Function at 0x4ef8b0
Capabilities:
Authenticate hmac

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
mov dword [ebp - 0xc], 0x2e
mov dword [ebp - 0x34], 0x14
mov dword [ebp - 0x1c], 0x32
mov dword [ebp - 0x40], 0x26
mov dword [ebp - 0x20], 0x62
mov dword [ebp - 0x48], 0x22
mov dword [ebp - 0x4c], 0x5b
mov dword [ebp - 0x30], 0x30
mov dword [ebp - 0x3c], 0x51
mov dword [ebp - 0x44], 0x53
mov dword [ebp - 0x18], 0xe
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x10], 0x35
mov dword [ebp - 0x54], 0x38
mov dword [ebp - 0x24], 0x36
mov dword [ebp - 0x14], 0x5c
mov dword [ebp - 0x2c], 0x23
mov dword [ebp - 0x38], 0x17
mov dword [ebp - 0x58], 0x1b
mov dword [ebp - 8], 0x3f
mov dword [ebp - 0x28], 0x23
mov dword [ebp - 0x50], 0x1c
mov eax, dword [ebp - 0x1c]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x58]
add ecx, 9
push ecx
mov edx, dword [0x5962c8]
sub edx, 0x10
push edx
mov eax, dword [0x5962c4]
add eax, 0xd
push eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 7
push ecx
mov edx, dword [ebp - 4]
add edx, 0x16
push edx
mov eax, dword [0x5962f8]
sub eax, 0x42
push eax
mov ecx, dword [ebp - 0x34]
push ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x31
push edx
mov eax, dword [ebp - 0x44]
sub eax, 0x32
push eax
call fcn.00418520
add esp, 0x28
call fcn.00411960
mov ecx, dword [ebp - 4]
sub ecx, 1
mov dword [ebp - 4], ecx
mov dword [ebp - 0x60], 0
jmp 0x4ef9c5
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x186ce
cmp dword [ebp - 0x60], eax
jge 0x4ef9dd
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
jmp 0x4ef9bc
mov dword [ebp - 0x64], 0
jmp 0x4ef9ef
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
mov eax, dword [ebp - 0x38]
sub eax, 0x186b7
cmp dword [ebp - 0x64], eax
jge 0x4efa07
mov ecx, dword [ebp - 0x20]
sub ecx, 1
mov dword [ebp - 0x20], ecx
jmp 0x4ef9e6
mov dword [ebp - 0x68], 0
jmp 0x4efa19
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
mov eax, dword [0x5962f8]
sub eax, 0x186e2
cmp dword [ebp - 0x68], eax
jge 0x4efa33
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x4efa10
mov edx, dword [ebp - 0x28]
sub edx, 0xc
push edx
mov eax, dword [ebp - 4]
add eax, 0x53
push eax
call fcn.00421970
add esp, 8
mov ecx, dword [0x5962fc]
add ecx, 0x37
push ecx
mov edx, dword [ebp - 0x44]
sub edx, 0x45
push edx
mov eax, dword [ebp - 0x4c]
sub eax, 8
push eax
mov ecx, dword [0x596304]
add ecx, 0x26
push ecx
mov edx, dword [ebp - 0x4c]
sub edx, 0x21
push edx
mov eax, dword [ebp - 0x54]
add eax, 0xa
push eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x1a
push ecx
call fcn.0041a730
add esp, 0x1c
mov edx, dword [ebp - 0x50]
sub edx, 1
mov dword [ebp - 0x50], edx
call fcn.00418170
push 0x1414
push 0x90cd
push 0x9e06
push 0xf45b
call fcn.0042a570
add esp, 0x10
push eax
mov eax, dword [0x5a1594]
push eax
call fcn.004fb810
add esp, 8
mov dword [0x5a15a4], eax
mov dword [ebp - 0x6c], 0
jmp 0x4efad8
mov ecx, dword [ebp - 0x6c]
add ecx, 1
mov dword [ebp - 0x6c], ecx
mov edx, dword [0x596300]
sub edx, 0x52
cmp dword [ebp - 0x6c], edx
jge 0x4efb76
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0xc]
jge 0x4efb71
mov ecx, dword [ebp - 0x48]
cmp ecx, dword [ebp - 0x24]
jge 0x4efb06
mov dword [ebp - 0xec], 1
jmp 0x4efb10
mov dword [ebp - 0xec], 0
mov edx, dword [ebp - 0x3c]
xor edx, dword [0x59629c]
cmp edx, dword [ebp - 0x18]
jge 0x4efb2a
mov dword [ebp - 0xe4], 1
jmp 0x4efb34
mov dword [ebp - 0xe4], 0
mov eax, dword [0x596360]
cmp eax, dword [ebp - 0x30]
jge 0x4efb4a
mov dword [ebp - 0xe8], 1
jmp 0x4efb54
mov dword [ebp - 0xe8], 0
mov ecx, dword [ebp - 0xe4]
and ecx, dword [ebp - 0xe8]
or ecx, dword [ebp - 0xec]
je 0x4efb71
mov edx, dword [ebp - 0x3c]
sub edx, 1
mov dword [ebp - 0x3c], edx
jmp 0x4efacf
push 0xa2d0
push 0xaef3
push 0xbe82
push 0x9599
push 0x469c
push 0x71c7
push 0xa464
push 0xf902
push 0x11b7
push 0x7ed0
call fcn.004f4600
add esp, 0x28
push eax
call dword [0x5a15a4]
mov dword [0x5a1590], eax
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
mov ecx, dword [0x596304]
cmp ecx, dword [ebp - 0x2c]
jge 0x4efbdc
mov dword [ebp - 0xf0], 1
jmp 0x4efbe6
mov dword [ebp - 0xf0], 0
mov edx, dword [0x5962c4]
add edx, 1
mov dword [0x5962c4], edx
mov eax, dword [ebp - 0xf0]
and eax, dword [0x596298]
and eax, dword [0x5962c4]
je 0x4efc18
mov ecx, dword [0x5962fc]
sub ecx, 1
mov dword [0x5962fc], ecx
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x32
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x14
