Function at 0x40e103
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cb55b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2f2c
call fcn.004c7960
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x42405d
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x1e70], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x19f8], eax
mov eax, dword [ebp - 0x1e70]
movzx eax, byte [eax]
test eax, eax
je 0x423eca
mov byte [ebp - 0x39], 0
push 2
lea ecx, [ebp - 0xba4]
call fcn.00424c41
push 1
lea ecx, [ebp - 0x1fe8]
call fcn.00424c41
push 4
lea ecx, [ebp - 0x1fd8]
call fcn.00424c41
mov dword [ebp - 0x58], 0
jmp 0x40e196
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x40e1af
push dword [ebp - 0x58]
lea ecx, [ebp - 0xba4]
call fcn.00424d2f
and dword [eax], 0
jmp 0x40e18f
mov dword [ebp - 0x58], 0
jmp 0x40e1bf
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x40e1db
push dword [ebp - 0x58]
lea ecx, [ebp - 0x1fe8]
call fcn.00424d2f
mov dword [eax], 0x5459eeda
jmp 0x40e1b8
mov dword [ebp - 0x58], 0
jmp 0x40e1eb
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x40e207
push dword [ebp - 0x58]
lea ecx, [ebp - 0x1fd8]
call fcn.00424d2f
mov dword [eax], 0xc3825062
jmp 0x40e1e4
push 1
lea ecx, [ebp - 0xba4]
call fcn.00424d2f
and dword [eax], 0
jmp 0x40e23d
push 1
lea ecx, [ebp - 0xba4]
call fcn.00424d2f
mov dword [ebp - 0xcf8], eax
mov eax, dword [ebp - 0xcf8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xcf8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xba4]
call fcn.00424d2f
cmp dword [eax], 0x12
jle 0x40e541
mov dword [ebp - 0x6a8], 0xffffffff
mov dword [ebp - 0x17ac], 0x25bb5a27
mov dword [ebp - 0x37c], 0
jmp 0x40e280
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 2
jge 0x40e29c
mov eax, dword [ebp - 0x37c]
mov dword [ebp + eax*4 - 0x1754], 0xffffffff
jmp 0x40e273
push 1
lea ecx, [ebp - 0xba4]
call fcn.00424d2f
push 0
lea ecx, [ebp - 0x1fe8]
call fcn.00424d2f
mov dword [eax], 0xf644accb
push 4
pop eax
imul eax, eax, 0
mov ecx, 0xf644accb
sub ecx, dword [ebp + eax - 0x1754]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x1754]
je 0x40e2f9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1754], 0
je 0x40e2f9
mov dword [ebp - 0x1738], 1
jmp 0x40e300
and dword [ebp - 0x1738], 0
cmp dword [ebp - 0x1738], 0x56e700d6
jl 0x40e318
mov dword [ebp - 0x1a38], 1
jmp 0x40e31f
and dword [ebp - 0x1a38], 0
push 1
lea ecx, [ebp - 0xba4]
call fcn.00424d2f
cmp dword [eax], 0x76f
jge 0x40e340
mov dword [ebp - 0x1740], 1
jmp 0x40e347
and dword [ebp - 0x1740], 0
push 3
lea ecx, [ebp - 0x1fd8]
call fcn.00424d2f
mov ecx, dword [ebp - 0x1740]
mov dword [eax], ecx
mov dword [ebp - 0x6a8], 0xf
jmp 0x40e375
mov eax, dword [ebp - 0x6a8]
inc eax
mov dword [ebp - 0x6a8], eax
cmp dword [ebp - 0x6a8], 0x13
jne 0x40e53c
mov dword [ebp - 0x1a48], 1
mov dword [ebp - 0x384], 0
jmp 0x40e3a5
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 2
jge 0x40e3c1
mov eax, dword [ebp - 0x384]
mov dword [ebp + eax*4 - 0x26d4], 0xffff
jmp 0x40e398
mov byte [ebp - 0x1b0], 0
push 0
push 1
lea eax, [ebp - 0x1b0]
push eax
call fcn.004090f0
add esp, 0xc
push 3
lea ecx, [ebp - 0x1fd8]
call fcn.00424d2f
mov eax, dword [eax]
add eax, 0xf844
mov dword [ebp - 0x1748], eax
push 0
lea ecx, [ebp - 0x1fe8]
call fcn.00424d2f
mov ecx, dword [ebp - 0x1748]
mov dword [eax], ecx
push 3
lea ecx, [ebp - 0x1fd8]
call fcn.00424d2f
mov ecx, dword [ebp - 0x1748]
cmp ecx, dword [eax]
jg 0x40e42d
mov dword [ebp - 0x1a40], 1
jmp 0x40e434
and dword [ebp - 0x1a40], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1754]
mov dword [ebp - 0x27e8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1754]
add eax, 9
xor esi, esi
inc esi
sub esi, eax
push 0
lea ecx, [ebp - 0x1fe8]
call fcn.00424d2f
imul esi, dword [eax]
cmp esi, 0xffff
je 0x40e480
mov dword [ebp - 0x17a4], 1
jmp 0x40e487
and dword [ebp - 0x17a4], 0
mov eax, dword [ebp - 0x17a4]
mov dword [ebp - 0x17ac], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x26d4]
cmp dword [ebp - 0x17ac], eax
jl 0x40e4b4
mov dword [ebp - 0x17b4], 1
jmp 0x40e4bb
and dword [ebp - 0x17b4], 0
push 0
lea ecx, [ebp - 0xba4]
call fcn.00424d2f
mov ecx, dword [ebp - 0x17b4]
cmp ecx, dword [eax]
jne 0x40e4de
mov dword [ebp - 0x17bc], 1
jmp 0x40e4e5
and dword [ebp - 0x17bc], 0
cmp dword [ebp - 0x17bc], 1
je 0x40e4fa
mov dword [ebp - 0x17c4], 1
jmp 0x40e501
and dword [ebp - 0x17c4], 0
push 1
lea ecx, [ebp - 0xba4]
call fcn.00424d2f
mov ecx, dword [ebp - 0x17c4]
cmp ecx, dword [eax]
je 0x40e524
mov dword [ebp - 0x17cc], 1
jmp 0x40e52b
and dword [ebp - 0x17cc], 0
mov eax, dword [ebp - 0x17cc]
mov dword [ebp - 0x1a48], eax
jmp 0x40e368
jmp 0x40e219
lea ecx, [ebp - 0x1fd8]
call fcn.00424d13
lea ecx, [ebp - 0x1fe8]
call fcn.00424d13
lea ecx, [ebp - 0xba4]
call fcn.00424d13
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x17dc], 5
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0x17fc], 0x97b0
mov dword [ebp - 0x1a60], 0xfffffff9
mov dword [ebp - 0x6ac], 0
jmp 0x40e5aa
mov eax, dword [ebp - 0x6ac]
inc eax
mov dword [ebp - 0x6ac], eax
cmp dword [ebp - 0x6ac], 3
jge 0x40e5c6
mov eax, dword [ebp - 0x6ac]
mov dword [ebp + eax*4 - 0x29c4], 1
jmp 0x40e59d
cmp dword [ebp - 0x5c], 0
jne 0x40e5db
cmp dword [ebp - 0x5c], 0xfffffff9
jne 0x40e5db
and dword [ebp - 0x1a50], 0
jmp 0x40e5e5
mov dword [ebp - 0x1a50], 1
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x5c]
jg 0x40e5fc
mov dword [ebp - 0x1a58], 1
jmp 0x40e603
and dword [ebp - 0x1a58], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x2818], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], eax
jl 0x40e620
mov dword [ebp - 0x17d4], 1
jmp 0x40e627
and dword [ebp - 0x17d4], 0
mov eax, dword [ebp - 0x17d4]
mov dword [ebp - 0x17dc], eax
mov eax, dword [ebp - 0x17dc]
cmp dword [ebp - 0x5c], eax
jl 0x40e64a
mov dword [ebp - 0x17e4], 1
jmp 0x40e651
and dword [ebp - 0x17e4], 0
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x17e4]
cmp eax, dword [ebp - 0x38c]
je 0x40e66e
mov dword [ebp - 0x17ec], 1
jmp 0x40e675
and dword [ebp - 0x17ec], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x17ec], eax
jle 0x40e68c
mov dword [ebp - 0x17f4], 1
jmp 0x40e693
and dword [ebp - 0x17f4], 0
mov eax, dword [ebp - 0x17f4]
mov dword [ebp - 0x17fc], eax
imul eax, dword [ebp - 0x17fc], 3
add eax, dword [ebp - 0x38c]
sub eax, dword [ebp - 0x5c]
cmp eax, 0x66c4
jge 0x40e6c2
mov dword [ebp - 0x1804], 1
jmp 0x40e6c9
and dword [ebp - 0x1804], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x1804], eax
jg 0x40e6e0
mov dword [ebp - 0x1814], 1
jmp 0x40e6e7
and dword [ebp - 0x1814], 0
mov eax, dword [ebp - 0x38c]
add eax, dword [ebp - 0x1814]
neg eax
cmp eax, dword [ebp - 0x5c]
je 0x40e706
mov dword [ebp - 0x182c], 1
jmp 0x40e70d
and dword [ebp - 0x182c], 0
mov eax, dword [ebp - 0x38c]
cmp dword [ebp - 0x182c], eax
jne 0x40e727
mov dword [ebp - 0x1834], 1
jmp 0x40e72e
and dword [ebp - 0x1834], 0
cmp dword [ebp - 0x1834], 1
jne 0x40e743
mov dword [ebp - 0xa38], 1
jmp 0x40e74a
and dword [ebp - 0xa38], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa38]
mov dword [ebp + eax - 0x29c4], ecx
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0x1a60], eax
mov dword [ebp - 0x394], 0x3b26bdde
mov dword [ebp - 0x1a78], 0xcfce2949
mov dword [ebp - 0x83c], 0
jmp 0x40e796
mov eax, dword [ebp - 0x83c]
inc eax
mov dword [ebp - 0x83c], eax
cmp dword [ebp - 0x83c], 4
jge 0x40e7b2
mov eax, dword [ebp - 0x83c]
mov dword [ebp + eax*4 - 0x2f0c], 9
jmp 0x40e789
mov dword [ebp - 0x394], 0
jmp 0x40e7cb
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 0x1d
jne 0x40e8d1
mov dword [ebp - 0x2300], 0x8d581621
mov dword [ebp - 0x22fc], 0x8d581621
mov dword [ebp - 0x22f8], 0x8d581621
mov dword [ebp - 0x22f4], 0x8d581621
lea ecx, [ebp - 0xb01]
call fcn.00424d3e
push eax
lea eax, [ebp - 0x22f0]
push eax
lea eax, [ebp - 0x2300]
push eax
lea ecx, [ebp - 0x2ac8]
call fcn.00424d41
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x25ec]
call fcn.00424ced
mov dword [ebp - 0x6b4], 0
mov dword [ebp - 0x24e0], 0
mov dword [ebp - 0x1a70], 0x8fdeb772
mov dword [ebp - 0x6b4], 0
jmp 0x40e86c
mov eax, dword [ebp - 0x6b4]
inc eax
mov dword [ebp - 0x6b4], eax
cmp dword [ebp - 0x6b4], 3
jg 0x40e8a8
mov dword [ebp - 0x1a68], 0xcc5d9b4e
push 0x6212
push 0
push 0x5bbe
lea eax, [ebp - 0x1a68]
push eax
push 1
push 0x5812
push 0x2814
call fcn.0040e103
add esp, 0x1c
jmp 0x40e85f
cmp dword [ebp - 0x1a70], 0
je 0x40e8c1
lea ecx, [ebp - 0x25ec]
call fcn.00424d13
jmp 0x40e7be
lea ecx, [ebp - 0x25ec]
call fcn.00424d13
jmp 0x40e7be
push 1
push 0xfe8
lea eax, [ebp - 0x1a78]
push eax
push 0
push 0x370f
push 0x2df8
call fcn.00407296
add esp, 0x18
push 2
lea ecx, [ebp - 0xbb0]
call fcn.00424c41
mov dword [ebp - 0x1254], 0x60b2
mov dword [ebp - 0x1f38], 0xac1950
cmp dword [ebp - 0x1254], 0x63ea
jle 0x40e9ce
and dword [ebp - 0x39c], 0
jmp 0x40e93a
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0x2125
jge 0x40e9ce
and dword [ebp - 0x904], 0
jmp 0x40e960
mov eax, dword [ebp - 0x904]
inc eax
mov dword [ebp - 0x904], eax
cmp dword [ebp - 0x904], 0x3d87
jge 0x40e9c9
and dword [ebp - 0x3a4], 0
jmp 0x40e982
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0x4b33
jge 0x40e9c7
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x904]
sar eax, cl
or eax, dword [ebp - 0x3a4]
cdq
mov dword [ebp - 0x1a94], eax
mov dword [ebp - 0x1a90], edx
push dword [ebp - 0x1a90]
push dword [ebp - 0x1a94]
mov ecx, 0xadd958
call fcn.00424afd
