Function at 0x403ffb
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], esp
push 0x10
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x40403d
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
mov eax, 0
setne al
test eax, eax
je 0x40405e
mov eax, 1
jmp 0x404063
mov eax, 0
mov dword [ebp - 4], eax
mov dword [ebp - 0x10], esp
mov eax, 1
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x404085
push 6
call fcn.0040b16f
add esp, 4
push eax
call fcn.0040ac30
mov dword [ebp - 8], eax
mov dword [ebp - 0x10], esp
mov eax, 1
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x4040ad
push 6
call fcn.0040b16f
add esp, 4
cmp dword [0], eax
je 0x4041f5
mov dword [ebp - 0x10], esp
mov eax, 1
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x4040d8
push 6
call fcn.0040b16f
add esp, 4
mov dword [0], eax
mov dword [ebp - 0x10], esp
mov eax, 1
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x4040fc
push 6
call fcn.0040b16f
add esp, 4
push eax
call fcn.0040ae93
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x40411c
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [4], eax
cmp dword [ebp - 8], 0
je 0x4041f0
push 0
mov ebx, 0x210
call fcn.0040b181
add esp, 4
push 0
push 0
push 0
push 0x80000003
push edx
push eax
push 2
mov ebx, 0x1e8
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], esp
mov eax, 1
call fcn.0040b175
cmp dword [ebp - 0x1c], esp
je 0x40417f
push 6
call fcn.0040b16f
add esp, 4
push eax
call fcn.0040ae93
mov dword [ebp - 0x24], eax
push 0x10
push dword [ebp - 0x24]
push 0x23
push dword [ebp - 0x18]
push 0x36
push dword [8]
mov ecx, 6
call fcn.00403f02
add esp, 0x18
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4041c3
push ebx
call fcn.0040b169
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4041d3
push ebx
call fcn.0040b169
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x4041ea
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
jmp 0x40436a
mov dword [ebp - 0x10], esp
mov eax, 1
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x404214
push 6
call fcn.0040b16f
add esp, 4
push eax
call fcn.0040ae93
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
push dword [4]
call fcn.00403f5e
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40424d
push ebx
call fcn.0040b169
add esp, 4
cmp dword [ebp - 0x1c], 0
je 0x40436a
mov dword [ebp - 0x10], esp
mov eax, 1
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x404276
push 6
call fcn.0040b16f
add esp, 4
push eax
call fcn.0040ae93
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [4]
test ebx, ebx
je 0x404296
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [4], eax
cmp dword [ebp - 8], 0
je 0x40436a
push 0
mov ebx, 0x210
call fcn.0040b181
add esp, 4
push 0
push 0
push 0
push 0x80000003
push edx
push eax
push 2
mov ebx, 0x1e8
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], esp
mov eax, 1
call fcn.0040b175
cmp dword [ebp - 0x1c], esp
je 0x4042f9
push 6
call fcn.0040b16f
add esp, 4
push eax
call fcn.0040ae93
mov dword [ebp - 0x24], eax
push 0x71
push dword [ebp - 0x24]
push 0x71
push dword [ebp - 0x18]
push 0x74
push dword [8]
mov ecx, 6
call fcn.00403f02
add esp, 0x18
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40433d
push ebx
call fcn.0040b169
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x40434d
push ebx
call fcn.0040b169
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x404364
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x4043d7
mov dword [ebp - 0x10], esp
push 8
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x404398
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x14]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x4043d7
mov eax, 1
jmp 0x4043d9
xor eax, eax
test eax, eax
je 0x404419
push 0x80
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x404413
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x404486
mov dword [ebp - 0x10], esp
push 9
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x404447
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x14]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x404486
mov eax, 1
jmp 0x404488
xor eax, eax
test eax, eax
je 0x4044c8
push 0x85
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x4044c2
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x404535
mov dword [ebp - 0x10], esp
push 0x25
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x4044f6
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x14]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x404535
mov eax, 1
jmp 0x404537
xor eax, eax
test eax, eax
je 0x404577
push 0x8c
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x404571
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x4045e4
mov dword [ebp - 0x10], esp
push 0x27
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x4045a5
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x14]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x4045e4
mov eax, 1
jmp 0x4045e6
xor eax, eax
test eax, eax
je 0x404626
push 0x8f
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x404620
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x404693
mov dword [ebp - 0x10], esp
push 0x2e
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x404654
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x14]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x404693
mov eax, 1
jmp 0x404695
xor eax, eax
test eax, eax
je 0x4046d5
push 0x92
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x4046cf
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x41
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x4046f9
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x404759
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x404759
call fcn.0040af96
test eax, eax
je 0x404759
cmp dword [ebp - 4], 1
je 0x404759
mov eax, 1
jmp 0x40475b
xor eax, eax
test eax, eax
jne 0x4047d3
cmp dword [ebp - 8], 0
je 0x4047c5
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x4047c5
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x4047c5
cmp dword [ebp - 4], 0
je 0x4047c5
mov eax, 1
jmp 0x4047c7
xor eax, eax
test eax, eax
jne 0x4047d3
xor eax, eax
jmp 0x4047d8
mov eax, 1
test eax, eax
je 0x404818
push 0x97
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x404812
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x40487a
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x40487a
call fcn.0040af96
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x40487a
cmp dword [ebp - 4], 1
je 0x40487a
mov eax, 1
jmp 0x40487c
xor eax, eax
test eax, eax
jne 0x4048ef
cmp dword [ebp - 8], 0
je 0x4048e1
call fcn.0040af96
test eax, eax
je 0x4048e1
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x4048e1
cmp dword [ebp - 4], 0
je 0x4048e1
mov eax, 1
jmp 0x4048e3
xor eax, eax
test eax, eax
jne 0x4048ef
xor eax, eax
jmp 0x4048f4
mov eax, 1
test eax, eax
je 0x404934
push 0x99
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x40492e
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x42
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x404958
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x4049b8
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4049b8
call fcn.0040af96
test eax, eax
je 0x4049b8
cmp dword [ebp - 4], 1
je 0x4049b8
mov eax, 1
jmp 0x4049ba
xor eax, eax
test eax, eax
jne 0x404a32
cmp dword [ebp - 8], 0
je 0x404a24
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x404a24
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x404a24
cmp dword [ebp - 4], 0
je 0x404a24
mov eax, 1
jmp 0x404a26
xor eax, eax
test eax, eax
jne 0x404a32
xor eax, eax
jmp 0x404a37
mov eax, 1
test eax, eax
je 0x404a77
push 0x9b
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x404a71
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x404ad9
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x404ad9
call fcn.0040af96
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x404ad9
cmp dword [ebp - 4], 1
je 0x404ad9
mov eax, 1
jmp 0x404adb
xor eax, eax
test eax, eax
jne 0x404b4e
cmp dword [ebp - 8], 0
je 0x404b40
call fcn.0040af96
test eax, eax
je 0x404b40
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x404b40
cmp dword [ebp - 4], 0
je 0x404b40
mov eax, 1
jmp 0x404b42
xor eax, eax
test eax, eax
jne 0x404b4e
xor eax, eax
jmp 0x404b53
mov eax, 1
test eax, eax
je 0x404b93
push 0x9d
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x404b8d
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x43
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x404bb7
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x404c17
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x404c17
call fcn.0040af96
test eax, eax
je 0x404c17
cmp dword [ebp - 4], 1
je 0x404c17
mov eax, 1
jmp 0x404c19
xor eax, eax
test eax, eax
jne 0x404c91
cmp dword [ebp - 8], 0
je 0x404c83
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x404c83
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x404c83
cmp dword [ebp - 4], 0
je 0x404c83
mov eax, 1
jmp 0x404c85
xor eax, eax
test eax, eax
jne 0x404c91
xor eax, eax
jmp 0x404c96
mov eax, 1
test eax, eax
je 0x404cd6
push 0x9f
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x404cd0
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x404d38
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x404d38
call fcn.0040af96
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x404d38
cmp dword [ebp - 4], 1
je 0x404d38
mov eax, 1
jmp 0x404d3a
xor eax, eax
test eax, eax
jne 0x404dad
cmp dword [ebp - 8], 0
je 0x404d9f
call fcn.0040af96
test eax, eax
je 0x404d9f
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x404d9f
cmp dword [ebp - 4], 0
je 0x404d9f
mov eax, 1
jmp 0x404da1
xor eax, eax
test eax, eax
jne 0x404dad
xor eax, eax
jmp 0x404db2
mov eax, 1
test eax, eax
je 0x404df2
push 0xa1
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x404dec
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x44
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x404e16
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x404e76
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x404e76
call fcn.0040af96
test eax, eax
je 0x404e76
cmp dword [ebp - 4], 1
je 0x404e76
mov eax, 1
jmp 0x404e78
xor eax, eax
test eax, eax
jne 0x404ef0
cmp dword [ebp - 8], 0
je 0x404ee2
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x404ee2
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x404ee2
cmp dword [ebp - 4], 0
je 0x404ee2
mov eax, 1
jmp 0x404ee4
xor eax, eax
test eax, eax
jne 0x404ef0
xor eax, eax
jmp 0x404ef5
mov eax, 1
test eax, eax
je 0x404f35
push 0xa3
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x404f2f
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x404f97
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x404f97
call fcn.0040af96
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x404f97
cmp dword [ebp - 4], 1
je 0x404f97
mov eax, 1
jmp 0x404f99
xor eax, eax
test eax, eax
jne 0x40500c
cmp dword [ebp - 8], 0
je 0x404ffe
call fcn.0040af96
test eax, eax
je 0x404ffe
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x404ffe
cmp dword [ebp - 4], 0
je 0x404ffe
mov eax, 1
jmp 0x405000
xor eax, eax
test eax, eax
jne 0x40500c
xor eax, eax
jmp 0x405011
mov eax, 1
test eax, eax
je 0x405051
push 0xa5
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x40504b
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x45
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x405075
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x4050d5
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4050d5
call fcn.0040af96
test eax, eax
je 0x4050d5
cmp dword [ebp - 4], 1
je 0x4050d5
mov eax, 1
jmp 0x4050d7
xor eax, eax
test eax, eax
jne 0x40514f
cmp dword [ebp - 8], 0
je 0x405141
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x405141
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x405141
cmp dword [ebp - 4], 0
je 0x405141
mov eax, 1
jmp 0x405143
xor eax, eax
test eax, eax
jne 0x40514f
xor eax, eax
jmp 0x405154
mov eax, 1
test eax, eax
je 0x405194
push 0xa7
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x40518e
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x4051f6
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4051f6
call fcn.0040af96
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x4051f6
cmp dword [ebp - 4], 1
je 0x4051f6
mov eax, 1
jmp 0x4051f8
xor eax, eax
test eax, eax
jne 0x40526b
cmp dword [ebp - 8], 0
je 0x40525d
call fcn.0040af96
test eax, eax
je 0x40525d
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x40525d
cmp dword [ebp - 4], 0
je 0x40525d
mov eax, 1
jmp 0x40525f
xor eax, eax
test eax, eax
jne 0x40526b
xor eax, eax
jmp 0x405270
mov eax, 1
test eax, eax
je 0x4052b0
push 0xa9
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x4052aa
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x46
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x4052d4
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x405334
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x405334
call fcn.0040af96
test eax, eax
je 0x405334
cmp dword [ebp - 4], 1
je 0x405334
mov eax, 1
jmp 0x405336
xor eax, eax
test eax, eax
jne 0x4053ae
cmp dword [ebp - 8], 0
je 0x4053a0
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x4053a0
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x4053a0
cmp dword [ebp - 4], 0
je 0x4053a0
mov eax, 1
jmp 0x4053a2
xor eax, eax
test eax, eax
jne 0x4053ae
xor eax, eax
jmp 0x4053b3
mov eax, 1
test eax, eax
je 0x4053f3
push 0xab
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x4053ed
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x405455
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x405455
call fcn.0040af96
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x405455
cmp dword [ebp - 4], 1
je 0x405455
mov eax, 1
jmp 0x405457
xor eax, eax
test eax, eax
jne 0x4054ca
cmp dword [ebp - 8], 0
je 0x4054bc
call fcn.0040af96
test eax, eax
je 0x4054bc
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x4054bc
cmp dword [ebp - 4], 0
je 0x4054bc
mov eax, 1
jmp 0x4054be
xor eax, eax
test eax, eax
jne 0x4054ca
xor eax, eax
jmp 0x4054cf
mov eax, 1
test eax, eax
je 0x40550f
push 0xad
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x405509
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x47
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x405533
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x405593
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x405593
call fcn.0040af96
test eax, eax
je 0x405593
cmp dword [ebp - 4], 1
je 0x405593
mov eax, 1
jmp 0x405595
xor eax, eax
test eax, eax
jne 0x40560d
cmp dword [ebp - 8], 0
je 0x4055ff
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x4055ff
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x4055ff
cmp dword [ebp - 4], 0
je 0x4055ff
mov eax, 1
jmp 0x405601
xor eax, eax
test eax, eax
jne 0x40560d
xor eax, eax
jmp 0x405612
mov eax, 1
test eax, eax
je 0x405652
push 0xaf
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x40564c
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x4056b4
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4056b4
call fcn.0040af96
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x4056b4
cmp dword [ebp - 4], 1
je 0x4056b4
mov eax, 1
jmp 0x4056b6
xor eax, eax
test eax, eax
jne 0x405729
cmp dword [ebp - 8], 0
je 0x40571b
call fcn.0040af96
test eax, eax
je 0x40571b
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x40571b
cmp dword [ebp - 4], 0
je 0x40571b
mov eax, 1
jmp 0x40571d
xor eax, eax
test eax, eax
jne 0x405729
xor eax, eax
jmp 0x40572e
mov eax, 1
test eax, eax
je 0x40576e
push 0xb1
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x405768
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x48
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x405792
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x4057f2
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4057f2
call fcn.0040af96
test eax, eax
je 0x4057f2
cmp dword [ebp - 4], 1
je 0x4057f2
mov eax, 1
jmp 0x4057f4
xor eax, eax
test eax, eax
jne 0x40586c
cmp dword [ebp - 8], 0
je 0x40585e
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x40585e
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x40585e
cmp dword [ebp - 4], 0
je 0x40585e
mov eax, 1
jmp 0x405860
xor eax, eax
test eax, eax
jne 0x40586c
xor eax, eax
jmp 0x405871
mov eax, 1
test eax, eax
je 0x4058b1
push 0xb3
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x4058ab
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x405913
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x405913
call fcn.0040af96
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x405913
cmp dword [ebp - 4], 1
je 0x405913
mov eax, 1
jmp 0x405915
xor eax, eax
test eax, eax
jne 0x405988
cmp dword [ebp - 8], 0
je 0x40597a
call fcn.0040af96
test eax, eax
je 0x40597a
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x40597a
cmp dword [ebp - 4], 0
je 0x40597a
mov eax, 1
jmp 0x40597c
xor eax, eax
test eax, eax
jne 0x405988
xor eax, eax
jmp 0x40598d
mov eax, 1
test eax, eax
je 0x4059cd
push 0xb5
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x4059c7
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x49
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x4059f1
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x405a51
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x405a51
call fcn.0040af96
test eax, eax
je 0x405a51
cmp dword [ebp - 4], 1
je 0x405a51
mov eax, 1
jmp 0x405a53
xor eax, eax
test eax, eax
jne 0x405acb
cmp dword [ebp - 8], 0
je 0x405abd
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x405abd
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x405abd
cmp dword [ebp - 4], 0
je 0x405abd
mov eax, 1
jmp 0x405abf
xor eax, eax
test eax, eax
jne 0x405acb
xor eax, eax
jmp 0x405ad0
mov eax, 1
test eax, eax
je 0x405b10
push 0xb7
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x405b0a
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x405b72
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x405b72
call fcn.0040af96
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x405b72
cmp dword [ebp - 4], 1
je 0x405b72
mov eax, 1
jmp 0x405b74
xor eax, eax
test eax, eax
jne 0x405be7
cmp dword [ebp - 8], 0
je 0x405bd9
call fcn.0040af96
test eax, eax
je 0x405bd9
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x405bd9
cmp dword [ebp - 4], 0
je 0x405bd9
mov eax, 1
jmp 0x405bdb
xor eax, eax
test eax, eax
jne 0x405be7
xor eax, eax
jmp 0x405bec
mov eax, 1
test eax, eax
je 0x405c2c
push 0xb9
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x405c26
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x4a
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x405c50
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x405cb0
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x405cb0
call fcn.0040af96
test eax, eax
je 0x405cb0
cmp dword [ebp - 4], 1
je 0x405cb0
mov eax, 1
jmp 0x405cb2
xor eax, eax
test eax, eax
jne 0x405d2a
cmp dword [ebp - 8], 0
je 0x405d1c
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x405d1c
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x405d1c
cmp dword [ebp - 4], 0
je 0x405d1c
mov eax, 1
jmp 0x405d1e
xor eax, eax
test eax, eax
jne 0x405d2a
xor eax, eax
jmp 0x405d2f
mov eax, 1
test eax, eax
je 0x405d6f
push 0xbb
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x405d69
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x405dd1
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x405dd1
call fcn.0040af96
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x405dd1
cmp dword [ebp - 4], 1
je 0x405dd1
mov eax, 1
jmp 0x405dd3
xor eax, eax
test eax, eax
jne 0x405e46
cmp dword [ebp - 8], 0
je 0x405e38
call fcn.0040af96
test eax, eax
je 0x405e38
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x405e38
cmp dword [ebp - 4], 0
je 0x405e38
mov eax, 1
jmp 0x405e3a
xor eax, eax
test eax, eax
jne 0x405e46
xor eax, eax
jmp 0x405e4b
mov eax, 1
test eax, eax
je 0x405e8b
push 0xbd
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x405e85
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x4b
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x405eaf
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x405f0f
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x405f0f
call fcn.0040af96
test eax, eax
je 0x405f0f
cmp dword [ebp - 4], 1
je 0x405f0f
mov eax, 1
jmp 0x405f11
xor eax, eax
test eax, eax
jne 0x405f89
cmp dword [ebp - 8], 0
je 0x405f7b
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x405f7b
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x405f7b
cmp dword [ebp - 4], 0
je 0x405f7b
mov eax, 1
jmp 0x405f7d
xor eax, eax
test eax, eax
jne 0x405f89
xor eax, eax
jmp 0x405f8e
mov eax, 1
test eax, eax
je 0x405fce
push 0xbf
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x405fc8
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x406030
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x406030
call fcn.0040af96
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x406030
cmp dword [ebp - 4], 1
je 0x406030
mov eax, 1
jmp 0x406032
xor eax, eax
test eax, eax
jne 0x4060a5
cmp dword [ebp - 8], 0
je 0x406097
call fcn.0040af96
test eax, eax
je 0x406097
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x406097
cmp dword [ebp - 4], 0
je 0x406097
mov eax, 1
jmp 0x406099
xor eax, eax
test eax, eax
jne 0x4060a5
xor eax, eax
jmp 0x4060aa
mov eax, 1
test eax, eax
je 0x4060ea
push 0xc1
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x4060e4
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x4c
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x40610e
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x40616e
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x40616e
call fcn.0040af96
test eax, eax
je 0x40616e
cmp dword [ebp - 4], 1
je 0x40616e
mov eax, 1
jmp 0x406170
xor eax, eax
test eax, eax
jne 0x4061e8
cmp dword [ebp - 8], 0
je 0x4061da
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x4061da
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x4061da
cmp dword [ebp - 4], 0
je 0x4061da
mov eax, 1
jmp 0x4061dc
xor eax, eax
test eax, eax
jne 0x4061e8
xor eax, eax
jmp 0x4061ed
mov eax, 1
test eax, eax
je 0x40622d
push 0xc3
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x406227
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x40628f
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x40628f
call fcn.0040af96
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x40628f
cmp dword [ebp - 4], 1
je 0x40628f
mov eax, 1
jmp 0x406291
xor eax, eax
test eax, eax
jne 0x406304
cmp dword [ebp - 8], 0
je 0x4062f6
call fcn.0040af96
test eax, eax
je 0x4062f6
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x4062f6
cmp dword [ebp - 4], 0
je 0x4062f6
mov eax, 1
jmp 0x4062f8
xor eax, eax
test eax, eax
jne 0x406304
xor eax, eax
jmp 0x406309
mov eax, 1
test eax, eax
je 0x406349
push 0xc5
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x406343
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x4d
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x40636d
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x4063cd
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4063cd
call fcn.0040af96
test eax, eax
je 0x4063cd
cmp dword [ebp - 4], 1
je 0x4063cd
mov eax, 1
jmp 0x4063cf
xor eax, eax
test eax, eax
jne 0x406447
cmp dword [ebp - 8], 0
je 0x406439
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x406439
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x406439
cmp dword [ebp - 4], 0
je 0x406439
mov eax, 1
jmp 0x40643b
xor eax, eax
test eax, eax
jne 0x406447
xor eax, eax
jmp 0x40644c
mov eax, 1
test eax, eax
je 0x40648c
push 0xc7
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x406486
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x4064ee
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4064ee
call fcn.0040af96
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x4064ee
cmp dword [ebp - 4], 1
je 0x4064ee
mov eax, 1
jmp 0x4064f0
xor eax, eax
test eax, eax
jne 0x406563
cmp dword [ebp - 8], 0
je 0x406555
call fcn.0040af96
test eax, eax
je 0x406555
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x406555
cmp dword [ebp - 4], 0
je 0x406555
mov eax, 1
jmp 0x406557
xor eax, eax
test eax, eax
jne 0x406563
xor eax, eax
jmp 0x406568
mov eax, 1
test eax, eax
je 0x4065a8
push 0xc9
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x4065a2
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x4e
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x4065cc
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x40662c
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x40662c
call fcn.0040af96
test eax, eax
je 0x40662c
cmp dword [ebp - 4], 1
je 0x40662c
mov eax, 1
jmp 0x40662e
xor eax, eax
test eax, eax
jne 0x4066a6
cmp dword [ebp - 8], 0
je 0x406698
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x406698
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x406698
cmp dword [ebp - 4], 0
je 0x406698
mov eax, 1
jmp 0x40669a
xor eax, eax
test eax, eax
jne 0x4066a6
xor eax, eax
jmp 0x4066ab
mov eax, 1
test eax, eax
je 0x4066eb
push 0xcb
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x4066e5
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x40674d
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x40674d
call fcn.0040af96
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x40674d
cmp dword [ebp - 4], 1
je 0x40674d
mov eax, 1
jmp 0x40674f
xor eax, eax
test eax, eax
jne 0x4067c2
cmp dword [ebp - 8], 0
je 0x4067b4
call fcn.0040af96
test eax, eax
je 0x4067b4
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x4067b4
cmp dword [ebp - 4], 0
je 0x4067b4
mov eax, 1
jmp 0x4067b6
xor eax, eax
test eax, eax
jne 0x4067c2
xor eax, eax
jmp 0x4067c7
mov eax, 1
test eax, eax
je 0x406807
push 0xcd
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x406801
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x4f
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x40682b
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x40688b
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x40688b
call fcn.0040af96
test eax, eax
je 0x40688b
cmp dword [ebp - 4], 1
je 0x40688b
mov eax, 1
jmp 0x40688d
xor eax, eax
test eax, eax
jne 0x406905
cmp dword [ebp - 8], 0
je 0x4068f7
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x4068f7
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x4068f7
cmp dword [ebp - 4], 0
je 0x4068f7
mov eax, 1
jmp 0x4068f9
xor eax, eax
test eax, eax
jne 0x406905
xor eax, eax
jmp 0x40690a
mov eax, 1
test eax, eax
je 0x40694a
push 0xcf
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x406944
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x4069ac
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4069ac
call fcn.0040af96
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x4069ac
cmp dword [ebp - 4], 1
je 0x4069ac
mov eax, 1
jmp 0x4069ae
xor eax, eax
test eax, eax
jne 0x406a21
cmp dword [ebp - 8], 0
je 0x406a13
call fcn.0040af96
test eax, eax
je 0x406a13
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x406a13
cmp dword [ebp - 4], 0
je 0x406a13
mov eax, 1
jmp 0x406a15
xor eax, eax
test eax, eax
jne 0x406a21
xor eax, eax
jmp 0x406a26
mov eax, 1
test eax, eax
je 0x406a66
push 0xd1
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x406a60
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
mov dword [ebp - 0x10], esp
push 0x50
mov eax, 0
call fcn.0040b175
cmp dword [ebp - 0x10], esp
je 0x406a8a
push 6
call fcn.0040b16f
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 8], 0
je 0x406aea
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x406aea
call fcn.0040af96
test eax, eax
je 0x406aea
cmp dword [ebp - 4], 1
je 0x406aea
mov eax, 1
jmp 0x406aec
xor eax, eax
test eax, eax
jne 0x406b64
cmp dword [ebp - 8], 0
je 0x406b56
call fcn.0040af96
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x406b56
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x406b56
xor eax, eax
test eax, eax
jne 0x406b64
xor eax, eax
jmp 0x406b69
mov eax, 1
test eax, eax
je 0x406ba9
push 0xd3
push dword [8]
mov ecx, 2
call fcn.00403f02
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [8]
test ebx, ebx
je 0x406ba3
push ebx
call fcn.0040b169
add esp, 4
pop eax
mov dword [8], eax
cmp dword [ebp - 8], 0
je 0x406c0b
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0040b181
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x406c0b
xor eax, eax
test eax, eax
jne 0x406c80