push ecx
mov edx, dword [0x59633c]
push edx
mov eax, dword [0x5962c4]
sub eax, 0x1b
push eax
mov ecx, dword [ebp - 0x34]
add ecx, 0x37
push ecx
mov edx, dword [0x596338]
sub edx, 0x49
push edx
mov eax, dword [0x5962c8]
add eax, 0xf
push eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x20
push ecx
call fcn.00426120
add esp, 0x20
push 0x4c5a
push 0xd746
push 0x3644
push 0x5f6e
call fcn.00429320
add esp, 0x10
push eax
call dword [0x5a15a4]
mov dword [0x5a1598], eax
mov dword [ebp - 0x70], 0
jmp 0x4efca2
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x186d5
cmp dword [ebp - 0x70], eax
jge 0x4efe1d
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0xc]
jge 0x4efcc7
mov dword [ebp - 0xf4], 1
jmp 0x4efcd1
mov dword [ebp - 0xf4], 0
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c0], edx
mov eax, dword [0x596360]
mov dword [ebp - 0x1c4], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 1
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x1c0]
cmp edx, dword [ebp - 0x1c4]
jge 0x4efd08
mov dword [ebp - 0xf8], 1
jmp 0x4efd12
mov dword [ebp - 0xf8], 0
mov eax, dword [0x59629c]
sub eax, 1
mov dword [0x59629c], eax
mov ecx, dword [0x59629c]
sub ecx, dword [ebp - 0x2c]
or ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x3c]
xor edx, dword [ebp - 0xf8]
or ecx, edx
je 0x4efe18
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c8], eax
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x1cc], ecx
mov edx, dword [ebp - 0x30]
sub edx, 1
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x1c8]
cmp eax, dword [ebp - 0x1cc]
jge 0x4efe18
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x48]
jge 0x4efd83
mov dword [ebp - 0xfc], 1
jmp 0x4efd8d
mov dword [ebp - 0xfc], 0
mov edx, dword [0x5962fc]
sub edx, dword [ebp - 0xc]
cmp edx, dword [ebp - 0x38]
jge 0x4efda7
mov dword [ebp - 0x100], 1
jmp 0x4efdb1
mov dword [ebp - 0x100], 0
mov eax, dword [ebp - 0xfc]
or eax, dword [ebp - 0x100]
je 0x4efe18
mov ecx, dword [ebp - 0xc]
sub ecx, 1
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
or edx, dword [0x596360]
cmp edx, dword [0x596304]
jge 0x4efde5
mov dword [ebp - 0x104], 1
jmp 0x4efdef
mov dword [ebp - 0x104], 0
mov eax, dword [ebp - 8]
sub eax, 1
mov dword [ebp - 8], eax
mov ecx, dword [0x59633c]
and ecx, dword [ebp - 8]
and ecx, dword [ebp - 0x104]
je 0x4efe18
mov edx, dword [0x596300]
add edx, 1
mov dword [0x596300], edx
jmp 0x4efc99
mov dword [ebp - 0x74], 0
jmp 0x4efe2f
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x186b0
cmp dword [ebp - 0x74], ecx
jge 0x4efe48
mov edx, dword [ebp - 0x48]
sub edx, 1
mov dword [ebp - 0x48], edx
jmp 0x4efe26
mov dword [ebp - 0x78], 0
jmp 0x4efe5a
mov eax, dword [ebp - 0x78]
add eax, 1
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 0x4f
cmp dword [ebp - 0x78], ecx
jge 0x4efe70
mov edx, dword [ebp - 0x18]
sub edx, 1
mov dword [ebp - 0x18], edx
jmp 0x4efe51
mov dword [ebp - 0x7c], 0
jmp 0x4efe82
mov eax, dword [ebp - 0x7c]
add eax, 1
mov dword [ebp - 0x7c], eax
mov ecx, dword [0x596300]
sub ecx, 0x186f4
cmp dword [ebp - 0x7c], ecx
jge 0x4eff28
mov edx, dword [0x596360]
cmp edx, dword [0x596338]
jge 0x4eff23
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1d0], eax
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x1d4], ecx
mov edx, dword [ebp - 0x18]
sub edx, 1
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x1d4]
jge 0x4efeda
mov dword [ebp - 0x108], 1
jmp 0x4efee4
mov dword [ebp - 0x108], 0
mov ecx, dword [ebp - 0x3c]
or ecx, dword [ebp - 0x108]
je 0x4eff23
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x1d8], edx
mov eax, dword [0x59629c]
mov dword [ebp - 0x1dc], eax
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x1d8]
cmp edx, dword [ebp - 0x1dc]
jge 0x4eff23
mov eax, dword [ebp - 0x44]
sub eax, 1
mov dword [ebp - 0x44], eax
jmp 0x4efe79
push 0
push 0xf4e
push 0xedaa
push 0xf397
push 0x3296
push 0x1cc4
call fcn.004eeca0
add esp, 0x14
push eax
mov ecx, dword [0x5a1594]
push ecx
call fcn.004fb810
add esp, 8
call eax
push eax
push 0x386a
push 0x54e1
push 0xb1f8
push 0xdb99
call fcn.004f6700
add esp, 0x10
push eax
mov edx, dword [0x5a1598]
push edx
call fcn.004fb810
add esp, 8
call eax
mov dword [ebp - 0x80], 0
jmp 0x4eff9e
mov eax, dword [ebp - 0x80]
add eax, 1
mov dword [ebp - 0x80], eax
mov ecx, dword [0x59629c]
sub ecx, 0x15
cmp dword [ebp - 0x80], ecx
jge 0x4effb7
mov edx, dword [ebp - 0x18]
sub edx, 1
mov dword [ebp - 0x18], edx
jmp 0x4eff95