jmp 0x40e975
jmp 0x40e953
jmp 0x40e92d
mov dword [ebp - 0x60], 0x11151c3c
mov dword [ebp - 0x6d4], 0x5a97963b
push 4
lea ecx, [ebp - 0xb24]
call fcn.00424c41
mov dword [ebp - 0x268], 6
mov dword [ebp - 0x308], 0xaa08
mov dword [ebp - 0x154], 0x55205300
mov dword [ebp - 0xc64], 1
mov dword [ebp - 0x1244], 0xe3eed797
mov dword [ebp - 0x1f28], 0x96da
mov dword [ebp - 0x1f30], 0x65bec774
push 0x4ebd
push 0x524f
push 0x4127
push 0x454e
push 0x7675
push 0
push 0
push 0x2160
push 0x41e6
push 0x3160
push 0x61b5
lea eax, [ebp - 0x2864]
push eax
lea eax, [ebp - 0xb24]
push eax
call fcn.00403947
add esp, 0x34
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x6d4], eax
cmp dword [ebp - 0x6d4], 0xfffffffc
jbe 0x40ea97
mov dword [ebp - 0xbf4], 1
jmp 0x40ea9e
and dword [ebp - 0xbf4], 0
cmp dword [ebp - 0x60], 0x1dfe
jge 0x40eab3
mov dword [ebp - 0xb54], 1
jmp 0x40eaba
and dword [ebp - 0xb54], 0
push 0
lea ecx, [ebp - 0xb24]
call fcn.00424d2f
mov ecx, dword [ebp - 0xb54]
mov dword [eax], ecx
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0xb54]
je 0x40eaed
push 4
pop eax
test eax, eax
je 0x40eaed
mov dword [ebp - 0x1830], 1
jmp 0x40eaf4
and dword [ebp - 0x1830], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x1830], eax
jle 0x40eb0b
mov dword [ebp - 0x16b4], 1
jmp 0x40eb12
and dword [ebp - 0x16b4], 0
mov eax, dword [ebp - 0x16b4]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x268], eax
jne 0x40eb3e
cmp dword [ebp - 0x268], 0
je 0x40eb3e
mov dword [ebp - 0x1730], 1
jmp 0x40eb45
and dword [ebp - 0x1730], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x1730], eax
jne 0x40eb5c
mov dword [ebp - 0xbe4], 1
jmp 0x40eb63
and dword [ebp - 0xbe4], 0
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0xbe4]
cmp eax, dword [ebp - 0x308]
jle 0x40eb80
mov dword [ebp - 0x1214], 1
jmp 0x40eb87
and dword [ebp - 0x1214], 0
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x1214], eax
jge 0x40eba1
mov dword [ebp - 0xbec], 1
jmp 0x40eba8
and dword [ebp - 0xbec], 0
cmp dword [ebp - 0xbec], 0x3d97
jg 0x40ebc0
mov dword [ebp - 0x152c], 1
jmp 0x40ebc7
and dword [ebp - 0x152c], 0
mov eax, dword [ebp - 0x152c]
add eax, 0x1e3f
cmp eax, dword [ebp - 0x154]
je 0x40ebe6
mov dword [ebp - 0x121c], 1
jmp 0x40ebed
and dword [ebp - 0x121c], 0
mov eax, dword [ebp - 0xbf4]
cmp eax, dword [ebp - 0x121c]
je 0x40ec07
mov dword [ebp - 0xbfc], 1
jmp 0x40ec0e
and dword [ebp - 0xbfc], 0
mov eax, dword [ebp - 0x308]
add eax, dword [ebp - 0xbfc]
imul eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x154]
je 0x40ec36
mov dword [ebp - 0x17e0], 1
jmp 0x40ec3d
and dword [ebp - 0x17e0], 0
cmp dword [ebp - 0x17e0], 0x99fa9ef8
jae 0x40ed86
mov dword [ebp - 0x3ac], 1
mov dword [ebp - 0x24e8], 0xfffffffe
mov dword [ebp - 0x2824], 0x4126315b
mov dword [ebp - 0x6bc], 0
jmp 0x40ec84
mov eax, dword [ebp - 0x6bc]
inc eax
mov dword [ebp - 0x6bc], eax
cmp dword [ebp - 0x6bc], 1
jge 0x40eca0
mov eax, dword [ebp - 0x6bc]
mov dword [ebp + eax*4 - 0x24f0], 6
jmp 0x40ec77
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x286c], eax
cmp dword [ebp - 0x308], 1
jne 0x40ecc1
mov dword [ebp - 0x1a80], 1
jmp 0x40ecc8
and dword [ebp - 0x1a80], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x24f8], eax
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x2830], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x2500], eax
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x2874], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xc04], eax
push 3
lea ecx, [ebp - 0xb24]
call fcn.00424d2f
mov ecx, dword [ebp - 0xc04]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3ac]
cmp dword [ebp - 0xc04], eax
jle 0x40ed33
cmp dword [ebp - 0x60], 0
je 0x40ed33
mov dword [ebp - 0x1224], 1
jmp 0x40ed3a
and dword [ebp - 0x1224], 0
mov eax, dword [ebp - 0x1224]
mov dword [ebp - 0x268], eax
push 0x7c6f
push 0x6fd
push 0x3ef3
push 0xe1c
push 0x44e8
lea eax, [ebp - 0xc64]
push eax
push 0
push 1
push 0x357b
push 0x57f6
push 0x36dd
call fcn.0040afec
add esp, 0x2c
jmp 0x40f770
mov dword [ebp - 0x2f8], 0xfffffffb
mov dword [ebp - 0x174], 4
mov dword [ebp - 0x3dc], 8
mov dword [ebp - 0x90c], 1
mov dword [ebp - 0xc0c], 0x3483
mov dword [ebp - 0x1a88], 0xac19c0
cmp dword [ebp - 0xc0c], 0x3529
jle 0x40ee7a
and dword [ebp - 0x844], 0
jmp 0x40ede8
mov eax, dword [ebp - 0x844]
inc eax
mov dword [ebp - 0x844], eax
cmp dword [ebp - 0x844], 0x1044
jge 0x40ee7a
and dword [ebp - 0x3b4], 0
jmp 0x40ee0e
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0x3c20
jge 0x40ee75
and dword [ebp - 0x6c4], 0
jmp 0x40ee30
mov eax, dword [ebp - 0x6c4]
inc eax
mov dword [ebp - 0x6c4], eax
cmp dword [ebp - 0x6c4], 0x7002
jge 0x40ee73
mov eax, dword [ebp - 0x844]
sub eax, dword [ebp - 0x3b4]
sub eax, dword [ebp - 0x6c4]
cdq
mov dword [ebp - 0x1aa0], eax
mov dword [ebp - 0x1a9c], edx
push dword [ebp - 0x1a9c]
push dword [ebp - 0x1aa0]
mov ecx, 0xadd958
call fcn.00424afd
jmp 0x40ee23
jmp 0x40ee01
jmp 0x40eddb
mov dword [ebp - 0xa40], 0xfffffffe
and dword [ebp - 4], 0
cmp dword [ebp - 0xc0c], 0x3107
jge 0x40eea4
mov edx, dword [ebp - 0x1a88]
mov ecx, 0xadd958
call fcn.004268b3
jmp 0x40eec0
or dword [ebp - 4], 0xffffffff
jmp 0x40eeca
mov dword [ebp - 0x1534], 0x3344
mov dword [ebp - 0x1f00], 0xac1a38
cmp dword [ebp - 0x1534], 0x34f1
jle 0x40ef99
and dword [ebp - 0x3bc], 0
jmp 0x40ef04
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0x374e
jge 0x40ef99
and dword [ebp - 0x968], 0
jmp 0x40ef2a
mov eax, dword [ebp - 0x968]
inc eax
mov dword [ebp - 0x968], eax
cmp dword [ebp - 0x968], 0x7798
jge 0x40ef94
and dword [ebp - 0x3c4], 0
jmp 0x40ef4c
mov eax, dword [ebp - 0x3c4]
inc eax
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0x207c
jge 0x40ef92
mov eax, dword [ebp - 0x3bc]
cdq
idiv dword [ebp - 0x968]
and edx, dword [ebp - 0x3c4]
mov eax, edx
cdq
mov dword [ebp - 0x1aac], eax
mov dword [ebp - 0x1aa8], edx
push dword [ebp - 0x1aa8]
push dword [ebp - 0x1aac]
mov ecx, 0xadd958
call fcn.00424afd
jmp 0x40ef3f
jmp 0x40ef1d
jmp 0x40eef7
mov dword [ebp - 0x108], 0xee13
mov dword [ebp - 4], 2
cmp dword [ebp - 0x1534], 0x2faf
jge 0x40efc6
mov edx, dword [ebp - 0x1f00]
mov ecx, 0xadd958
call fcn.004268b3
jmp 0x40efe2
or dword [ebp - 4], 0xffffffff
jmp 0x40efec
mov byte [ebp - 0x1b2], 0
movzx eax, byte [ebp - 0x1b2]
test eax, eax
je 0x40f052
push 0x1dca
push 0x4a34
push 0x52
push 0x30eb
push 0x7ce2
push 0
push 0x3ec9
push 0x2cec
push 0x1578
push 0x26fc
push 0x4f75
push 0x3a91
push 0x5fa9
push 0x2e91
push 1
push 0x4c5a
push 0x5f3e
call fcn.0040618e
add esp, 0x44
cmp dword [ebp - 0x174], 0xfffb
jb 0x40f06a
mov dword [ebp - 0xc14], 1
jmp 0x40f071
and dword [ebp - 0xc14], 0
cmp dword [ebp - 0xc14], 0x79d7
jge 0x40f089
mov dword [ebp - 0x122c], 1
jmp 0x40f090
and dword [ebp - 0x122c], 0
mov esi, dword [ebp - 0x174]
imul esi, dword [ebp - 0x122c]
push 0
lea ecx, [ebp - 0xb24]
call fcn.00424d2f
cmp esi, dword [eax]
jl 0x40f0ba
mov dword [ebp - 0xc1c], 1
jmp 0x40f0c1
and dword [ebp - 0xc1c], 0
mov eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0xc1c]
jle 0x40f0db
mov dword [ebp - 0x16bc], 1
jmp 0x40f0e2
and dword [ebp - 0x16bc], 0
cmp dword [ebp - 0x16bc], 0xf1929b4d
jbe 0x40f0fa
mov dword [ebp - 0xc24], 1
jmp 0x40f101
and dword [ebp - 0xc24], 0
mov eax, dword [ebp - 0xc24]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0xa40], eax
cmp dword [ebp - 0xa40], 0
jne 0x40f14c
cmp dword [ebp - 0x174], 0
jne 0x40f14c
and dword [ebp - 0x1234], 0
jmp 0x40f156
mov dword [ebp - 0x1234], 1
cmp dword [ebp - 0x1234], 0x5ac3517d
jge 0x40f180
push 2
lea ecx, [ebp - 0xb24]
call fcn.00424d2f
cmp dword [eax], 0
je 0x40f180
mov dword [ebp - 0x1f08], 1
jmp 0x40f187
and dword [ebp - 0x1f08], 0
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x2508], eax
mov eax, dword [ebp - 0x154]
add eax, dword [ebp - 0x154]
cmp eax, 0x880a
jne 0x40f1b4
xor eax, eax
inc eax
jne 0x40f1b4
and dword [ebp - 0xc2c], 0
jmp 0x40f1be
mov dword [ebp - 0xc2c], 1
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0xc2c], eax
je 0x40f1d8
mov dword [ebp - 0x153c], 1
jmp 0x40f1df
and dword [ebp - 0x153c], 0
cmp dword [ebp - 0x153c], 0xfff6
jbe 0x40f1f7
mov dword [ebp - 0xc34], 1
jmp 0x40f1fe
and dword [ebp - 0xc34], 0
cmp dword [ebp - 0xc34], 1
je 0x40f219
cmp dword [ebp - 0x308], 0
jne 0x40f219
and dword [ebp - 0x123c], 0
jmp 0x40f223
mov dword [ebp - 0x123c], 1
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x123c], eax
jge 0x40f23d
mov dword [ebp - 0xc3c], 1
jmp 0x40f244
and dword [ebp - 0xc3c], 0
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0xc3c], eax
jne 0x40f25e
mov dword [ebp - 0x1790], 1
jmp 0x40f265
and dword [ebp - 0x1790], 0
cmp dword [ebp - 0x1790], 0xfffffffa
je 0x40f459
mov dword [ebp - 0xc44], 0x3e0f
mov dword [ebp - 0x1f10], 0xac1a80
cmp dword [ebp - 0xc44], 0x3f85
jle 0x40f39b
and dword [ebp - 0x6cc], 0
jmp 0x40f2ac
mov eax, dword [ebp - 0x6cc]
inc eax
mov dword [ebp - 0x6cc], eax
cmp dword [ebp - 0x6cc], 0x120a
jge 0x40f395
and dword [ebp - 0x3cc], 0
jmp 0x40f2d2
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0x7672
jge 0x40f390
and dword [ebp - 0x84c], 0
jmp 0x40f2f8
mov eax, dword [ebp - 0x84c]
inc eax
mov dword [ebp - 0x84c], eax
cmp dword [ebp - 0x84c], 0x537d
jge 0x40f38b
and dword [ebp - 0x3d4], 0
jmp 0x40f31e
mov eax, dword [ebp - 0x3d4]
inc eax
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 0x2ac8
jge 0x40f386
mov eax, dword [ebp - 0x6cc]
cdq
idiv dword [ebp - 0x3cc]
and edx, dword [ebp - 0x84c]
