Function at 0x40d2a2
Capabilities:
Authenticate hmac
Encode data using xor
Encrypt data using speck

Disassembly:
mov eax, 0x4b5507
call fcn.004b4fc8
push ecx
mov eax, 0x1220
call fcn.004b1970
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x70], dl
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x40], 0x2651
xor eax, eax
cmp dword [ebp - 0x40], 0x27ea
jle 0x40d33d
mov esi, eax
mov dword [ebp - 0x54], esi
mov edi, eax
jmp 0x40d2e0
xor eax, eax
mov ebx, eax
mov dword [ebp - 0x38], esi
mov ecx, edi
sar esi, cl
mov eax, esi
xor eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0xcf8]
call fcn.00401b08
pop ecx
pop ecx
mov ecx, eax
call fcn.00409a63
push eax
call fcn.0049f827
pop ecx
push 0
push 1
lea ecx, [ebp - 0xcf8]
call fcn.0040a247
inc ebx
cmp ebx, 0x4c22
jl 0x40d2e9
inc edi
cmp edi, 0x511d
mov esi, dword [ebp - 0x54]
jl 0x40d2de
inc esi
mov dword [ebp - 0x54], esi
xor eax, eax
cmp esi, 0x33b6
jl 0x40d2da
xor edi, edi
inc edi
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x3c], 0xa4a12b57
mov dword [ebp - 0x3c], 0xd4914d2e
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x54], 6
inc dword [ebp - 0x54]
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40d37d
push eax
push 0x617
call dword [0xae853c]
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [ebp - 0x40], 0x255d
jge 0x40d394
push 0xac2430
call fcn.0049f827
pop ecx
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x40d3c3
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x3c], 0xa4a12b57
mov dword [ebp - 0x3c], 0xd4914d2e
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x54], 6
inc dword [ebp - 0x54]
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40d400
push eax
push 0x617
call dword [0xae853c]
xor eax, eax
mov dword [ebp - 0x54], 0x7ce4
cmp dword [ebp - 0x54], 0x805f
jle 0x40d45e
mov esi, eax
jmp 0x40d416
xor eax, eax
mov edi, eax
mov eax, edi
and eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0xf74]
call fcn.00401b08
pop ecx
pop ecx
mov ecx, eax
call fcn.00409a63
push eax
call fcn.0049f827
pop ecx
push 0
push 1
lea ecx, [ebp - 0xf74]
call fcn.0040a247
inc edi
cmp edi, 0x4598
jl 0x40d418
inc esi
cmp esi, 0x1af7
jl 0x40d414
xor edi, edi
inc edi
mov dword [ebp - 0x50], 0xd837bc75
mov dword [ebp - 4], 2
cmp dword [ebp - 0x54], 0x79eb
jge 0x40d480
push 0xac2490
call fcn.0049f827
pop ecx
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x40d4ac
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x40d4ce
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x478], 0x624039b6
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 3
jl 0x40d4b5
xor eax, eax
mov dword [ebp - 0x18], 0x25f6
mov dword [ebp - 0x4c], 0xac2508
cmp dword [ebp - 0x18], 0x2873
jle 0x40d512
mov esi, eax
mov edi, eax
mov eax, edi
xor eax, esi
cdq
push edx
push eax
mov ecx, 0xae4c58
call fcn.00409a6e
inc edi
cmp edi, 0x379c
jl 0x40d4e9
inc esi
cmp esi, 0x7ab0
push 0
pop eax
jl 0x40d4e7
xor edi, edi
inc edi
xor eax, eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jg 0x40d624
mov byte [ebp - 0x21], al
mov dword [ebp - 0x2c], 0x2e5c
cmp dword [ebp - 0x2c], 0x2f62
jle 0x40d5a9
push eax
push eax
call dword [0xae8338]
xor edi, edi
mov dword [ebp - 0x30], edi
xor esi, esi
xor eax, eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x40], 0x5c8d
xor ebx, ebx
mov dword [ebp - 0x38], edi
mov ecx, eax
shl edi, cl
mov eax, edi
mov ecx, ebx
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xae4c58
call fcn.00409a6e
inc ebx
cmp ebx, 0x46bb
jl 0x40d558
mov eax, dword [ebp - 0x54]
add eax, esi
mov dword [ebp - 0x54], eax
dec dword [ebp - 0x40]
mov edi, dword [ebp - 0x30]
jne 0x40d54f
inc esi
cmp esi, 0x5185
jl 0x40d543
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x6251
jl 0x40d541
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
call dword [0xae8038]
xor eax, eax
cmp byte [ebp - 0x21], 0
je 0x40d5bb
push eax
push 0x2405
call dword [0xae8534]
mov dword [ebp - 4], 4
cmp dword [ebp - 0x2c], 0x2c14
jge 0x40d5da
mov edx, 0xac2540
mov ecx, 0xae4c58
call fcn.0040c2f7
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
xor edi, edi
inc edi
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp + eax*4 - 0x478]
mov eax, dword [ebp - 0x470]
imul ecx, eax
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x478], ecx
inc dword [ebp - 0x50]
xor eax, eax
jmp 0x40d517
mov dword [ebp - 4], 6
cmp dword [ebp - 0x18], 0x256c
jge 0x40d641
mov edx, dword [ebp - 0x4c]
mov ecx, 0xae4c58
call fcn.0040c2f7
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x40d66d
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40d680
push eax
push eax
push eax
push eax
call dword [0xae83a4]
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x54], 0xa7ef23e4
push 3
lea ecx, [ebp - 0x694]
call fcn.00409c99
mov dword [ebp - 0x44], 0
jmp 0x40d6ae
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x7c], ebx
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], edi
jl 0x40d6a4
mov dword [ebp - 0x44], 0
jmp 0x40d6cd
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x7ac], 0x88216928
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 2
jl 0x40d6bc
mov dword [ebp - 0x44], 0
jmp 0x40d6ef
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x694]
mov dword [eax + ecx*4], 2
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 3
jl 0x40d6dc
mov byte [ebp - 0x21], 0
cmp byte [ebp - 0x21], 0
je 0x40d70a
push 0x24d1
call dword [0xae808c]
mov dword [ebp - 0x7c], 0xa
jmp 0x40d852
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x18], 0x9d940313
push 2
lea ecx, [ebp - 0x490]
call fcn.00409c99
push 3
lea ecx, [ebp - 0x5f8]
call fcn.00409c99
mov dword [ebp - 0x1c], 0
jmp 0x40d75c
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x490]
mov dword [eax + ecx*4], 0xa1dd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40d749
mov dword [ebp - 0x1c], 0
jmp 0x40d77e
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x5f8]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x40d76b
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x7c]
mov ecx, 0xf0415773
sub ecx, eax
cmp ecx, dword [ebp - 0x2c]
jle 0x40d799
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x54], eax
imul eax, dword [ebp - 0x54], 0x9a54
test eax, eax
je 0x40d7b7
cmp dword [ebp - 0x7c], 0
je 0x40d7b7
mov ecx, edi
jmp 0x40d7b9
xor ecx, ecx
mov eax, dword [ebp - 0x18]
imul eax, ecx
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
add eax, 0x5b772aec
imul eax, dword [ebp - 0x18]
test eax, eax
jne 0x40d7d9
cmp dword [ebp - 0x7c], eax
mov ecx, eax
je 0x40d7db
mov ecx, edi
mov edx, dword [ebp - 0x490]
mov eax, dword [ebp - 0x2c]
imul eax, ecx
xor ecx, ecx
cmp eax, dword [edx + 4]
setle cl
mov eax, dword [ebp - 0x30]
sub eax, ecx
xor ecx, ecx
cmp eax, ebx
setne cl
add ecx, dword [edx + 4]
xor edx, edx
cmp ecx, 0x2a1e
setle dl
mov ecx, dword [ebp - 0x7c]
add ecx, edx
mov dword [ebp - 0x7ac], ecx
mov eax, dword [ebp - 0x7c]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x694]
mov dword [eax], edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setg cl
mov eax, dword [ebp - 0x5f8]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x5f8]
call fcn.00409d6b
lea ecx, [ebp - 0x490]
call fcn.00409d6b
inc dword [ebp - 0x7c]
cmp dword [ebp - 0x7c], 0xd
jle 0x40d716
lea ecx, [ebp - 0x694]
call fcn.00409d6b
mov dword [ebp - 0x3c], 0xa4a12b57
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x30], ebx
push edi
lea ecx, [ebp - 0x1cc]
call fcn.00409c99
push 4
lea ecx, [ebp - 0x2c8]
call fcn.00409c99
mov dword [ebp - 0x18], 0x9df
cmp dword [ebp - 0x18], 0xa51
jle 0x40d91a
xor edi, edi
mov dword [ebp - 0x2c], edi
xor ebx, ebx
mov dword [ebp - 0x40], 0x1f47
xor esi, esi
xor edi, edi
mov dword [ebp - 0x54], 0x1a97
mov eax, ebx
and eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0xd28]
call fcn.00401b08
pop ecx
pop ecx
mov ecx, eax
call fcn.00409a63
push eax
call fcn.0049f827
pop ecx
push 0
push 1
lea ecx, [ebp - 0xd28]
call fcn.0040a247
add edi, esi
dec dword [ebp - 0x54]
jne 0x40d8bd
inc esi
cmp esi, 0x5c58
jl 0x40d8b4
mov edi, dword [ebp - 0x2c]
add ebx, edi
dec dword [ebp - 0x40]
jne 0x40d8b2
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x434d
jl 0x40d8a9
xor edi, edi
inc edi
or ebx, 0xffffffff
mov dword [ebp - 4], 8
cmp dword [ebp - 0x18], 0x655
jge 0x40d935
push 0xac25e8
call fcn.0049f827
pop ecx
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x40d961
mov dword [ebp - 0x38], 0x8fd5f396
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], edi
jge 0x40d98a
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x1cc]
mov dword [eax + ecx*4], 8
inc dword [ebp - 0x68]
cmp dword [ebp - 0x68], edi
jl 0x40d970
xor eax, eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], edi
jge 0x40d9a6
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x124], ebx
inc dword [ebp - 0x68]
cmp dword [ebp - 0x68], edi
jl 0x40d992
xor eax, eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x40d9ca
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x2c8]
mov dword [eax + ecx*4], 0x6f32215f
inc dword [ebp - 0x68]
cmp dword [ebp - 0x68], 4
jl 0x40d9af
xor eax, eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x40d9e8
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x604], edi
inc dword [ebp - 0x68]
cmp dword [ebp - 0x68], 3
jl 0x40d9d3
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x40da05
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40dbb6
call dword [0xae837c]
jmp 0x40dbb6
mov dword [ebp - 0x34], 0xfffffffd
push 4
lea ecx, [ebp - 0x1fc]
call fcn.00409c99
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x38], 0x686
mov dword [ebp - 0x50], 0
jmp 0x40da3f
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x1fc]
mov dword [eax + ecx*4], 0xdcee0524
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 4
jl 0x40da2c
mov dword [ebp - 0x20], 0xfffffff4
cmp dword [ebp - 0x20], 0xfffffff3
jg 0x40db71
mov esi, dword [ebp - 0x2c8]
mov dword [ebp - 0x2c], 0x4eea2a3b
push edi
lea ecx, [ebp - 0x4a8]
call fcn.00409c99
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x40da91
xor ebx, ebx
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa68], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x40da7c
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x40dab3
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4a8]
mov dword [eax + ecx*4], 0x3eb61943
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x40da99
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x40db3d
cmp dword [ebp - 0x34], eax
jne 0x40db3d
mov eax, dword [ebp - 0x2c]
neg eax
je 0x40db00
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x20]
jge 0x40dad3
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa64]
mov eax, dword [ebp - 0xa64]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], 0xfffffffa
mov eax, dword [ebp - 0x1fc]
mov ecx, dword [ebp - 0x34]
sub ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x4a8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp eax, ecx
setl dl
mov eax, dword [ebp - 0x1cc]
mov dword [eax], edx
mov dword [ebp - 0x124], edx
xor ecx, ecx
test edx, edx
sete cl
mov eax, dword [ebp - 0x1fc]
add ecx, dword [eax + 8]
jne 0x40db3d
xor eax, eax
jmp 0x40db3f
mov eax, edi
cmp eax, dword [ebp - 0x30]
jle 0x40db54
mov eax, dword [ebp - 0x1cc]
xor ebx, ebx
cmp dword [eax], ebx
jne 0x40db54
xor eax, eax
jmp 0x40db56
mov eax, edi
mov dword [esi + 8], eax
lea ecx, [ebp - 0x4a8]
call fcn.00409d6b
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff3
jle 0x40da5c
mov dword [ebp - 0x28], 0
cmp dword [ebp - 0x28], 3
jg 0x40dbab
mov esi, dword [ebp - 0x1fc]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1fc]
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x2c8]
mov dword [eax + edx*4], ecx
mov eax, dword [esi + 8]
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jle 0x40db84
lea ecx, [ebp - 0x1fc]
call fcn.00409d6b
mov eax, dword [ebp - 0x1cc]
xor ebx, ebx
cmp dword [eax], ebx
je 0x40dbd2
mov eax, dword [ebp - 0x2c8]
mov dword [eax + 8], 0x4d97f66
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x124]
mov eax, dword [ebp - 0x604]
mov eax, dword [ebp - 0x5fc]
mov ecx, dword [ebp - 0x604]
sub ecx, eax
mov eax, dword [ebp - 0x1cc]
imul ecx, dword [eax]
test ecx, ecx
je 0x40dc02
cmp dword [ebp - 0x60], ebx
je 0x40dc02
mov eax, edi
jmp 0x40dc04
xor eax, eax
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x2c8]
call fcn.00409d6b
lea ecx, [ebp - 0x1cc]
call fcn.00409d6b
mov dword [ebp - 0x3c], 0xd4914d2e
mov dword [ebp - 0x18], 0x68ec0ae9
mov dword [ebp - 0x3c], 0xfffffff7
push 3
lea ecx, [ebp - 0x828]
call fcn.00409c99
mov dword [ebp - 0x3c], 0x17779a7
mov dword [ebp - 0x40], 0xc6a37d7c
xor eax, eax
mov dword [ebp - 0x50], eax
jmp 0x40dc63
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x828]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 3
jl 0x40dc54
mov dword [ebp - 0x18], 0xf
cmp dword [ebp - 0x18], 0x1a
jle 0x40ddc9
movdqa xmm0, xmmword [0xad3b20]
movdqu xmmword [ebp - 0xa08], xmm0
lea ecx, [ebp - 0xa08]
lea eax, [ebp - 0x9f8]
push ecx
push eax
push ecx
lea ecx, [ebp - 0xb20]
call fcn.00409d45
mov dword [ebp - 0x2c], 0xf47a6de
mov dword [ebp - 0x2c], 0
cmp dword [ebp - 0x2c], 3
jg 0x40ddb3
or ebx, 0xffffffff
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x54], 0x3609
cmp dword [ebp - 0x54], 0x39a4
jle 0x40dcff
xor esi, esi
xor edi, edi
mov eax, esi
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
mov ecx, 0xae4c58
call fcn.00409a6e
inc edi
cmp edi, 0x3cca
jl 0x40dcd6
inc esi
cmp esi, 0x5115
jl 0x40dcd4
xor edi, edi
inc edi
mov dword [ebp - 0x3c], 0
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x54], 0x3433
jge 0x40dd25
mov edx, 0xac2660
mov ecx, 0xae4c58
call fcn.0040c2f7
mov dword [ebp - 4], ebx
jmp 0x40dd4d
push 3
lea ecx, [ebp - 0x4c0]
call fcn.00409c99
mov dword [ebp - 0x1c], 0
jmp 0x40dd70
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1220], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x40dd63
mov dword [ebp - 0x1c], 0
jmp 0x40dd92
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4c0]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x40dd7f
mov eax, dword [ebp - 0x4c0]
inc dword [eax]
lea ecx, [ebp - 0x4c0]
call fcn.00409d6b
inc dword [ebp - 0x2c]
jmp 0x40dcb2
dec dword [ebp - 0x40]
lea ecx, [ebp - 0xb20]
call fcn.00409d6b
inc dword [ebp - 0x18]
jmp 0x40dc70
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x40dde4
push eax
push 0x1173
push 0x84d
call dword [0xae809c]
lea ecx, [ebp - 0x828]
call fcn.00409d6b
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x30], 0xbc999589
mov dword [ebp - 0x1c], 0xfffffffd
mov dword [ebp - 0x54], 2
mov dword [ebp - 0x50], 0xfffffffe
mov dword [ebp - 0x3c], 0x9b964069
mov dword [ebp - 0x3c], 0xe8ca4045
mov dword [ebp - 0x3c], 0xa9025b0d
or ebx, 0xffffffff
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x3c], 0x8c6aee34
push edi
lea ecx, [ebp - 0x70c]
call fcn.00409c99
xor eax, eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], edi
jge 0x40de67
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x70c]
mov dword [eax + ecx*4], 0xfffffffa
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], edi
jl 0x40de4d
xor eax, eax
cmp dword [ebp - 0x28], eax
jne 0x40de77
cmp dword [ebp - 0x28], 0x18a05
mov edx, eax
jge 0x40de79
mov edx, edi
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x54], edi
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x54]
xor ecx, ecx
cmp eax, 0xa44198d7
setne cl
xor eax, eax
cmp edx, ecx
setl al
imul eax, dword [ebp - 0x28]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 0xfffffffb
jge 0x40e0f4
movdqa xmm0, xmmword [0xad3ae0]
movdqu xmmword [ebp - 0xaa8], xmm0
lea ecx, [ebp - 0xaa8]
lea eax, [ebp - 0xa98]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x3b4]
call fcn.00409d45
mov dword [ebp - 0x3c], 0xfffffff8
mov dword [ebp - 0x40], 0x2f2b
cmp dword [ebp - 0x40], 0x312f
jle 0x40df4a
xor edi, edi
xor ebx, ebx
mov dword [ebp - 0x54], 0x976
xor esi, esi
mov eax, esi
xor eax, ebx
cdq
push edx
push eax
mov ecx, 0xae4c58
call fcn.00409a6e
inc esi
cmp esi, 0x73e1
jl 0x40df1a
add ebx, edi
dec dword [ebp - 0x54]
jne 0x40df18
inc edi
cmp edi, 0x4add
jl 0x40df0f
xor edi, edi
inc edi
or ebx, 0xffffffff
mov dword [ebp - 0x3c], edi
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x40], 0x2c26
jge 0x40df6c
mov edx, 0xac26d0
mov ecx, 0xae4c58
call fcn.0040c2f7
mov dword [ebp - 4], ebx
jmp 0x40df94
mov dword [ebp - 0x3c], 0xfffffff9
mov dword [ebp - 0x3c], 0xa9c1c73b
mov dword [ebp - 0x38], 0xfffffffd
push 4
lea ecx, [ebp - 0x840]
call fcn.00409c99
mov dword [ebp - 0x50], 0
jmp 0x40dfd2
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x840]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 4
jl 0x40dfbf
mov eax, dword [ebp - 0x3b4]
xor ebx, ebx
cmp dword [eax], ebx
je 0x40dffe
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x3b4]
cmp dword [eax + 8], ebx
setne cl
cmp ecx, dword [ebp - 0x1c]
jg 0x40dffe
mov eax, edi
jmp 0x40e000
xor eax, eax
mov ecx, dword [ebp - 0x30]
sub ecx, eax
mov eax, dword [ebp - 0x3b4]
cmp dword [eax + 8], ecx
jl 0x40e02b
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x40e0d3
push eax
push eax
call dword [0xae8390]
jmp 0x40e0d3
mov dword [ebp - 0x54], 2
mov dword [ebp - 0x3c], 0xeee83ade
mov dword [ebp - 0x3c], 0xfffffffe
mov dword [ebp - 0x3c], 0x851f08a1
mov dword [ebp - 0x3c], 0x3e5f8859
mov dword [ebp - 0x3c], 0xbde5156b
push 4
lea ecx, [ebp - 0x998]
call fcn.00409c99
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x40e087
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x998]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 4
jl 0x40e070
xor eax, eax
mov dword [ebp - 0x50], eax
jmp 0x40e0a7
dec dword [ebp - 0x54]
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], bl
je 0x40e0a4
push eax
push eax
push eax
push eax
push eax
call dword [0xae804c]
xor eax, eax
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 3
jle 0x40e08c
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x70c]
mov eax, dword [eax]
dec dword [ebp - 0x2c]
cmp ecx, eax
jge 0x40e0c3
mov eax, edi
jmp 0x40e0c5
xor eax, eax
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x998]
call fcn.00409d6b
lea ecx, [ebp - 0x840]
call fcn.00409d6b
lea ecx, [ebp - 0x3b4]
call fcn.00409d6b
dec dword [ebp - 0x1c]
or ebx, 0xffffffff
jmp 0x40dec2
lea ecx, [ebp - 0x70c]
call fcn.00409d6b
mov dword [ebp - 0x54], 6
inc dword [ebp - 0x54]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x3c], 0x7d96711d
mov dword [ebp - 0x3c], 0xfffffffc
push 2
lea ecx, [ebp - 0x920]
call fcn.00409c99
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x40e15e
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x920]
mov dword [eax + ecx*4], 0x95f7626a
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 2
jl 0x40e143
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
je 0x40e2ee
mov dword [ebp - 0x54], 0x237f
cmp dword [ebp - 0x54], 0x25ad
jle 0x40e1c5
push eax
push 0x1173
push 0x84d
call dword [0xae809c]
xor edi, edi
xor esi, esi
mov eax, esi
or eax, edi
cdq
push edx
push eax
mov ecx, 0xae4c58
call fcn.00409a6e
inc esi
cmp esi, 0x6e8b
jl 0x40e190
inc edi
cmp edi, 0x3814
jl 0x40e18e
xor eax, eax
push eax
push 0x2113
push eax
call dword [0xae813c]
xor edi, edi
inc edi
mov dword [ebp - 0x1c], 0x4ad37400
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x54], 0x1fdc
jge 0x40e1eb
mov edx, 0xac2740
mov ecx, 0xae4c58
call fcn.0040c2f7
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x40e217
mov dword [ebp - 0x2c], 8
cmp dword [ebp - 0x28], eax
jne 0x40e245
mov dword [ebp - 0x1c], edi
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x28]
jne 0x40e245
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
xor eax, eax
mov ecx, eax
jmp 0x40e249
mov ecx, edi
xor eax, eax
cmp ecx, dword [ebp - 0x28]
jne 0x40e286
mov dword [ebp - 0x1c], eax
jmp 0x40e264
cmp byte [ebp - 0x21], 0
je 0x40e261
call dword [0xae8544]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x23
mov byte [ebp - 0x21], al
jge 0x40e253
cmp byte [ebp - 0x21], 0
je 0x40e2e4
push eax
push 0x20bf
push 0xd11
call dword [0xae8568]
jmp 0x40e2e4
mov dword [ebp - 0x54], 0xfffffffe
mov dword [ebp - 0x40], edi
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x40], eax
mov edx, dword [ebp - 0x54]
sub edx, 0xfffe
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, edx
setl cl
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp eax, ecx
setg dl
sub edx, dword [ebp - 0x40]
neg edx
sbb edx, edx
inc edx
xor eax, eax
cmp edx, 0x7627
setg al
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x21], 0
cmp byte [ebp - 0x21], 0
je 0x40e2e4
push edi
push 0x13b6
call dword [0xae855c]
inc dword [ebp - 0x28]
xor eax, eax
jmp 0x40e161
mov dword [ebp - 0x54], 0xa6
cmp dword [ebp - 0x54], 0x1a5
jle 0x40e32d
mov edi, eax
mov esi, eax
mov eax, edi
mov ecx, esi
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xae4c58
call fcn.00409a6e
inc esi
cmp esi, 0x3e2c
jl 0x40e302
inc edi
cmp edi, 0x7583
push 0
pop eax
jl 0x40e300
xor edi, edi
inc edi
inc dword [ebp - 0x30]
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x54], 0xfffffe29
jge 0x40e34f
mov edx, 0xac27a4
mov ecx, 0xae4c58
call fcn.0040c2f7
mov dword [ebp - 4], ebx
jmp 0x40e375
lea ecx, [ebp - 0x920]
call fcn.00409d6b
push edi
lea ecx, [ebp - 0x4d8]
call fcn.00409c99
mov dword [ebp - 0x50], 0
xor ebx, ebx
cmp dword [ebp - 0x50], edi
jge 0x40e3ab
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x4d8]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x50]
jmp 0x40e395
mov eax, dword [ebp - 0x4d8]
mov dword [eax], ebx
lea ecx, [ebp - 0x4d8]
call fcn.00409d6b
xor eax, eax
mov byte [ebp - 0x21], al
mov dword [ebp - 0x18], 0x8261f9c2
mov dword [ebp - 0x60], 4
mov dword [ebp - 0x48], 0xb0e446df
mov dword [ebp - 0x40], 0xe72
cmp dword [ebp - 0x40], 0x108a
jle 0x40e484
mov ecx, eax
mov dword [ebp - 0x30], ecx
mov ebx, eax
mov dword [ebp - 0x54], ebx
jmp 0x40e3fa
xor eax, eax
mov esi, eax
mov dword [ebp - 0x38], ebx
and ebx, ecx
jmp 0x40e405
xor eax, eax
mov edi, eax
mov eax, esi
mov ecx, edi
sar eax, cl
xor eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0x10b8]
call fcn.00401b08
pop ecx
pop ecx
mov ecx, eax
call fcn.00409a63
push eax
call fcn.0049f827
pop ecx
push 0
push 1
lea ecx, [ebp - 0x10b8]
call fcn.0040a247
inc edi
cmp edi, 0x7e59
jl 0x40e407
inc esi
cmp esi, 0x5ccb
jl 0x40e403
mov ebx, dword [ebp - 0x54]
inc ebx
mov dword [ebp - 0x54], ebx
cmp ebx, 0x1140
mov ecx, dword [ebp - 0x30]
jl 0x40e3f8
inc ecx
mov dword [ebp - 0x30], ecx
xor eax, eax
cmp ecx, 0x1bb5
jl 0x40e3f1
push eax
push eax
push 0x1cde
push 0x1931
push eax
call dword [0xae8514]
xor edi, edi
inc edi
mov dword [ebp - 0x3c], 0x34e6d4f2
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x40], 0xd82
jge 0x40e4a6
push 0xac2800
call fcn.0049f827
pop ecx
or ecx, 0xffffffff
mov dword [ebp - 4], ecx
xor eax, eax
jmp 0x40e4d5
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x2c], 0xa7f4ea14
mov dword [ebp - 0x38], 0xa276ac11
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x40e50b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xae4], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x40e4f6
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x40e52d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x858], 6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x40e514
xor eax, eax
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x18], eax
je 0x40e53c
cmp dword [ebp - 0x60], eax
mov edx, edi
jne 0x40e53e
mov edx, eax
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp eax, 0x74f
setne cl
xor eax, eax
cmp edx, 0xfffffff8
setge al
sub eax, ecx
sub eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x850]
je 0x40e56a
cmp dword [ebp - 0x4c], 0
je 0x40e56a
mov edx, edi
jmp 0x40e56c
xor edx, edx
mov eax, dword [ebp - 0xae0]
xor ecx, ecx
cmp edx, eax
sete cl
cmp ecx, dword [ebp - 0x60]
je 0x40e587
xor eax, eax
cmp dword [ebp - 0x48], eax
mov ecx, eax
je 0x40e589
mov ecx, edi
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x854]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
cmp byte [ebp - 0x21], 0
je 0x40e888
mov dword [ebp - 0x20], 0xbac64a68
mov dword [ebp - 0x18], 0xfffa
mov dword [ebp - 0x54], 0xf1d
cmp dword [ebp - 0x54], 0x1153
jle 0x40e620
xor ecx, ecx
mov dword [ebp - 0x2c], ecx
xor eax, eax
mov dword [ebp - 0x30], eax
xor edi, edi
xor ebx, ebx
mov esi, edi
and esi, eax
and esi, ecx
mov eax, ebx
or eax, esi
cdq
push edx
push eax
mov ecx, 0xae4c58
call fcn.00409a6e
inc ebx
cmp ebx, 0x5ffb
jl 0x40e5dd
inc edi
cmp edi, 0xc8a
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
jl 0x40e5d5
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x5c52
jl 0x40e5d3
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x598d
jl 0x40e5ce
xor edi, edi
inc edi
mov dword [ebp - 0x40], 9
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x54], 0xcf6
jge 0x40e646
mov edx, 0xac2864
mov ecx, 0xae4c58
call fcn.0040c2f7
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x40e671
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], edi
jge 0x40e68f
xor ebx, ebx
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x94], ebx
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], edi
jl 0x40e67b
xor eax, eax
mov dword [ebp - 0x20], 0x15
cmp dword [ebp - 0x20], 0xffffffeb
jl 0x40e731
jmp 0x40e6a4
xor eax, eax
mov dword [ebp - 0x38], 0x3bfa
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], edi
jge 0x40e6cc
xor ebx, ebx
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x178], ebx
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], edi
jl 0x40e6b8
xor eax, eax
cmp dword [ebp - 0x178], eax
je 0x40e710
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x20], eax
jg 0x40e6f1
mov eax, dword [ebp - 0x38]
mov ecx, 0xa17d
sub ecx, eax
jne 0x40e6f1
xor eax, eax
mov ecx, eax
jmp 0x40e6f5
mov ecx, edi
xor eax, eax
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], eax
je 0x40e6ff
mov eax, edi
cmp eax, 0xfffffff6
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x20]
jne 0x40e70e
mov edx, edi
jmp 0x40e712
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, edx
setl cl
neg ecx
mov dword [ebp - 0x94], ecx
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffeb
jge 0x40e6a2
mov dword [ebp - 0x20], 0x14
jmp 0x40e871
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x50], 0x2b9cbadb
mov dword [ebp - 0x38], 0x3d1dd14a
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x40e764
push eax
push eax
push eax
push eax
push eax
push eax
call dword [0xae8018]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x94]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x40e789
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp ecx, eax
sete dl
mov eax, dword [ebp - 0x94]
xor ebx, ebx
cmp eax, edx
setne bl
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp ebx, eax
setne cl
xor eax, eax
cmp ecx, 0x3cd0
jle 0x40e7cd
cmp dword [ebp - 0x94], eax
mov ecx, edi
jne 0x40e7cf
mov ecx, eax
cmp ecx, dword [ebp - 0x94]
jle 0x40e85c
mov dword [ebp - 0x54], 0xfffffffd
mov dword [ebp - 0x50], 0x5ef1c8d2
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x94]
add ecx, eax
mov eax, dword [ebp - 0x54]
xor edx, edx
cmp ecx, eax
sete dl
mov eax, dword [ebp - 0x54]
sub eax, edx
neg eax
sbb eax, eax
add eax, 0xffff5de9
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x94]
jg 0x40e822
cmp dword [ebp - 0x50], 0
je 0x40e822
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x28]
add eax, 0x91cd
jne 0x40e83e
cmp dword [ebp - 0x40], eax
jne 0x40e840
mov ecx, eax
jmp 0x40e842
xor eax, eax
mov ecx, edi
mov dword [ebp - 0x38], ecx
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40e86e
push eax
push 0xc65
call dword [0xae8134]
jmp 0x40e86e
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40e86e
push eax
push eax
push eax
call dword [0xae8030]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xd
jge 0x40e73d
push 0
push 0x617
call dword [0xae853c]
mov dword [ebp - 0x20], 0x9d29
mov dword [ebp - 0x28], 0x45fe46c2
mov dword [ebp - 0x30], 0x10c13fe6
mov dword [ebp - 0x54], edi
push edi
lea ecx, [ebp - 0x61c]
call fcn.00409c99
mov dword [ebp - 0x50], 0
cmp dword [ebp - 0x50], edi
jge 0x40e8ce
xor ebx, ebx
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x61c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], edi
jl 0x40e8ba
mov ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
inc ecx
add ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x20]
xor eax, eax
cmp ecx, 0x7a5b7d8c
setle al
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x20]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
dec ecx
neg ecx
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp eax, ecx
setle dl
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setge cl
imul ecx, ecx, 0x752b
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp eax, ecx
setge dl
cmp dword [ebp - 0x28], edx
jge 0x40e94e
xor eax, eax
cmp dword [ebp - 0x28], eax
mov ecx, eax
je 0x40e950
mov ecx, edi
mov eax, dword [ebp - 0x20]
sub ecx, eax
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x54], eax
jne 0x40e97c
xor eax, eax
cmp dword [ebp - 0x54], eax
je 0x40e97e
mov eax, edi
xor edx, edx
cmp eax, 0xe4f
setle dl
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setl cl
mov eax, dword [ebp - 0x61c]
mov dword [eax], ecx
lea ecx, [ebp - 0x61c]
call fcn.00409d6b
mov dword [ebp - 0x20], 0x9d29
mov dword [ebp - 0x28], 0x45fe46c2
mov dword [ebp - 0x30], 0x10c13fe6
mov dword [ebp - 0x54], edi
push edi
lea ecx, [ebp - 0x4f0]
call fcn.00409c99
mov dword [ebp - 0x30], 0x29f9
cmp dword [ebp - 0x30], 0x2cb3
jle 0x40ea2b
xor ebx, ebx
mov dword [ebp - 0x40], ebx
xor edi, edi
mov eax, ebx
cdq
idiv edi
mov ebx, edx
mov dword [ebp - 0x54], 0x39d
xor esi, esi
mov eax, esi
and eax, ebx
cdq
push edx
push eax
mov ecx, 0xae4c58
call fcn.00409a6e
inc esi
cmp esi, 0x750c
jl 0x40e9f0
dec ebx
dec dword [ebp - 0x54]
jne 0x40e9ee
inc edi
cmp edi, 0x4295
mov ebx, dword [ebp - 0x40]
jl 0x40e9e0
inc ebx
mov dword [ebp - 0x40], ebx
cmp ebx, 0xd30
jl 0x40e9de
xor edi, edi
inc edi
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x30], 0x28b0
jge 0x40ea4a
mov edx, 0xac28d0
mov ecx, 0xae4c58
call fcn.0040c2f7
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x40ea75
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], edi
jge 0x40ea93
xor ebx, ebx
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x4f0]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], edi
jl 0x40ea7f
mov dword [ebp - 0x40], 0x2f29
cmp dword [ebp - 0x40], 0x304e
jle 0x40eb2f
push 0x4a2
call dword [0xae8094]
xor ecx, ecx
mov dword [ebp - 0x2c], ecx
xor ebx, ebx
mov dword [ebp - 0x54], ebx
xor esi, esi
xor edi, edi
mov eax, ebx
cdq
idiv esi
mov ebx, ecx
mov ecx, edx
shl ebx, cl
mov eax, ebx
or eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0xd58]
call fcn.00401b08
pop ecx
pop ecx
mov ecx, eax
call fcn.00409a63
push eax
call fcn.0049f827
pop ecx
push 0
push 1
lea ecx, [ebp - 0xd58]
call fcn.0040a247
inc edi
cmp edi, 0x78f1
jl 0x40eacb
inc esi
cmp esi, 0x79e1
mov ebx, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x2c]
jl 0x40eabe
inc ebx
mov dword [ebp - 0x54], ebx
cmp ebx, 0x4c2b
jl 0x40eabc
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x6584
jl 0x40eab7
xor edi, edi
inc edi
mov ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
inc ecx
add ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x20]
xor eax, eax
cmp ecx, 0x7a5b7d8c
setle al
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x20]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x40], 0x2be5
jge 0x40eb88
push 0xac2914
call fcn.0049f827
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x40ebaf
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
dec ecx
neg ecx
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp eax, ecx
setle dl
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setge cl
imul ecx, ecx, 0x752b
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp eax, ecx
setge dl
cmp dword [ebp - 0x28], edx
jge 0x40ebf1
xor eax, eax
cmp dword [ebp - 0x28], eax
mov ecx, eax
je 0x40ebf3
mov ecx, edi
mov eax, dword [ebp - 0x20]
sub ecx, eax
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x54], eax
jne 0x40ec1f
xor eax, eax
cmp dword [ebp - 0x54], eax
je 0x40ec21
mov eax, edi
xor edx, edx
cmp eax, 0xe4f
setle dl
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setl cl
mov eax, dword [ebp - 0x4f0]
mov dword [eax], ecx
lea ecx, [ebp - 0x4f0]
call fcn.00409d6b
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x30], 0x6dd2
mov dword [ebp - 0x54], 0x6b9
cmp dword [ebp - 0x54], 0x7e5
jle 0x40ecc2
mov ecx, eax
mov dword [ebp - 0x50], eax
mov ebx, eax
mov esi, eax
mov edi, eax
mov eax, esi
cdq
idiv edi
lea eax, [ebx + ecx]
mov ecx, edx
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xae4c58
call fcn.00409a6e
inc edi
cmp edi, 0x21c9
mov ecx, dword [ebp - 0x50]
jl 0x40ec72
inc esi
cmp esi, 0x5f2a
push 0
pop eax
jl 0x40ec70
inc ebx
cmp ebx, 0x343b
jl 0x40ec6e
inc ecx
mov dword [ebp - 0x50], ecx
cmp ecx, 0x3dbc
jl 0x40ec6c
push eax
call dword [0xae8124]
xor edi, edi
inc edi
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x54], 0x4ac
jge 0x40ece1
mov edx, 0xac295c
mov ecx, 0xae4c58
call fcn.0040c2f7
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x40ed10
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x40ed2e
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x384], ebx
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 3
jl 0x40ed19
xor eax, eax
mov dword [ebp - 0x380], 3
cmp dword [ebp - 0x380], 0xfffffff5
jg 0x40eeb7
mov dword [ebp - 0x2c], 0xf390197f
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], edi
jge 0x40ed68
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x148], edi
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], edi
jl 0x40ed54
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], eax
jg 0x40eeac
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], eax
jl 0x40eea4
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x40eda1
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xfc], ebx
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 2
jl 0x40ed8c
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40ee51
mov dword [ebp - 0x40], 0x1c7d
cmp dword [ebp - 0x40], 0x1d59
jle 0x40ee00
mov edi, eax
mov ebx, eax
mov dword [ebp - 0x54], 0x1d4c
mov esi, eax
mov eax, ebx
mov ecx, esi
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xae4c58
call fcn.00409a6e
inc esi
cmp esi, 0x7d8c
jl 0x40edcb
add ebx, edi
dec dword [ebp - 0x54]
push 0
pop eax
jne 0x40edc9
inc edi
cmp edi, 0x74bb
jl 0x40edc0
xor edi, edi
inc edi
or ebx, 0xffffffff
push eax
push eax
call dword [0xae8040]
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x40], 0x1b28
jge 0x40ee27
mov edx, 0xac2998
mov ecx, 0xae4c58
call fcn.0040c2f7
mov dword [ebp - 4], ebx
jmp 0x40ee4f
xor eax, eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], eax
jg 0x40ee9c
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40ee73
push 0x4a2
call dword [0xae8094]
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp + eax*4 - 0x148]
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x148], ecx
inc dword [ebp - 0xf8]
cmp dword [ebp - 0xf8], 0
push 0
pop eax
jle 0x40ee5f
dec dword [ebp - 0x34]
jmp 0x40ed7a
inc dword [ebp - 0x2c]
jmp 0x40ed6b
dec dword [ebp - 0x380]
jmp 0x40ed38
mov dword [ebp - 0x2c], 2
cmp dword [ebp - 0x2c], 0xb
je 0x40ef88
mov dword [ebp - 0x38], 0xffff
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x40eef1
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xc74], 0x188753e
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 3
jl 0x40eed8
xor eax, eax
mov dword [ebp - 0x54], 0x24b4
cmp dword [ebp - 0x54], 0x24f6
jle 0x40ef2e
mov edi, eax
mov esi, eax
mov eax, esi
and eax, edi
cdq
push edx
push eax
mov ecx, 0xae4c58
call fcn.00409a6e
inc esi
cmp esi, 0x5007
jl 0x40ef05
inc edi
cmp edi, 0x6f8a
push 0
pop eax
jl 0x40ef03
xor edi, edi
inc edi
cmp dword [ebp - 0x38], 0
jne 0x40ef88
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x54], 0x224c
jge 0x40ef53
mov edx, 0xac29e0
mov ecx, 0xae4c58
call fcn.0040c2f7
mov dword [ebp - 4], ebx
jmp 0x40ef7b
inc dword [ebp - 0x30]
inc dword [ebp - 0x2c]
xor eax, eax
jmp 0x40eebe
mov dword [ebp - 0x68], 0x4bb68c
mov dword [ebp - 0x54], 8
mov dword [ebp - 0x54], 4
mov dword [ebp - 0x20], 0x41fc9a57
push 2
lea ecx, [ebp - 0x6ac]
call fcn.00409c99
mov dword [ebp - 0x54], 0xf45b6d4f
mov dword [ebp - 0x38], 0xfffffffa
mov dword [ebp - 0x3c], 0x95534fd3
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 2
jge 0x40efed
xor ebx, ebx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x6ac]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40efd8
mov dword [ebp - 0x1c], 0
jmp 0x40f007
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x214], 0x1971
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x40eff6
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 0xc4ddb84c
setne cl
cmp ecx, dword [ebp - 0x20]
je 0x40f022
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x6ac]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x54], 0xfffffffc
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x20c]
sub ecx, dword [ebp - 0x214]
neg ecx
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp eax, ecx
setge dl
add edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x214]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 0x673ed132
setg cl
sub ecx, dword [ebp - 0x214]
neg ecx
sbb ecx, ecx
inc ecx
xor edx, edx
cmp ecx, 0xbeb9
setle dl
mov eax, dword [ebp - 0x214]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x40]
lea ecx, [ebp - 0x6ac]
call fcn.00409d6b
xor eax, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x54], 0x6dd2
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x40f0ff
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x324], 0xffffffff
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 3
jl 0x40f0e6
xor eax, eax
mov dword [ebp - 0x320], 3
jmp 0x40f1e7
mov dword [ebp - 0x28], 0xf390197f
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], edi
jge 0x40f131
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x168], edi
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], edi
jl 0x40f11d
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x40f1d8
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], eax
jl 0x40f1d5
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x40f16e
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x104], 0xffffffff
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 2
jl 0x40f155
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40f181
push eax
push eax
call dword [0xae8040]
xor eax, eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], eax
jg 0x40f1cc
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40f1a3
push 0x4a2
call dword [0xae8094]
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp + eax*4 - 0x168]
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x168], ecx
inc dword [ebp - 0x100]
cmp dword [ebp - 0x100], 0
push 0
pop eax
jle 0x40f18f
dec dword [ebp - 0x34]
jns 0x40f14c
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jle 0x40f139
dec dword [ebp - 0x320]
cmp dword [ebp - 0x320], 0xfffffff5
jle 0x40f10e
mov dword [ebp - 0x34], 2
jmp 0x40f231
mov dword [ebp - 0x38], 0xffff
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x40f226
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xf44], 0x188753e
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 3
jl 0x40f20d
xor eax, eax
cmp dword [ebp - 0x38], eax
jne 0x40f237
inc dword [ebp - 0x54]
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xb
jne 0x40f1fd
mov dword [ebp - 0x28], 0x42c70bb7
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x38], 0xcb0b9d62
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], edi
jge 0x40f26c
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x90], 0xfffffff8
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], edi
jl 0x40f254
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], eax
jl 0x40f2d9
mov dword [ebp - 0x50], 0x976ff55e
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], eax
jg 0x40f2d4
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40f299
push eax
call dword [0xae8538]
mov eax, dword [ebp - 0x50]
xor edx, edx
cmp eax, edi
setle dl
sub edx, dword [ebp - 0x90]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x90]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0
push 0
pop eax
jle 0x40f286
dec dword [ebp - 0x28]
jns 0x40f274
cmp dword [ebp - 0x90], eax
jne 0x40f2f9
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x30], 0x56e3
mov eax, dword [ebp - 0x30]
xor eax, eax
cmp dword [ebp - 0x30], eax
jne 0x40f314
cmp dword [ebp - 0x90], eax
mov edx, eax
je 0x40f316
mov edx, edi
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x48], 0x6b
mov dword [ebp - 0x5c], 0xac2a78
cmp dword [ebp - 0x48], 0x3a9
jle 0x40f3ac
push 0x913
push 0
call dword [0xae82f8]
xor ebx, ebx
mov dword [ebp - 0x30], ebx
xor edi, edi
mov dword [ebp - 0x40], edi
xor esi, esi
mov dword [ebp - 0x38], ebx
mov ecx, edi
mov edi, ebx
sar edi, cl
xor ebx, ebx
mov dword [ebp - 0x54], 0x7bbc
mov eax, edi
mov ecx, ebx
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xae4c58
call fcn.00409a6e
add ebx, esi
dec dword [ebp - 0x54]
jne 0x40f368
inc esi
cmp esi, 0x5b14
jl 0x40f35f
mov edi, dword [ebp - 0x40]
inc edi
mov dword [ebp - 0x40], edi
cmp edi, 0x4d9d
mov ebx, dword [ebp - 0x30]
jl 0x40f354
inc ebx
mov dword [ebp - 0x30], ebx
cmp ebx, 0x5688
jl 0x40f34f
xor edi, edi
inc edi
mov dword [ebp - 0x28], 0x42c70bb7
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x38], 0xcb0b9d62
xor eax, eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], edi
jge 0x40f3e3
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x8c], 0xfffffff8
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], edi
jl 0x40f3cb
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], eax
jl 0x40f450
mov dword [ebp - 0x50], 0x976ff55e
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], eax
jg 0x40f44b
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40f410
push eax
call dword [0xae8538]
mov eax, dword [ebp - 0x50]
xor edx, edx
cmp eax, edi
setle dl
sub edx, dword [ebp - 0x8c]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x8c]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0
push 0
pop eax
jle 0x40f3fd
dec dword [ebp - 0x28]
jns 0x40f3eb
cmp dword [ebp - 0x8c], eax
jne 0x40f470
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x30], 0x56e3
mov eax, dword [ebp - 0x30]
xor eax, eax
cmp dword [ebp - 0x30], eax
jne 0x40f48b
cmp dword [ebp - 0x8c], eax
mov edx, eax
je 0x40f48d
mov edx, edi
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x54], 0x576d
cmp dword [ebp - 0x54], 0x585f
jle 0x40f504
xor edi, edi
xor esi, esi
lea eax, [esi + edi]
cdq
push edx
push eax
lea ecx, [ebp - 0xfa4]
call fcn.00401b08
pop ecx
pop ecx
mov ecx, eax
call fcn.00409a63
push eax
call fcn.0049f827
pop ecx
push 0
push 1
lea ecx, [ebp - 0xfa4]
call fcn.0040a247
inc esi
cmp esi, 0x14a9
jl 0x40f4b1
inc edi
cmp edi, 0x58bf
jl 0x40f4af
xor edi, edi
inc edi
push edi
push 0
push 0x23a
call dword [0xae84f0]
mov dword [ebp - 0x40], 0x85a9576c
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x54], 0x5704
jge 0x40f526
push 0xac2a90
call fcn.0049f827
pop ecx
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x40f555
mov dword [ebp - 0x54], 6
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x40f581
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x354], 0x197f0a29
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 4
jl 0x40f568
xor eax, eax
cmp dword [ebp - 0x354], eax
je 0x40f593
cmp dword [ebp - 0x34c], eax
mov esi, edi
jne 0x40f595
mov esi, eax
mov ecx, dword [ebp - 0x54]
add ecx, 0x8f01
mov eax, dword [ebp - 0x348]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x354]
sub edx, eax
cmp ebx, edx
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x348]
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x54], ecx
xor eax, eax
cmp esi, 0x57ad
setl al
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x350]
mov eax, dword [ebp - 0x40]
xor edx, edx
cmp eax, ecx
setne dl
mov dword [ebp - 0x38], edx
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x40f600
push eax
push 0x16fe
call dword [0xae8140]
mov dword [ebp - 0x44], 0x9d29
push 3
lea ecx, [ebp - 0x508]
call fcn.00409c99
mov dword [ebp - 0x34], 5
xor eax, eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x40f641
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x508]
mov dword [eax + ecx*4], 0xd7f
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 3
jl 0x40f626
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jg 0x40f803
mov dword [ebp - 0x28], 0x4b25b3b9
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40f66a
push eax
push eax
push eax
push eax
call dword [0xae82fc]
xor eax, eax
mov dword [ebp - 0x1c], 0x5506
cmp dword [ebp - 0x1c], 0x568a
jle 0x40f6e0
lea ecx, [ebp - 0x508]
call fcn.00409d6b
mov dword [ebp - 0x28], 0x45fe46c2
mov dword [ebp - 0x28], 0x7e2799ac
mov dword [ebp - 0x2c], 0xfe737448
mov dword [ebp - 0x1c], 0
jmp 0x40f839
cmp dword [ebp - 0x1c], 3
jl 0x40f82c