Function at 0x412ee0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a8f7b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2308
call fcn.004a52e0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 0x275e
push 0x2440
push 1
push 0
push 0x77be
push 0x3df
call fcn.00409281
add esp, 0x18
mov dword [ebp - 0xc1c], 0x3029
mov dword [ebp - 0x10f0], 0xa9e818
cmp dword [ebp - 0xc1c], 0x339b
jle 0x412fd9
call dword [0xaba270]
and dword [ebp - 0x244], 0
jmp 0x412f69
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x5814
jge 0x412fcc
and dword [ebp - 0x3cc], 0
jmp 0x412f8b
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0x6593
jge 0x412fca
mov eax, dword [ebp - 0x244]
mov ecx, dword [ebp - 0x3cc]
shl eax, cl
cdq
mov dword [ebp - 0x1358], eax
mov dword [ebp - 0x1354], edx
push dword [ebp - 0x1354]
push dword [ebp - 0x1358]
mov ecx, 0xab6b98
call fcn.0042c6d4
jmp 0x412f7e
jmp 0x412f5c
push 0
push 0x13b4
call dword [0xaba404]
call fcn.0040dabf
mov dword [ebp - 0x10a0], 1
mov dword [ebp - 0x109c], 1
mov dword [ebp - 0x1098], 1
mov dword [ebp - 0x1094], 1
mov dword [ebp - 0xf40], 0x7213ec75
mov dword [ebp - 0xfd0], 1
mov dword [ebp - 0x1324], 0xffffffff
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x41303b
call fcn.00410b88
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x10a0]
mov dword [ebp - 0x1cb8], eax
push 4
pop eax
imul eax, eax, 3
imul eax, dword [ebp + eax - 0x10a0], 0x8084
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xf40]
cmp dword [ebp + eax - 0x10a0], ecx
jg 0x413080
mov dword [ebp - 0xc68], 1
jmp 0x413087
and dword [ebp - 0xc68], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10a0]
cmp dword [ebp - 0xc68], eax
jle 0x4130a8
mov dword [ebp - 0xf30], 1
jmp 0x4130af
and dword [ebp - 0xf30], 0
mov eax, dword [ebp - 0xfd0]
cmp dword [ebp - 0xf30], eax
jle 0x4130c9
mov dword [ebp - 0xf38], 1
jmp 0x4130d0
and dword [ebp - 0xf38], 0
cmp dword [ebp - 0xf38], 0xfffffff8
jbe 0x4130e5
mov dword [ebp - 0xf6c], 1
jmp 0x4130ec
and dword [ebp - 0xf6c], 0
mov eax, dword [ebp - 0xf40]
cmp dword [ebp - 0xf6c], eax
jne 0x413106
mov dword [ebp - 0x1238], 1
jmp 0x41310d
and dword [ebp - 0x1238], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10a0]
mov dword [ebp - 0x1c64], eax
cmp dword [ebp - 0x1324], 0x466b
je 0x413138
mov dword [ebp - 0xf74], 1
jmp 0x41313f
and dword [ebp - 0xf74], 0
mov eax, dword [ebp - 0xf74]
mov dword [ebp - 0xfd0], eax
mov dword [ebp - 0x81c], 0x7c203980
push 1
push 0x50a6
push 0x22c5
push 0
push 0x69c0
call fcn.0040d449
add esp, 0x14
mov dword [ebp - 0x10e8], 0xfffffff9
mov dword [ebp - 0xd0], 9
mov dword [ebp - 0x1344], 1
mov dword [ebp - 0x75c], 0xfffffffa
mov dword [ebp - 0xbdc], 7
mov dword [ebp - 0x134c], 3
mov dword [ebp - 0x794], 0x2a19820b
mov dword [ebp - 0x1ed8], 0xffffffff
mov dword [ebp - 0x3e0], 0xfffffff6
mov dword [ebp - 0x79c], 0x22a5
push 2
lea ecx, [ebp - 0x17d8]
call fcn.0042c8fc
mov dword [ebp - 0x210], 0
jmp 0x4131fa
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 3
jge 0x413216
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x17a8], 0x65e1bfed
jmp 0x4131ed
lea eax, [ebp - 0x17d8]
push eax
lea eax, [ebp - 0x210]
push eax
call fcn.0040ddf5
pop ecx
pop ecx
mov dword [ebp - 0xd0], 0xffffffff
jmp 0x413244
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x17
jle 0x41398f
mov dword [ebp - 0x133c], 1
mov dword [ebp - 0x1334], 0x5378470e
mov dword [ebp - 0x1c6c], 4
mov dword [ebp - 0x1dfc], 0xdc99220c
mov dword [ebp - 0xfd8], 0x5bf4
mov dword [ebp - 0x132c], 0xa9e860
cmp dword [ebp - 0xfd8], 0x5ed1
jle 0x413354
push 0
push 0x863
push 0
call dword [0xaba07c]
and dword [ebp - 0x254], 0
jmp 0x4132c2
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x27b8
jge 0x413354
and dword [ebp - 0x24c], 0
jmp 0x4132e8
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x6dd3
jge 0x41334f
and dword [ebp - 0x498], 0
jmp 0x41330a
mov eax, dword [ebp - 0x498]
inc eax
mov dword [ebp - 0x498], eax
cmp dword [ebp - 0x498], 0x186f
jge 0x41334d
mov eax, dword [ebp - 0x24c]
sub eax, dword [ebp - 0x498]
xor eax, dword [ebp - 0x254]
cdq
mov dword [ebp - 0x1364], eax
mov dword [ebp - 0x1360], edx
push dword [ebp - 0x1360]
push dword [ebp - 0x1364]
mov ecx, 0xab6b98
call fcn.0042c6d4
jmp 0x4132fd
jmp 0x4132db
jmp 0x4132b5
push 3
lea ecx, [ebp - 0x1078]
call fcn.0042c8fc
and dword [ebp - 4], 0
cmp dword [ebp - 0xfd8], 0x588a
jge 0x413381
mov edx, dword [ebp - 0x132c]
mov ecx, 0xab6b98
call fcn.0042ef5a
jmp 0x41339d
or dword [ebp - 4], 0xffffffff
jmp 0x4133a7
mov dword [ebp - 0xde4], 0xe0d6
mov dword [ebp - 0x6a4], 0xffffffff
mov dword [ebp - 0x1638], 0xfffffffa
mov dword [ebp - 0x1650], 0x402d6fa8
mov dword [ebp - 0x1658], 0
push 0x34b6
lea eax, [ebp - 0x1c74]
push eax
push 0
lea eax, [ebp - 0x1078]
push eax
push 0
call fcn.00405c59
add esp, 0x14
cmp dword [ebp - 0xd0], 0
jne 0x41340d
mov dword [ebp - 0xfac], 1
jmp 0x413414
and dword [ebp - 0xfac], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0xfac], eax
je 0x41342e
mov dword [ebp - 0x754], 1
jmp 0x413435
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x3e0]
dec eax
mov dword [ebp - 0x3e0], eax
mov esi, dword [ebp - 0x3e0]
neg esi
push 2
lea ecx, [ebp - 0x1078]
call fcn.0042c9ea
cmp esi, dword [eax]
jle 0x413467
mov dword [ebp - 0xefc], 1
jmp 0x41346e
and dword [ebp - 0xefc], 0
cmp dword [ebp - 0x1334], 5
jne 0x413483
mov dword [ebp - 0xf28], 1
jmp 0x41348a
and dword [ebp - 0xf28], 0
mov eax, dword [ebp - 0xefc]
cmp eax, dword [ebp - 0xf28]
jl 0x4134a4
mov dword [ebp - 0x73c], 1
jmp 0x4134ab
and dword [ebp - 0x73c], 0
cmp dword [ebp - 0x73c], 0x16658069
jg 0x4134c3
mov dword [ebp - 0xbac], 1
jmp 0x4134ca
and dword [ebp - 0xbac], 0
mov eax, dword [ebp - 0xde4]
add eax, dword [ebp - 0xbac]
cmp eax, dword [ebp - 0xbdc]
jle 0x4134ea
mov dword [ebp - 0x744], 1
jmp 0x4134f1
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x133c]
add eax, dword [ebp - 0x744]
sub eax, dword [ebp - 0x75c]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x17a8]