or edx, dword [ebp - 0x3d4]
mov eax, edx
cdq
mov dword [ebp - 0x1ab8], eax
mov dword [ebp - 0x1ab4], edx
push dword [ebp - 0x1ab4]
push dword [ebp - 0x1ab8]
lea ecx, [ebp - 0x2c14]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.00424af2
push eax
call fcn.004b5807
pop ecx
lea ecx, [ebp - 0x2c14]
call fcn.00424ae8
jmp 0x40f311
jmp 0x40f2eb
jmp 0x40f2c5
jmp 0x40f29f
call dword [0xae032c]
mov dword [ebp - 0x1f18], 0xd6cd47b9
mov dword [ebp - 4], 4
cmp dword [ebp - 0xc44], 0x3ddd
jge 0x40f3c4
push dword [ebp - 0x1f10]
call fcn.004b5807
pop ecx
jmp 0x40f3e0
or dword [ebp - 4], 0xffffffff
jmp 0x40f3ea
push 0x2797
lea eax, [ebp - 0x108]
push eax
push 0x142
push 0x6c45
lea eax, [ebp - 0x1f18]
push eax
lea eax, [ebp - 0x6d4]
push eax
push 0
push 0x3496
push 0x64cc
push 0x4065
push 0x3249
push 1
push 0x90c
push 0x5cad
lea eax, [ebp - 0x2f8]
push eax
lea eax, [ebp - 0x1244]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0xb24]
push eax
call fcn.0040b1e9
add esp, 0x48
jmp 0x40f770
mov dword [ebp - 0x2288], 0x47558758
mov dword [ebp - 0x2284], 0x47558758
mov dword [ebp - 0x2280], 0x47558758
mov dword [ebp - 0x227c], 0x47558758
lea ecx, [ebp - 0xb09]
call fcn.00424d3e
push eax
lea eax, [ebp - 0x2278]
push eax
lea eax, [ebp - 0x2288]
push eax
lea ecx, [ebp - 0x2a50]
call fcn.00424d41
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2198]
call fcn.00424ced
mov dword [ebp - 0x15c], 0xfbe5b575
mov dword [ebp - 0xadc], 0x5fddb278
mov dword [ebp - 0x108], 0
jmp 0x40f4e3
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 3
jg 0x40f6f4
or dword [ebp - 0x2350], 0xffffffff
or dword [ebp - 0x234c], 0xffffffff
or dword [ebp - 0x2348], 0xffffffff
or dword [ebp - 0x2344], 0xffffffff
lea ecx, [ebp - 0xb61]
call fcn.00424d3e
push eax
lea eax, [ebp - 0x2340]
push eax
lea eax, [ebp - 0x2350]
push eax
lea ecx, [ebp - 0x2b30]
call fcn.00424d41
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x25fc]
call fcn.00424ced
lea eax, [ebp - 0x154]
push eax
push 0
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x15c]
push eax
push 0
push 0x618e
lea eax, [ebp - 0xb24]
push eax
push 0x1603
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x2198]
push eax
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x3dc]
push eax
call fcn.00405340
add esp, 0x30
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x2840], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x1f20], eax
push 0
lea ecx, [ebp - 0x25fc]
call fcn.00424d2f
mov ecx, dword [ebp - 0x1f20]
mov dword [eax], ecx
push dword [ebp - 0x108]
lea ecx, [ebp - 0xb24]
call fcn.00424d2f
push 0
lea ecx, [ebp - 0xb24]
call fcn.00424d2f
mov ecx, dword [ebp - 0x1244]
cmp dword [eax], ecx
je 0x40f5f0
mov dword [ebp - 0xc4c], 1
jmp 0x40f5f7
and dword [ebp - 0xc4c], 0
mov eax, dword [ebp - 0x15c]
cmp eax, dword [ebp - 0xc4c]
jne 0x40f611
mov dword [ebp - 0x1544], 1
jmp 0x40f618
and dword [ebp - 0x1544], 0
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x1544]
jl 0x40f632
mov dword [ebp - 0xc54], 1
jmp 0x40f639
and dword [ebp - 0xc54], 0
cmp dword [ebp - 0xc54], 0xac3227d8
jne 0x40f651
mov dword [ebp - 0x124c], 1
jmp 0x40f658
and dword [ebp - 0x124c], 0
mov eax, dword [ebp - 0x124c]
mov dword [ebp - 0xadc], eax
mov eax, dword [ebp - 0x90c]
cmp dword [ebp - 0xadc], eax
jle 0x40f67e
mov dword [ebp - 0xc5c], 1
jmp 0x40f685
and dword [ebp - 0xc5c], 0
mov eax, dword [ebp - 0x3dc]
add eax, dword [ebp - 0xc5c]
jne 0x40f6a5
cmp dword [ebp - 0x108], 0
jne 0x40f6a5
and dword [ebp - 0x16c4], 0
jmp 0x40f6af
mov dword [ebp - 0x16c4], 1
mov esi, dword [ebp - 0x15c]
imul esi, dword [ebp - 0x16c4]
push 0
lea ecx, [ebp - 0x2198]
call fcn.00424d2f
mov eax, dword [eax]
lea eax, [esi + eax + 0x2fcb]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x1f28], eax
lea ecx, [ebp - 0x25fc]
call fcn.00424d13
jmp 0x40f4d6
lea eax, [ebp - 0x108]
push eax
push 0x47d8
lea eax, [ebp - 0x2198]
push eax
lea eax, [ebp - 0xa40]
push eax
lea eax, [ebp - 0xc64]
push eax
push 0
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x1f30]
push eax
push 0x43ff
lea eax, [ebp - 0x90c]
push eax
lea eax, [ebp - 0xb24]
push eax
push 0x3c8c
push 0x3027
push 1
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0xadc]
push eax
lea eax, [ebp - 0x308]
push eax
call fcn.00403ce2
add esp, 0x48
lea ecx, [ebp - 0x2198]
call fcn.00424d13
lea ecx, [ebp - 0xb24]
call fcn.00424d13
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1254], 0x5e51
jge 0x40f79e
mov edx, dword [ebp - 0x1f38]
mov ecx, 0xadd958
call fcn.004268b3
jmp 0x40f7ba
or dword [ebp - 4], 0xffffffff
jmp 0x40f7c4
push 1
lea ecx, [ebp - 0x2064]
call fcn.00424c41
push 4
lea ecx, [ebp - 0x2054]
call fcn.00424c41
mov dword [ebp - 0x6dc], 0xffffffff
mov dword [ebp - 0xc6c], 1
mov dword [ebp - 0x1f40], 0xffffffff
mov dword [ebp - 0x2510], 1
mov dword [ebp - 0x287c], 0
mov dword [ebp - 0x2518], 1
mov dword [ebp - 0x2850], 0x7216709e
mov dword [ebp - 0x2520], 0
push 4
lea ecx, [ebp - 0x261c]
call fcn.00424c41
mov dword [ebp - 0x1f50], 0xfffc
mov dword [ebp - 0x3e4], 0
jmp 0x40f85e
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 4
jge 0x40f880
push dword [ebp - 0x3e4]
lea ecx, [ebp - 0x261c]
call fcn.00424d2f
mov dword [eax], 0x8a36a77d
jmp 0x40f851
mov dword [ebp - 0x6dc], 0
jmp 0x40f899
mov eax, dword [ebp - 0x6dc]
inc eax
mov dword [ebp - 0x6dc], eax
cmp dword [ebp - 0x6dc], 2
jle 0x40fb31
mov dword [ebp - 0x2d8], 0xfffffffb
mov dword [ebp - 0xa48], 0
mov dword [ebp - 0x2884], 0xffffffff
push 3
lea ecx, [ebp - 0x260c]
call fcn.00424c41
mov dword [ebp - 0x2528], 3
mov dword [ebp - 0x2860], 0xd982fc9a
push 0x151a
lea eax, [ebp - 0x270]
push eax
push 0
lea eax, [ebp - 0x260c]
push eax
push 0x1932
push 0
call fcn.00402045
add esp, 0x18
mov dword [ebp - 0x270], 0
jmp 0x40f922
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 1
jge 0x40f93e
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0x2530], 0x964e
jmp 0x40f915
mov dword [ebp - 0x2d8], 0
jmp 0x40f957
mov eax, dword [ebp - 0x2d8]
dec eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0xfffffff0
jl 0x40fb09
mov dword [ebp - 0x854], 0xfffffffb
mov dword [ebp - 0x3ec], 0
jmp 0x40f987
mov eax, dword [ebp - 0x3ec]
inc eax
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 2
jge 0x40f9a3
mov eax, dword [ebp - 0x3ec]
mov dword [ebp + eax*4 - 0x21f4], 0xf7d6
jmp 0x40f97a
mov dword [ebp - 0x854], 0xffffffe8
jmp 0x40f9bc
mov eax, dword [ebp - 0x854]
inc eax
mov dword [ebp - 0x854], eax
cmp dword [ebp - 0x854], 0x14
jne 0x40fb04
mov dword [ebp - 0xe4], 0x8999d94b
mov dword [ebp - 0x1f48], 0x81dda8db
mov dword [ebp - 0xe4], 0
jmp 0x40f9f6
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jg 0x40faff
mov dword [ebp - 0x154c], 0xffffffff
mov eax, dword [ebp - 0xe4]
cmp dword [ebp + eax*4 - 0x21f4], 0
je 0x40fa22
jmp 0x40faff
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x288c], eax
mov eax, dword [ebp - 0xc6c]
dec eax
mov dword [ebp - 0xc6c], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x154c], eax
mov eax, dword [ebp - 0x154c]
mov dword [ebp - 0xa48], eax
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0xa48], eax
jle 0x40fa6d
mov dword [ebp - 0xc74], 1
jmp 0x40fa74
and dword [ebp - 0xc74], 0
cmp dword [ebp - 0xc74], 0
je 0x40fa99
mov eax, dword [ebp - 0xe4]
cmp dword [ebp + eax*4 - 0x21f4], 0
je 0x40fa99
mov dword [ebp - 0x125c], 1
jmp 0x40faa0
and dword [ebp - 0x125c], 0
mov eax, dword [ebp - 0x1f40]
cmp dword [ebp - 0x125c], eax
jl 0x40faba
mov dword [ebp - 0xc7c], 1
jmp 0x40fac1
and dword [ebp - 0xc7c], 0
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xa48]
neg eax
sub eax, 4
jne 0x40fae7
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x40fae7
mov dword [ebp - 0x180c], 1
jmp 0x40faee
and dword [ebp - 0x180c], 0
mov eax, dword [ebp - 0x180c]
mov dword [ebp - 0x1f48], eax
jmp 0x40f9e9
jmp 0x40f9af
jmp 0x40f94a
push 1
push 0
lea eax, [ebp - 0x1f50]
push eax
push 0xcd2
call fcn.004042f8
add esp, 0x10
lea ecx, [ebp - 0x260c]
call fcn.00424d13
jmp 0x40f88c
lea ecx, [ebp - 0x261c]
call fcn.00424d13
mov dword [ebp - 0x64], 0x3ae35568
mov dword [ebp - 0x18], 0x62513244
mov dword [ebp - 0x1f78], 0xac5b6cc6
mov dword [ebp - 0x2538], 7
mov dword [ebp - 0x64], 0xfffffff2
jmp 0x40fb6e
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xb
jne 0x41015f
mov dword [ebp - 0xc84], 0x661c
mov dword [ebp - 0x1f58], 0xac1b10
cmp dword [ebp - 0xc84], 0x670a
jle 0x40fca7
and dword [ebp - 0x3f4], 0
jmp 0x40fbb2
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 0x6798
jge 0x40fc9f
and dword [ebp - 0x6e4], 0
jmp 0x40fbd8
mov eax, dword [ebp - 0x6e4]
inc eax
mov dword [ebp - 0x6e4], eax
cmp dword [ebp - 0x6e4], 0x2320
jge 0x40fc9a
and dword [ebp - 0x3fc], 0
jmp 0x40fbfe
mov eax, dword [ebp - 0x3fc]
inc eax
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0x22a4
jge 0x40fc95
and dword [ebp - 0x96c], 0
jmp 0x40fc24
mov eax, dword [ebp - 0x96c]
inc eax
mov dword [ebp - 0x96c], eax
cmp dword [ebp - 0x96c], 0x6635
jge 0x40fc90
mov eax, dword [ebp - 0x3f4]
cdq
idiv dword [ebp - 0x6e4]
mov ecx, dword [ebp - 0x3fc]
sar edx, cl
mov ecx, dword [ebp - 0x96c]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x1ac4], eax
mov dword [ebp - 0x1ac0], edx
push dword [ebp - 0x1ac0]
push dword [ebp - 0x1ac4]
lea ecx, [ebp - 0x2b78]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.00424af2
push eax
call fcn.004b5807
pop ecx
lea ecx, [ebp - 0x2b78]
call fcn.00424ae8
jmp 0x40fc17
jmp 0x40fbf1
jmp 0x40fbcb
jmp 0x40fba5