mov dword [ebp - 0x84], 0
jmp 0x4effd2
mov eax, dword [ebp - 0x84]
add eax, 1
mov dword [ebp - 0x84], eax
mov ecx, dword [0x5962f8]
sub ecx, 0x186e2
cmp dword [ebp - 0x84], ecx
jge 0x4f0060
mov edx, dword [ebp - 0x18]
sub edx, dword [0x5962c8]
cmp edx, dword [ebp - 0x48]
jge 0x4f0000
mov dword [ebp - 0x10c], 1
jmp 0x4f000a
mov dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x4c]
jge 0x4f001e
mov dword [ebp - 0x110], 1
jmp 0x4f0028
mov dword [ebp - 0x110], 0
mov ecx, dword [ebp - 0x20]
and ecx, dword [ebp - 0x28]
or ecx, dword [ebp - 0x10c]
or ecx, dword [ebp - 0x110]
mov dword [ebp - 0x1e0], ecx
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x1e0], 0
je 0x4f005b
mov eax, dword [ebp - 0x34]
sub eax, 1
mov dword [ebp - 0x34], eax
jmp 0x4effc3
push 0xbbe6
push 0x4d93
push 0xf05e
push 0xd5c
push 0x4b35
call section..text
add esp, 0x14
push eax
mov ecx, dword [0x5a1594]
push ecx
call fcn.004fb810
add esp, 8
mov dword [0x5a15a8], eax
mov dword [ebp - 0x88], 0
jmp 0x4f00b1
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
mov eax, dword [0x5962f8]
sub eax, 0x186e2
cmp dword [ebp - 0x88], eax
jge 0x4f00ce
mov ecx, dword [ebp - 0x38]
sub ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x4f00a2
push 0xb1f8
push 0x20cc
push 0x57a2
push 0x1119
call fcn.004fa1c0
add esp, 0x10
push eax
mov edx, dword [0x5a1594]
push edx
call fcn.004fb810
add esp, 8
mov dword [0x5a15ac], eax
mov eax, dword [0x596304]
add eax, 0x2d
push eax
mov ecx, dword [0x596298]
add ecx, 0x3d
push ecx
mov edx, dword [ebp - 8]
add edx, 0x13
push edx
mov eax, dword [ebp - 0xc]
add eax, 0x15
push eax
mov ecx, dword [ebp - 0x44]
sub ecx, 0x48
push ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x24
push edx
mov eax, dword [ebp - 0x10]
sub eax, 0x20
push eax
call fcn.00418870
add esp, 0x1c
mov dword [ebp - 0x8c], 0
jmp 0x4f0158
mov ecx, dword [ebp - 0x8c]
add ecx, 1
mov dword [ebp - 0x8c], ecx
mov edx, dword [0x596298]
sub edx, 0x186b9
cmp dword [ebp - 0x8c], edx
jge 0x4f01f2
mov eax, dword [ebp - 0x20]
cmp eax, dword [0x5962c4]
jge 0x4f0187
mov dword [ebp - 0x11c], 1
jmp 0x4f0191
mov dword [ebp - 0x11c], 0
mov ecx, dword [ebp - 0x28]
cmp ecx, dword [0x5962f8]
jge 0x4f01a8
mov dword [ebp - 0x114], 1
jmp 0x4f01b2
mov dword [ebp - 0x114], 0
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x10]
jge 0x4f01c6
mov dword [ebp - 0x118], 1
jmp 0x4f01d0
mov dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x114]
and eax, dword [ebp - 0x118]
or eax, dword [ebp - 0x11c]
je 0x4f01ed
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
jmp 0x4f0149
mov edx, dword [ebp - 0x3c]
sub edx, 0x2a
push edx
mov eax, dword [ebp - 0x1c]
sub eax, 0x26
push eax
mov ecx, dword [0x5962f8]
add ecx, 6
push ecx
call fcn.0040f950
add esp, 0xc
push 0x8faa
push 0xe543
push 0x27cd
push 0xea1d
push 0xdd39
call fcn.00427750
add esp, 0x14
push eax
mov edx, dword [0x5a1594]
push edx
call fcn.004fb810
add esp, 8
mov dword [0x5a15b8], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x28]
jge 0x4f025c
mov dword [ebp - 0x120], 1
jmp 0x4f0266
mov dword [ebp - 0x120], 0
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 0x20]
and ecx, dword [ebp - 0x120]
mov dword [ebp - 0x1e4], ecx
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x1e4], 0
je 0x4f0297
mov eax, dword [0x5962c4]
add eax, 1
mov dword [0x5962c4], eax
push 0xc382
push 0x5201
push 0x3994
push 0xa427
push 0x6eb2
push 0x7d8b
call fcn.004edb80
add esp, 0x18
push eax
mov ecx, dword [0x5a1594]
push ecx
call fcn.004fb810
add esp, 8
mov dword [0x5a15c0], eax
mov edx, dword [ebp - 0x40]
add edx, 0x1e
push edx
mov eax, dword [0x5962c4]
sub eax, 7
push eax
mov ecx, dword [0x5962c8]
add ecx, 0x1d
push ecx
mov edx, dword [ebp - 0x40]
add edx, 0x10
push edx
mov eax, dword [ebp - 0x2c]
add eax, 4
push eax
mov ecx, dword [0x5962c4]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x50]
sub edx, 0xc
push edx
mov eax, dword [0x596338]
sub eax, 1
push eax
mov ecx, dword [ebp - 0xc]
sub ecx, 5
push ecx
call fcn.004076f0
add esp, 0x24
mov edx, dword [ebp - 0x10]
add edx, 0x19
push edx
mov eax, dword [0x596304]
add eax, 0x2f
push eax
mov ecx, dword [0x5962f8]
sub ecx, 0x11
push ecx
mov edx, dword [ebp - 0x24]
add edx, 8
push edx
mov eax, dword [ebp - 0x3c]
sub eax, 0x47
push eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x11
push ecx
mov edx, dword [ebp - 4]
add edx, 0x15
push edx
call fcn.00412880
add esp, 0x1c
push 0x89b2
push 0x30d9
push 0x6cc8
