.004011dc]
add esp, 0x10
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 2
call dword [fcn.00401034]
add esp, 0xc
mov dword [ebp - 4], 0x76
cmp dword [ebp - 0x2c], 0
je 0x414ac1
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x414ac1
mov edx, dword [ebp - 0x2c]
xor eax, eax
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x80]
cmp edx, dword [ecx + 0x10]
jae 0x414aa7
mov dword [ebp - 0x1c8], 0
jmp 0x414ab3
call dword [fcn.004010f0]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x80]
shl eax, 2
mov dword [ebp - 0x1cc], eax
jmp 0x414acd
call dword [fcn.004010f0]
mov dword [ebp - 0x1cc], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [edx + eax]
push ecx
call dword [0x4011d8]
mov edx, dword [ebp - 0xa4]
mov dword [edx], eax
mov dword [ebp - 4], 0x77
cmp dword [ebp - 0x2c], 0
je 0x414b40
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x414b40
mov ecx, dword [ebp - 0x2c]
mov edx, 1
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x80]
cmp ecx, dword [eax + 0x10]
jae 0x414b26
mov dword [ebp - 0x1d0], 0
jmp 0x414b32
call dword [fcn.004010f0]
mov dword [ebp - 0x1d0], eax
mov edx, dword [ebp - 0x80]
shl edx, 2
mov dword [ebp - 0x1d4], edx
jmp 0x414b4c
call dword [fcn.004010f0]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x1d4]
mov eax, dword [ecx + edx]
push eax
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa4]
mov dword [ecx + 4], eax
mov dword [ebp - 4], 0x78
cmp dword [ebp - 0x2c], 0
je 0x414bc0
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x414bc0
mov eax, dword [ebp - 0x2c]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x414ba6
mov dword [ebp - 0x1d8], 0
jmp 0x414bb2
call dword [fcn.004010f0]
mov dword [ebp - 0x1d8], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x1dc], ecx
jmp 0x414bcc
call dword [fcn.004010f0]
mov dword [ebp - 0x1dc], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa4]
mov dword [ecx + 8], eax
mov dword [ebp - 4], 0x79
cmp dword [ebp - 0x2c], 0
je 0x414c40
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x414c40
mov eax, dword [ebp - 0x2c]
mov ecx, 3
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x414c26
mov dword [ebp - 0x1e0], 0
jmp 0x414c32
call dword [fcn.004010f0]
mov dword [ebp - 0x1e0], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x1e4], ecx
jmp 0x414c4c
call dword [fcn.004010f0]
mov dword [ebp - 0x1e4], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x1e4]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
mov dword [ebp - 4], 0x7a
lea edx, [ebp - 0x2c]
push edx
push 0
call dword [0x4010d4]
mov dword [ebp - 4], 0x7b
mov edx, 0x409188
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [fcn.00401244]
mov dword [ebp - 0x70], 0x409194
mov dword [ebp - 0x78], 8
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x58]
call dword [fcn.00401214]
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xec], edx
mov dword [ebp - 0x48], 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x58]
push eax
mov edx, dword [ebp - 0xec]
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
lea ecx, [ebp - 0x68]
push ecx
call dword [fcn.00401160]
lea edx, [ebp - 0x68]
push edx
push 0x2008
call dword [fcn.00401088]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call dword [fcn.00401240]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 3
call dword [fcn.004011dc]
add esp, 0x10
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 2
call dword [fcn.00401034]
add esp, 0xc
mov dword [ebp - 4], 0x7c
cmp dword [ebp - 0x2c], 0
je 0x414d93
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x414d93
mov edx, dword [ebp - 0x2c]
xor eax, eax
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x80]
cmp edx, dword [ecx + 0x10]
jae 0x414d79
mov dword [ebp - 0x1e8], 0
jmp 0x414d85
call dword [fcn.004010f0]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x80]
shl eax, 2
mov dword [ebp - 0x1ec], eax
jmp 0x414d9f
call dword [fcn.004010f0]
mov dword [ebp - 0x1ec], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x1ec]
mov ecx, dword [edx + eax]
push ecx
call dword [0x4011d8]
mov edx, dword [ebp - 0xa4]
mov dword [edx + 0x10], eax
mov dword [ebp - 4], 0x7d
cmp dword [ebp - 0x2c], 0
je 0x414e13
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x414e13
mov ecx, dword [ebp - 0x2c]
mov edx, 1
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x80]
cmp ecx, dword [eax + 0x10]
jae 0x414df9
mov dword [ebp - 0x1f0], 0
jmp 0x414e05
call dword [fcn.004010f0]
mov dword [ebp - 0x1f0], eax
mov edx, dword [ebp - 0x80]
shl edx, 2
mov dword [ebp - 0x1f4], edx
jmp 0x414e1f
call dword [fcn.004010f0]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x1f4]
mov eax, dword [ecx + edx]
push eax
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa4]
mov dword [ecx + 0x14], eax
mov dword [ebp - 4], 0x7e
cmp dword [ebp - 0x2c], 0
je 0x414e93
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x414e93
mov eax, dword [ebp - 0x2c]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x414e79
mov dword [ebp - 0x1f8], 0
jmp 0x414e85
call dword [fcn.004010f0]
mov dword [ebp - 0x1f8], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x1fc], ecx
jmp 0x414e9f
call dword [fcn.004010f0]
mov dword [ebp - 0x1fc], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x1fc]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa4]
mov dword [ecx + 0x18], eax
mov dword [ebp - 4], 0x7f
cmp dword [ebp - 0x2c], 0
je 0x414f13
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x414f13
mov eax, dword [ebp - 0x2c]
mov ecx, 3
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x414ef9
mov dword [ebp - 0x200], 0
jmp 0x414f05
call dword [fcn.004010f0]
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x204], ecx
jmp 0x414f1f
call dword [fcn.004010f0]
mov dword [ebp - 0x204], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x204]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa4]
mov dword [ecx + 0x1c], eax
mov dword [ebp - 4], 0x80
lea edx, [ebp - 0x2c]
push edx
push 0
call dword [0x4010d4]
mov dword [ebp - 4], 0x81
mov edx, 0x40919c
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [fcn.00401244]
mov dword [ebp - 0x70], 0x409194
mov dword [ebp - 0x78], 8
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x58]
call dword [fcn.00401214]
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xf0], edx
mov dword [ebp - 0x48], 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x58]
push eax
mov edx, dword [ebp - 0xf0]
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
lea ecx, [ebp - 0x68]
push ecx
call dword [fcn.00401160]
lea edx, [ebp - 0x68]
push edx
push 0x2008
call dword [fcn.00401088]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call dword [fcn.00401240]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 3
call dword [fcn.004011dc]
add esp, 0x10
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 2
call dword [fcn.00401034]
add esp, 0xc
mov dword [ebp - 4], 0x82
cmp dword [ebp - 0x2c], 0
je 0x415066
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x415066
mov edx, dword [ebp - 0x2c]
xor eax, eax
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x80]
cmp edx, dword [ecx + 0x10]
jae 0x41504c
mov dword [ebp - 0x208], 0
jmp 0x415058
call dword [fcn.004010f0]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x80]
shl eax, 2
mov dword [ebp - 0x20c], eax
jmp 0x415072
call dword [fcn.004010f0]
mov dword [ebp - 0x20c], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x20c]
mov ecx, dword [edx + eax]
push ecx
call dword [0x4011d8]
mov edx, dword [ebp - 0xa4]
mov dword [edx + 0x20], eax
mov dword [ebp - 4], 0x83
cmp dword [ebp - 0x2c], 0
je 0x4150e6
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x4150e6
mov ecx, dword [ebp - 0x2c]
mov edx, 1
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x80]
cmp ecx, dword [eax + 0x10]
jae 0x4150cc
mov dword [ebp - 0x210], 0
jmp 0x4150d8
call dword [fcn.004010f0]
mov dword [ebp - 0x210], eax
mov edx, dword [ebp - 0x80]
shl edx, 2
mov dword [ebp - 0x214], edx
jmp 0x4150f2
call dword [fcn.004010f0]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x214]
mov eax, dword [ecx + edx]
push eax
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa4]
mov dword [ecx + 0x24], eax
mov dword [ebp - 4], 0x84
cmp dword [ebp - 0x2c], 0
je 0x415166
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x415166
mov eax, dword [ebp - 0x2c]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x41514c
mov dword [ebp - 0x218], 0
jmp 0x415158
call dword [fcn.004010f0]
mov dword [ebp - 0x218], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x21c], ecx
jmp 0x415172
call dword [fcn.004010f0]
mov dword [ebp - 0x21c], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x21c]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa4]
mov dword [ecx + 0x28], eax
mov dword [ebp - 4], 0x85
cmp dword [ebp - 0x2c], 0
je 0x4151e6
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x4151e6
mov eax, dword [ebp - 0x2c]
mov ecx, 3
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
cmp eax, dword [edx + 0x10]
jae 0x4151cc
mov dword [ebp - 0x220], 0
jmp 0x4151d8
call dword [fcn.004010f0]
mov dword [ebp - 0x220], eax
mov ecx, dword [ebp - 0x80]
shl ecx, 2
mov dword [ebp - 0x224], ecx
jmp 0x4151f2
call dword [fcn.004010f0]
mov dword [ebp - 0x224], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x224]
mov edx, dword [eax + ecx]
push edx
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa4]
mov dword [ecx + 0x2c], eax
mov dword [ebp - 4], 0x86
lea edx, [ebp - 0x2c]
push edx
push 0
call dword [0x4010d4]
mov dword [ebp - 4], 0x87
mov edx, 0x408bb0
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [fcn.00401244]
mov dword [ebp - 0x70], 0x409194
mov dword [ebp - 0x78], 8
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x58]
call dword [fcn.00401214]
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xf4], edx
mov dword [ebp - 0x48], 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x58]
push eax
mov edx, dword [ebp - 0xf4]
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
lea ecx, [ebp - 0x68]
push ecx
call dword [fcn.00401160]
lea edx, [ebp - 0x68]
push edx
push 0x2008
call dword [fcn.00401088]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call dword [fcn.00401240]
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 3
call dword [fcn.004011dc]
add esp, 0x10
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 2
call dword [fcn.00401034]
add esp, 0xc
mov dword [ebp - 4], 0x88
cmp dword [ebp - 0x2c], 0
je 0x415339
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x415339
mov edx, dword [ebp - 0x2c]
xor eax, eax
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x80]
cmp edx, dword [ecx + 0x10]
jae 0x41531f
mov dword [ebp - 0x228], 0
jmp 0x41532b
call dword [fcn.004010f0]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x80]
shl eax, 2
mov dword [ebp - 0x22c], eax
jmp 0x415345
call dword [fcn.004010f0]
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x22c]
mov ecx, dword [edx + eax]
push ecx
call dword [0x4011d8]
mov edx, dword [ebp - 0xa4]
mov dword [edx + 0x30], eax
mov dword [ebp - 4], 0x89
cmp dword [ebp - 0x2c], 0
je 0x4153b9
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x4153b9
mov ecx, dword [ebp - 0x2c]
mov edx, 1
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x80]
cmp ecx, dword [eax + 0x10]
jae 0x41539f
mov dword [ebp - 0x230], 0
jmp 0x4153ab
call dword [fcn.004010f0]
mov dword [ebp - 0x230], eax
mov edx, dword [ebp - 0x80]
shl edx, 2
mov dword [ebp - 0x234], edx
jmp 0x4153c5
call dword [fcn.004010f0]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x234]
mov eax, dword [ecx + edx]
push eax
call dword [0x4011d8]
mov ecx, dword [ebp - 0xa4]
mov dword [ecx + 0x34], eax
mov dword [ebp - 4], 0x8a
mov edx, dword [ebp - 0x28]
add edx, 1
jo 0x4164c6
push edx
mov eax, dword [ebp - 0x34]
push eax
push 0x408aec
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x8b
mov ecx, dword [ebp - 0x24]
add ecx, 1
jo 0x4164c6
push ecx
mov edx, dword [ebp - 0x34]
push edx
push 0x408a68
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0x8c
mov dword [ebp - 0xa4], 0
lea eax, [ebp - 0x90]
push eax
call dword [0x401268]
jmp 0x41483c
mov dword [ebp - 4], 0x90
mov dword [ebp - 0x98], 0
lea ecx, [ebp - 0x84]
push ecx
call dword [0x401268]
mov dword [ebp - 4], 0x91
push 1
mov edx, dword [ebp - 0x30]
push edx
push 0x4092bc
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x92
mov eax, dword [ebp - 0x24]
add eax, 1
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x30]
push ecx
push 0x4092d0
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
jmp 0x413075
mov dword [ebp - 4], 0x94
push 1
mov edx, dword [ebp - 0x30]
push edx
push 0x4089fc
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x95
cmp dword [ebp - 0x24], 0
jne 0x4154ee
jmp 0x416421
mov dword [ebp - 4], 0x98
mov eax, dword [ebp - 0x24]
add eax, 1
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x30]
push ecx
push 0x408a10
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0x99
cmp dword [ebp - 0x28], 0
jne 0x415528
jmp 0x416421
mov dword [ebp - 4], 0x9c
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x24]
jo 0x4164c6
sub edx, 6
jo 0x4164c6
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x58], 3
lea eax, [ebp - 0x58]
push eax
mov ecx, dword [ebp - 0x24]
add ecx, 6
jo 0x4164c6
push ecx
mov edx, dword [ebp - 0x30]
push edx
call dword [fcn.004010d8]
mov edx, eax
lea ecx, [ebp - 0x34]
call dword [fcn.00401244]
lea ecx, [ebp - 0x58]
call dword [fcn.0040101c]
mov dword [ebp - 4], 0x9d
mov dword [ebp - 0x50], 0x80020004
mov dword [ebp - 0x58], 0xa
mov eax, dword [ebp - 0x24]
sub eax, 1
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call dword [fcn.0040122c]
mov edx, eax
lea ecx, [ebp - 0x40]
call dword [fcn.00401244]
push eax
lea edx, [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x28]
add eax, 7
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call dword [fcn.004010d8]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
call dword [fcn.00401068]
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [fcn.00401244]
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
push 2
call dword [fcn.004011dc]
add esp, 0xc
lea ecx, [ebp - 0x58]
call dword [fcn.0040101c]
mov dword [ebp - 4], 0x9e
mov ecx, dword [ebp - 0x94]
add ecx, 8
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 4], 0x9f
mov edx, 0x40897c
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x34]
push eax
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xa8]
add ecx, 4
call dword [fcn.004011d4]
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xa0
mov edx, 0x408988
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xa8]
call dword [fcn.004011d4]
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xa1
mov edx, 0x406960
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xa8]
add ecx, 8
call dword [fcn.004011d4]
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xa2
mov edx, 0x4065ac
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x34]
push eax
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xa8]
add ecx, 0xc
call dword [fcn.004011d4]
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xa3
mov edx, 0x40935c
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xa8]
add ecx, 0x10
call dword [fcn.004011d4]
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xa4
mov edx, 0x409370
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xa8]
add ecx, 0x14
call dword [fcn.004011d4]
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xa5
mov edx, 0x409390
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x34]
push eax
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xa8]
add ecx, 0x18
call dword [fcn.004011d4]
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xa6
mov eax, dword [ebp - 0xa8]
mov ecx, dword [eax + 0x18]
push ecx
push 0x408114
call dword [0x4010f8]
test eax, eax
jne 0x415891
mov dword [ebp - 4], 0xa7
mov edx, dword [ebp - 0xa8]
mov edx, dword [edx]
mov ecx, dword [ebp - 0xa8]
add ecx, 0x18
call dword [fcn.004011d4]
mov dword [ebp - 4], 0xa9
mov edx, 0x4093a8
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xa8]
add ecx, 0x1c
call dword [fcn.004011d4]
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xaa
mov dword [ebp - 0xa8], 0
mov dword [ebp - 4], 0xab
mov ecx, dword [ebp - 0x94]
add ecx, 0x28
mov dword [ebp - 0xac], ecx
mov dword [ebp - 4], 0xac
mov edx, 0x408114
mov ecx, dword [ebp - 0xac]
call dword [fcn.004011d4]
mov dword [ebp - 4], 0xad
mov edx, 0x408114
mov ecx, dword [ebp - 0xac]
add ecx, 4
call dword [fcn.004011d4]
mov dword [ebp - 4], 0xae
push 1
mov edx, dword [ebp - 0x30]
push edx
push 0x4093c0
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0xaf
cmp dword [ebp - 0x24], 0
jle 0x415b23
mov dword [ebp - 4], 0xb0
mov eax, dword [ebp - 0x24]
add eax, 1
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x30]
push ecx
push 0x4093d8
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0xb1
cmp dword [ebp - 0x28], 0
jle 0x415b23
mov dword [ebp - 4], 0xb2
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x24]
jo 0x4164c6
sub edx, 9
jo 0x4164c6
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x58], 3
lea eax, [ebp - 0x58]
push eax
mov ecx, dword [ebp - 0x24]
add ecx, 9
jo 0x4164c6
push ecx
mov edx, dword [ebp - 0x30]
push edx
call dword [fcn.004010d8]
mov edx, eax
lea ecx, [ebp - 0x34]
call dword [fcn.00401244]
lea ecx, [ebp - 0x58]
call dword [fcn.0040101c]
mov dword [ebp - 4], 0xb3
mov dword [ebp - 0x50], 0x80020004
mov dword [ebp - 0x58], 0xa
mov eax, dword [ebp - 0x24]
sub eax, 1
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call dword [fcn.0040122c]
mov edx, eax
lea ecx, [ebp - 0x40]
call dword [fcn.00401244]
push eax
lea edx, [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x28]
add eax, 0xa
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call dword [fcn.004010d8]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
call dword [fcn.00401068]
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [fcn.00401244]
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
push 2
call dword [fcn.004011dc]
add esp, 0xc
lea ecx, [ebp - 0x58]
call dword [fcn.0040101c]
mov dword [ebp - 4], 0xb4
mov edx, 0x4093f4
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xac]
call dword [fcn.004011d4]
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xb5
mov edx, 0x409408
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x34]
push eax
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xac]
add ecx, 4
call dword [fcn.004011d4]
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], pe_nt_image_headers32
mov dword [ebp - 0xac], 0
mov dword [ebp - 4], 0xb9
mov eax, dword [ebp - 0x94]
add eax, 0x30
mov dword [ebp - 0xb0], eax
mov dword [ebp - 4], 0xba
mov edx, 0x408114
mov ecx, dword [ebp - 0xb0]
call dword [fcn.004011d4]
mov dword [ebp - 4], 0xbb
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 4], 0
mov dword [ebp - 4], 0xbc
mov edx, dword [ebp - 0xb0]
mov word [edx + 8], 0
mov dword [ebp - 4], 0xbd
mov edx, 0x408114
mov ecx, dword [ebp - 0xb0]
add ecx, 0xc
call dword [fcn.004011d4]
mov dword [ebp - 4], 0xbe
mov edx, 0x408114
mov ecx, dword [ebp - 0xb0]
add ecx, 0x10
call dword [fcn.004011d4]
mov dword [ebp - 4], 0xbf
mov eax, dword [ebp - 0xb0]
mov dword [eax + 0x14], 0
mov dword [ebp - 4], 0xc0
push 1
mov ecx, dword [ebp - 0x30]
push ecx
push 0x409418
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0xc1
cmp dword [ebp - 0x24], 0
jle 0x416004
mov dword [ebp - 4], 0xc2
mov edx, dword [ebp - 0x24]
add edx, 1
jo 0x4164c6
push edx
mov eax, dword [ebp - 0x30]
push eax
push 0x409430
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0xc3
cmp dword [ebp - 0x28], 0
jle 0x416004
mov dword [ebp - 4], 0xc4
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x24]
jo 0x4164c6
sub ecx, 8
jo 0x4164c6
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x58], 3
lea edx, [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x24]
add eax, 8
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call dword [fcn.004010d8]
mov edx, eax
lea ecx, [ebp - 0x34]
call dword [fcn.00401244]
lea ecx, [ebp - 0x58]
call dword [fcn.0040101c]
mov dword [ebp - 4], 0xc5
mov dword [ebp - 0x50], 0x80020004
mov dword [ebp - 0x58], 0xa
mov edx, dword [ebp - 0x24]
sub edx, 1
jo 0x4164c6
push edx
mov eax, dword [ebp - 0x30]
push eax
call dword [fcn.0040122c]
mov edx, eax
lea ecx, [ebp - 0x40]
call dword [fcn.00401244]
push eax
lea ecx, [ebp - 0x58]
push ecx
mov edx, dword [ebp - 0x28]
add edx, 9
jo 0x4164c6
push edx
mov eax, dword [ebp - 0x30]
push eax
call dword [fcn.004010d8]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
call dword [fcn.00401068]
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [fcn.00401244]
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
push 2
call dword [fcn.004011dc]
add esp, 0xc
lea ecx, [ebp - 0x58]
call dword [fcn.0040101c]
mov dword [ebp - 4], 0xc6
mov edx, 0x409448
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [fcn.00401244]
lea ecx, [ebp - 0x40]
call dword [fcn.00401274]
mov dword [ebp - 4], 0xc7
mov edx, 0x409458
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xb0]
call dword [fcn.004011d4]
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xc8
mov edx, 0x409464
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
call dword [0x4011d8]
mov edx, dword [ebp - 0xb0]
mov dword [edx + 4], eax
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xc9
mov edx, 0x407d18
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
call dword [0x40109c]
mov ecx, dword [ebp - 0xb0]
mov word [ecx + 8], ax
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xca
mov edx, 0x409474
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xb0]
add ecx, 0xc
call dword [fcn.004011d4]
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xcb
push 1
push 0xffffffffffffffff
push 1
mov edx, dword [0x42c130]
push edx
push 0x409484
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax + 0xc]
push ecx
call dword [0x401164]
mov edx, eax
lea ecx, [ebp - 0x40]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xb0]
add ecx, 0xc
call dword [fcn.004011d4]
lea ecx, [ebp - 0x40]
call dword [fcn.00401274]
mov dword [ebp - 4], 0xcc
push 1
push 0xffffffffffffffff
push 1
mov edx, dword [0x42c138]
push edx
push 0x4094a4
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax + 0xc]
push ecx
call dword [0x401164]
mov edx, eax
lea ecx, [ebp - 0x40]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xb0]
add ecx, 0xc
call dword [fcn.004011d4]
lea ecx, [ebp - 0x40]
call dword [fcn.00401274]
mov dword [ebp - 4], 0xcd
mov edx, 0x4094c8
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x34]
push eax
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [fcn.00401244]
lea ecx, [ebp - 0x40]
call dword [fcn.00401274]
mov dword [ebp - 4], 0xce
mov edx, 0x4094d8
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xb0]
add ecx, 0x10
call dword [fcn.004011d4]
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xcf
mov edx, 0x4094e4
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
call dword [0x4011d8]
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x14], eax
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xd2
mov dword [ebp - 0xb0], 0
mov dword [ebp - 4], 0xd3
mov ecx, dword [ebp - 0x94]
add ecx, 0x48
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 4], 0xd4
mov edx, 0x408114
mov ecx, dword [ebp - 0xb4]
call dword [fcn.004011d4]
mov dword [ebp - 4], 0xd5
mov edx, 0x408114
mov ecx, dword [ebp - 0xb4]
add ecx, 4
call dword [fcn.004011d4]
mov dword [ebp - 4], 0xd6
push 1
mov edx, dword [ebp - 0x30]
push edx
push 0x40950c
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0xd7
cmp dword [ebp - 0x24], 0
jle 0x416245
mov dword [ebp - 4], 0xd8
mov eax, dword [ebp - 0x24]
add eax, 1
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x30]
push ecx
push 0x409528
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0xd9
cmp dword [ebp - 0x28], 0
jle 0x416245
mov dword [ebp - 4], 0xda
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x24]
jo 0x4164c6
sub edx, 0xa
jo 0x4164c6
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x58], 3
lea eax, [ebp - 0x58]
push eax
mov ecx, dword [ebp - 0x24]
add ecx, 0xa
jo 0x4164c6
push ecx
mov edx, dword [ebp - 0x30]
push edx
call dword [fcn.004010d8]
mov edx, eax
lea ecx, [ebp - 0x34]
call dword [fcn.00401244]
lea ecx, [ebp - 0x58]
call dword [fcn.0040101c]
mov dword [ebp - 4], 0xdb
mov dword [ebp - 0x50], 0x80020004
mov dword [ebp - 0x58], 0xa
mov eax, dword [ebp - 0x24]
sub eax, 1
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call dword [fcn.0040122c]
mov edx, eax
lea ecx, [ebp - 0x40]
call dword [fcn.00401244]
push eax
lea edx, [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x28]
add eax, 0xb
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call dword [fcn.004010d8]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
call dword [fcn.00401068]
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [fcn.00401244]
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
push 2
call dword [fcn.004011dc]
add esp, 0xc
lea ecx, [ebp - 0x58]
call dword [fcn.0040101c]
mov dword [ebp - 4], 0xdc
mov edx, 0x4094d8
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xb4]
call dword [fcn.004011d4]
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xdd
mov edx, 0x409544
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x34]
push eax
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xb4]
add ecx, 4
call dword [fcn.004011d4]
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xe0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 4], 0xe1
mov eax, dword [ebp - 0x94]
add eax, 0x50
mov dword [ebp - 0xb8], eax
mov dword [ebp - 4], 0xe2
mov edx, 0x408114
mov ecx, dword [ebp - 0xb8]
call dword [fcn.004011d4]
mov dword [ebp - 4], 0xe3
mov ecx, dword [ebp - 0xb8]
mov dword [ecx + 4], 0
mov dword [ebp - 4], 0xe4
push 1
mov edx, dword [ebp - 0x30]
push edx
push 0x409554
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0xe5
cmp dword [ebp - 0x24], 0
jle 0x4163f2
mov dword [ebp - 4], 0xe6
mov eax, dword [ebp - 0x24]
add eax, 1
jo 0x4164c6
push eax
mov ecx, dword [ebp - 0x30]
push ecx
push 0x40956c
push 0
call dword [fcn.004011c4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0xe7
cmp dword [ebp - 0x28], 0
jle 0x4163f2
mov dword [ebp - 4], 0xe8
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x24]
jo 0x4164c6
sub edx, 8
jo 0x4164c6
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x58], 3
lea eax, [ebp - 0x58]
push eax
mov ecx, dword [ebp - 0x24]
add ecx, 8
jo 0x4164c6
push ecx
mov edx, dword [ebp - 0x30]
push edx
call dword [fcn.004010d8]
mov edx, eax
lea ecx, [ebp - 0x34]
call dword [fcn.00401244]
lea ecx, [ebp - 0x58]
call dword [fcn.0040101c]
mov dword [ebp - 4], 0xe9
mov edx, 0x4094d8
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
mov edx, eax
mov ecx, dword [ebp - 0xb8]
call dword [fcn.004011d4]
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xea
mov edx, 0x409584
lea ecx, [ebp - 0x40]
call dword [fcn.004011d4]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00416b20
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.00401244]
push eax
call dword [0x4011d8]
mov ecx, dword [ebp - 0xb8]
mov dword [ecx + 4], eax
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
push 2
call dword [fcn.004011dc]
add esp, 0xc
mov dword [ebp - 4], 0xed
mov dword [ebp - 0xb8], 0
mov dword [ebp - 4], 0xee
mov dword [ebp - 0x94], 0
mov dword [ebp - 4], 0xef
mov word [ebp - 0x38], 0xffff
push 0x4156af
jmp 0x416453
lea eax, [ebp - 0x84]
push eax
call dword [0x401268]
lea ecx, [ebp - 0x88]
push ecx
call dword [0x401268]
lea edx, [ebp - 0x8c]
push edx
call dword [0x401268]
lea eax, [ebp - 0x90]
push eax
call dword [0x401268]
lea ecx, [ebp - 0x2c]
push ecx
push 0
call dword [fcn.00401090]
lea ecx, [ebp - 0x30]
call dword [fcn.00401274]
lea ecx, [ebp - 0x34]
call dword [fcn.00401274]
lea ecx, [ebp - 0x3c]
call dword [fcn.00401274]
ret
call dword [fcn.004011ac]
int3