push 0
call dword [0xae0328]
push 2
lea ecx, [ebp - 0x9a0]
call fcn.00424c41
mov dword [ebp - 4], 8
cmp dword [ebp - 0xc84], 0x65df
jge 0x40fcd3
push dword [ebp - 0x1f58]
call fcn.004b5807
pop ecx
jmp 0x40fcef
or dword [ebp - 4], 0xffffffff
jmp 0x40fcf9
mov dword [ebp - 0x22b0], 0x2a3062a
mov dword [ebp - 0x22ac], 0x2a3062a
mov dword [ebp - 0x22a8], 0x2a3062a
mov dword [ebp - 0x22a4], 0x2a3062a
lea ecx, [ebp - 0xb4e]
call fcn.00424d3e
push eax
lea eax, [ebp - 0x22a0]
push eax
lea eax, [ebp - 0x22b0]
push eax
lea ecx, [ebp - 0x2b60]
call fcn.00424d41
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1880]
call fcn.00424ced
mov dword [ebp - 0x127c], 3
mov dword [ebp - 0x404], 0
jmp 0x40fd79
mov eax, dword [ebp - 0x404]
inc eax
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 2
jge 0x40fd9b
push dword [ebp - 0x404]
lea ecx, [ebp - 0x9a0]
call fcn.00424d2f
mov dword [eax], 0xea98
jmp 0x40fd6c
push 1
lea ecx, [ebp - 0x9a0]
call fcn.00424d2f
push 0
lea ecx, [ebp - 0x9a0]
call fcn.00424d2f
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x40fecc
push 1
lea ecx, [ebp - 0x9a0]
call fcn.00424d2f
mov eax, dword [eax]
add eax, 0xc207
cmp eax, dword [ebp - 0x64]
jg 0x40fde9
mov dword [ebp - 0x1264], 1
jmp 0x40fdf0
and dword [ebp - 0x1264], 0
cmp dword [ebp - 0x1264], 7
jge 0x40fe05
mov dword [ebp - 0xc8c], 1
jmp 0x40fe0c
and dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0xc8c]
sub eax, dword [ebp - 0x18]
cmp eax, 0xbc1c234a
jne 0x40fe28
mov dword [ebp - 0x1554], 1
jmp 0x40fe2f
and dword [ebp - 0x1554], 0
push 1
lea ecx, [ebp - 0x9a0]
call fcn.00424d2f
mov ecx, dword [ebp - 0x1554]
cmp ecx, dword [eax]
jge 0x40fe52
mov dword [ebp - 0xc94], 1
jmp 0x40fe59
and dword [ebp - 0xc94], 0
push 1
lea ecx, [ebp - 0x9a0]
call fcn.00424d2f
mov ecx, dword [ebp - 0xc94]
cmp ecx, dword [eax]
jle 0x40fe7c
mov dword [ebp - 0x126c], 1
jmp 0x40fe83
and dword [ebp - 0x126c], 0
cmp dword [ebp - 0x126c], 7
jbe 0x40fe98
mov dword [ebp - 0xb5c], 1
jmp 0x40fe9f
and dword [ebp - 0xb5c], 0
push 3
lea ecx, [ebp - 0x1880]
call fcn.00424d2f
mov ecx, dword [ebp - 0xb5c]
mov dword [eax], ecx
cmp dword [ebp - 0xb5c], 0xffff
jbe 0x40fecc
mov dword [ebp - 0xc9c], 1
jmp 0x40fed3
and dword [ebp - 0xc9c], 0
push 0
lea ecx, [ebp - 0x9a0]
call fcn.00424d2f
mov ecx, dword [ebp - 0xc9c]
add ecx, 6
cmp dword [eax], ecx
jge 0x40ff20
mov byte [ebp - 0x1b4], 0
movzx eax, byte [ebp - 0x1b4]
test eax, eax
je 0x40ff1b
push 0xfa6
push 0
push 0x1eb2
push 0x1a5c
push 0x1a8
call dword [0xae0134]
jmp 0x410106
mov dword [ebp - 0xa50], 1
mov dword [ebp - 0x1f68], 1
mov dword [ebp - 0x1f70], 0xfffffff8
mov dword [ebp - 0x18], 1
jmp 0x40ff4e
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x41008f
mov dword [ebp - 0x1f60], 0
push 0
lea ecx, [ebp - 0x9a0]
call fcn.00424d2f
mov eax, dword [eax]
mov dword [ebp - 0x1f60], eax
mov esi, dword [ebp - 0xa50]
push 0
lea ecx, [ebp - 0x9a0]
call fcn.00424d2f
cmp esi, dword [eax]
jl 0x40ff9a
mov dword [ebp - 0x16cc], 1
jmp 0x40ffa1
and dword [ebp - 0x16cc], 0
mov esi, dword [ebp - 0xa50]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x9a0]
call fcn.00424d2f
cmp esi, dword [eax]
jg 0x40ffc5
mov dword [ebp - 0xca4], 1
jmp 0x40ffcc
and dword [ebp - 0xca4], 0
mov esi, dword [ebp - 0x18]
imul esi, dword [ebp - 0xca4]
push 3
lea ecx, [ebp - 0x1880]
call fcn.00424d2f
add esi, dword [eax]
imul esi, dword [ebp - 0x64]
cmp esi, 0xffffffff
jle 0x40fffa
mov dword [ebp - 0x1274], 1
jmp 0x410001
and dword [ebp - 0x1274], 0
mov eax, dword [ebp - 0x64]
sub eax, 0x9eb818f
cmp eax, dword [ebp - 0x1274]
je 0x41001d
mov dword [ebp - 0xcac], 1
jmp 0x410024
and dword [ebp - 0xcac], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x9a0]
call fcn.00424d2f
mov eax, dword [eax]
cmp eax, dword [ebp - 0xcac]
je 0x410048
mov dword [ebp - 0x155c], 1
jmp 0x41004f
and dword [ebp - 0x155c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x155c], eax
jl 0x410066
mov dword [ebp - 0xcb4], 1
jmp 0x41006d
and dword [ebp - 0xcb4], 0
push 1
lea ecx, [ebp - 0x1880]
call fcn.00424d2f
mov ecx, dword [ebp - 0xcb4]
mov dword [eax], ecx
cmp dword [ebp - 0x64], 0
je 0x41008a
jmp 0x41008f
jmp 0x40ff47
push 0x7f3c
push 0x4ea2
push 0x1acc
lea eax, [ebp - 0x18]
push eax
push 0x2934
push 0x619c
push 0x7cf1
push 0
lea eax, [ebp - 0xa50]
push eax
lea eax, [ebp - 0x1880]
push eax
push 0x607d
push 0x1376
push 0x538a
push 0x7a68
lea eax, [ebp - 0x1f68]
push eax
lea eax, [ebp - 0x64]
push eax
push 0
push 1
push 0x32f3
lea eax, [ebp - 0x9a0]
push eax
lea eax, [ebp - 0x127c]
push eax
lea eax, [ebp - 0x1f70]
push eax
call fcn.0040c4a9
add esp, 0x58
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x1880]
push eax
push 0xad3
push 0
push 0x9f1
push 0x6ccd
lea eax, [ebp - 0x127c]
push eax
push 0x101f
lea eax, [ebp - 0x9a0]
push eax
push 1
push 0x2fe
call fcn.0040dca5
add esp, 0x2c
lea ecx, [ebp - 0x1880]
call fcn.00424d13
lea ecx, [ebp - 0x9a0]
call fcn.00424d13
jmp 0x40fb67
cmp dword [ebp - 0x18], 0x18879519
jne 0x410174
mov dword [ebp - 0xcc4], 1
jmp 0x41017b
and dword [ebp - 0xcc4], 0
cmp dword [ebp - 0x18], 1
jae 0x41018d
mov dword [ebp - 0xcbc], 1
jmp 0x410194
and dword [ebp - 0xcbc], 0
imul eax, dword [ebp - 0xcbc], 0x8a1c
cmp eax, dword [ebp - 0x18]
jge 0x4101af
mov dword [ebp - 0x1798], 1
jmp 0x4101b6
and dword [ebp - 0x1798], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x1798]
cmp dword [ebp - 0xcc4], eax
jne 0x4101d6
cmp dword [ebp - 0x18], 0
jne 0x4101d6
and dword [ebp - 0x1284], 0
jmp 0x4101e0
mov dword [ebp - 0x1284], 1
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x1284]
cmp dword [ebp - 0x64], eax
jge 0x410201
mov dword [ebp - 0xccc], 1
jmp 0x410208
and dword [ebp - 0xccc], 0
mov eax, dword [ebp - 0xccc]
mov dword [ebp - 0x1f78], eax
mov eax, 0x9759
test eax, eax
jne 0x410229
mov dword [ebp - 0x1564], 1
jmp 0x410230
and dword [ebp - 0x1564], 0
mov eax, dword [ebp - 0x1564]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x220], 0
jmp 0x410252
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 2
jge 0x410271
push dword [ebp - 0x220]
lea ecx, [ebp - 0xbb0]
call fcn.00424d2f
and dword [eax], 0
jmp 0x410245
mov dword [ebp - 0x278], 2
mov dword [ebp - 0x6ec], 0
jmp 0x410294
mov eax, dword [ebp - 0x6ec]
inc eax
mov dword [ebp - 0x6ec], eax
cmp dword [ebp - 0x6ec], 2
jge 0x4102b0
mov eax, dword [ebp - 0x6ec]
mov dword [ebp + eax*4 - 0x185c], 7
jmp 0x410287
mov byte [ebp - 0x1b6], 0
push 0x654f
push 0x6aff
push 0x6783
push 0x5ce8
push 0x2d4f
lea eax, [ebp - 0x1b6]
push eax
push 0x5ad3
push 0x2179
push 1
push 0x2bc
push 0
call fcn.0040386e
add esp, 0x2c
mov dword [ebp - 0x278], 0
jmp 0x41030b
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0xe
jne 0x410586
mov dword [ebp - 0x16c], 0x29bf390
mov dword [ebp - 0x40c], 0
jmp 0x41033b
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 3
jge 0x410357
mov eax, dword [ebp - 0x40c]
mov dword [ebp + eax*4 - 0x262c], 0xfffffffd
jmp 0x41032e
mov byte [ebp - 0x1b8], 0
push 0
push 0x1665
push 0x1baf
push 1
lea eax, [ebp - 0x1b8]
push eax
call fcn.00401a19
add esp, 0x14
mov dword [ebp - 0x16c], 0
jmp 0x410394
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jg 0x410581
mov dword [ebp - 0x20dc], 0xde6b9338
mov dword [ebp - 0x20e4], 0x5b0b56ce
mov dword [ebp - 0x85c], 0
jmp 0x4103ce
mov eax, dword [ebp - 0x85c]
inc eax
mov dword [ebp - 0x85c], eax
cmp dword [ebp - 0x85c], 1
jge 0x4103ea
mov eax, dword [ebp - 0x85c]
mov dword [ebp + eax*4 - 0x1f80], 0x8884515f
jmp 0x4103c1
mov eax, dword [ebp - 0x16c]
cmp dword [ebp + eax*4 - 0x185c], 0
je 0x41048b
mov dword [ebp - 0x414], 0
jmp 0x410417
mov eax, dword [ebp - 0x414]
inc eax
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 3
jge 0x410433
mov eax, dword [ebp - 0x414]
mov dword [ebp + eax*4 - 0x1ff8], 0x85a9576c
jmp 0x41040a
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1ff8], 0
jmp 0x41045e
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1ff8]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1ff8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1ff8], 2
jge 0x410486
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1ff8]
mov dword [ebp + eax*4 - 0x185c], 0xffffffff
jmp 0x410445
jmp 0x41057c
mov dword [ebp - 0x1fc8], 0
mov eax, dword [ebp - 0x16c]
cmp dword [ebp + eax*4 - 0x185c], 0
je 0x4104aa
jmp 0x410581
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1f80], 0x1ba
mov eax, 0x1ba
test eax, eax
jne 0x410529
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x262c]
mov dword [ebp - 0x2894], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x262c]
add eax, dword [ebp - 0x16c]
cmp eax, dword [ebp - 0x1fc8]
jle 0x4104fd
mov dword [ebp - 0xcd4], 1
jmp 0x410504
and dword [ebp - 0xcd4], 0
mov eax, dword [ebp - 0x278]
imul eax, dword [ebp - 0xcd4]
mov ecx, dword [ebp - 0x16c]
cmp eax, dword [ebp + ecx*4 - 0x185c]
jl 0x410529
and dword [ebp - 0x128c], 0
jmp 0x410533
mov dword [ebp - 0x128c], 1
cmp dword [ebp - 0x128c], 1
je 0x410548
mov dword [ebp - 0xcdc], 1
jmp 0x41054f
and dword [ebp - 0xcdc], 0
mov eax, dword [ebp - 0x20dc]
cmp dword [ebp - 0xcdc], eax
jge 0x410569
mov dword [ebp - 0x16d4], 1
jmp 0x410570
and dword [ebp - 0x16d4], 0
mov eax, dword [ebp - 0x16d4]
mov dword [ebp - 0x20e4], eax
jmp 0x410387
jmp 0x4102fe
push 1
lea eax, [ebp - 0x220]
push eax
push 1
push 0x23ec
push 0
push 0x7411
lea eax, [ebp - 0x2064]
push eax
call fcn.00401c97
add esp, 0x1c
lea eax, [ebp - 0x220]
push eax
push 0x40d8
push 0x2e50
push 0x6f93