push 0x46f5
push 0x895
push 0xa898
call fcn.004eb660
add esp, 0x18
push eax
mov eax, dword [0x5a1594]
push eax
call fcn.004fb810
add esp, 8
mov dword [0x5a15b4], eax
mov dword [ebp - 0x90], 0
jmp 0x4f03b6
mov ecx, dword [ebp - 0x90]
add ecx, 1
mov dword [ebp - 0x90], ecx
mov edx, dword [ebp - 0x3c]
sub edx, 0x4f
cmp dword [ebp - 0x90], edx
jge 0x4f03cf
mov eax, dword [ebp - 0x44]
sub eax, 1
mov dword [ebp - 0x44], eax
jmp 0x4f03a7
mov ecx, dword [ebp - 0x10]
add ecx, 0x1c
push ecx
mov edx, dword [ebp - 0x2c]
sub edx, 0xd
push edx
call fcn.00413e10
add esp, 8
push 0x293d
push 0xa1f9
push 0xd186
push 0xd1a1
push 0xd9c0
push 0x62db
push 0xeb65
push 0xa28b
push 0x5a3c
call fcn.004fd430
add esp, 0x24
push eax
mov eax, dword [0x5a1594]
push eax
call fcn.004fb810
add esp, 8
mov dword [0x5a15bc], eax
mov dword [ebp - 0x94], 0
jmp 0x4f0449
mov ecx, dword [ebp - 0x94]
add ecx, 1
mov dword [ebp - 0x94], ecx
mov edx, dword [0x5962c4]
sub edx, 0x186f8
cmp dword [ebp - 0x94], edx
jge 0x4f0491
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1e8], eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1ec], ecx
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x1ec]
jge 0x4f048f
mov ecx, dword [ebp - 0x20]
sub ecx, 1
mov dword [ebp - 0x20], ecx
jmp 0x4f043a
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x98], 0
jmp 0x4f04b5
mov eax, dword [ebp - 0x98]
add eax, 1
mov dword [ebp - 0x98], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x186d7
cmp dword [ebp - 0x98], ecx
jge 0x4f04d7
mov edx, dword [0x596308]
add edx, 1
mov dword [0x596308], edx
jmp 0x4f04a6
push 0x6510
push 0x9866
push 0xcf5f
push 0xd635
push 0x9e49
push 0xff22
push 0xd7c3
push 0x18d7
push 0x15df
call fcn.004018e0
add esp, 0x24
push eax
mov eax, dword [0x5a1590]
push eax
call fcn.004fb810
add esp, 8
mov dword [0x5a15b0], eax
mov dword [ebp - 0x9c], 0
jmp 0x4f053b
mov ecx, dword [ebp - 0x9c]
add ecx, 1
mov dword [ebp - 0x9c], ecx
mov edx, dword [ebp - 0x28]
sub edx, 0x186c4
cmp dword [ebp - 0x9c], edx
jge 0x4f06c3
mov eax, dword [ebp - 0x40]
or eax, dword [0x596298]
je 0x4f06be
mov ecx, dword [0x59633c]
cmp ecx, dword [ebp - 0x4c]
jge 0x4f0576
mov dword [ebp - 0x124], 1
jmp 0x4f0580
mov dword [ebp - 0x124], 0
mov edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 0x24]
jge 0x4f0594
mov dword [ebp - 0x128], 1
jmp 0x4f059e
mov dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x124]
or eax, dword [ebp - 0x128]
je 0x4f06be
mov ecx, dword [0x596304]
cmp ecx, dword [ebp - 0x4c]
jge 0x4f06be
mov edx, dword [ebp - 0x18]
cmp edx, dword [0x59629c]
jge 0x4f05d6
mov dword [ebp - 0x12c], 1
jmp 0x4f05e0
mov dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x50]
jge 0x4f05f4
mov dword [ebp - 0x130], 1
jmp 0x4f05fe
mov dword [ebp - 0x130], 0
mov ecx, dword [ebp - 0x12c]
and ecx, dword [ebp - 0x48]
xor ecx, dword [ebp - 0x130]
je 0x4f06be
mov edx, dword [ebp - 0x18]
cmp edx, dword [ebp - 8]
jge 0x4f0627
mov dword [ebp - 0x13c], 1
jmp 0x4f0631
mov dword [ebp - 0x13c], 0
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [0x5962f8]
mov dword [ebp - 0x1f0], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x1f4], edx
mov eax, dword [0x5962f8]
add eax, 1
mov dword [0x5962f8], eax
mov ecx, dword [ebp - 0x1f0]
cmp ecx, dword [ebp - 0x1f4]
jge 0x4f0676
mov dword [ebp - 0x134], 1
jmp 0x4f0680
mov dword [ebp - 0x134], 0
mov edx, dword [0x596298]
cmp edx, dword [ebp - 0x58]
jge 0x4f0697
mov dword [ebp - 0x138], 1
jmp 0x4f06a1
mov dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x134]
and eax, dword [ebp - 0x138]
or eax, dword [ebp - 0x13c]
je 0x4f06be
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4f052c
mov dword [ebp - 0xa0], 0
jmp 0x4f06de
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
mov eax, dword [ebp - 0x28]
sub eax, 0x186c4
cmp dword [ebp - 0xa0], eax
jge 0x4f06ff
mov ecx, dword [0x59629c]
sub ecx, 1
mov dword [0x59629c], ecx
jmp 0x4f06cf
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x10]
jge 0x4f0720
mov dword [ebp - 0x140], 1
jmp 0x4f072a
mov dword [ebp - 0x140], 0
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 0x34]
jge 0x4f073e
mov dword [ebp - 0x144], 1
jmp 0x4f0748
mov dword [ebp - 0x144], 0
mov edx, dword [0x5962c8]
add edx, 1
mov dword [0x5962c8], edx
mov eax, dword [0x5962c8]
sub eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x140]
and ecx, dword [ebp - 0x144]
or eax, ecx
je 0x4f078d
mov edx, dword [ebp - 0x18]
cmp edx, dword [ebp - 4]