add eax, dword [ebp - 0xde4]
jns 0x413525
mov dword [ebp - 0x74c], 1
jmp 0x41352c
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x74c]
sub eax, dword [ebp - 0x794]
cmp eax, 0xfffffffa
je 0x413549
mov dword [ebp - 0xbb4], 1
jmp 0x413550
and dword [ebp - 0xbb4], 0
mov eax, dword [ebp - 0xbb4]
sub eax, 0x5a14
cmp dword [ebp - 0x754], eax
jg 0x41356f
mov dword [ebp - 0xfd4], 1
jmp 0x413576
and dword [ebp - 0xfd4], 0
mov eax, dword [ebp - 0xfd4]
sub eax, 0x4d2c
je 0x4135a7
mov byte [ebp - 0xe6], 0
push 0
lea eax, [ebp - 0xe6]
push eax
push 0
push 0x4829
call fcn.0042302e
add esp, 0x10
jmp 0x41397f
push 1
lea ecx, [ebp - 0x1820]
call fcn.0042c8fc
mov dword [ebp - 0x1630], 0x29d3eafc
mov dword [ebp - 0x1f5c], 5
mov dword [ebp - 0x1648], 0xd86c3ce9
mov dword [ebp - 0x1640], 0xfffffff7
mov dword [ebp - 0x1c7c], 0xe05bf5ef
mov dword [ebp - 0x1e0c], 8
push 0x3443
push 0
lea eax, [ebp - 0x1820]
push eax
lea eax, [ebp - 0x1c84]
push eax
push 0x6163
push 0
push 1
push 0x3007
call fcn.00408a09
add esp, 0x20
cmp dword [ebp - 0x75c], 0xffffffff
jge 0x413630
mov dword [ebp - 0x774], 1
jmp 0x413637
and dword [ebp - 0x774], 0
push 0
lea ecx, [ebp - 0x1820]
call fcn.0042c9ea
cmp dword [eax], 0xb704dcf7
je 0x413658
mov dword [ebp - 0xf04], 1
jmp 0x41365f
and dword [ebp - 0xf04], 0
mov esi, dword [ebp - 0x1344]
push 1
lea ecx, [ebp - 0x1078]
call fcn.0042c9ea
cmp esi, dword [eax]
jle 0x413682
mov dword [ebp - 0xbbc], 1
jmp 0x413689
and dword [ebp - 0xbbc], 0
cmp dword [ebp - 0xbbc], 0xfffffffd
jg 0x41369e
mov dword [ebp - 0x764], 1
jmp 0x4136a5
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x764], eax
jle 0x4136bf
mov dword [ebp - 0xdec], 1
jmp 0x4136c6
and dword [ebp - 0xdec], 0
mov eax, dword [ebp - 0x6a4]
inc eax
mov dword [ebp - 0x6a4], eax
mov eax, dword [ebp - 0x6a4]
imul eax, dword [ebp - 0xdec]
cmp eax, dword [ebp - 0x134c]
je 0x4136f4
mov dword [ebp - 0x76c], 1
jmp 0x4136fb
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x1630]
mov ecx, dword [ebp - 0x76c]
lea esi, [ecx + eax + 1]
push 0
lea ecx, [ebp - 0x1820]
call fcn.0042c9ea
cmp esi, dword [eax]
jne 0x413728
mov dword [ebp - 0xbc4], 1
jmp 0x41372f
and dword [ebp - 0xbc4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x17a8]
cmp dword [ebp - 0xbc4], eax
jle 0x413750
mov dword [ebp - 0x77c], 1
jmp 0x413757
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x774]
sub eax, dword [ebp - 0xf04]
cmp eax, dword [ebp - 0x77c]
jle 0x41377d
cmp dword [ebp - 0x1638], 0
jne 0x41377d
and dword [ebp - 0xbcc], 0
jmp 0x413787
mov dword [ebp - 0xbcc], 1
imul eax, dword [ebp - 0xbcc], 0xf8da
test eax, eax
jne 0x4137a7
cmp dword [ebp - 0x79c], 0
jne 0x4137a7
and dword [ebp - 0x784], 0
jmp 0x4137b1
mov dword [ebp - 0x784], 1
cmp dword [ebp - 0x784], 0
ja 0x4137c6
mov dword [ebp - 0xdf4], 1
jmp 0x4137cd
and dword [ebp - 0xdf4], 0
mov eax, dword [ebp - 0x1640]
cmp dword [ebp - 0xdf4], eax
jl 0x4137e7
mov dword [ebp - 0x78c], 1
jmp 0x4137ee
and dword [ebp - 0x78c], 0
imul eax, dword [ebp - 0x78c], 0xad05
cmp eax, dword [ebp - 0x1648]
jne 0x41380c
mov dword [ebp - 0xbd4], 1
jmp 0x413813
and dword [ebp - 0xbd4], 0
push 2
lea ecx, [ebp - 0x1078]
call fcn.0042c9ea
mov ecx, dword [ebp - 0xbd4]
cmp ecx, dword [eax]
je 0x41383c
cmp dword [ebp - 0x1650], 0
jne 0x41383c
and dword [ebp - 0xf9c], 0
jmp 0x413846
mov dword [ebp - 0xf9c], 1
mov esi, dword [ebp - 0x794]
imul esi, dword [ebp - 0xf9c]
push 0
lea ecx, [ebp - 0x1078]
call fcn.0042c9ea
mov dword [eax], esi
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x17a8]
cmp dword [ebp + eax - 0x17a8], ecx
jne 0x413889
mov dword [ebp - 0x7b4], 1
jmp 0x413890
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x79c]
add eax, dword [ebp - 0xbdc]
jne 0x4138aa
mov dword [ebp - 0x7a4], 1
jmp 0x4138b1
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x7a4], eax
jle 0x4138cb
mov dword [ebp - 0xdfc], 1
jmp 0x4138d2
and dword [ebp - 0xdfc], 0
mov eax, dword [ebp - 0x3e0]
cmp dword [ebp - 0xdfc], eax
jne 0x4138ec
mov dword [ebp - 0x7ac], 1
jmp 0x4138f3
and dword [ebp - 0x7ac], 0
push 0
lea ecx, [ebp - 0x17d8]
call fcn.0042c9ea
mov ecx, dword [ebp - 0x7ac]
cmp ecx, dword [eax]
jne 0x413916
mov dword [ebp - 0xbe4], 1
jmp 0x41391d
and dword [ebp - 0xbe4], 0
push 0
lea ecx, [ebp - 0x17d8]
call fcn.0042c9ea
mov ecx, dword [ebp - 0xbe4]
cmp ecx, dword [eax]
jle 0x413940
mov dword [ebp - 0xf0c], 1
jmp 0x413947
and dword [ebp - 0xf0c], 0
mov eax, dword [ebp - 0x7b4]
cmp eax, dword [ebp - 0xf0c]
jle 0x413961
mov dword [ebp - 0x7bc], 1
jmp 0x413968
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0x1658], eax
lea ecx, [ebp - 0x1820]
call fcn.0042c9ce
lea ecx, [ebp - 0x1078]
call fcn.0042c9ce
jmp 0x413237
lea ecx, [ebp - 0x17d8]
call fcn.0042c9ce
mov dword [ebp - 0x1758], 4
mov dword [ebp - 0x177c], 4
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xe0c], 0xcb5a
mov dword [ebp - 0xbf4], 0x166c1932
mov dword [ebp - 0x7e4], 1
mov dword [ebp - 0xbec], 0x1da5
mov dword [ebp - 0x1660], 0xa9e8d8
cmp dword [ebp - 0xbec], 0x1fc2
jle 0x413ac1
and dword [ebp - 0x264], 0
jmp 0x413a10
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x34dc
jge 0x413ac1
and dword [ebp - 0x25c], 0
jmp 0x413a36
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x2046
jge 0x413abc
and dword [ebp - 0x4f8], 0
jmp 0x413a58
mov eax, dword [ebp - 0x4f8]
inc eax
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x4f8], 0x12d6
jge 0x413ab7
mov eax, dword [ebp - 0x25c]
and eax, dword [ebp - 0x4f8]
xor eax, dword [ebp - 0x264]
cdq
mov dword [ebp - 0x1370], eax
mov dword [ebp - 0x136c], edx
push dword [ebp - 0x136c]
push dword [ebp - 0x1370]
lea ecx, [ebp - 0x20cc]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.0042c6c9
push eax
call fcn.00493197
pop ecx
lea ecx, [ebp - 0x20cc]
call fcn.0042c6bf
jmp 0x413a4b
jmp 0x413a29
jmp 0x413a03
mov dword [ebp - 0x3e8], 0
jmp 0x413ada
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 3
jge 0x413af6
mov eax, dword [ebp - 0x3e8]
mov dword [ebp + eax*4 - 0x1a10], 0xffffffff
jmp 0x413acd
mov dword [ebp - 4], 2
cmp dword [ebp - 0xbec], 0x19eb
jge 0x413b15
push dword [ebp - 0x1660]
call fcn.00493197
pop ecx
jmp 0x413b31
or dword [ebp - 4], 0xffffffff
jmp 0x413b3b
mov dword [ebp - 0xb8], 0
jmp 0x413b54
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jg 0x413b64
call fcn.00410bab
jmp 0x413b47
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a10], 0
jne 0x413cbf
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1a10], 0
jge 0x413b94
mov dword [ebp - 0x7c4], 1
jmp 0x413b9b
and dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x7c4], eax
jle 0x413bb5
mov dword [ebp - 0xe04], 1
jmp 0x413bbc
and dword [ebp - 0xe04], 0
mov eax, dword [ebp - 0xe04]
sub eax, 0xffff
jne 0x413bdb
cmp dword [ebp - 0xe0c], 0
jne 0x413bdb
and dword [ebp - 0x7cc], 0
jmp 0x413be5
mov dword [ebp - 0x7cc], 1
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0xbf4], eax
cmp dword [ebp - 0xbf4], 0
jne 0x413c15
mov eax, 0x691f6f49
test eax, eax
jne 0x413c15
mov eax, 0xdb39523d
test eax, eax
jne 0x413c15
and dword [ebp - 0x7d4], 0
jmp 0x413c1f
mov dword [ebp - 0x7d4], 1
cmp dword [ebp - 0x7d4], 0x2c40
jge 0x413c37
mov dword [ebp - 0xfbc], 1
jmp 0x413c3e
and dword [ebp - 0xfbc], 0
mov eax, dword [ebp - 0x7e4]
cmp dword [ebp - 0xfbc], eax
jg 0x413c58
mov dword [ebp - 0x7dc], 1
jmp 0x413c5f
and dword [ebp - 0x7dc], 0
cmp dword [ebp - 0x7dc], 8
je 0x413c79
xor eax, eax
inc eax
jne 0x413c79
mov dword [ebp - 0xbfc], 1
jmp 0x413c80
and dword [ebp - 0xbfc], 0
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0xbfc]
jl 0x413c9a
mov dword [ebp - 0x1668], 1
jmp 0x413ca1
and dword [ebp - 0x1668], 0
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0x1ee0], eax
cmp dword [ebp - 0xe0c], 0
jne 0x413cbf
and dword [ebp - 0x7ec], 0
jmp 0x413cc9
mov dword [ebp - 0x7ec], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a10]
cmp eax, dword [ebp - 0x7ec]
jge 0x413cea
mov dword [ebp - 0xc04], 1
jmp 0x413cf1
and dword [ebp - 0xc04], 0
mov eax, dword [ebp - 0xb8]
imul eax, dword [ebp - 0xc04]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x1494], 0xa08bbd18
mov dword [ebp - 0x131c], 1
mov dword [ebp - 0x63c], 6
mov dword [ebp - 0x16a0], 0xacb8f2ba
mov dword [ebp - 0x1690], 0x8b01
mov eax, dword [ebp - 0x63c]
mov dword [ebp - 0x1c8c], eax
cmp dword [ebp - 0x63c], 0
je 0x413d66
call fcn.0040de71
mov byte [ebp - 0x131], 0
lea eax, [ebp - 0x131]
push eax
call fcn.00410c92
pop ecx
jmp 0x413dd8
mov dword [ebp - 0x1698], 1
mov dword [ebp - 0x1680], 0x2aa9dade
mov dword [ebp - 0x1670], 0x9fa8bc07
mov dword [ebp - 0x1678], 0xe2fe8172
mov dword [ebp - 0x1688], 1
lea eax, [ebp - 0x1670]
push eax
lea eax, [ebp - 0x1678]
push eax
lea eax, [ebp - 0x63c]
push eax
lea eax, [ebp - 0x1680]
push eax
lea eax, [ebp - 0x1688]
push eax
lea eax, [ebp - 0x1690]
push eax
lea eax, [ebp - 0x1698]
push eax
lea eax, [ebp - 0x16a0]
push eax
call fcn.00410cb6
add esp, 0x20
mov dword [ebp - 0x10e0], 0xfda6
mov dword [ebp - 0x1588], 0xf8169c14
mov dword [ebp - 0x34], 0xe1757117
mov dword [ebp - 0x6dc], 0xffffffff
mov dword [ebp - 0x34], 0
jmp 0x413e0d
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xffffffe4
jge 0x413fdd
mov dword [ebp - 0x1854], 3
mov dword [ebp - 0x1850], 3
mov dword [ebp - 0x184c], 3
mov dword [ebp - 0x1848], 3
mov dword [ebp - 0x174c], 1
mov dword [ebp - 0x1754], 0x89063530
mov dword [ebp - 0x26c], 0
jmp 0x413e6c
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 4
jge 0x413e88
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x1f70], 3
jmp 0x413e5f
cmp dword [ebp - 0x34], 0
jne 0x413ea7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1854], 0
jne 0x413ea7
and dword [ebp - 0x7f4], 0
jmp 0x413eb1
mov dword [ebp - 0x7f4], 1
mov dword [ebp - 0x6dc], 0x1f09a2b4
mov eax, dword [ebp - 0x6dc]
cmp eax, dword [ebp - 0x7f4]
jle 0x413ed5
mov dword [ebp - 0xf14], 1
jmp 0x413edc
and dword [ebp - 0xf14], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1854]
cmp dword [ebp - 0xf14], eax
jne 0x413efd
mov dword [ebp - 0x16a8], 1
jmp 0x413f04
and dword [ebp - 0x16a8], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1e1c], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1c94], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x6dc], eax
jge 0x413f2d
mov dword [ebp - 0x7fc], 1
jmp 0x413f34
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x174c]
cmp dword [ebp - 0x7fc], eax
jne 0x413f60
cmp dword [ebp - 0x34], 0
jne 0x413f60
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1f70], 0
jne 0x413f60
and dword [ebp - 0xc0c], 0
jmp 0x413f6a
mov dword [ebp - 0xc0c], 1
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0xc0c]
add eax, 0x208af066
cmp eax, dword [ebp - 0x34]
jg 0x413f89
mov dword [ebp - 0x804], 1
jmp 0x413f90
and dword [ebp - 0x804], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1f70]
cmp dword [ebp - 0x804], eax
jge 0x413fb1
mov dword [ebp - 0xe14], 1
jmp 0x413fb8
and dword [ebp - 0xe14], 0
mov eax, dword [ebp - 0xe14]
mov dword [ebp - 0x1754], eax
mov byte [ebp - 0xe8], 0
lea eax, [ebp - 0xe8]
push eax
call fcn.0040de99
pop ecx
jmp 0x413e06
mov dword [ebp - 0x1870], 0x9c79ebef
mov dword [ebp - 0x186c], 0x9c79ebef
mov dword [ebp - 0x1868], 0x9c79ebef
mov dword [ebp - 0x1864], 0x9c79ebef
lea ecx, [ebp - 0x629]
call fcn.0042c9f9
push eax
lea eax, [ebp - 0x1860]
push eax
lea eax, [ebp - 0x1870]
push eax
lea ecx, [ebp - 0x1fcc]
call fcn.0042c9fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1d88]
call fcn.0042c9a8
mov dword [ebp - 0x14a0], 0x7eb6652f
mov dword [ebp - 0x4a0], 0
jmp 0x41405d
mov eax, dword [ebp - 0x4a0]
inc eax
mov dword [ebp - 0x4a0], eax
cmp dword [ebp - 0x4a0], 1
jge 0x414079
mov eax, dword [ebp - 0x4a0]
mov dword [ebp + eax*4 - 0x175c], 0xfffffffe
jmp 0x414050
mov byte [ebp - 0x111], 0
lea eax, [ebp - 0x111]
push eax
call fcn.0040debc
pop ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x175c], 8
push 0
lea eax, [ebp - 0x81c]
push eax
push 0x5635
push 0x2aa4
push 0
call fcn.0040aebc
add esp, 0x14
mov dword [ebp - 0x814], 0x10d21dfe
push 1
lea ecx, [ebp - 0x17f0]
call fcn.0042c8fc
mov dword [ebp - 0xc14], 0x9fb1c038
push 1
lea ecx, [ebp - 0x1808]
call fcn.0042c8fc
mov dword [ebp - 0xfa4], 0x2ff3e141
mov dword [ebp - 0x176c], 1
mov dword [ebp - 0x80c], 4
mov dword [ebp - 0x1774], 0x9dfeee83
mov dword [ebp - 0x1f24], 0x4523830a
lea eax, [ebp - 0x17f0]
push eax
push 0
push 0x2ab5
push 0
lea eax, [ebp - 0x1764]
push eax
call fcn.0040a5b6
add esp, 0x14
lea eax, [ebp - 0x1808]
push eax
lea eax, [ebp - 0x1764]
push eax
push 0
push 0x1fab
push 0
call fcn.00407ba0
add esp, 0x14
lea eax, [ebp - 0x176c]
push eax
lea eax, [ebp - 0x1808]
push eax
lea eax, [ebp - 0xc14]
push eax
lea eax, [ebp - 0x17f0]
push eax
lea eax, [ebp - 0x814]
push eax
lea eax, [ebp - 0xfa4]
push eax
lea eax, [ebp - 0x80c]
push eax
call fcn.0040deea
add esp, 0x1c
lea eax, [ebp - 0x80c]
push eax
lea eax, [ebp - 0xc14]
push eax
lea eax, [ebp - 0x17f0]
push eax
lea eax, [ebp - 0x814]
push eax
lea eax, [ebp - 0xfa4]
push eax
push 1
push 0
push 0x2112
lea eax, [ebp - 0x1808]
push eax
push 0x74fe
push 0x4c78
push 0
push 0x669a
lea eax, [ebp - 0x1774]
push eax
call fcn.00406a1b
add esp, 0x38
lea ecx, [ebp - 0x1808]
call fcn.0042c9ce
lea ecx, [ebp - 0x17f0]
call fcn.0042c9ce
lea eax, [ebp - 0x177c]
push eax
lea eax, [ebp - 0x1758]
push eax
lea eax, [ebp - 0x1494]
push eax
lea eax, [ebp - 0x131c]
push eax
lea eax, [ebp - 0x10e0]
push eax
lea eax, [ebp - 0x1588]
push eax
lea eax, [ebp - 0x10e8]
push eax
lea eax, [ebp - 0x1d88]
push eax
lea eax, [ebp - 0x81c]
push eax
lea eax, [ebp - 0x14a0]
push eax
call fcn.0040e26a
add esp, 0x28
lea ecx, [ebp - 0x1d88]
call fcn.0042c9ce
mov dword [ebp - 4], 4
cmp dword [ebp - 0xc1c], 0x2e62
jge 0x414277
mov edx, dword [ebp - 0x10f0]
mov ecx, 0xab6b98
call fcn.0042ef5a
jmp 0x414293
or dword [ebp - 4], 0xffffffff
jmp 0x41429d
mov dword [ebp - 0x824], 0x7d93
mov dword [ebp - 0x1590], 0xa9e958
cmp dword [ebp - 0x824], 0x7ed3
jle 0x414334
and dword [ebp - 0x274], 0
jmp 0x4142d3
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x7842
jge 0x414334
and dword [ebp - 0x3f0], 0
jmp 0x4142f5
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0x2249
jge 0x414332
mov eax, dword [ebp - 0x274]
sub eax, dword [ebp - 0x3f0]
cdq
mov dword [ebp - 0x137c], eax
mov dword [ebp - 0x1378], edx
push dword [ebp - 0x1378]
push dword [ebp - 0x137c]
mov ecx, 0xab6b98
call fcn.0042c6d4
jmp 0x4142e8
jmp 0x4142c6
mov dword [ebp - 0x10f8], 0
mov dword [ebp - 4], 6
cmp dword [ebp - 0x824], 0x7c81
jge 0x414361
mov edx, dword [ebp - 0x1590]
mov ecx, 0xab6b98
call fcn.0042ef5a
jmp 0x41437d
or dword [ebp - 4], 0xffffffff
jmp 0x414387
mov dword [ebp - 0x1c9c], 0
mov dword [ebp - 0x1e2c], 0xce9d05ba
push 1
lea ecx, [ebp - 0x1d98]
call fcn.0042c8fc
mov dword [ebp - 0x14ac], 0x2a83
lea eax, [ebp - 0x1d98]
push eax
lea eax, [ebp - 0x1ca4]
push eax
call fcn.0040e449
pop ecx
pop ecx
lea eax, [ebp - 0x10f8]
push eax
call fcn.0040e491
pop ecx
lea eax, [ebp - 0x14ac]
push eax
call fcn.0040e491
pop ecx
lea ecx, [ebp - 0x1d98]
call fcn.0042c9ce
mov dword [ebp - 0x6ac], 0x715f0ed1
push 3
lea ecx, [ebp - 0x1084]
call fcn.0042c8fc
mov dword [ebp - 0x188], 0xfffe
mov dword [ebp - 0x1108], 0x1e6e836
mov dword [ebp - 0xe1c], 0x7afe
mov dword [ebp - 0x1100], 0xa9e9d4
cmp dword [ebp - 0xe1c], 0x7e78
jle 0x4144fc
and dword [ebp - 0x27c], 0
jmp 0x414451
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0x6512
jge 0x4144e7
and dword [ebp - 0x528], 0
jmp 0x414477
mov eax, dword [ebp - 0x528]
inc eax
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 0x5d33
jge 0x4144e2
and dword [ebp - 0x284], 0
jmp 0x414499
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x1ba8
jge 0x4144e0
mov eax, dword [ebp - 0x27c]
mov ecx, dword [ebp - 0x528]
shl eax, cl
mov ecx, dword [ebp - 0x284]
shl eax, cl
cdq
mov dword [ebp - 0x1388], eax
mov dword [ebp - 0x1384], edx
push dword [ebp - 0x1384]
push dword [ebp - 0x1388]
mov ecx, 0xab6b98
call fcn.0042c6d4
jmp 0x41448c
jmp 0x41446a
jmp 0x414444
push 0x255c
push 0x250e
push 0x1561
call dword [0xaba450]
mov dword [ebp - 0x644], 4
mov dword [ebp - 4], 8
cmp dword [ebp - 0xe1c], 0x783e
jge 0x414529
mov edx, dword [ebp - 0x1100]
mov ecx, 0xab6b98
call fcn.0042ef5a
jmp 0x414545
or dword [ebp - 4], 0xffffffff
jmp 0x41454f
mov dword [ebp - 0x64c], 0xe0689bb5
lea eax, [ebp - 0x1084]
push eax
lea eax, [ebp - 0x22c]
push eax
call fcn.0040e4aa
pop ecx
pop ecx
mov dword [ebp - 0x22c], 0
jmp 0x414587
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 2
jge 0x4145a3
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x1aa8], 0xffffffff
jmp 0x41457a
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x1598], eax
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x1598], 0xfff9
jne 0x4145d4
mov dword [ebp - 0x82c], 1
jmp 0x4145db
and dword [ebp - 0x82c], 0
push 0
lea ecx, [ebp - 0x1084]
call fcn.0042c9ea
mov eax, dword [eax]
inc eax
cmp dword [ebp - 0x82c], eax
jle 0x4145ff
mov dword [ebp - 0xc24], 1
jmp 0x414606
and dword [ebp - 0xc24], 0
push 1
lea ecx, [ebp - 0x1084]
call fcn.0042c9ea
mov ecx, dword [ebp - 0xc24]
imul ecx, dword [eax]
mov dword [ebp - 0x1108], ecx
cmp dword [ebp - 0x188], 0
jne 0x41463d
mov eax, 0x6fc75dfc
test eax, eax
jne 0x41463d
and dword [ebp - 0x834], 0
jmp 0x414647
mov dword [ebp - 0x834], 1
mov eax, dword [ebp - 0x644]
cmp dword [ebp - 0x834], eax
je 0x414661
mov dword [ebp - 0xf1c], 1
jmp 0x414668
and dword [ebp - 0xf1c], 0
push 0
lea ecx, [ebp - 0x1084]
call fcn.0042c9ea
mov ecx, dword [ebp - 0xf1c]
cmp ecx, dword [eax]
jg 0x414686
cmp dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x1ee8], eax
push 2
lea ecx, [ebp - 0x1084]
call fcn.0042c9ea
mov dword [eax], 0xfffffff9
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x4146b8
mov dword [ebp - 0x14b8], 1
jmp 0x4146bf
and dword [ebp - 0x14b8], 0
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0x1cac], eax
mov eax, 0x8ebcce3f
add eax, 0x4ed832cb
neg eax
cmp eax, 0x16ffa942
jl 0x4146ea
mov dword [ebp - 0x83c], 1
jmp 0x4146f1
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0x6ac]
cmp dword [ebp - 0x83c], eax
jl 0x41470b
mov dword [ebp - 0xc2c], 1
jmp 0x414712
and dword [ebp - 0xc2c], 0
mov eax, dword [ebp - 0x6ac]
cmp eax, dword [ebp - 0xc2c]
jl 0x41472c
mov dword [ebp - 0x844], 1
jmp 0x414733
and dword [ebp - 0x844], 0
cmp dword [ebp - 0x844], 0x3376
jne 0x41474b
mov dword [ebp - 0xe24], 1
jmp 0x414752
and dword [ebp - 0xe24], 0
mov eax, dword [ebp - 0x644]
cmp dword [ebp - 0xe24], eax
jg 0x41476c
mov dword [ebp - 0x84c], 1
jmp 0x414773
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x6ac]
cmp dword [ebp - 0x84c], eax
jl 0x41478d
mov dword [ebp - 0x1110], 1
jmp 0x414794
and dword [ebp - 0x1110], 0
cmp dword [ebp - 0x64c], 0xfffffff7
jg 0x4147a9
mov dword [ebp - 0xc34], 1
jmp 0x4147b0
and dword [ebp - 0xc34], 0
mov eax, dword [ebp - 0x64c]
add eax, dword [ebp - 0xc34]
je 0x4147d3
cmp dword [ebp - 0x64c], 0
je 0x4147d3
mov dword [ebp - 0x854], 1
jmp 0x4147da
and dword [ebp - 0x854], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x854]
mov dword [ebp + eax - 0x1aa8], ecx
lea ecx, [ebp - 0x1084]
call fcn.0042c9ce
mov dword [ebp - 0xc74], 0x2f8
mov dword [ebp - 0x1148], 0xa9ea18
cmp dword [ebp - 0xc74], 0x539
jle 0x41489f
and dword [ebp - 0x3f8], 0
jmp 0x414832
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0x22a6
jge 0x414895
and dword [ebp - 0x28c], 0
jmp 0x414854
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x2cc0
jge 0x414893
mov eax, dword [ebp - 0x3f8]
mov ecx, dword [ebp - 0x28c]
sar eax, cl
cdq
mov dword [ebp - 0x1394], eax
mov dword [ebp - 0x1390], edx
push dword [ebp - 0x1390]
push dword [ebp - 0x1394]
mov ecx, 0xab6b98
call fcn.0042c6d4
jmp 0x414847
jmp 0x414825
push 0
push 0
call dword [0xaba390]
call fcn.0040e4f2
mov dword [ebp - 0x1a8], 0xe8cff0ea
push 0
push 0x6ba8
lea eax, [ebp - 0x1a8]
push eax
push 1
push 0x6eda
push 0x7a3b
call fcn.0040cd13
add esp, 0x18
mov dword [ebp - 0x1a8], 0
jmp 0x4148e9
mov eax, dword [ebp - 0x1a8]
dec eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0xfffffff6
jle 0x4148fe
call fcn.00410eda
call fcn.00410ef3
jmp 0x4148dc
mov dword [ebp - 0x1140], 0
mov dword [ebp - 0x654], 0x715f0ed1
push 3
lea ecx, [ebp - 0x1030]
call fcn.0042c8fc
mov dword [ebp - 0x19c], 0xfffe
mov dword [ebp - 0x1118], 0x1e6e836
mov dword [ebp - 0x714], 4
mov dword [ebp - 0x6b4], 0xe0689bb5
push 0x329f
push 0
push 1
lea eax, [ebp - 0x228]
push eax
push 0x2b82
push 0x65b1
lea eax, [ebp - 0x1030]
push eax
push 0x1364
push 0x27df
push 0x7fe5
call fcn.00408253
add esp, 0x28
mov dword [ebp - 0x228], 0
jmp 0x414998
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 2
jge 0x4149b4
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x1ab4], 0xffffffff
jmp 0x41498b
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x15a0], eax
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x15a0], 0xfff9
jne 0x4149e5
mov dword [ebp - 0xfcc], 1
jmp 0x4149ec
and dword [ebp - 0xfcc], 0
push 0
lea ecx, [ebp - 0x1030]
call fcn.0042c9ea
mov eax, dword [eax]
inc eax
cmp dword [ebp - 0xfcc], eax
jle 0x414a10
mov dword [ebp - 0x85c], 1
jmp 0x414a17
and dword [ebp - 0x85c], 0
push 1
lea ecx, [ebp - 0x1030]
call fcn.0042c9ea
mov ecx, dword [ebp - 0x85c]
imul ecx, dword [eax]
mov dword [ebp - 0x1118], ecx
cmp dword [ebp - 0x19c], 0
jne 0x414a4e
mov eax, 0x6fc75dfc
test eax, eax
jne 0x414a4e
and dword [ebp - 0xc3c], 0
jmp 0x414a58
mov dword [ebp - 0xc3c], 1
mov eax, dword [ebp - 0x714]
cmp dword [ebp - 0xc3c], eax
je 0x414a72
mov dword [ebp - 0x864], 1
jmp 0x414a79
and dword [ebp - 0x864], 0
push 0
lea ecx, [ebp - 0x1030]
call fcn.0042c9ea
mov ecx, dword [ebp - 0x864]
cmp ecx, dword [eax]
jg 0x414a97
cmp dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1e3c], eax
push 2
lea ecx, [ebp - 0x1030]
call fcn.0042c9ea
mov dword [eax], 0xfffffff9
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x414ac9
mov dword [ebp - 0x14c4], 1
jmp 0x414ad0
and dword [ebp - 0x14c4], 0
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x1cb4], eax
mov eax, 0x8ebcce3f
add eax, 0x4ed832cb
neg eax
cmp eax, 0x16ffa942
jl 0x414afb
mov dword [ebp - 0xe2c], 1
jmp 0x414b02
and dword [ebp - 0xe2c], 0
mov eax, dword [ebp - 0x654]
cmp dword [ebp - 0xe2c], eax
jl 0x414b1c
mov dword [ebp - 0x86c], 1
jmp 0x414b23
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x654]
cmp eax, dword [ebp - 0x86c]
jl 0x414b3d
mov dword [ebp - 0xc44], 1
jmp 0x414b44
and dword [ebp - 0xc44], 0
cmp dword [ebp - 0xc44], 0x3376
jne 0x414b5c
mov dword [ebp - 0x874], 1
jmp 0x414b63
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x714]
cmp dword [ebp - 0x874], eax
jg 0x414b7d
mov dword [ebp - 0xf24], 1
jmp 0x414b84
and dword [ebp - 0xf24], 0
mov eax, dword [ebp - 0x654]
cmp dword [ebp - 0xf24], eax
jl 0x414b9e
mov dword [ebp - 0x1120], 1
jmp 0x414ba5
and dword [ebp - 0x1120], 0
cmp dword [ebp - 0x6b4], 0xfffffff7
jg 0x414bba
mov dword [ebp - 0x87c], 1
jmp 0x414bc1
and dword [ebp - 0x87c], 0
mov eax, dword [ebp - 0x6b4]
add eax, dword [ebp - 0x87c]
je 0x414be4
cmp dword [ebp - 0x6b4], 0
je 0x414be4
mov dword [ebp - 0xc4c], 1
jmp 0x414beb
and dword [ebp - 0xc4c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp + eax - 0x1ab4], ecx
lea ecx, [ebp - 0x1030]
call fcn.0042c9ce
mov dword [ebp - 0x1e70], 0
mov dword [ebp - 0x1128], 1
mov dword [ebp - 0x15a8], 0
lea eax, [ebp - 0x15a8]
push eax
lea eax, [ebp - 0x1128]
push eax
call fcn.0040e614
pop ecx
pop ecx
mov byte [ebp - 0xea], 0
lea eax, [ebp - 0xea]
push eax
call fcn.0040e775
pop ecx
mov dword [ebp - 0x1cbc], 0xce9d05ba
mov dword [ebp - 0x884], 0
mov dword [ebp - 0x1e4c], 0xffffffff
mov dword [ebp - 0x88c], 2
mov dword [ebp - 0x6e4], 0xc88eb987
mov dword [ebp - 0xe34], 0x1a969ac5
mov dword [ebp - 0x1cc4], 0xd8af871
mov dword [ebp - 0x1e74], 0xdb2b
mov dword [ebp - 0xe3c], 1
mov dword [ebp - 0x65c], 0
mov dword [ebp - 0x1130], 0
mov dword [ebp - 0xc6c], 1
mov dword [ebp - 0x1138], 0xfffffffe
mov dword [ebp - 0x4a8], 0
jmp 0x414ceb
mov eax, dword [ebp - 0x4a8]