push 0x22cb
lea eax, [ebp - 0x2054]
push eax
push 1
push 0x6003
push 1
push 0
push 0x368f
push 0x6420
call fcn.00406bc6
add esp, 0x30
mov dword [ebp - 0x1c], 0xa48bbca6
mov dword [ebp - 0x20f4], 0xffffffff
mov dword [ebp - 0x13c], 0
jmp 0x410615
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x41062e
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x38], 0x921ded68
jmp 0x410608
mov dword [ebp - 0x13c], 0
jmp 0x410647
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 2
jge 0x410663
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x27d8], 0
jmp 0x41063a
mov dword [ebp - 0x1c], 0
jmp 0x410673
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 7
jne 0x4106b7
mov dword [ebp - 0x6f4], 0xb0647dc4
mov dword [ebp - 0x6f4], 0
jmp 0x41069c
mov eax, dword [ebp - 0x6f4]
inc eax
mov dword [ebp - 0x6f4], eax
cmp dword [ebp - 0x6f4], 6
jge 0x4106b5
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x38], 0
jmp 0x41068f
jmp 0x41066c
mov dword [ebp - 0x1c], 0
jmp 0x4106c7
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x4109f7
mov dword [ebp - 0xce4], 0x2e55
mov dword [ebp - 0x20ec], 0xac1b80
cmp dword [ebp - 0xce4], 0x2fce
jle 0x4107bf
and dword [ebp - 0x41c], 0
jmp 0x41070b
mov eax, dword [ebp - 0x41c]
inc eax
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0x40b8
jge 0x4107bf
and dword [ebp - 0x914], 0
jmp 0x410731
mov eax, dword [ebp - 0x914]
inc eax
mov dword [ebp - 0x914], eax
cmp dword [ebp - 0x914], 0x3267
jge 0x4107ba
and dword [ebp - 0x424], 0
jmp 0x410753
mov eax, dword [ebp - 0x424]
inc eax
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0x3293
jge 0x4107b5
mov eax, dword [ebp - 0x41c]
imul eax, dword [ebp - 0x914]
mov ecx, dword [ebp - 0x424]
sar eax, cl
cdq
mov dword [ebp - 0x1ad0], eax
mov dword [ebp - 0x1acc], edx
push dword [ebp - 0x1acc]
push dword [ebp - 0x1ad0]
lea ecx, [ebp - 0x2c44]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.00424af2
push eax
call fcn.004b5807
pop ecx
lea ecx, [ebp - 0x2c44]
call fcn.00424ae8
jmp 0x410746
jmp 0x410724
jmp 0x4106fe
mov dword [ebp - 0x6fc], 0x2d7af2c9
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0xce4], 0x2d73
jge 0x4107e8
push dword [ebp - 0x20ec]
call fcn.004b5807
pop ecx
jmp 0x410804
or dword [ebp - 4], 0xffffffff
jmp 0x41080e
mov dword [ebp - 0xa58], 1
mov dword [ebp - 0xcf4], 5
mov dword [ebp - 0xcec], 0xaa9634d7
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x38]
mov dword [ebp - 0x2540], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x38]
mov dword [ebp - 0x29a4], eax
mov dword [ebp - 0x6fc], 0xf839e071
push 4
pop eax
imul eax, eax, 0
mov ecx, 0x6497
sub ecx, dword [ebp + eax - 0x38]
mov dword [ebp - 0x6fc], ecx
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x2548], eax
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0xa58], eax
mov eax, dword [ebp - 0xa58]
mov dword [ebp - 0x2870], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x38]
mov dword [ebp - 0x2550], eax
mov eax, dword [ebp - 0x1c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x38]
cmp dword [ebp + eax*4 - 0x38], ecx
je 0x4108bb
cmp dword [ebp - 0xcf4], 0
jne 0x4108bb
and dword [ebp - 0x1294], 0
jmp 0x4108c5
mov dword [ebp - 0x1294], 1
mov eax, dword [ebp - 0x1294]
mov dword [ebp - 0xcec], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x38]
cmp dword [ebp - 0xcec], eax
jle 0x4108ec
mov dword [ebp - 0x156c], 1
jmp 0x4108f3
and dword [ebp - 0x156c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
add eax, dword [ebp - 0x156c]
mov ecx, dword [ebp - 0x1c]
sub eax, dword [ebp + ecx*4 - 0x38]
mov ecx, dword [ebp - 0x1c]
cmp eax, dword [ebp + ecx*4 - 0x38]
jge 0x41092c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0
je 0x41092c
mov dword [ebp - 0xae4], 1
jmp 0x410933
and dword [ebp - 0xae4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xae4]
mov dword [ebp + eax - 0x27d8], ecx
mov eax, dword [ebp - 0xcf4]
cmp dword [ebp - 0xae4], eax
je 0x410960
mov dword [ebp - 0x129c], 1
jmp 0x410967
and dword [ebp - 0x129c], 0
mov eax, dword [ebp - 0x129c]
mov dword [ebp - 0x20f4], eax
mov eax, dword [ebp - 0xa58]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x38]
je 0x41099a
mov eax, 0x53dd
test eax, eax
je 0x41099a
mov dword [ebp - 0xcfc], 1
jmp 0x4109a1
and dword [ebp - 0xcfc], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xcfc], eax
je 0x4109b8
mov dword [ebp - 0x17e8], 1
jmp 0x4109bf
and dword [ebp - 0x17e8], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x38]
cmp eax, dword [ebp - 0x17e8]
jg 0x4109da
mov dword [ebp - 0xd04], 1
jmp 0x4109e1
and dword [ebp - 0xd04], 0
imul eax, dword [ebp - 0xd04], 0x1d4
mov ecx, dword [ebp - 0x1c]
mov dword [ebp + ecx*4 - 0x38], eax
jmp 0x4106c0
push 1
lea ecx, [ebp - 0xbb0]
call fcn.00424d2f
and dword [eax], 0
jmp 0x410a2d
push 1
lea ecx, [ebp - 0xbb0]
call fcn.00424d2f
cmp dword [eax], 0x12
jle 0x413701
push 2
lea ecx, [ebp - 0xbbc]
call fcn.00424c41
push 1
lea ecx, [ebp - 0x2018]
call fcn.00424c41
push 4
lea ecx, [ebp - 0x2008]
call fcn.00424c41
mov dword [ebp - 0x4c], 0
jmp 0x410a7a
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x410a93
push dword [ebp - 0x4c]
lea ecx, [ebp - 0xbbc]
call fcn.00424d2f
and dword [eax], 0
jmp 0x410a73
mov dword [ebp - 0x4c], 0
jmp 0x410aa3
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x410abf
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x2018]
call fcn.00424d2f
mov dword [eax], 0x5459eeda
jmp 0x410a9c
mov dword [ebp - 0x4c], 0
jmp 0x410acf
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x410aeb
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x2008]
call fcn.00424d2f
mov dword [eax], 0xc3825062
jmp 0x410ac8
push 1
lea ecx, [ebp - 0xbbc]
call fcn.00424d2f
and dword [eax], 0
jmp 0x410b21
push 1
lea ecx, [ebp - 0xbbc]
call fcn.00424d2f
mov dword [ebp - 0xd0c], eax
mov eax, dword [ebp - 0xd0c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xd0c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xbbc]
call fcn.00424d2f
cmp dword [eax], 0x12
jle 0x410e34
mov dword [ebp - 0x864], 0xffffffff
mov dword [ebp - 0x16dc], 0x25bb5a27
mov dword [ebp - 0x42c], 0
jmp 0x410b64
mov eax, dword [ebp - 0x42c]
inc eax
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 2
jge 0x410b80
mov eax, dword [ebp - 0x42c]
mov dword [ebp + eax*4 - 0x1760], 0xffffffff
jmp 0x410b57
push 1
lea ecx, [ebp - 0xbbc]
call fcn.00424d2f
push 0
lea ecx, [ebp - 0x2018]
call fcn.00424d2f
mov dword [eax], 0xf644accb
push 4
pop eax
imul eax, eax, 0
mov ecx, 0xf644accb
sub ecx, dword [ebp + eax - 0x1760]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x1760]
je 0x410bdd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1760], 0
je 0x410bdd
mov dword [ebp - 0x1574], 1
jmp 0x410be4
and dword [ebp - 0x1574], 0
cmp dword [ebp - 0x1574], 0x56e700d6
jl 0x410bfc
mov dword [ebp - 0x20fc], 1
jmp 0x410c03
and dword [ebp - 0x20fc], 0
push 1
lea ecx, [ebp - 0xbbc]
call fcn.00424d2f
cmp dword [eax], 0x76f
jge 0x410c24
mov dword [ebp - 0xd14], 1
jmp 0x410c2b
and dword [ebp - 0xd14], 0
push 3
lea ecx, [ebp - 0x2008]
call fcn.00424d2f
mov ecx, dword [ebp - 0xd14]
mov dword [eax], ecx
mov dword [ebp - 0x864], 0xf
jmp 0x410c59
mov eax, dword [ebp - 0x864]
inc eax
mov dword [ebp - 0x864], eax
cmp dword [ebp - 0x864], 0x13
jne 0x410e2f
mov dword [ebp - 0x1a30], 1
mov dword [ebp - 0x434], 0
jmp 0x410c89
mov eax, dword [ebp - 0x434]
inc eax
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 2
jge 0x410ca5
mov eax, dword [ebp - 0x434]
mov dword [ebp + eax*4 - 0x26e8], 0xffff
jmp 0x410c7c
mov byte [ebp - 0x1ba], 0
push 0
push 0x791c
push 0x702f
push 0x3b36
lea eax, [ebp - 0x1ba]
push eax
push 1
call fcn.00404bd4
add esp, 0x18
push 3
lea ecx, [ebp - 0x2008]
call fcn.00424d2f
mov eax, dword [eax]
add eax, 0xf844
mov dword [ebp - 0x12ac], eax
push 0
lea ecx, [ebp - 0x2018]
call fcn.00424d2f
mov ecx, dword [ebp - 0x12ac]
mov dword [eax], ecx
push 3
lea ecx, [ebp - 0x2008]
call fcn.00424d2f
mov ecx, dword [ebp - 0x12ac]
cmp ecx, dword [eax]
jg 0x410d20
mov dword [ebp - 0x18a4], 1
jmp 0x410d27
and dword [ebp - 0x18a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1760]
mov dword [ebp - 0x2910], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1760]
add eax, 9
xor esi, esi
inc esi
sub esi, eax
push 0
lea ecx, [ebp - 0x2018]
call fcn.00424d2f
imul esi, dword [eax]
cmp esi, 0xffff
je 0x410d73
mov dword [ebp - 0xd1c], 1
jmp 0x410d7a
and dword [ebp - 0xd1c], 0
mov eax, dword [ebp - 0xd1c]
mov dword [ebp - 0x16dc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x26e8]
cmp dword [ebp - 0x16dc], eax
jl 0x410da7
mov dword [ebp - 0xd24], 1
jmp 0x410dae
and dword [ebp - 0xd24], 0
push 0
lea ecx, [ebp - 0xbbc]
call fcn.00424d2f
mov ecx, dword [ebp - 0xd24]
cmp ecx, dword [eax]
jne 0x410dd1
mov dword [ebp - 0x12b4], 1
jmp 0x410dd8
and dword [ebp - 0x12b4], 0
cmp dword [ebp - 0x12b4], 1
je 0x410ded
mov dword [ebp - 0xd2c], 1
jmp 0x410df4
and dword [ebp - 0xd2c], 0
push 1
lea ecx, [ebp - 0xbbc]
call fcn.00424d2f
mov ecx, dword [ebp - 0xd2c]
cmp ecx, dword [eax]
je 0x410e17
mov dword [ebp - 0x157c], 1
jmp 0x410e1e
and dword [ebp - 0x157c], 0
mov eax, dword [ebp - 0x157c]
mov dword [ebp - 0x1a30], eax
jmp 0x410c4c
jmp 0x410afd
lea ecx, [ebp - 0x2008]
call fcn.00424d13
lea ecx, [ebp - 0x2018]
call fcn.00424d13
lea ecx, [ebp - 0xbbc]
call fcn.00424d13
push 1
lea ecx, [ebp - 0x263c]
call fcn.00424c41
mov dword [ebp - 0xd34], 0x3c3d
mov dword [ebp - 0x1e58], 0xac1bfc