jge 0x4f078d
mov eax, dword [0x596304]
cmp eax, dword [0x59629c]
jge 0x4f078d
mov ecx, dword [ebp - 0x28]
sub ecx, 1
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
push 0xb1da
push 0x15ad
push 0xa6ab
push 0x7256
call fcn.004034f0
add esp, 0x10
push eax
call dword [0x5a15a4]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0xc]
sub eax, 0xe
push eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x35
push ecx
call fcn.0041fa40
add esp, 8
push 0xedd7
push 0xa8f0
push 0x40b7
push 0xe28d
push 0x5c52
push 0xadfa
push 0x42a9
push 0x3c50
push 0x37a3
push 0x360f
call fcn.004ebdd0
add esp, 0x28
push eax
mov edx, dword [ebp - 0x5c]
push edx
call fcn.004fb810
add esp, 8
mov dword [0x5a1580], eax
mov dword [ebp - 0xa4], 0
jmp 0x4f0839
mov eax, dword [ebp - 0xa4]
add eax, 1
mov dword [ebp - 0xa4], eax
mov ecx, dword [0x59629c]
sub ecx, 0x14
cmp dword [ebp - 0xa4], ecx
jge 0x4f0855
mov edx, dword [ebp - 0x18]
sub edx, 1
mov dword [ebp - 0x18], edx
jmp 0x4f082a
mov eax, dword [0x59629c]
add eax, 1
mov dword [0x59629c], eax
mov dword [ebp - 0xa8], 0
jmp 0x4f087d
mov ecx, dword [ebp - 0xa8]
add ecx, 1
mov dword [ebp - 0xa8], ecx
mov edx, dword [0x5962fc]
sub edx, 0x186a4
cmp dword [ebp - 0xa8], edx
jge 0x4f089c
mov eax, dword [ebp - 0x58]
sub eax, 1
mov dword [ebp - 0x58], eax
jmp 0x4f086e
mov dword [ebp - 0xac], 0
jmp 0x4f08b7
mov ecx, dword [ebp - 0xac]
add ecx, 1
mov dword [ebp - 0xac], ecx
mov edx, dword [0x596304]
sub edx, 0x28
cmp dword [ebp - 0xac], edx
jge 0x4f092d
mov eax, dword [0x59629c]
cmp eax, dword [ebp - 8]
jge 0x4f08de
mov dword [ebp - 0x148], 1
jmp 0x4f08e8
mov dword [ebp - 0x148], 0
mov ecx, dword [ebp - 4]
cmp ecx, dword [0x596308]
jge 0x4f08ff
mov dword [ebp - 0x14c], 1
jmp 0x4f0909
mov dword [ebp - 0x14c], 0
mov edx, dword [ebp - 0x148]
and edx, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x54]
or edx, eax
je 0x4f0928
mov ecx, dword [ebp - 8]
sub ecx, 1
mov dword [ebp - 8], ecx
jmp 0x4f08a8
mov dword [ebp - 0xb0], 0
jmp 0x4f0948
mov edx, dword [ebp - 0xb0]
add edx, 1
mov dword [ebp - 0xb0], edx
mov eax, dword [0x59633c]
sub eax, 0x17
cmp dword [ebp - 0xb0], eax
jge 0x4f097c
mov ecx, dword [0x596304]
cmp ecx, dword [0x596308]
jge 0x4f097a
mov edx, dword [0x5962c4]
add edx, dword [ebp - 0x2c]
je 0x4f097a
mov eax, dword [ebp - 0xc]
sub eax, 1
mov dword [ebp - 0xc], eax
jmp 0x4f0939
push 0xab38
push 0x52b1
push 0x2901
push 0x40e8
push 0x321c
push 0x16d6
push 0xb3b5
push 0xe8d2
push 0x2493
push 0xf404
call fcn.004f6da0
add esp, 0x28
push eax
mov ecx, dword [ebp - 0x5c]
push ecx
call fcn.004fb810
add esp, 8
mov dword [0x5a1584], eax
mov edx, dword [ebp - 0xc]
cmp edx, dword [0x5962fc]
jge 0x4f09df
mov dword [ebp - 0x158], 1
jmp 0x4f09e9
mov dword [ebp - 0x158], 0
mov eax, dword [0x596360]
cmp eax, dword [ebp - 4]
jge 0x4f09ff
mov dword [ebp - 0x150], 1
jmp 0x4f0a09
mov dword [ebp - 0x150], 0
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x38]
cmp ecx, dword [ebp - 8]
jge 0x4f0a20
mov dword [ebp - 0x154], 1
jmp 0x4f0a2a
mov dword [ebp - 0x154], 0
mov edx, dword [ebp - 0x150]
and edx, dword [ebp - 0x154]
or edx, dword [ebp - 0x158]
je 0x4f0a55
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x48]
jge 0x4f0a55
mov ecx, dword [0x59629c]
add ecx, 1
mov dword [0x59629c], ecx
push 0x8956
push 0x5174
push 0xe5e5
push 0x191f
push 0xb1a1
push 0xbd98
push 0xdfd8
push 0xce97
push 0x4e36
call fcn.004058e0
add esp, 0x24
push eax
mov edx, dword [ebp - 0x5c]
push edx
call fcn.004fb810
add esp, 8
mov dword [0x5a1588], eax
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x3c]
and eax, dword [ebp - 4]
xor eax, dword [ebp - 0x50]
je 0x4f0ab9
mov ecx, dword [0x596298]
sub ecx, 1
mov dword [0x596298], ecx
push 0x949a
push 0xdbec
push 0x1c21
push 0x78a7
push 0xa57f
push 0x8e33
call fcn.00404150
add esp, 0x18
push eax
mov edx, dword [ebp - 0x5c]
push edx
call fcn.004fb810
add esp, 8
mov dword [0x5a158c], eax
mov dword [ebp - 0xb4], 0
jmp 0x4f0b0c
mov eax, dword [ebp - 0xb4]
add eax, 1
mov dword [ebp - 0xb4], eax
mov ecx, dword [0x59633c]
sub ecx, 0x186b8
cmp dword [ebp - 0xb4], ecx
jge 0x4f0b83
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
and eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x4c]
jge 0x4f0b40
mov dword [ebp - 0x15c], 1
jmp 0x4f0b4a
mov dword [ebp - 0x15c], 0
mov ecx, dword [0x596360]
add ecx, 1
mov dword [0x596360], ecx
mov edx, dword [ebp - 0x10]
and edx, dword [0x596360]
mov eax, dword [ebp - 0x40]
add eax, dword [0x5962c8]
and eax, dword [ebp - 0x15c]
or eax, edx
je 0x4f0b7e
mov ecx, dword [ebp - 0xc]
sub ecx, 1
mov dword [ebp - 0xc], ecx
jmp 0x4f0afd
mov dword [ebp - 0xb8], 0
jmp 0x4f0b9e
mov edx, dword [ebp - 0xb8]
add edx, 1
mov dword [ebp - 0xb8], edx
mov eax, dword [ebp - 0x30]
sub eax, 0x30
cmp dword [ebp - 0xb8], eax
jge 0x4f0c1c
mov ecx, dword [ebp - 0x10]
sub ecx, dword [0x596308]
cmp ecx, dword [ebp - 0x54]
jge 0x4f0bc6
mov dword [ebp - 0x160], 1
jmp 0x4f0bd0
mov dword [ebp - 0x160], 0
mov edx, dword [ebp - 4]
cmp edx, dword [0x59633c]
jge 0x4f0be7
mov dword [ebp - 0x164], 1
jmp 0x4f0bf1
mov dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x48]
and eax, dword [0x596338]
or eax, dword [ebp - 0x160]
or eax, dword [ebp - 0x164]
je 0x4f0c17
mov ecx, dword [0x596304]
sub ecx, 1
mov dword [0x596304], ecx
jmp 0x4f0b8f
mov edx, dword [ebp - 0x54]
imul edx, dword [0x596308]
cmp edx, dword [ebp - 0x28]
jge 0x4f0c37
mov dword [ebp - 0x168], 1
jmp 0x4f0c41
mov dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x14]
sub eax, 1
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x14]
or ecx, dword [ebp - 0x168]
mov edx, dword [ebp - 0x44]
sub edx, dword [0x5962c4]
or ecx, edx
mov dword [ebp - 0x1f8], ecx
mov eax, dword [0x5962c4]
add eax, 1
mov dword [0x5962c4], eax
cmp dword [ebp - 0x1f8], 0
je 0x4f0d15
mov ecx, dword [0x596308]
cmp ecx, dword [0x596304]
jge 0x4f0d15
mov edx, dword [ebp - 0x54]
add edx, dword [0x59629c]
cmp edx, dword [ebp - 0x24]
jge 0x4f0cad
mov dword [ebp - 0x16c], 1
jmp 0x4f0cb7
mov dword [ebp - 0x16c], 0
mov eax, dword [0x596304]
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1fc]
cmp eax, dword [ebp - 0x200]
jge 0x4f0cee
mov dword [ebp - 0x170], 1
jmp 0x4f0cf8
mov dword [ebp - 0x170], 0
mov ecx, dword [ebp - 0x16c]
or ecx, dword [ebp - 0x170]
je 0x4f0d15
mov edx, dword [0x59629c]
sub edx, 1
mov dword [0x59629c], edx
mov dword [ebp - 0xbc], 0
jmp 0x4f0d30
mov eax, dword [ebp - 0xbc]
add eax, 1
mov dword [ebp - 0xbc], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x186b2
cmp dword [ebp - 0xbc], ecx
jge 0x4f0d88
mov edx, dword [0x596300]
add edx, dword [ebp - 0x48]
mov eax, dword [ebp - 8]
xor eax, dword [ebp - 0x44]
or edx, eax
mov dword [ebp - 0x204], edx
mov ecx, dword [ebp - 8]
sub ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [0x596300]
sub edx, 1
mov dword [0x596300], edx
cmp dword [ebp - 0x204], 0
je 0x4f0d86
mov eax, dword [0x5962c8]
add eax, 1
mov dword [0x5962c8], eax
jmp 0x4f0d21
mov ecx, dword [0x5962f8]
add ecx, 1
mov dword [0x5962f8], ecx
mov dword [ebp - 0xc0], 0
jmp 0x4f0db2
mov edx, dword [ebp - 0xc0]
add edx, 1
mov dword [ebp - 0xc0], edx
mov eax, dword [0x596300]
sub eax, 0x186f3
cmp dword [ebp - 0xc0], eax
jge 0x4f0e21
mov ecx, dword [0x596304]
sub ecx, 1
mov dword [0x596304], ecx
mov edx, dword [0x596360]
add edx, dword [0x596304]
cmp edx, dword [ebp - 4]
jge 0x4f0df0
mov dword [ebp - 0x174], 1
jmp 0x4f0dfa
mov dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
or eax, dword [ebp - 0x44]
or eax, dword [0x5962c8]
mov ecx, dword [ebp - 0x34]
or ecx, dword [0x5962f8]
or eax, ecx
je 0x4f0e1f
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x4f0da3
mov dword [ebp - 0xc4], 0
jmp 0x4f0e3c
mov eax, dword [ebp - 0xc4]
add eax, 1
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0x48]
sub ecx, 0x186c1
cmp dword [ebp - 0xc4], ecx
jge 0x4f0e58
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
jmp 0x4f0e2d
mov eax, dword [ebp - 0x14]
sub eax, 0x1d
push eax
mov ecx, dword [ebp - 0x18]
add ecx, 2
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [0x596360]
sub eax, 7
push eax
mov ecx, dword [0x596300]
sub ecx, 0x3c
push ecx
mov edx, dword [0x5962fc]
add edx, 0x51
push edx
mov eax, dword [ebp - 0x34]
add eax, 0xf
push eax
mov ecx, dword [ebp - 0x44]
sub ecx, 8
push ecx
mov edx, dword [ebp - 0x24]
sub edx, 8
push edx
mov eax, dword [ebp - 0x40]
add eax, 0x2e
push eax
call fcn.00413ff0
add esp, 0x28
mov dword [ebp - 0xc8], 0
jmp 0x4f0ec6
mov ecx, dword [ebp - 0xc8]
add ecx, 1
mov dword [ebp - 0xc8], ecx
mov edx, dword [ebp - 0x24]
sub edx, 0x36
cmp dword [ebp - 0xc8], edx
jge 0x4f0efd
mov eax, dword [0x5962c8]
add eax, 1
mov dword [0x5962c8], eax
mov ecx, dword [0x5962c8]
add ecx, dword [ebp - 0x20]
cmp ecx, dword [0x5962f8]
jge 0x4f0efb
mov edx, dword [ebp - 8]
sub edx, 1
mov dword [ebp - 8], edx
jmp 0x4f0eb7
mov eax, dword [0x59633c]
add eax, 1
mov dword [0x59633c], eax
mov ecx, dword [0x5962c4]
cmp ecx, dword [0x59633c]
jge 0x4f0f24
mov dword [ebp - 0x17c], 1
jmp 0x4f0f2e
mov dword [ebp - 0x17c], 0
mov edx, dword [ebp - 0x30]
cmp edx, dword [ebp - 0x2c]
jge 0x4f0f42
mov dword [ebp - 0x178], 1
jmp 0x4f0f4c
mov dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
and eax, dword [ebp - 0x24]
and eax, dword [0x596298]
or eax, dword [ebp - 0x17c]
je 0x4f0f72
mov ecx, dword [0x596338]
add ecx, 1
mov dword [0x596338], ecx
mov edx, dword [ebp - 0x50]
sub edx, 9
push edx
mov eax, dword [ebp - 0x14]
sub eax, 0x15
push eax
mov ecx, dword [ebp - 0x10]
sub ecx, 5
push ecx
mov edx, dword [ebp - 0x2c]
add edx, 0x28
push edx
mov eax, dword [ebp - 0x1c]
add eax, 0x2e
push eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0x10
push ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x15
push edx
call fcn.0041bad0
add esp, 0x1c
mov dword [ebp - 0xcc], 0
jmp 0x4f0fc6
mov eax, dword [ebp - 0xcc]
add eax, 1
mov dword [ebp - 0xcc], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x186d7
cmp dword [ebp - 0xcc], ecx
jge 0x4f0fe2
mov edx, dword [ebp - 8]
sub edx, 1
mov dword [ebp - 8], edx
jmp 0x4f0fb7
mov dword [ebp - 0xd0], 0
jmp 0x4f0ffd
mov eax, dword [ebp - 0xd0]
add eax, 1
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x2b
cmp dword [ebp - 0xd0], ecx
jge 0x4f1041
mov edx, dword [ebp - 0x28]
cmp edx, dword [ebp - 0x50]
jge 0x4f101f
mov dword [ebp - 0x180], 1
jmp 0x4f1029
mov dword [ebp - 0x180], 0
mov eax, dword [0x596304]
and eax, dword [ebp - 0x180]
je 0x4f103f
mov ecx, dword [ebp - 8]
sub ecx, 1
mov dword [ebp - 8], ecx
jmp 0x4f0fee
mov dword [ebp - 0xd4], 0
jmp 0x4f105c
mov edx, dword [ebp - 0xd4]
add edx, 1
mov dword [ebp - 0xd4], edx
mov eax, dword [0x59633c]
sub eax, 0x18
cmp dword [ebp - 0xd4], eax
jge 0x4f107d
mov ecx, dword [0x596360]
add ecx, 1
mov dword [0x596360], ecx
jmp 0x4f104d
mov dword [ebp - 0xd8], 0
jmp 0x4f1098
mov edx, dword [ebp - 0xd8]
add edx, 1
mov dword [ebp - 0xd8], edx
mov eax, dword [ebp - 0x38]
sub eax, 0x16
cmp dword [ebp - 0xd8], eax
jge 0x4f10ef
mov ecx, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x34]
cmp ecx, dword [0x5962fc]
jge 0x4f10ed
mov edx, dword [ebp - 0x30]
cmp edx, dword [ebp - 8]
jge 0x4f10c8
mov dword [ebp - 0x184], 1
jmp 0x4f10d2
mov dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [0x5962c8]
and eax, dword [ebp - 0x184]
je 0x4f10ed
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
jmp 0x4f1089
push 0xdb2a
push 0x9559
push 0x9604
push 0x5a5
push 0x976
push 0x89e1
push 0xd3a9
push 0x9efe
push 0x5d3e
call fcn.004f1f00
add esp, 0x24
push eax
mov edx, dword [0x5a1590]
push edx
call fcn.004fb810
add esp, 8
mov dword [0x5a159c], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x48]
jge 0x4f11bd
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [ebp - 0x1c]
jge 0x4f1155
mov dword [ebp - 0x18c], 1
jmp 0x4f115f
mov dword [ebp - 0x18c], 0
mov edx, dword [0x5962c8]
cmp edx, dword [ebp - 0x4c]
jge 0x4f1176
mov dword [ebp - 0x188], 1
jmp 0x4f1180
mov dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0xc]
and eax, dword [ebp - 0x14]
and eax, dword [ebp - 0x188]
or eax, dword [ebp - 0x18c]
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 1
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0x208], 0
je 0x4f11bd
mov edx, dword [0x5962c4]
sub edx, 1
mov dword [0x5962c4], edx
push 0xff35
push 0x4cf4
push 0x7c6
push 0x937e
push 0x930d
push 0x3825
push 0x99a8
push 0x8715
push 0xb374
call fcn.00406020
add esp, 0x24
push eax
mov eax, dword [0x5a1590]
push eax
call fcn.004fb810
add esp, 8
mov dword [0x5a15a0], eax
mov ecx, dword [ebp - 0x50]
cmp ecx, dword [ebp - 0x48]
jge 0x4f121a
mov dword [ebp - 0x190], 1
jmp 0x4f1224
mov dword [ebp - 0x190], 0
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x38]
or edx, dword [ebp - 0x190]
mov dword [ebp - 0x20c], edx
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x20c], 0
je 0x4f1364
mov ecx, dword [ebp - 0x38]
cmp ecx, dword [ebp - 0x14]
jge 0x4f1260
mov dword [ebp - 0x194], 1
jmp 0x4f126a
mov dword [ebp - 0x194], 0
mov edx, dword [0x596298]
sub edx, dword [0x59633c]
or edx, dword [ebp - 0x194]
je 0x4f1364
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x1c]
jge 0x4f1296
mov dword [ebp - 0x198], 1
jmp 0x4f12a0
mov dword [ebp - 0x198], 0
mov ecx, dword [0x5962fc]
sub ecx, 1
mov dword [0x5962fc], ecx
mov edx, dword [ebp - 0x54]
cmp edx, dword [0x5962fc]
jge 0x4f12c6
mov dword [ebp - 0x19c], 1
jmp 0x4f12d0
mov dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x198]
or eax, dword [ebp - 0x19c]
je 0x4f1364
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [ebp - 0x54]
jge 0x4f12f6
mov dword [ebp - 0x1a0], 1
jmp 0x4f1300
mov dword [ebp - 0x1a0], 0
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x210], edx
mov eax, dword [0x596360]
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x210]
cmp edx, dword [ebp - 0x214]
jge 0x4f1337
mov dword [ebp - 0x1a4], 1
jmp 0x4f1341
mov dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x4c]
sub eax, 1
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x1a0]
or ecx, dword [ebp - 0x4c]
or ecx, dword [ebp - 0x1a4]
je 0x4f1364
mov edx, dword [ebp - 0x10]
sub edx, 1
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 8]
add eax, 0x12
push eax
mov ecx, dword [0x596304]
sub ecx, 0x23
push ecx
mov edx, dword [ebp - 0x3c]
sub edx, 0x3a
push edx
mov eax, dword [0x5962f8]
sub eax, 0x36
push eax
call fcn.00407170
add esp, 0x10
mov dword [ebp - 0xdc], 0
jmp 0x4f13a8
mov ecx, dword [ebp - 0xdc]
add ecx, 1
mov dword [ebp - 0xdc], ecx
mov edx, dword [0x5962fc]
sub edx, 0x186a3
cmp dword [ebp - 0xdc], edx
jge 0x4f1547
mov eax, dword [0x59633c]
cmp eax, dword [ebp - 0x24]
jge 0x4f1542
mov ecx, dword [0x59629c]
add ecx, 1
mov dword [0x59629c], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [0x59629c]
cmp edx, dword [ebp - 0x1c]
jge 0x4f13f7
mov dword [ebp - 0x1a8], 1
jmp 0x4f1401
mov dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x218], eax
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x21c], ecx
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x21c]
jge 0x4f1436
mov dword [ebp - 0x1ac], 1
jmp 0x4f1440
mov dword [ebp - 0x1ac], 0
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x40]
cmp edx, dword [ebp - 0x1c]
jge 0x4f1460
mov dword [ebp - 0x1b0], 1
jmp 0x4f146a
mov dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1a8]
and eax, dword [ebp - 0x1ac]
or eax, dword [ebp - 0x1b0]
je 0x4f1542
mov ecx, dword [0x596338]
sub ecx, 1
mov dword [0x596338], ecx
mov edx, dword [0x59629c]
cmp edx, dword [0x596338]
jge 0x4f1542
mov eax, dword [ebp - 0x38]
cmp eax, dword [0x596300]
jge 0x4f14ba
mov dword [ebp - 0x1b4], 1
jmp 0x4f14c4
mov dword [ebp - 0x1b4], 0
mov ecx, dword [0x5962c8]
add ecx, dword [ebp - 0x18]
and ecx, dword [ebp - 0x14]
xor ecx, dword [0x59633c]
or ecx, dword [ebp - 0x1b4]
je 0x4f1542
mov edx, dword [0x59629c]
cmp edx, dword [0x5962f8]
jge 0x4f14f8
mov dword [ebp - 0x1b8], 1
jmp 0x4f1502
mov dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [0x5962c8]
mov ecx, dword [ebp - 0x58]
xor ecx, dword [ebp - 0x1b8]
or eax, ecx
mov dword [ebp - 0x220], eax
mov edx, dword [0x5962c8]
sub edx, 1
mov dword [0x5962c8], edx
cmp dword [ebp - 0x220], 0
je 0x4f1542
mov eax, dword [0x596360]
sub eax, 1
mov dword [0x596360], eax
jmp 0x4f1399
mov ecx, dword [0x59629c]
cmp ecx, dword [ebp - 0x1c]
jge 0x4f155e
mov dword [ebp - 0x1bc], 1
jmp 0x4f1568
mov dword [ebp - 0x1bc], 0
mov edx, dword [ebp - 0x1bc]
and edx, dword [ebp - 0x2c]
xor edx, dword [ebp - 0x38]
je 0x4f1583
mov eax, dword [0x5962f8]
sub eax, 1
mov dword [0x5962f8], eax
mov ecx, dword [ebp - 0x10]
add ecx, 8
push ecx
mov edx, dword [ebp - 0x18]
sub edx, 0xa
push edx
mov eax, dword [0x5962c4]
sub eax, 0x19
push eax
mov ecx, dword [ebp - 0x28]
add ecx, 0x11
push ecx
mov edx, dword [0x59629c]
sub edx, 4
push edx
mov eax, dword [ebp - 0x20]
sub eax, 0x16
push eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x3e
push ecx
mov edx, dword [0x596308]
sub edx, 8
push edx
mov eax, dword [ebp - 0x44]
sub eax, 0x2e
push eax
mov ecx, dword [0x596338]
add ecx, 8
push ecx
call fcn.00412120
add esp, 0x28
mov dword [ebp - 0xe0], 0
jmp 0x4f15f7
mov edx, dword [ebp - 0xe0]
add edx, 1
mov dword [ebp - 0xe0], edx
mov eax, dword [ebp - 8]
sub eax, 0x186d9
cmp dword [ebp - 0xe0], eax
jge 0x4f1618
mov ecx, dword [0x596300]
add ecx, 1
mov dword [0x596300], ecx
jmp 0x4f15e8
mov edx, dword [0x596308]
add edx, 0x23
push edx
mov eax, dword [0x596300]
sub eax, 0x4a
push eax
mov ecx, dword [ebp - 0x2c]
add ecx, 5
push ecx
mov edx, dword [0x596338]
add edx, 0x15
push edx
mov eax, dword [0x59633c]
add eax, 0x10
push eax
mov ecx, dword [ebp - 0x58]
add ecx, 0x21
push ecx
mov edx, dword [ebp - 0x58]
add edx, 0x4a
push edx
mov eax, dword [ebp - 0x3c]
sub eax, 0x3a
push eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x54
push ecx
call fcn.00420790
add esp, 0x24
mov esp, ebp
pop ebp
ret