inc eax
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x4a8], 2
jge 0x414d07
mov eax, dword [ebp - 0x4a8]
mov dword [ebp + eax*4 - 0x1834], 0x91b68dee
jmp 0x414cde
cmp dword [ebp - 0x884], 0
je 0x414de6
cmp dword [ebp - 0x884], 0
jne 0x414d49
mov eax, dword [ebp - 0xe34]
mov ecx, dword [ebp - 0x65c]
sub ecx, 0x554a9bef
mov edx, dword [ebp - 0x65c]
dec edx
mov dword [ebp - 0x65c], edx
cmp ecx, eax
je 0x414d49
and dword [ebp - 0x894], 0
jmp 0x414d53
mov dword [ebp - 0x894], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1834]
mov dword [ebp - 0x88c], eax
mov eax, dword [ebp - 0xe34]
cmp dword [ebp - 0x88c], eax
je 0x414d80
mov dword [ebp - 0xc54], 1
jmp 0x414d87
and dword [ebp - 0xc54], 0
mov eax, dword [ebp - 0x6e4]
cmp dword [ebp - 0xc54], eax
jne 0x414da1
mov dword [ebp - 0xf7c], 1
jmp 0x414da8
and dword [ebp - 0xf7c], 0
mov eax, dword [ebp - 0x894]
cmp eax, dword [ebp - 0xf7c]
je 0x414dc2
mov dword [ebp - 0x89c], 1
jmp 0x414dc9
and dword [ebp - 0x89c], 0
imul eax, dword [ebp - 0x89c], 3
test eax, eax
jne 0x414de6
lea eax, [ebp - 0x6e4]
push eax
call fcn.00410f18
pop ecx
jmp 0x414fe1
mov dword [ebp - 0x294], 0xb83eb619
cmp dword [ebp - 0x294], 0
je 0x414fa6
mov dword [ebp - 0x1b0], 0xef544bd1
mov dword [ebp - 0xf2c], 1
mov dword [ebp - 0x15b0], 0xffffffff
mov eax, dword [ebp - 0x294]
neg eax
jne 0x414f8e
cmp dword [ebp - 0x1b0], 0x518db068
jg 0x414e4a
mov eax, 0xeae26468
test eax, eax
je 0x414e4a
mov dword [ebp - 0xc5c], 1
jmp 0x414e51
and dword [ebp - 0xc5c], 0
mov eax, dword [ebp - 0xe3c]
cmp dword [ebp - 0xc5c], eax
jle 0x414e6b
mov dword [ebp - 0x8a4], 1
jmp 0x414e72
and dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x8a4]
sub eax, dword [ebp - 0xe3c]
cmp eax, dword [ebp - 0x1b0]
jl 0x414e9b
cmp dword [ebp - 0x1b0], 0
je 0x414e9b
mov dword [ebp - 0x8ac], 1
jmp 0x414ea2
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x1b0]
cmp eax, dword [ebp - 0x8ac]
jle 0x414ebc
mov dword [ebp - 0xc64], 1
jmp 0x414ec3
and dword [ebp - 0xc64], 0
cmp dword [ebp - 0xc64], 0
je 0x414ee1
mov eax, 0x34e4
test eax, eax
je 0x414ee1
mov dword [ebp - 0x14d0], 1
jmp 0x414ee8
and dword [ebp - 0x14d0], 0
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x1ccc], eax
cmp dword [ebp - 0x1b0], 0xfffffff8
ja 0x414f09
mov dword [ebp - 0x8b4], 1
jmp 0x414f10
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0xf2c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1834]
cmp dword [ebp - 0xf2c], eax
jle 0x414f3d
mov dword [ebp - 0x8bc], 1
jmp 0x414f44
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x1130]
imul eax, dword [ebp - 0x8bc]
test eax, eax
je 0x414f6a
cmp dword [ebp - 0xc6c], 0
je 0x414f6a
mov dword [ebp - 0x8c4], 1
jmp 0x414f71
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0xc6c]
add eax, dword [ebp - 0x8c4]
cmp dword [ebp - 0x6e4], eax
jg 0x414f8e
and dword [ebp - 0xe44], 0
jmp 0x414f98
mov dword [ebp - 0xe44], 1
mov eax, dword [ebp - 0xe44]
mov dword [ebp - 0x15b0], eax
jmp 0x414fbd
mov byte [ebp - 0x13a], 0
movzx eax, byte [ebp - 0x13a]
test eax, eax
je 0x414fbd
call fcn.0040e894
lea eax, [ebp - 0x294]
push eax
push 0x14d8
push 0x5804
push 0
lea eax, [ebp - 0x1138]
push eax
push 1
call fcn.0040af58
add esp, 0x18
mov byte [ebp - 0xd6], 0
lea eax, [ebp - 0xd6]
push eax
call fcn.0040e89f
pop ecx
push 1
lea ecx, [ebp - 0x1da8]
call fcn.0042c8fc
mov dword [ebp - 0x1e5c], 0xffff
push 0x332b
push 1
push 0x60c1
push 0
push 0x7d59
call fcn.004068ae
add esp, 0x14
call fcn.0040e8c6
mov dword [ebp - 0x15b8], 0x2a83
mov dword [ebp - 0x1f0], 0x477862fd
mov dword [ebp - 0x1f0], 0xffffffeb
jmp 0x415059
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0xfffffffc
jl 0x4150a0
mov dword [ebp - 0x14dc], 0
mov dword [ebp - 0x8cc], 0x20525c7e
lea eax, [ebp - 0x8cc]
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x14dc]
push eax
call fcn.00410f65
add esp, 0xc
cmp dword [ebp - 0x8cc], 0
je 0x41509e
jmp 0x4150a0
jmp 0x41504c
push 0x4112
push 0
lea eax, [ebp - 0x1cd4]
push eax
push 0x864
push 0
push 0x17af
push 0xb5c
lea eax, [ebp - 0x1da8]
push eax
push 0x5473
push 0x30d3
push 0x599b
push 0xedd
push 0x107f
push 1
push 0x16fb
call fcn.00408c3b
add esp, 0x3c
push 1
push 0x3d2e
push 0
lea eax, [ebp - 0x1140]
push eax
call fcn.0042302e
add esp, 0x10
call fcn.0041107e
lea eax, [ebp - 0x15b8]
push eax
call fcn.0040e491
pop ecx
lea ecx, [ebp - 0x1da8]
call fcn.0042c9ce
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0xc74], 0x2ca
jge 0x415146
mov edx, dword [ebp - 0x1148]
mov ecx, 0xab6b98
call fcn.0042ef5a
jmp 0x415162
or dword [ebp - 4], 0xffffffff
jmp 0x41516c
mov dword [ebp - 0x1e7c], 0xdde0
mov dword [ebp - 0x1cdc], 0x5cdbe8e5
mov dword [ebp - 0x1e6c], 0xfb6318d5
mov dword [ebp - 0x1ce4], 1
mov dword [ebp - 0x1e84], 0x3ed15de0
mov dword [ebp - 0x1cec], 0x60d00585
mov dword [ebp - 0x1e8c], 0
mov dword [ebp - 0x1cf4], 0xf934f545
mov dword [ebp - 0x14e8], 5
mov dword [ebp - 0x400], 0
jmp 0x4151df
mov eax, dword [ebp - 0x400]
inc eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 4
jge 0x4151fb
mov eax, dword [ebp - 0x400]
mov dword [ebp + eax*4 - 0x22f8], 0
jmp 0x4151d2
push 0x13fa
push 0x57b2
lea eax, [ebp - 0x14e8]
push eax
push 0
push 0x21c1
push 0
push 0x170d
push 1
call fcn.0040d6a5
add esp, 0x20
mov eax, dword [0xab7d98]
and eax, 1
jne 0x415250
mov eax, dword [0xab7d98]
or eax, 1
mov dword [0xab7d98], eax
mov ecx, 0xab7dac
call fcn.0042ca10
push 0x4a98e6
call fcn.0049316d
pop ecx
mov dword [ebp - 0x8d4], 0x1aee
mov dword [ebp - 0x1150], 0xa9ea88
cmp dword [ebp - 0x8d4], 0x1c96
jle 0x415359
and dword [ebp - 0x29c], 0
jmp 0x41528a
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0x5971
jge 0x415359
and dword [ebp - 0x500], 0
jmp 0x4152b0
mov eax, dword [ebp - 0x500]
inc eax
mov dword [ebp - 0x500], eax
cmp dword [ebp - 0x500], 0x7caf
jge 0x415354
and dword [ebp - 0x2a4], 0
jmp 0x4152d6
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x6b9e
jge 0x41534f
and dword [ebp - 0x408], 0
jmp 0x4152f8
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 0x6149
jge 0x41534a
mov esi, dword [ebp - 0x29c]
mov ecx, dword [ebp - 0x500]
shl esi, cl
mov eax, dword [ebp - 0x2a4]
cdq
idiv dword [ebp - 0x408]
mov ecx, edx
shl esi, cl
mov eax, esi
cdq
mov dword [ebp - 0x13a0], eax
mov dword [ebp - 0x139c], edx
push dword [ebp - 0x139c]
push dword [ebp - 0x13a0]
mov ecx, 0xab6b98
call fcn.0042c6d4
jmp 0x4152eb
jmp 0x4152c9
jmp 0x4152a3
jmp 0x41527d
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x8d4], 0x1916
jge 0x41537c
mov edx, dword [ebp - 0x1150]
mov ecx, 0xab6b98
call fcn.0042ef5a
jmp 0x415398
or dword [ebp - 4], 0xffffffff
jmp 0x4153a2
push 3
lea ecx, [ebp - 0x1968]
call fcn.0042c8fc
mov dword [ebp - 0xf80], 0x777b
mov dword [ebp - 0x15c0], 0xa9eaf4
cmp dword [ebp - 0xf80], 0x7817
jle 0x41549a
and dword [ebp - 0x2b4], 0
jmp 0x4153e9
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x2c6e
jge 0x41549a
and dword [ebp - 0x2ac], 0
jmp 0x41540f
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x5251
jge 0x415495
and dword [ebp - 0x4b0], 0
jmp 0x415431
mov eax, dword [ebp - 0x4b0]
inc eax
mov dword [ebp - 0x4b0], eax
cmp dword [ebp - 0x4b0], 0x133e
jge 0x415490
mov eax, dword [ebp - 0x2ac]
xor eax, dword [ebp - 0x4b0]
or eax, dword [ebp - 0x2b4]
cdq
mov dword [ebp - 0x13ac], eax
mov dword [ebp - 0x13a8], edx
push dword [ebp - 0x13a8]
push dword [ebp - 0x13ac]
lea ecx, [ebp - 0x21f8]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.0042c6c9
push eax
call fcn.00493197
pop ecx
lea ecx, [ebp - 0x21f8]
call fcn.0042c6bf
jmp 0x415424
jmp 0x415402
jmp 0x4153dc
mov dword [ebp - 0x15c8], 0xe19d29be
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0xf80], 0x7690
jge 0x4154c3
push dword [ebp - 0x15c0]
call fcn.00493197
pop ecx
jmp 0x4154df
or dword [ebp - 4], 0xffffffff
jmp 0x4154e9
mov dword [ebp - 0x1168], 0x4dc9ed9b
mov dword [ebp - 0x1e78], 0x2d9e
mov dword [ebp - 0x1cfc], 0
mov dword [ebp - 0x1ef0], 8
push 2
lea ecx, [ebp - 0x1db8]
call fcn.0042c8fc
mov dword [ebp - 0x1160], 0xcb6a7f4e
mov dword [ebp - 0x1d04], 1
mov dword [ebp - 0x8dc], 0x553
mov dword [ebp - 0x1158], 0xa9eb18
cmp dword [ebp - 0x8dc], 0x8f6
jle 0x41561e
and dword [ebp - 0x410], 0
jmp 0x41556c
mov eax, dword [ebp - 0x410]
inc eax
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 0x3968
jge 0x41561e
and dword [ebp - 0x2bc], 0
jmp 0x415592
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x1cd
jge 0x415619
and dword [ebp - 0x540], 0
jmp 0x4155b4
mov eax, dword [ebp - 0x540]
inc eax
mov dword [ebp - 0x540], eax
cmp dword [ebp - 0x540], 0x463e
jge 0x415614
mov eax, dword [ebp - 0x410]
imul eax, dword [ebp - 0x2bc]
or eax, dword [ebp - 0x540]
cdq
mov dword [ebp - 0x13b8], eax
mov dword [ebp - 0x13b4], edx
push dword [ebp - 0x13b4]
push dword [ebp - 0x13b8]
lea ecx, [ebp - 0x2108]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.0042c6c9
push eax
call fcn.00493197
pop ecx
lea ecx, [ebp - 0x2108]
call fcn.0042c6bf
jmp 0x4155a7
jmp 0x415585
jmp 0x41555f
mov dword [ebp - 0x1b04], 1
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x8dc], 0x231
jge 0x415647
push dword [ebp - 0x1158]
call fcn.00493197
pop ecx
jmp 0x415663
or dword [ebp - 4], 0xffffffff
jmp 0x41566d
lea eax, [ebp - 0x1968]
push eax
lea eax, [ebp - 0x14f4]
push eax
call fcn.00404571
pop ecx
pop ecx
lea eax, [ebp - 0x14f4]
push eax
push 0x68e5
push 0x5cfc
push 0
lea eax, [ebp - 0x1db8]
push eax
push 1
push 0x2e58
push 1
call fcn.0040d6a5
add esp, 0x20
lea eax, [ebp - 0x1160]
push eax
lea eax, [ebp - 0x1968]
push eax
lea eax, [ebp - 0x15c8]
push eax
call fcn.0040e9f6
add esp, 0xc
lea eax, [ebp - 0x1168]
push eax
call fcn.004111dc
pop ecx
lea ecx, [ebp - 0x1db8]
call fcn.0042c9ce
lea ecx, [ebp - 0x1968]
call fcn.0042c9ce
push 0
push 0x580e
push 0x6cb
push 1
call fcn.00405e08
add esp, 0x10
mov dword [ebp - 0x66c], 0x715f0ed1
call fcn.00411213
push 3
lea ecx, [ebp - 0x1048]
call fcn.0042c8fc
mov dword [ebp - 0x38], 0xfffa
mov dword [ebp - 0x2c4], 0
jmp 0x41573f
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 1
jge 0x415758
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0x68], 0x1c7bf0b9
jmp 0x415732
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x38]
mov dword [ebp + eax - 0x68], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
mov dword [ebp - 0x1b08], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
mov dword [ebp - 0x1b10], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
mov dword [ebp - 0x1b18], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0x38], eax
jle 0x4157b0
mov dword [ebp - 0xc7c], 1
jmp 0x4157b7
and dword [ebp - 0xc7c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp eax, dword [ebp - 0xc7c]
jg 0x4157d5
mov dword [ebp - 0x8e4], 1
jmp 0x4157dc
and dword [ebp - 0x8e4], 0
cmp dword [ebp - 0x8e4], 0
jne 0x4157f1
mov dword [ebp - 0xe4c], 1
jmp 0x4157f8
and dword [ebp - 0xe4c], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xe4c], eax
jg 0x41580f
mov dword [ebp - 0x8ec], 1
jmp 0x415816
and dword [ebp - 0x8ec], 0
cmp dword [ebp - 0x8ec], 0xdcad
jl 0x41583b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
je 0x41583b
mov dword [ebp - 0xc84], 1
jmp 0x415842
and dword [ebp - 0xc84], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0xc84], eax
je 0x415860
mov dword [ebp - 0x8f4], 1
jmp 0x415867
and dword [ebp - 0x8f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0x8f4], eax
jne 0x415993
mov dword [ebp - 0x418], 0
jmp 0x415896
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 2
jge 0x4158b2
mov eax, dword [ebp - 0x418]
mov dword [ebp + eax*4 - 0x1ac0], 0x5610
jmp 0x415889
mov dword [ebp - 0x38], 0
jmp 0x4158c2
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 8
jle 0x415991
mov dword [ebp - 0x2cc], 1
mov dword [ebp - 0x2cc], 0
jmp 0x4158ef
mov eax, dword [ebp - 0x2cc]
dec eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0xfffffff9
jl 0x41598c
push 4
pop eax
imul eax, eax, 0
push 0xfffffffffffffffc
pop ecx
sub ecx, dword [ebp + eax - 0x1ac0]
je 0x41595b
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x415959
push 0x6d6
push 0x46a
push 0x62e4
push 0
push 0x6a44
push 0x6b2d
push 0x899
push 0
push 0x4640
push 0xc47
push 0x48ba
call fcn.0040b712
add esp, 0x2c
jmp 0x415987
mov dword [ebp - 0x1500], 0x50cfdfe9
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x41597c
call fcn.00411289
cmp dword [ebp - 0x1500], 0
je 0x415987
jmp 0x41598c
jmp 0x4158e2
jmp 0x4158bb
jmp 0x4159cf
mov dword [ebp - 0x38], 0xffffffe8
jmp 0x4159a3
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x28
jge 0x4159cf
mov byte [ebp - 0xdb], 0
lea eax, [ebp - 0xdb]
push eax
push 0x6d20
push 0
push 0x54f0
push 1
call fcn.00405c59
add esp, 0x14
jmp 0x41599c
mov dword [ebp - 0x158], 0xfffe
mov dword [ebp - 0x140], 0
push 1
lea ecx, [ebp - 0xfe4]
call fcn.0042c8fc
mov dword [ebp - 0xc8c], 0xbae0fc36
mov dword [ebp - 0x150c], 1
push 0
push 1
lea eax, [ebp - 0xfe4]
push eax
push 0
push 0x6a37
lea eax, [ebp - 0x58]
push eax
push 0x3100
call fcn.00422684
add esp, 0x1c
mov dword [ebp - 0x58], 0
jmp 0x415a37
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x415a4d
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x1f7c], 7
jmp 0x415a30
mov dword [ebp - 0x58], 0
jmp 0x415a5d
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x415a73
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x183c], 0x489b467b
jmp 0x415a56
cmp dword [ebp - 0x140], 0
jne 0x415a88
mov dword [ebp - 0x1170], 1
jmp 0x415a8f
and dword [ebp - 0x1170], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x1b20], eax
mov eax, 0xa592c6ee
test eax, eax
je 0x415ab9
cmp dword [ebp - 0x140], 0
je 0x415ab9
mov dword [ebp - 0xf34], 1
jmp 0x415ac0
and dword [ebp - 0xf34], 0
push 0
lea ecx, [ebp - 0xfe4]
call fcn.0042c9ea
mov eax, dword [eax]
cmp eax, dword [ebp - 0xf34]
jg 0x415ae3
mov dword [ebp - 0x8fc], 1
jmp 0x415aea
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x8fc]
sub eax, 0xd3ec
mov dword [ebp - 0xc8c], eax
cmp dword [ebp - 0xc8c], 0x5ab0
je 0x415b13
mov dword [ebp - 0x15d0], 1
jmp 0x415b1a
and dword [ebp - 0x15d0], 0
push 0
lea ecx, [ebp - 0xfe4]
call fcn.0042c9ea
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x1b28], eax
mov esi, dword [ebp - 0x140]
push 0
lea ecx, [ebp - 0xfe4]
call fcn.0042c9ea
cmp esi, dword [eax]
jg 0x415b56
mov dword [ebp - 0x664], 1
jmp 0x415b5d
and dword [ebp - 0x664], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x664]
mov dword [ebp + eax - 0x1f7c], ecx
push 0
lea ecx, [ebp - 0xfe4]
call fcn.0042c9ea
mov ecx, dword [ebp - 0x664]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x140]
jne 0x415b99
mov dword [ebp - 0x1178], 1
jmp 0x415ba0
and dword [ebp - 0x1178], 0
push 0
lea ecx, [ebp - 0xfe4]
call fcn.0042c9ea
mov eax, dword [eax]
mov dword [ebp - 0x150c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x183c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x183c], eax
lea ecx, [ebp - 0xfe4]
call fcn.0042c9ce
mov dword [ebp - 0x1548], 0x1e6e836
mov dword [ebp - 0x1190], 9
mov dword [ebp - 0x15d8], 0x869ec427
mov dword [ebp - 0x15e0], 2
mov dword [ebp - 0x1518], 0xffffffff
mov dword [ebp - 0x1188], 0xfffffff9
mov dword [ebp - 0x11a0], 0xfffffffe
mov dword [ebp - 0x1524], 0xc1b01586
mov dword [ebp - 0x1198], 0x2b60d90c
mov dword [ebp - 0x1b30], 0x4a9b8364
mov dword [ebp - 0x904], 0x687a
mov dword [ebp - 0x1180], 0xa9eb74
cmp dword [ebp - 0x904], 0x6bc3
jle 0x415cfb
and dword [ebp - 0x4b8], 0
jmp 0x415c79
mov eax, dword [ebp - 0x4b8]
inc eax
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 0x7e9f
jge 0x415cfb
and dword [ebp - 0x2d4], 0
jmp 0x415c9b
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x4985
jge 0x415cf6
mov eax, dword [ebp - 0x4b8]
mov ecx, dword [ebp - 0x2d4]
shl eax, cl
cdq
mov dword [ebp - 0x13c4], eax
mov dword [ebp - 0x13c0], edx
push dword [ebp - 0x13c0]
push dword [ebp - 0x13c4]
lea ecx, [ebp - 0x2288]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.0042c6c9
push eax
call fcn.00493197
pop ecx
lea ecx, [ebp - 0x2288]
call fcn.0042c6bf
jmp 0x415c8e
jmp 0x415c6c
mov dword [ebp - 0x1b38], 0
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x904], 0x65f6
jge 0x415d24
push dword [ebp - 0x1180]
call fcn.00493197
pop ecx
jmp 0x415d40
or dword [ebp - 4], 0xffffffff
jmp 0x415d4a
mov dword [ebp - 0x1b40], 0xac7725e
mov dword [ebp - 0x1b48], 0x455d89f8
mov dword [ebp - 0x1b50], 0x9717e5ed
mov dword [ebp - 0x1b58], 0
push 3
lea ecx, [ebp - 0x1dc8]
call fcn.0042c8fc
mov dword [ebp - 0x15e8], 0xffffffff
push 0
lea eax, [ebp - 0x1dc8]
push eax
push 0
lea eax, [ebp - 0x1b60]
push eax
call fcn.0040617f
add esp, 0x10
lea eax, [ebp - 0x15d8]
push eax
push 1
push 0x25db
lea eax, [ebp - 0x1188]
push eax
push 1
lea eax, [ebp - 0x1518]
push eax
lea eax, [ebp - 0x1190]
push eax
push 0x63c1
push 0x7acf
lea eax, [ebp - 0x15e0]
push eax
lea eax, [ebp - 0x1198]
push eax
push 0x1c25
lea eax, [ebp - 0x1524]
push eax
push 0
lea eax, [ebp - 0x11a0]
push eax
call fcn.00408c3b
add esp, 0x3c
lea eax, [ebp - 0x15e8]
push eax
call fcn.0040e491
pop ecx
mov dword [ebp - 0xe54], 0x256f
mov dword [ebp - 0x11a8], 0xa9ebb0
cmp dword [ebp - 0xe54], 0x2715
jle 0x415ea1
and dword [ebp - 0x420], 0
jmp 0x415e40
cmp dword [ebp - 0x420], 0x3d37
jge 0x415ea1
and dword [ebp - 0x2dc], 0
jmp 0x415e62
cmp dword [ebp - 0x2dc], 0x6b5b
jge 0x415e9f
mov eax, dword [ebp - 0x420]
sub eax, dword [ebp - 0x2dc]
cdq
mov dword [ebp - 0x13d0], eax
mov dword [ebp - 0x13cc], edx
push dword [ebp - 0x13cc]
push dword [ebp - 0x13d0]
mov ecx, 0xab6b98
call fcn.0042c6d4
jmp 0x415e55
jmp 0x415e33
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0xe54], 0x241f
jge 0x415ec4
mov edx, dword [ebp - 0x11a8]
mov ecx, 0xab6b98
call fcn.0042ef5a
jmp 0x415ee0
or dword [ebp - 4], 0xffffffff
jmp 0x415eea
lea ecx, [ebp - 0x1dc8]
call fcn.0042c9ce
mov dword [ebp - 0x6bc], 4
mov dword [ebp - 0x700], 0xe0689bb5
mov dword [ebp - 0x1b68], 2
mov byte [ebp - 0xdd], 0
lea eax, [ebp - 0xdd]
push eax
call fcn.00411389
pop ecx
call fcn.0040eafb
mov dword [ebp - 0x88], 0
jmp 0x415f45
cmp dword [ebp - 0x88], 3
jge 0x415f67