cmp dword [ebp - 0xd34], 0x3c90
jle 0x410f1e
and dword [ebp - 0x704], 0
jmp 0x410e9c
mov eax, dword [ebp - 0x704]
inc eax
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x704], 0x7fd
jge 0x410f1e
and dword [ebp - 0x43c], 0
jmp 0x410ebe
mov eax, dword [ebp - 0x43c]
inc eax
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 0x4b4c
jge 0x410f19
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x43c]
sar eax, cl
cdq
mov dword [ebp - 0x1adc], eax
mov dword [ebp - 0x1ad8], edx
push dword [ebp - 0x1ad8]
push dword [ebp - 0x1adc]
lea ecx, [ebp - 0x2dac]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.00424af2
push eax
call fcn.004b5807
pop ecx
lea ecx, [ebp - 0x2dac]
call fcn.00424ae8
jmp 0x410eb1
jmp 0x410e8f
mov dword [ebp - 0x994], 0xfffffffe
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xd34], 0x3be6
jge 0x410f47
push dword [ebp - 0x1e58]
call fcn.004b5807
pop ecx
jmp 0x410f63
or dword [ebp - 4], 0xffffffff
jmp 0x410f6d
lea eax, [ebp - 0x2558]
push eax
push 0x61a5
push 0
push 0x5a2d
lea eax, [ebp - 0x263c]
push eax
push 1
call fcn.00402045
add esp, 0x18
mov byte [ebp - 0x1be], 0
push 0x125d
push 0
push 0x5189
lea eax, [ebp - 0x1be]
push eax
push 0
push 0x4548
push 1
call fcn.004049e2
add esp, 0x1c
mov dword [ebp - 0x994], 0
jmp 0x410fd5
mov eax, dword [ebp - 0x994]
inc eax
mov dword [ebp - 0x994], eax
cmp dword [ebp - 0x994], 0
jg 0x410ffc
mov byte [ebp - 0x1c0], 0
lea eax, [ebp - 0x1c0]
push eax
push 0
push 0
push 1
call fcn.00401fa1
add esp, 0x10
jmp 0x410fc8
lea ecx, [ebp - 0x263c]
call fcn.00424d13
mov dword [ebp - 0x48c], 0xffffffff
push 3
lea ecx, [ebp - 0x2028]
call fcn.00424c41
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x2460], 1
mov dword [ebp - 0x245c], 1
mov dword [ebp - 0x2458], 1
mov dword [ebp - 0x2454], 1
mov dword [ebp - 0x1d68], 0x11378331
mov dword [ebp - 0x2878], 2
push 0x4dc3
push 1
lea eax, [ebp - 0x2028]
push eax
push 0x4700
push 0
lea eax, [ebp - 0x2560]
push eax
push 1
call fcn.004049e2
add esp, 0x1c
mov dword [ebp - 0x164], 2
jmp 0x4110a3
cmp dword [ebp - 0x164], 0
jl 0x41138d
mov dword [ebp - 0x330], 0xffff
mov dword [ebp - 0xd5c], 0x42b6
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
mov dword [ebp - 0xd64], 0x7a49
mov dword [ebp - 0x18b4], 0xac1c48
cmp dword [ebp - 0xd64], 0x7ce8
jle 0x411177
push 0x1e95
call dword [0xae0480]
and dword [ebp - 0x444], 0
jmp 0x411116
mov eax, dword [ebp - 0x444]
inc eax
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0x59c1
jge 0x411177
and dword [ebp - 0x70c], 0
jmp 0x411138
mov eax, dword [ebp - 0x70c]
inc eax
mov dword [ebp - 0x70c], eax
cmp dword [ebp - 0x70c], 0x3c46
jge 0x411175
mov eax, dword [ebp - 0x444]
add eax, dword [ebp - 0x70c]
cdq
mov dword [ebp - 0x1ae8], eax
mov dword [ebp - 0x1ae4], edx
push dword [ebp - 0x1ae4]
push dword [ebp - 0x1ae8]
mov ecx, 0xadd958
call fcn.00424afd
jmp 0x41112b
jmp 0x411109
cmp dword [ebp - 0x164], 0
jne 0x41118c
mov dword [ebp - 0x12bc], 1
jmp 0x411193
and dword [ebp - 0x12bc], 0
mov eax, dword [ebp - 0x330]
cmp dword [ebp - 0x164], eax
jg 0x4111ad
mov dword [ebp - 0xd3c], 1
jmp 0x4111b4
and dword [ebp - 0xd3c], 0
mov eax, dword [ebp - 0x12bc]
cmp eax, dword [ebp - 0xd3c]
jle 0x4111ce
mov dword [ebp - 0x17a0], 1
jmp 0x4111d5
and dword [ebp - 0x17a0], 0
mov eax, dword [ebp - 0x164]
cmp eax, dword [ebp - 0x17a0]
jne 0x4111ef
mov dword [ebp - 0xd44], 1
jmp 0x4111f6
and dword [ebp - 0xd44], 0
cmp dword [ebp - 0xd44], 9
je 0x41120b
mov dword [ebp - 0x12c4], 1
jmp 0x411212
and dword [ebp - 0x12c4], 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.00424d2f
mov dword [eax], 1
xor eax, eax
inc eax
sub eax, dword [ebp - 0x12c4]
jne 0x41124b
push 0
lea ecx, [ebp - 0x2028]
call fcn.00424d2f
cmp dword [eax], 0
jne 0x41124b
and dword [ebp - 0xd4c], 0
jmp 0x411255
mov dword [ebp - 0xd4c], 1
mov eax, dword [ebp - 0xd4c]
sub eax, dword [ebp - 0x330]
add eax, 0x2c1fe715
jne 0x411283
push 0
lea ecx, [ebp - 0x2028]
call fcn.00424d2f
cmp dword [eax], 0
jne 0x411283
and dword [ebp - 0x1584], 0
jmp 0x41128d
mov dword [ebp - 0x1584], 1
mov eax, dword [ebp - 0xd5c]
cmp dword [ebp - 0x1584], eax
jne 0x4112a7
mov dword [ebp - 0xd54], 1
jmp 0x4112ae
and dword [ebp - 0xd54], 0
cmp dword [ebp - 0xd54], 0xffff
je 0x4112c6
mov dword [ebp - 0x12cc], 1
jmp 0x4112cd
and dword [ebp - 0x12cc], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x12cc], eax
jl 0x4112e7
mov dword [ebp - 0x18ac], 1
jmp 0x4112ee
and dword [ebp - 0x18ac], 0
mov eax, dword [ebp - 0xd5c]
mov dword [ebp - 0x296c], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2460], 0xdfc1
cmp dword [ebp - 0x330], 0xdfc1
jg 0x41132c
mov eax, 0x6d1d
test eax, eax
je 0x41132c
mov dword [ebp - 0x16e4], 1
jmp 0x411333
and dword [ebp - 0x16e4], 0
mov eax, dword [ebp - 0x16e4]
mov dword [ebp - 0x1d68], eax
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0xd64], 0x79c3
jge 0x411362
mov edx, dword [ebp - 0x18b4]
mov ecx, 0xadd958
call fcn.004268b3
jmp 0x41137e
or dword [ebp - 4], 0xffffffff
jmp 0x411388
jmp 0x411096
lea ecx, [ebp - 0x2028]
call fcn.00424d13
mov dword [ebp - 0xe64], 0x25bb5a27
mov dword [ebp - 0x44c], 0
jmp 0x4113bb
mov eax, dword [ebp - 0x44c]
inc eax
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 2
jge 0x4113d7
mov eax, dword [ebp - 0x44c]
mov dword [ebp + eax*4 - 0x176c], 0xffffffff
jmp 0x4113ae
mov dword [ebp - 0x45c], 0xffffffff
mov dword [ebp - 0xd6c], 1
mov dword [ebp - 0x12d4], 0x191f
mov dword [ebp - 0x1e60], 0xac1cd0
cmp dword [ebp - 0x12d4], 0x1b55
jle 0x4114a5
and dword [ebp - 0x86c], 0
jmp 0x411425
mov eax, dword [ebp - 0x86c]
inc eax
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x86c], 0x3012
jge 0x4114a5
and dword [ebp - 0x454], 0
jmp 0x411447
mov eax, dword [ebp - 0x454]
inc eax
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0x2057
jge 0x4114a0
mov eax, dword [ebp - 0x86c]
sub eax, dword [ebp - 0x454]
cdq
mov dword [ebp - 0x1af4], eax
mov dword [ebp - 0x1af0], edx
push dword [ebp - 0x1af0]
push dword [ebp - 0x1af4]
lea ecx, [ebp - 0x2c74]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.00424af2
push eax
call fcn.004b5807
pop ecx
lea ecx, [ebp - 0x2c74]
call fcn.00424ae8
jmp 0x41143a
jmp 0x411418
mov dword [ebp - 0x18bc], 0xffffffff
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x12d4], 0x1619
jge 0x4114ce
push dword [ebp - 0x1e60]
call fcn.004b5807
pop ecx
jmp 0x4114ea
or dword [ebp - 4], 0xffffffff
jmp 0x4114f4
mov dword [ebp - 0x2568], 1
mov dword [ebp - 0x2880], 0
mov dword [ebp - 0x2570], 1
mov dword [ebp - 0x2918], 0x7216709e
mov dword [ebp - 0x2578], 0
push 4
lea ecx, [ebp - 0x265c]
call fcn.00424c41
mov dword [ebp - 0x1e68], 0xfffc
mov dword [ebp - 0x714], 0
jmp 0x411556
mov eax, dword [ebp - 0x714]
inc eax
mov dword [ebp - 0x714], eax
cmp dword [ebp - 0x714], 4
jge 0x411578
push dword [ebp - 0x714]
lea ecx, [ebp - 0x265c]
call fcn.00424d2f
mov dword [eax], 0x8a36a77d
jmp 0x411549
mov dword [ebp - 0x45c], 0
jmp 0x411591
mov eax, dword [ebp - 0x45c]
inc eax
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x45c], 2
jle 0x4119ce
mov dword [ebp - 0x2e0], 0xfffffffb
mov dword [ebp - 0xb44], 0
mov dword [ebp - 0x2888], 0xffffffff
push 3
lea ecx, [ebp - 0x264c]
call fcn.00424c41
mov dword [ebp - 0x2580], 3
mov dword [ebp - 0x2994], 0xd982fc9a
lea eax, [ebp - 0x264c]
push eax
push 0x3524
lea eax, [ebp - 0x280]
push eax
push 0x549b
push 0x2e57
push 0
push 1
push 0x2ab1
push 0x2f08
push 0x7c0f
push 0x64f
push 0x5e49
push 0x352b
call fcn.00403947
add esp, 0x34
mov dword [ebp - 0x280], 0
jmp 0x41163d
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 1
jge 0x411659
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0x2588], 0x964e
jmp 0x411630
mov dword [ebp - 0x2e0], 0
jmp 0x411672
cmp dword [ebp - 0x2e0], 0xfffffff0
jl 0x4119a6
mov dword [ebp - 0x464], 0xfffffffb
mov dword [ebp - 0x91c], 0
jmp 0x4116a2
cmp dword [ebp - 0x91c], 2
jge 0x4116be
push 1
push 0
lea eax, [ebp - 0x1e68]
push eax
push 0x5487
call fcn.004064c4
add esp, 0x10
lea ecx, [ebp - 0x264c]
call fcn.00424d13
jmp 0x411584
lea ecx, [ebp - 0x265c]
call fcn.00424d13
push 1
lea ecx, [ebp - 0xbb0]
call fcn.00424d2f
push 0
lea ecx, [ebp - 0x2064]
call fcn.00424d2f
mov dword [eax], 0xf644accb
push 4
pop eax
imul eax, eax, 0
mov ecx, 0xf644accb
sub ecx, dword [ebp + eax - 0x176c]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x176c]
je 0x411a36
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x176c], 0
je 0x411a36
mov dword [ebp - 0x12e4], 1
jmp 0x411a3d
and dword [ebp - 0x12e4], 0
cmp dword [ebp - 0x12e4], 0x56e700d6
jl 0x411a55
mov dword [ebp - 0x18cc], 1
jmp 0x411a5c
and dword [ebp - 0x18cc], 0
push 1
lea ecx, [ebp - 0xbb0]
call fcn.00424d2f
cmp dword [eax], 0x76f
jge 0x411a7d
mov dword [ebp - 0xd8c], 1
jmp 0x411a84
and dword [ebp - 0xd8c], 0
push 3
lea ecx, [ebp - 0x2054]
call fcn.00424d2f
mov ecx, dword [ebp - 0xd8c]
mov dword [eax], ecx
mov dword [ebp - 0x1854], 0xf7e2799a
mov dword [ebp - 0x1850], 0xf7e2799a
mov dword [ebp - 0x184c], 0xf7e2799a
mov dword [ebp - 0x1848], 0xf7e2799a
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1854], 0xfffffff4
jmp 0x411aec
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1854], 0xffffffe9
je 0x412021
mov dword [ebp - 0x11c], 0x5b7cefa9
mov dword [ebp - 0x11c], 0xfffffff3
jmp 0x411b22
mov dword [ebp - 0x48c], 0xf
jmp 0x41203a
lea ecx, [ebp - 0x2054]
call fcn.00424d13
lea ecx, [ebp - 0x2064]
call fcn.00424d13
lea ecx, [ebp - 0xbb0]
call fcn.00424d13
lea eax, [ebp - 0x1550]
push eax
call dword [0xae034c]
push eax
call dword [0xae0374]
mov dword [ebp - 0x1590], eax
mov dword [ebp - 0x135c], 0x784f
mov dword [ebp - 0x1ea0], 0xac1fd8
cmp dword [ebp - 0x135c], 0x7b7c
jle 0x4137d3
and dword [ebp - 0x75c], 0
jmp 0x413772
mov eax, dword [ebp - 0x75c]
inc eax
mov dword [ebp - 0x75c], eax
cmp dword [ebp - 0x75c], 0x1120
jge 0x4137d3
and dword [ebp - 0x4ec], 0
jmp 0x413794
mov eax, dword [ebp - 0x4ec]
inc eax
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 0x5838
jge 0x4137d1
mov eax, dword [ebp - 0x75c]
and eax, dword [ebp - 0x4ec]
cdq
mov dword [ebp - 0x1b54], eax
mov dword [ebp - 0x1b50], edx
push dword [ebp - 0x1b50]
push dword [ebp - 0x1b54]
mov ecx, 0xadd958
call fcn.00424afd
jmp 0x413787
jmp 0x413765
mov dword [ebp - 0xe7c], 0
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x135c], 0x76d1
jge 0x413800
mov edx, dword [ebp - 0x1ea0]
mov ecx, 0xadd958
call fcn.004268b3
jmp 0x41381c
or dword [ebp - 4], 0xffffffff
jmp 0x413826
mov dword [ebp - 0x894], 0
jmp 0x41383f
mov eax, dword [ebp - 0x894]
inc eax
mov dword [ebp - 0x894], eax
cmp dword [ebp - 0x894], 2
jge 0x41385b
mov eax, dword [ebp - 0x894]
mov dword [ebp + eax*4 - 0x1874], 0x3342eb9
jmp 0x413832
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1874], 0
jmp 0x413889
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1874]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1874], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1874], 0xffffffec
je 0x4138d5
mov dword [ebp - 0x4f4], 0xed23b618
mov dword [ebp - 0x4f4], 0xc
jmp 0x4138bc
mov eax, dword [ebp - 0x4f4]
inc eax
mov dword [ebp - 0x4f4], eax
cmp dword [ebp - 0x4f4], 0x14
jge 0x4138d3
mov eax, dword [ebp - 0xe7c]
mov dword [ebp - 0xe7c], eax
jmp 0x4138af
jmp 0x41386e
cmp dword [ebp - 0x1590], 0
je 0x4231d5
cmp dword [ebp - 0x1550], 1
jle 0x4231d5
mov dword [ebp - 0x28b0], 0xfffffffb
mov dword [ebp - 0x25d0], 0x7df2f4a8
mov dword [ebp - 0x293c], 0
mov dword [ebp - 0x25d8], 0xffffffff
mov dword [ebp - 0x193c], 0x1f1e
mov dword [ebp - 0x28b8], 1
mov dword [ebp - 0x764], 0
jmp 0x413944
mov eax, dword [ebp - 0x764]
inc eax
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0x764], 3
jge 0x413960
mov eax, dword [ebp - 0x764]
mov dword [ebp + eax*4 - 0x2d7c], 0xea6801fc
jmp 0x413937
push 0
push 0
lea eax, [ebp - 0x193c]
push eax
call fcn.00409049
add esp, 0xc
mov dword [ebp - 0x1f4], 0xed15de05
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x136c], 2
push 3
lea ecx, [ebp - 0x267c]
call fcn.00424c41
mov dword [ebp - 0x25e0], 0xffffffff
mov dword [ebp - 0x1828], 0x1753
mov dword [ebp - 0x1dd4], 0xac2068
cmp dword [ebp - 0x1828], 0x1ab4
jle 0x413aa8
and dword [ebp - 0x4fc], 0
jmp 0x4139e2
mov eax, dword [ebp - 0x4fc]
inc eax
mov dword [ebp - 0x4fc], eax
cmp dword [ebp - 0x4fc], 0x4dfb
jge 0x413aa8
and dword [ebp - 0x97c], 0
jmp 0x413a08
mov eax, dword [ebp - 0x97c]
inc eax
mov dword [ebp - 0x97c], eax
cmp dword [ebp - 0x97c], 0x35a5
jge 0x413aa3
and dword [ebp - 0x504], 0
jmp 0x413a2e
mov eax, dword [ebp - 0x504]
inc eax
mov dword [ebp - 0x504], eax
cmp dword [ebp - 0x504], 0x4cca
jge 0x413a9e
and dword [ebp - 0x76c], 0
jmp 0x413a50
mov eax, dword [ebp - 0x76c]
inc eax
mov dword [ebp - 0x76c], eax
cmp dword [ebp - 0x76c], 0x2a5e
jge 0x413a9c
mov eax, dword [ebp - 0x4fc]
cdq
idiv dword [ebp - 0x97c]
mov eax, dword [ebp - 0x504]
and eax, dword [ebp - 0x76c]
or eax, edx
cdq
mov dword [ebp - 0x1b60], eax
mov dword [ebp - 0x1b5c], edx
push dword [ebp - 0x1b5c]
push dword [ebp - 0x1b60]
mov ecx, 0xadd958
call fcn.00424afd
jmp 0x413a43
jmp 0x413a21
jmp 0x4139fb
jmp 0x4139d5
mov dword [ebp - 0x134], 0
jmp 0x413ac1
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 3
jge 0x413ae0
push dword [ebp - 0x134]
lea ecx, [ebp - 0x267c]
call fcn.00424d2f
and dword [eax], 0
jmp 0x413ab4
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x1828], 0x15b2
jge 0x413b03
mov edx, dword [ebp - 0x1dd4]
mov ecx, 0xadd958
call fcn.004268b3
jmp 0x413b1f
or dword [ebp - 4], 0xffffffff
jmp 0x413b29
mov dword [ebp - 0x134], 0
jmp 0x413b42
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 2
jge 0x413b5e
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x26fc], 0xe24307a3
jmp 0x413b35
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x297c], eax
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x1f4], eax
jl 0x413b84
mov dword [ebp - 0xe84], 1
jmp 0x413b8b
and dword [ebp - 0xe84], 0
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0xe84], eax
jl 0x413ba5
mov dword [ebp - 0xe8c], 1
jmp 0x413bac
and dword [ebp - 0xe8c], 0
cmp dword [ebp - 0x328], 0x8146
jl 0x413bc4
mov dword [ebp - 0x1364], 1
jmp 0x413bcb
and dword [ebp - 0x1364], 0
mov eax, dword [ebp - 0x1364]
mov dword [ebp - 0x136c], eax
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0xe8c], eax
jl 0x413bf1
mov dword [ebp - 0x15d4], 1
jmp 0x413bf8
and dword [ebp - 0x15d4], 0
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x15d4], eax
jg 0x413c12
mov dword [ebp - 0xe94], 1
jmp 0x413c19
and dword [ebp - 0xe94], 0
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0xe94], eax
jge 0x413cac
mov dword [ebp - 0x2480], 0xffffffff
mov dword [ebp - 0x247c], 0xffffffff
mov dword [ebp - 0x2478], 0xffffffff
mov dword [ebp - 0x2474], 0xffffffff
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x136c]
mov dword [ebp + eax - 0x2480], ecx
mov byte [ebp - 0x1d6], 0
movzx eax, byte [ebp - 0x1d6]
test eax, eax
je 0x413ca7
push 0x4eef
push 0x2665
push 0x283f
push 0x50d4
push 0
push 0
push 0x2590
push 0x796c
push 0x6e84
call fcn.0040ae00
add esp, 0x24
jmp 0x413d4c
mov dword [ebp - 0x2a0], 9
mov dword [ebp - 0x328], 0
jmp 0x413ccf
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 2
jg 0x413d27
push 0x16d8
push 0
lea eax, [ebp - 0x2a0]
push eax
push 1
call fcn.0040c937
add esp, 0x10
mov dword [ebp - 0x2a0], 0
jmp 0x413d09
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 2
jg 0x413d25
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x26fc], 0xf126c7f0
jmp 0x413cfc
jmp 0x413cc2
mov byte [ebp - 0x20e], 0
movzx eax, byte [ebp - 0x20e]
test eax, eax
je 0x413d4c
push 0x63bc
push 0
push 1
push 1
call fcn.00401fa1
add esp, 0x10
lea ecx, [ebp - 0x267c]
call fcn.00424d13
push 1
lea ecx, [ebp - 0x9ec]
call fcn.00424c41
mov dword [ebp - 0x89c], 1
mov dword [ebp - 0x50c], 0
jmp 0x413d87
cmp dword [ebp - 0x50c], 3
jge 0x413da3
mov eax, dword [ebp - 0x50c]
mov dword [ebp + eax*4 - 0x2ee4], 0
jmp 0x413d7a
mov dword [ebp - 0x89c], 0
jmp 0x413dbc
push 1
lea ecx, [ebp - 0x9e0]
call fcn.00424c41
mov dword [ebp - 0x1688], 0xfffffffc
mov dword [ebp - 0x8f0], 0
jmp 0x423205
mov eax, dword [ebp - 0x8f0]
inc eax
mov dword [ebp - 0x8f0], eax
cmp dword [ebp - 0x8f0], 1
jge 0x423227
push dword [ebp - 0x8f0]
lea ecx, [ebp - 0x9e0]
call fcn.00424d2f
mov dword [eax], 0x53b26bdd
jmp 0x4231f8
push 0
lea ecx, [ebp - 0x9e0]
call fcn.00424d2f
and dword [eax], 0
jmp 0x42325d
push 0
lea ecx, [ebp - 0x9e0]
call fcn.00424d2f
mov dword [ebp - 0x1648], eax
mov eax, dword [ebp - 0x1648]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1648]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x9e0]
call fcn.00424d2f
cmp dword [eax], 6
jle 0x423673
mov dword [ebp - 0x94], 0x23ed15de
mov dword [ebp - 0x19c0], 0xffffffff
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x19a8], eax
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x19a8], 0
je 0x4233f7
push 0
lea ecx, [ebp - 0x9e0]
call fcn.00424d2f
cmp dword [eax], 0
jne 0x4232c8
or eax, 0xffffffff
je 0x423364
push 0
lea ecx, [ebp - 0x9e0]
call fcn.00424d2f
mov esi, dword [ebp - 0x94]
push 0
lea ecx, [ebp - 0x9e0]
call fcn.00424d2f
imul esi, dword [eax]
cmp esi, dword [ebp - 0x94]
jge 0x4232ff
mov dword [ebp - 0x1650], 1
jmp 0x423306
and dword [ebp - 0x1650], 0
cmp dword [ebp - 0x1650], 0xffff
je 0x42331e
mov dword [ebp - 0x1658], 1
jmp 0x423325
and dword [ebp - 0x1658], 0
push 0
lea ecx, [ebp - 0x9e0]
call fcn.00424d2f
mov ecx, dword [ebp - 0x1658]
cmp ecx, dword [eax]
jne 0x423348
mov dword [ebp - 0x1660], 1
jmp 0x42334f
and dword [ebp - 0x1660], 0
cmp dword [ebp - 0x1660], 0
jbe 0x423364
mov dword [ebp - 0x1668], 1
jmp 0x42336b
and dword [ebp - 0x1668], 0
push 0
lea ecx, [ebp - 0x9e0]
call fcn.00424d2f
mov ecx, dword [ebp - 0x1668]
cmp ecx, dword [eax]
jle 0x4233f7
mov dword [ebp - 0x1670], 0xa85f
mov dword [ebp - 0x8f8], 0
jmp 0x4233a5
mov eax, dword [ebp - 0x8f8]
inc eax
mov dword [ebp - 0x8f8], eax
cmp dword [ebp - 0x8f8], 2
jge 0x4233c1
mov eax, dword [ebp - 0x8f8]
mov dword [ebp + eax*4 - 0x2774], 9
jmp 0x423398
mov eax, dword [ebp - 0x1670]
cmp dword [ebp - 0x1670], eax
jg 0x4233db
mov dword [ebp - 0x1678], 1
jmp 0x4233e2
and dword [ebp - 0x1678], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1678]
mov dword [ebp + eax - 0x2774], ecx
jmp 0x423416
mov dword [ebp - 0x19b0], 0x5f43
push 0
lea ecx, [ebp - 0x9e0]
call fcn.00424d2f
mov eax, dword [eax]
mov dword [ebp - 0x19b0], eax
cmp dword [ebp - 0x94], 0
je 0x423646
mov dword [ebp - 0x1680], 0x739d
mov dword [ebp - 0x19b8], 0xac3510
cmp dword [ebp - 0x1680], 0x7631
jle 0x423523
and dword [ebp - 0x918], 0
jmp 0x42345d
mov eax, dword [ebp - 0x918]
inc eax
mov dword [ebp - 0x918], eax
cmp dword [ebp - 0x918], 0x5e04
jge 0x423523
and dword [ebp - 0x910], 0
jmp 0x423483
mov eax, dword [ebp - 0x910]
inc eax
mov dword [ebp - 0x910], eax
cmp dword [ebp - 0x910], 0x3f49
jge 0x42351e
and dword [ebp - 0x900], 0
jmp 0x4234a9
mov eax, dword [ebp - 0x900]
inc eax
mov dword [ebp - 0x900], eax
cmp dword [ebp - 0x900], 0x1a2c
jge 0x423519
and dword [ebp - 0x908], 0
jmp 0x4234cb
mov eax, dword [ebp - 0x908]
inc eax
mov dword [ebp - 0x908], eax
cmp dword [ebp - 0x908], 0x7c9d
jge 0x423517
mov eax, dword [ebp - 0x900]
cdq
idiv dword [ebp - 0x908]
and edx, dword [ebp - 0x910]
or edx, dword [ebp - 0x918]
mov eax, edx
cdq
mov dword [ebp - 0x1e18], eax
mov dword [ebp - 0x1e14], edx
push dword [ebp - 0x1e14]
push dword [ebp - 0x1e18]
mov ecx, 0xadd958
call fcn.00424afd
jmp 0x4234be
jmp 0x42349c
jmp 0x423476
jmp 0x423450
mov dword [ebp - 0x2800], 4
mov dword [ebp - 4], 0x96
cmp dword [ebp - 0x1680], 0x6fdf
jge 0x423550
mov edx, dword [ebp - 0x19b8]
mov ecx, 0xadd958
call fcn.004268b3
jmp 0x42356c
or dword [ebp - 4], 0xffffffff
jmp 0x423576
mov dword [ebp - 0x94], 0
jmp 0x42358f
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 6
je 0x423644
mov dword [ebp - 0x920], 0
jmp 0x4235b5
mov eax, dword [ebp - 0x920]
inc eax
mov dword [ebp - 0x920], eax
cmp dword [ebp - 0x920], 4
jge 0x4235d1
mov eax, dword [ebp - 0x920]
mov dword [ebp + eax*4 - 0x2ab8], 0x32b7b88c
jmp 0x4235a8
push 4
pop eax
imul eax, eax, 3
mov esi, dword [ebp + eax - 0x2ab8]
push 0
lea ecx, [ebp - 0x9e0]
call fcn.00424d2f
cmp esi, dword [eax]
jl 0x42360d
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1688], eax
cmp dword [ebp - 0x1688], 0
jne 0x42360d
and dword [ebp - 0x1690], 0
jmp 0x423617
mov dword [ebp - 0x1690], 1
cmp dword [ebp - 0x1690], 1
jbe 0x42362c
mov dword [ebp - 0x1698], 1
jmp 0x423633
and dword [ebp - 0x1698], 0
mov eax, dword [ebp - 0x1698]
mov dword [ebp - 0x19c0], eax
jmp 0x423582
jmp 0x42366e
mov byte [ebp - 0x213], 0
movzx eax, byte [ebp - 0x213]
test eax, eax
je 0x42366e
push 1
push 0x321d
push 1
push 0x1f74
call fcn.0040db08
add esp, 0x10
jmp 0x423239
lea ecx, [ebp - 0x9e0]
call fcn.00424d13
mov dword [ebp - 0x16a0], 0
mov dword [ebp - 0x928], 0
jmp 0x4236a1
mov eax, dword [ebp - 0x928]
inc eax
mov dword [ebp - 0x928], eax
cmp dword [ebp - 0x928], 2
jge 0x4236bd
mov eax, dword [ebp - 0x928]
mov dword [ebp + eax*4 - 0x186c], 0x3342eb9
jmp 0x423694
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x186c], 0
jmp 0x4236eb
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x186c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x186c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x186c], 0xffffffec
je 0x423737
mov dword [ebp - 0x930], 0xed23b618
mov dword [ebp - 0x930], 0xc
jmp 0x42371e
mov eax, dword [ebp - 0x930]
inc eax
mov dword [ebp - 0x930], eax
cmp dword [ebp - 0x930], 0x14
jge 0x423735
mov eax, dword [ebp - 0x16a0]
mov dword [ebp - 0x16a0], eax
jmp 0x423711
jmp 0x4236d0
mov dword [ebp - 0x24c0], 0xfffffffe
mov dword [ebp - 0x2964], 0xfe7d8a87
mov dword [ebp - 0x24c8], 0x9d05ba77
mov dword [ebp - 0x280c], 0xb9da4d07
mov dword [ebp - 0x24d0], 0xe704f3d
mov dword [ebp - 0x19c8], 5
mov dword [ebp - 0x938], 0
jmp 0x42378c
mov eax, dword [ebp - 0x938]
inc eax
mov dword [ebp - 0x938], eax
cmp dword [ebp - 0x938], 4
jge 0x4237a8
mov eax, dword [ebp - 0x938]
mov dword [ebp + eax*4 - 0x2f2c], 0
jmp 0x42377f
push 0x6cb3
push 0x335e
push 0x4a6e
lea eax, [ebp - 0x19c8]
push eax
push 0x9d2
push 0x4c95
push 0x5fab
push 1
push 0x69c3
push 0x1c36
push 0x6310
push 0x1dee
push 0x659f
push 1
push 0x5343
push 0x1477
call fcn.0040dbc4
add esp, 0x40
mov dword [ebp - 0x16a8], 0x5370
mov dword [ebp - 0x19d0], 0xac358c
cmp dword [ebp - 0x16a8], 0x5406
jle 0x4238fb
and dword [ebp - 0x940], 0
jmp 0x423836
mov eax, dword [ebp - 0x940]
inc eax
mov dword [ebp - 0x940], eax
cmp dword [ebp - 0x940], 0x5415
jge 0x4238fb
and dword [ebp - 0x948], 0
jmp 0x42385c
mov eax, dword [ebp - 0x948]
inc eax
mov dword [ebp - 0x948], eax
cmp dword [ebp - 0x948], 0x7586
jge 0x4238f6
and dword [ebp - 0x950], 0
jmp 0x423882
mov eax, dword [ebp - 0x950]
inc eax
mov dword [ebp - 0x950], eax
cmp dword [ebp - 0x950], 0x46db
jge 0x4238f1
and dword [ebp - 0x958], 0
jmp 0x4238a4
mov eax, dword [ebp - 0x958]
inc eax
mov dword [ebp - 0x958], eax
cmp dword [ebp - 0x958], 0x7e53
jge 0x4238ef
mov eax, dword [ebp - 0x940]
add eax, dword [ebp - 0x948]
mov ecx, dword [ebp - 0x950]
shl eax, cl
and eax, dword [ebp - 0x958]
cdq
mov dword [ebp - 0x1e24], eax
mov dword [ebp - 0x1e20], edx
push dword [ebp - 0x1e20]
push dword [ebp - 0x1e24]
mov ecx, 0xadd958
call fcn.00424afd
jmp 0x423897
jmp 0x423875
jmp 0x42384f
jmp 0x423829
mov dword [ebp - 4], 0x98
cmp dword [ebp - 0x16a8], 0x5032
jge 0x42391e
mov edx, dword [ebp - 0x19d0]
mov ecx, 0xadd958
call fcn.004268b3
jmp 0x42393a
or dword [ebp - 4], 0xffffffff
jmp 0x423944
movzx eax, byte [ebp - 0x39]
test eax, eax
jne 0x423956
jmp 0x4240a3
mov dword [ebp - 0x2048], 0x177e8edf
mov dword [ebp - 0x2044], 0x177e8edf
mov dword [ebp - 0x2040], 0x177e8edf
mov dword [ebp - 0x203c], 0x177e8edf
mov dword [ebp - 0x16b0], 1
mov dword [ebp - 0x16e8], 0x495231fb
mov dword [ebp - 0x16d0], 0x2e819d33
mov dword [ebp - 0x19d8], 0xffffffff
mov dword [ebp - 0x16e0], 0xffffffff
mov dword [ebp - 0x19e8], 0x985ba561
mov dword [ebp - 0x960], 0
jmp 0x4239d3
mov eax, dword [ebp - 0x960]
inc eax
mov dword [ebp - 0x960], eax
cmp dword [ebp - 0x960], 1
jge 0x4239ef
mov eax, dword [ebp - 0x960]
mov dword [ebp + eax*4 - 0x19e0], 2
jmp 0x4239c6
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2048], 0
je 0x423a46
mov byte [ebp - 0x1d1], 0
push 0x200e
push 0x71e7
push 0x77a
push 1
lea eax, [ebp - 0x1d1]
push eax
push 0x40df
push 0x36fd
push 0x2bef
push 0x1c2a
push 1
push 0x46f6
call fcn.0040dca5
add esp, 0x2c
jmp 0x423bd6
mov dword [ebp - 0xad4], 0xc37fc054
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2048]
mov dword [ebp - 0x2908], eax
mov dword [ebp - 0x16b0], 0x7c6
mov eax, dword [ebp - 0x16e8]
cmp dword [ebp - 0x16b0], eax
jge 0x423a87
mov dword [ebp - 0x16b8], 1
jmp 0x423a8e
and dword [ebp - 0x16b8], 0
cmp dword [ebp - 0x16b8], 0xb441
je 0x423aa6
mov dword [ebp - 0x16c0], 1
jmp 0x423aad
and dword [ebp - 0x16c0], 0
mov eax, dword [ebp - 0xad4]
cmp dword [ebp - 0x16c0], eax
jge 0x423ac7
mov dword [ebp - 0x16c8], 1
jmp 0x423ace
and dword [ebp - 0x16c8], 0
mov eax, dword [ebp - 0x16c8]
sub eax, dword [ebp - 0xad4]
add eax, 0xf08e
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0x2048]
mov dword [ebp - 0x16d0], eax
cmp dword [ebp - 0x16d0], 0
jne 0x423b0e
cmp dword [ebp - 0x19d8], 0
jne 0x423b0e
mov dword [ebp - 0x16d8], 1
mov eax, dword [ebp - 0x16d8]
mov dword [ebp - 0x16e0], eax
cmp dword [ebp - 0x16e0], 0
je 0x423b42
push 1
lea eax, [ebp - 0x2d58]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.0043b9df
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x2a00]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x2a00]
lea edi, [ebp - 0x21e0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x970], 0x5b9b55bb
push 2
lea ecx, [ebp - 0x20d4]
call fcn.00424c41
push 0x4e01
push 0x4b5f
push 1
lea eax, [ebp - 0x24d8]
push eax
push 0x7ee2
push 1
lea eax, [ebp - 0x20d4]
push eax
push 0x72ed
push 1
call fcn.0040dde2
add esp, 0x24
mov dword [ebp - 0x970], 0xffffffea
jmp 0x423c65
cmp dword [ebp - 0x970], 8
je 0x423e9d
mov dword [ebp - 0x1ac], 0x5260417b
mov dword [ebp - 0x1ac], 0
jmp 0x423c95
cmp dword [ebp - 0x1ac], 1
jg 0x423e98
lea ecx, [ebp - 0x20d4]
call fcn.00424d13
cmp dword [ebp - 0x21e0], 0
je 0x423ec5
push 0
push dword [ebp - 0x21d8]
push dword [ebp - 0x21dc]
call dword [ebp - 0x21e0]
jmp 0x42405b
mov eax, dword [ebp - 0x19f8]
mov dword [ebp - 0x1a00], eax
mov dword [ebp - 0x1720], 0x6cdb
mov dword [ebp - 0x1a08], 0xac3640
cmp dword [ebp - 0x1720], 0x700c
jle 0x423ff9
and dword [ebp - 0x9a4], 0
jmp 0x423f10
mov eax, dword [ebp - 0x9a4]
inc eax
mov dword [ebp - 0x9a4], eax
cmp dword [ebp - 0x9a4], 0x5418
jge 0x423ff9
and dword [ebp - 0x9ac], 0
jmp 0x423f36
mov eax, dword [ebp - 0x9ac]
inc eax
mov dword [ebp - 0x9ac], eax
cmp dword [ebp - 0x9ac], 0x5c73
jge 0x423ff4
and dword [ebp - 0x9b4], 0
jmp 0x423f5c
mov eax, dword [ebp - 0x9b4]
inc eax
mov dword [ebp - 0x9b4], eax
cmp dword [ebp - 0x9b4], 0x5c6e
jge 0x423fef
and dword [ebp - 0x9bc], 0
jmp 0x423f82
mov eax, dword [ebp - 0x9bc]
inc eax
mov dword [ebp - 0x9bc], eax
cmp dword [ebp - 0x9bc], 0x60c5
jge 0x423fea
mov eax, dword [ebp - 0x9a4]
imul eax, dword [ebp - 0x9ac]
mov ecx, dword [ebp - 0x9b4]
sub ecx, dword [ebp - 0x9bc]
sar eax, cl
cdq
mov dword [ebp - 0x1e3c], eax
mov dword [ebp - 0x1e38], edx
push dword [ebp - 0x1e38]
push dword [ebp - 0x1e3c]
lea ecx, [ebp - 0x2efc]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.00424af2
push eax
call fcn.004b5807
pop ecx
lea ecx, [ebp - 0x2efc]
call fcn.00424ae8
jmp 0x423f75
jmp 0x423f4f
jmp 0x423f29
jmp 0x423f03
mov eax, dword [ebp - 0x1a00]
mov dword [ebp - 0x1728], eax
mov dword [ebp - 4], 0x9c
cmp dword [ebp - 0x1720], 0x6a61
jge 0x424024
push dword [ebp - 0x1a08]
call fcn.004b5807
pop ecx
jmp 0x424040
or dword [ebp - 4], 0xffffffff
jmp 0x42404a
mov eax, dword [ebp - 0x1728]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1728]
mov dword [ecx], eax
jmp 0x4240a3
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1a20], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1a18], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1a28], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1a10], eax
push dword [ebp - 0x1a10]
push 1
push dword [ebp - 0x1a18]
push dword [ebp - 0x1a20]
push dword [ebp - 0x1a28]
call fcn.0040579e
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret