Function at 0x405e68
Capabilities:
Parse credit card information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
push 8
call fcn.0042f289
add esp, 4
mov dword [ebp - 4], eax
mov edi, eax
mov esi, 0x4a986d
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 8
call fcn.0042f289
add esp, 4
mov dword [ebp - 8], eax
mov edi, eax
mov esi, 0x4a986d
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 8
call fcn.0042f289
add esp, 4
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, 0x4a986d
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 8
call fcn.0042f289
add esp, 4
mov dword [ebp - 0x10], eax
mov edi, eax
mov esi, 0x4a986d
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x14], 0
push 8
call fcn.0042f289
add esp, 4
mov dword [ebp - 0x18], eax
mov edi, eax
mov esi, 0x4a986d
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 0xc
call fcn.0042f289
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
push 0x14
call fcn.0042f289
add esp, 4
mov dword [ebp - 0x20], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 5
rep stosd dword es:[edi], eax
push ebx
push 0xc
call fcn.0042f289
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
pop ebx
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov ebx, dword [ebp - 4]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x405f97
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x405f93
imul eax, dword [ebx]
jmp 0x405f88
mov ecx, eax
test ecx, ecx
je 0x405fb2
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0042f283
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x405f9d
call fcn.0042f283
add esp, 4
mov eax, 0x4a986d
mov dword [ebp - 4], eax
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x405fe0
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x405fdc
imul eax, dword [ebx]
jmp 0x405fd1
mov ecx, eax
test ecx, ecx
je 0x405ffb
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0042f283
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x405fe6
call fcn.0042f283
add esp, 4
mov eax, 0x4a986d
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x406029
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x406025
imul eax, dword [ebx]
jmp 0x40601a
mov ecx, eax
test ecx, ecx
je 0x406044
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0042f283
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40602f
call fcn.0042f283
add esp, 4
mov eax, 0x4a986d
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x406072
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40606e
imul eax, dword [ebx]
jmp 0x406063
mov ecx, eax
test ecx, ecx
je 0x40608d
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0042f283
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x406078
call fcn.0042f283
add esp, 4
mov eax, 0x4a986d
mov dword [ebp - 0x10], eax
cmp dword [ebp + 0xc], 5
je 0x4060b5
cmp dword [ebp + 0xc], 2
je 0x4060b5
xor eax, eax
jmp 0x4060ba
mov eax, 1
test eax, eax
je 0x406103
mov dword [ebp - 0x2c], esp
push 0
push 0
push 0x421
push dword [0x5f3598]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x2c], esp
je 0x4060f6
push 6
call fcn.0042f28f
add esp, 4
mov eax, dword [ebp + 8]
mov dword [0x5f359c], eax
jmp 0x40615f
cmp dword [ebp + 0xc], 0x114
je 0x406121
cmp dword [ebp + 0xc], 0x115
je 0x406121
xor eax, eax
jmp 0x406126
mov eax, 1
test eax, eax
je 0x40613b
mov eax, dword [ebp + 0x14]
mov dword [0x5f359c], eax
jmp 0x40615f
mov dword [ebp - 0x2c], esp
mov eax, 0x14
call fcn.0042f295
cmp dword [ebp - 0x2c], esp
je 0x40615a
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f359c], eax
mov ebx, dword [0x5f35a0]
call fcn.00401357
xor ecx, ecx
push eax
lea eax, [ebp - 0x14]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x4063bf
cmp dword [0x5f35a4], 1
jne 0x4061a2
mov dword [0x5f35a4], 0
jmp 0x4063bf
mov ebx, dword [0x5f35a0]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4061c2
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4061d5
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov eax, dword [0x5f359c]
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], eax
jne 0x4062ad
mov ebx, dword [0x5f35a0]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40620f
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406222
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.0042f27d
add esp, 8
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x34], ebx
call fcn.00401370
mov dword [ebp - 0x38], ecx
mov edi, dword [ebp - 0x34]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x40626f
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x38]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x34]
call fcn.0042f2a1
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x38]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x30]
push edi
push eax
push 0x10
call fcn.0042f289
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [0x5f35a0]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4062cd
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4062e0
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0x28
jne 0x4063b7
mov ebx, dword [0x5f35a0]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406319
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40632c
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 8]
push eax
push 4
mov eax, 2
call fcn.0042f27d
add esp, 8
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 8]
mov dword [ebp - 0x34], ebx
call fcn.00401370
mov dword [ebp - 0x38], ecx
mov edi, dword [ebp - 0x34]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x406379
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x38]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x34]
call fcn.0042f2a1
add esp, 8
mov dword [ebp - 8], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x38]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x30]
push edi
push eax
push 0x10
call fcn.0042f289
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
pop eax
pop ebx
pop ecx
jmp 0x406173
add esp, 0xc
mov ebx, dword [0x5f35a8]
call fcn.00401357
xor ecx, ecx
push eax
lea eax, [ebp - 0x14]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x406518
cmp dword [0x5f35ac], 1
jne 0x406405
mov dword [0x5f35ac], 0
jmp 0x406518
mov ebx, dword [0x5f35a8]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406425
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406438
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov eax, dword [0x5f359c]
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], eax
jne 0x406510
mov ebx, dword [0x5f35a8]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406472
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406485
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 0xc]
push eax
push 4
mov eax, 2
call fcn.0042f27d
add esp, 8
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x34], ebx
call fcn.00401370
mov dword [ebp - 0x38], ecx
mov edi, dword [ebp - 0x34]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4064d2
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x38]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x34]
call fcn.0042f2a1
add esp, 8
mov dword [ebp - 0xc], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x38]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x30]
push edi
push eax
push 0x20
call fcn.0042f289
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
pop eax
pop ebx
pop ecx
jmp 0x4063d6
add esp, 0xc
mov ebx, dword [0x5f35b0]
call fcn.00401357
xor ecx, ecx
push eax
lea eax, [ebp - 0x14]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x406671
cmp dword [0x5f35b4], 1
jne 0x40655e
mov dword [0x5f35b4], 0
jmp 0x406671
mov ebx, dword [0x5f35b0]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40657e
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406591
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov eax, dword [0x5f3598]
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], eax
jne 0x406669
mov ebx, dword [0x5f35b0]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4065cb
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4065de
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 0x10]
push eax
push 4
mov eax, 2
call fcn.0042f27d
add esp, 8
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x10]
mov dword [ebp - 0x34], ebx
call fcn.00401370
mov dword [ebp - 0x38], ecx
mov edi, dword [ebp - 0x34]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x40662b
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x38]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x34]
call fcn.0042f2a1
add esp, 8
mov dword [ebp - 0x10], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x38]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x30]
push edi
push eax
push 0x18
call fcn.0042f289
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
pop eax
pop ebx
pop ecx
jmp 0x40652f
add esp, 0xc
mov ebx, dword [0x5f35b8]
call fcn.00401357
xor ecx, ecx
push eax
lea eax, [ebp - 0x14]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x40675c
mov ebx, dword [0x5f35b8]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4066b6
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4066c9
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 0x18]
push eax
push 4
mov eax, 2
call fcn.0042f27d
add esp, 8
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x34], ebx
call fcn.00401370
mov dword [ebp - 0x38], ecx
mov edi, dword [ebp - 0x34]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x406716
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x38]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x34]
call fcn.0042f2a1
add esp, 8
mov dword [ebp - 0x18], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x38]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x30]
push edi
push eax
push 0x18
call fcn.0042f289
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
pop eax
pop ebx
pop ecx
jmp 0x406688
add esp, 0xc
mov ebx, dword [ebp - 4]
call fcn.00401357
xor ecx, ecx
push eax
lea eax, [ebp - 0x14]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x407ae6
cmp dword [ebp + 0xc], 5
jne 0x4068f2
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4067a5
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4067b8
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0x27
jne 0x406821
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4067ee
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406801
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x34]
cmp dword [ebx], 0x3e
jne 0x406821
mov eax, 1
jmp 0x406823
xor eax, eax
test eax, eax
je 0x4068f2
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406848
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40685b
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
cmp dword [ebp + 8], eax
jne 0x4068f2
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406890
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4068a3
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x4068e3
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407ae6
cmp dword [ebp + 0xc], 2
jne 0x406a66
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406919
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40692c
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0x27
jne 0x406a66
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406962
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406975
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
cmp dword [ebp + 8], eax
jne 0x4069dd
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4069aa
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4069bd
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x34]
cmp dword [ebx], 0x3f
jne 0x4069dd
mov eax, 1
jmp 0x4069df
xor eax, eax
test eax, eax
je 0x406a66
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406a04
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406a17
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x406a57
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407ae6
cmp dword [ebp + 0xc], 0x204
jne 0x406d03
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406a90
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406aa3
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0x27
jne 0x406be2
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406ad9
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406aec
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
cmp dword [ebp + 8], eax
jne 0x406b54
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406b21
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406b34
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x34]
cmp dword [ebx], 0x41
jne 0x406b54
mov eax, 1
jmp 0x406b56
xor eax, eax
test eax, eax
je 0x406bdd
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406b7b
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406b8e
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x406bce
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407ae6
jmp 0x406d03
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406bff
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406c12
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
cmp dword [ebp + 0x14], eax
jne 0x406c7a
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406c47
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406c5a
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x34]
cmp dword [ebx], 0x41
jne 0x406c7a
mov eax, 1
jmp 0x406c7c
xor eax, eax
test eax, eax
je 0x406d03
mov ebx, dword [ebp - 8]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406ca1
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406cb4
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x406cf4
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407ae6
cmp dword [ebp + 0xc], 0x111
jne 0x4073ad
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406d2d
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406d40
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0x13
jne 0x406e20
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406d76
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406d89
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
cmp dword [ebp + 0x14], eax
jne 0x406e20
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406dbe
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406dd1
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 1
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x406e11
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407ae6
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406e3d
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406e50
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0x28
jne 0x406f48
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406e86
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406e99
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
cmp dword [ebp + 0x14], eax
jne 0x406f48
push dword [ebp + 0x10]
call fcn.00409cdb
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x300
jne 0x406f48
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406ee6
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406ef9
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x406f39
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407ae6
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406f65
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406f78
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0x22
jne 0x4070f8
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x406fae
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406fc1
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0x157
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x406ffe
push 6
call fcn.0042f28f
add esp, 4
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jne 0x4070f8
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407028
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40703b
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
cmp dword [ebp + 0x14], eax
jne 0x40706f
push dword [ebp + 0x10]
call fcn.00409cdb
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 9
jne 0x40706f
mov eax, 1
jmp 0x407071
xor eax, eax
test eax, eax
je 0x4070f8
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407096
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4070a9
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x4070e9
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407ae6
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407115
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407128
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0x23
jne 0x4073ad
push dword [ebp + 0x10]
call fcn.00409cdb
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jne 0x4071ee
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407173
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407186
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebx]
cmp dword [ebp + 0x14], eax
jne 0x4071ee
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4071bb
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4071ce
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 0x40]
cmp dword [ebx], 0x33
jne 0x4071ee
mov eax, 1
jmp 0x4071f0
xor eax, eax
test eax, eax
je 0x407277
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407215
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407228
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x407268
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407ae6
push dword [ebp + 0x10]
call fcn.00409cdb
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jne 0x407324
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4072a9
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4072bc
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebx]
cmp dword [ebp + 0x14], eax
jne 0x407324
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4072f1
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407304
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 0x40]
cmp dword [ebx], 0x34
jne 0x407324
mov eax, 1
jmp 0x407326
xor eax, eax
test eax, eax
je 0x4073ad
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40734b
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40735e
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x40739e
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407ae6
cmp dword [ebp + 0xc], 0x4e
jne 0x407ade
mov dword [ebp - 0x2c], esp
mov eax, 0x16
call fcn.0042f295
cmp dword [ebp - 0x2c], esp
je 0x4073d6
push 6
call fcn.0042f28f
add esp, 4
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
push 0
push 0xc
push dword [ebp - 0x1c]
push dword [ebp + 0x14]
push dword [ebp - 0x30]
mov eax, 0x17
call fcn.0042f295
cmp dword [ebp - 0x34], esp
je 0x40740b
push 6
call fcn.0042f28f
add esp, 4
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407428
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40743b
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0x26
jne 0x407773
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407477
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40748a
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], eax
jne 0x407773
mov ebx, dword [ebp - 0x1c]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0xfffffffd
jne 0x407509
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4074d6
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4074e9
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x34]
cmp dword [ebx], 0x3d
jne 0x407509
mov eax, 1
jmp 0x40750b
xor eax, eax
test eax, eax
je 0x407597
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407530
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407543
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x407583
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407ae6
mov ebx, dword [ebp - 0x1c]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0xfffffffe
jne 0x4075fc
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4075c9
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4075dc
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x34]
cmp dword [ebx], 0x3c
jne 0x4075fc
mov eax, 1
jmp 0x4075fe
xor eax, eax
test eax, eax
je 0x407685
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407623
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407636
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x407676
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407ae6
mov ebx, dword [ebp - 0x1c]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0xfffffffb
jne 0x4076ea
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4076b7
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4076ca
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x34]
cmp dword [ebx], 0x41
jne 0x4076ea
mov eax, 1
jmp 0x4076ec
xor eax, eax
test eax, eax
je 0x407773
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407711
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407724
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x407764
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407ae6
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407790
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4077a3
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0x51
jne 0x407ade
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4077df
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4077f2
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], eax
jne 0x407ade
mov ebx, dword [ebp - 0x1c]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0xfffffffd
jne 0x407871
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40783e
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407851
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x34]
cmp dword [ebx], 0x48
jne 0x407871
mov eax, 1
jmp 0x407873
xor eax, eax
test eax, eax
je 0x4078ff
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407898
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4078ab
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x4078eb
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407ae6
mov ebx, dword [ebp - 0x1c]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0xfffffe6e
jne 0x407967
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407934
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407947
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x34]
cmp dword [ebx], 0x47
jne 0x407967
mov eax, 1
jmp 0x407969
xor eax, eax
test eax, eax
je 0x4079f0
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40798e
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4079a1
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x4079e1
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407ae6
mov ebx, dword [ebp - 0x1c]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0xfffffffb
jne 0x407a55
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407a22
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407a35
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x34]
cmp dword [ebx], 0x41
jne 0x407a55
mov eax, 1
jmp 0x407a57
xor eax, eax
test eax, eax
je 0x407ade
mov ebx, dword [ebp - 4]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407a7c
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407a8f
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x407acf
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407ae6
pop eax
pop ebx
pop ecx
jmp 0x406770
add esp, 0xc
mov ebx, dword [ebp - 8]
call fcn.00401357
xor ecx, ecx
push eax
lea eax, [ebp - 0x14]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x407c49
cmp dword [ebp + 0xc], 0x111
jne 0x407c41
push dword [ebp + 0x10]
call fcn.00409d17
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 8]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407b3d
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407b50
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
cmp dword [ebp - 0x2c], eax
jne 0x407bb8
mov ebx, dword [ebp - 8]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407b85
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407b98
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
cmp dword [ebx], 0x40
jne 0x407bb8
mov eax, 1
jmp 0x407bba
xor eax, eax
test eax, eax
je 0x407c41
mov ebx, dword [ebp - 8]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407bdf
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407bf2
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x407c32
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35a4], 1
jmp 0x407c49
pop eax
pop ebx
pop ecx
jmp 0x407afa
add esp, 0xc
mov ebx, dword [ebp - 0x10]
call fcn.00401357
xor ecx, ecx
push eax
lea eax, [ebp - 0x14]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x407df7
cmp dword [ebp + 0xc], 0x111
jne 0x407def
mov ebx, dword [ebp - 0x10]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407c95
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407ca8
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
cmp dword [ebp + 0x14], eax
jne 0x407def
push dword [ebp + 0x10]
call fcn.00409d17
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x10]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407ce8
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407cfb
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
cmp dword [ebp - 0x2c], eax
jne 0x407d66
mov ebx, dword [ebp - 0x10]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407d33
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407d46
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
cmp dword [ebx], 0x49
jne 0x407d66
mov eax, 1
jmp 0x407d68
xor eax, eax
test eax, eax
je 0x407def
mov ebx, dword [ebp - 0x10]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x407d8d
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407da0
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x407de0
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35b4], 1
jmp 0x407df7
pop eax
pop ebx
pop ecx
jmp 0x407c5d
add esp, 0xc
mov ebx, dword [ebp - 0x18]
call fcn.00401357
xor ecx, ecx
push eax
lea eax, [ebp - 0x14]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x40830d
cmp dword [ebp + 0xc], 0x4e
jne 0x408305
mov dword [ebp - 0x2c], esp
mov eax, 0x16
call fcn.0042f295
cmp dword [ebp - 0x2c], esp
je 0x407e42
push 6
call fcn.0042f28f
add esp, 4
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
mov eax, dword [ebp - 0x20]
push eax
push 0x19
call fcn.0042f289
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], eax
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov byte [edi], al
inc edi
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, 0x18
call fcn.0042f295
cmp dword [ebp - 0x34], esp
je 0x407eca
push 6
call fcn.0042f28f
add esp, 4
push eax
mov ebx, dword [ebp - 0x38]
push ebx
mov edi, dword [ebp - 0x3c]
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0xc
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov al, byte [ebx]
inc ebx
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.0042f283
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], esp
push 0
push dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
push eax
push 0x19
call fcn.0042f289
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], eax
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov byte [edi], al
inc edi
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push dword [ebp + 0x14]
push dword [ebp - 0x30]
mov eax, 0x19
call fcn.0042f295
cmp dword [ebp - 0x44], esp
je 0x407fc4
push 6
call fcn.0042f28f
add esp, 4
push eax
mov ebx, dword [ebp - 0x48]
push ebx
mov edi, dword [ebp - 0x4c]
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0xc
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov al, byte [ebx]
inc ebx
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.0042f283
add esp, 4
pop eax
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0xfffffdf8
jne 0x4080a1
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x18]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40806a
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40807d
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x34]
cmp dword [ebx], eax
jne 0x4080a1
mov eax, 1
jmp 0x4080a3
xor eax, eax
test eax, eax
je 0x408305
mov ebx, dword [ebp - 0x20]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x18]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4080d1
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4080e4
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x2c]
mov dword [ebx], eax
mov dword [ebp - 0x2c], esp
mov eax, 0x16
call fcn.0042f295
cmp dword [ebp - 0x2c], esp
je 0x40811a
push 6
call fcn.0042f28f
add esp, 4
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
mov eax, dword [ebp - 0x20]
push eax
push 0x19
call fcn.0042f289
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], eax
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov byte [edi], al
inc edi
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, 0x18
call fcn.0042f295
cmp dword [ebp - 0x34], esp
je 0x4081a2
push 6
call fcn.0042f28f
add esp, 4
push eax
mov ebx, dword [ebp - 0x38]
push ebx
mov edi, dword [ebp - 0x3c]
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0xc
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov al, byte [ebx]
inc ebx
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.0042f283
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], esp
push 0
push dword [ebp - 0x40]
push dword [ebp + 0x14]
mov eax, dword [ebp - 0x20]
push eax
push 0x19
call fcn.0042f289
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], eax
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov byte [edi], al
inc edi
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push dword [ebp - 0x30]
mov eax, 0x1a
call fcn.0042f295
cmp dword [ebp - 0x44], esp
je 0x40829c
push 6
call fcn.0042f28f
add esp, 4
push eax
mov ebx, dword [ebp - 0x48]
push ebx
mov edi, dword [ebp - 0x4c]
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0xc
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov al, byte [ebx]
inc ebx
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.0042f283
add esp, 4
pop eax
jmp 0x40830d
pop eax
pop ebx
pop ecx
jmp 0x407e0b
add esp, 0xc
mov ebx, dword [ebp - 0xc]
call fcn.00401357
xor ecx, ecx
push eax
lea eax, [ebp - 0x14]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x409ade
cmp dword [ebp + 0xc], 0x114
jne 0x408f0f
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408359
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40836c
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
cmp dword [ebp + 0x14], eax
jne 0x408f0f
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4083a1
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4083b4
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
mov dword [0x5f35bc], eax
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4083e8
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4083fb
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
mov dword [0x5f35c0], eax
mov dword [ebp - 0x2c], esp
push 0
push 0
push 0xe1
push dword [ebp + 0x14]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x2c], esp
je 0x408443
push 6
call fcn.0042f28f
add esp, 4
mov dword [ebp - 0x24], eax
push dword [ebp + 0x10]
call fcn.00409d17
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jne 0x4084ab
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408478
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40848b
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
cmp dword [ebx], 0x42
jne 0x4084ab
mov eax, 1
jmp 0x4084ad
xor eax, eax
test eax, eax
je 0x40867f
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4084d2
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4084e5
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x2c], ebx
fild dword [ebp - 0x24]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
mov ebx, dword [ebp - 0x2c]
fild dword [ebx]
fstp qword [ebp - 0x3c]
fsub qword [ebp - 0x3c]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
call fcn.00401544
mov dword [ebp - 0x28], eax
mov eax, dword [0x5f35bc]
cmp dword [ebp - 0x28], eax
jg 0x408595
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40853f
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408552
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [0x5f35bc]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x408590
push 6
call fcn.0042f28f
add esp, 4
jmp 0x408600
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4085b2
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4085c5
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [ebp - 0x28]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x408600
push 6
call fcn.0042f28f
add esp, 4
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40861d
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408630
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x408670
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35ac], 1
jmp 0x409ade
push dword [ebp + 0x10]
call fcn.00409d17
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jne 0x4086e4
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4086b1
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4086c4
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
cmp dword [ebx], 0x43
jne 0x4086e4
mov eax, 1
jmp 0x4086e6
xor eax, eax
test eax, eax
je 0x4088b8
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40870b
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40871e
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x2c], ebx
fild dword [ebp - 0x24]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
mov ebx, dword [ebp - 0x2c]
fild dword [ebx]
fstp qword [ebp - 0x3c]
fadd qword [ebp - 0x3c]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
call fcn.00401544
mov dword [ebp - 0x28], eax
mov eax, dword [0x5f35c0]
cmp dword [ebp - 0x28], eax
jl 0x4087ce
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408778
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40878b
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [0x5f35c0]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x4087c9
push 6
call fcn.0042f28f
add esp, 4
jmp 0x408839
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4087eb
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4087fe
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [ebp - 0x28]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x408839
push 6
call fcn.0042f28f
add esp, 4
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408856
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408869
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x4088a9
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35ac], 1
jmp 0x409ade
push dword [ebp + 0x10]
call fcn.00409d17
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jne 0x40891d
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4088ea
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4088fd
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
cmp dword [ebx], 0x44
jne 0x40891d
mov eax, 1
jmp 0x40891f
xor eax, eax
test eax, eax
je 0x408af1
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408944
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408957
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x2c], ebx
fild dword [ebp - 0x24]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
mov ebx, dword [ebp - 0x2c]
fild dword [ebx]
fstp qword [ebp - 0x3c]
fsub qword [ebp - 0x3c]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
call fcn.00401544
mov dword [ebp - 0x28], eax
mov eax, dword [0x5f35bc]
cmp dword [ebp - 0x28], eax
jg 0x408a07
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4089b1
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4089c4
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [0x5f35bc]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x408a02
push 6
call fcn.0042f28f
add esp, 4
jmp 0x408a72
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408a24
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408a37
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [ebp - 0x28]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x408a72
push 6
call fcn.0042f28f
add esp, 4
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408a8f
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408aa2
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x408ae2
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35ac], 1
jmp 0x409ade
push dword [ebp + 0x10]
call fcn.00409d17
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jne 0x408b56
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408b23
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408b36
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
cmp dword [ebx], 0x45
jne 0x408b56
mov eax, 1
jmp 0x408b58
xor eax, eax
test eax, eax
je 0x408d2a
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408b7d
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408b90
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x2c], ebx
fild dword [ebp - 0x24]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
mov ebx, dword [ebp - 0x2c]
fild dword [ebx]
fstp qword [ebp - 0x3c]
fadd qword [ebp - 0x3c]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
call fcn.00401544
mov dword [ebp - 0x28], eax
mov eax, dword [0x5f35c0]
cmp dword [ebp - 0x28], eax
jl 0x408c40
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408bea
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408bfd
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [0x5f35c0]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x408c3b
push 6
call fcn.0042f28f
add esp, 4
jmp 0x408cab
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408c5d
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408c70
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [ebp - 0x28]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x408cab
push 6
call fcn.0042f28f
add esp, 4
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408cc8
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408cdb
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x408d1b
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35ac], 1
jmp 0x409ade
push dword [ebp + 0x10]
call fcn.00409d17
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 5
jne 0x408d8f
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408d5c
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408d6f
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
cmp dword [ebx], 0x46
jne 0x408d8f
mov eax, 1
jmp 0x408d91
xor eax, eax
test eax, eax
je 0x408f0f
push dword [ebp + 0x10]
call fcn.00409cdb
mov dword [ebp - 0x28], eax
mov eax, dword [0x5f35c0]
cmp dword [ebp - 0x28], eax
jl 0x408e25
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408dcf
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408de2
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [0x5f35c0]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x408e20
push 6
call fcn.0042f28f
add esp, 4
jmp 0x408e90
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408e42
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408e55
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [ebp - 0x28]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x408e90
push 6
call fcn.0042f28f
add esp, 4
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408ead
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408ec0
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x408f00
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35ac], 1
jmp 0x409ade
cmp dword [ebp + 0xc], 0x115
jne 0x409ad6
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408f39
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408f4c
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
cmp dword [ebp + 0x14], eax
jne 0x409ad6
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408f81
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408f94
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
mov dword [0x5f35bc], eax
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x408fc8
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x408fdb
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
mov dword [0x5f35c0], eax
mov dword [ebp - 0x2c], esp
push 0
push 0
push 0xe1
push dword [ebp + 0x14]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x2c], esp
je 0x409023
push 6
call fcn.0042f28f
add esp, 4
mov dword [ebp - 0x24], eax
push dword [ebp + 0x10]
call fcn.00409d17
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jne 0x40908b
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x409058
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40906b
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
cmp dword [ebx], 0x42
jne 0x40908b
mov eax, 1
jmp 0x40908d
xor eax, eax
test eax, eax
je 0x40925a
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4090b2
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4090c5
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x2c], ebx
fild dword [ebp - 0x24]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
mov ebx, dword [ebp - 0x2c]
fild dword [ebx]
fstp qword [ebp - 0x3c]
fsub qword [ebp - 0x3c]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
call fcn.00401544
mov dword [ebp - 0x28], eax
mov eax, dword [0x5f35bc]
cmp dword [ebp - 0x28], eax
jg 0x409175
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40911f
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x409132
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [0x5f35bc]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x409170
push 6
call fcn.0042f28f
add esp, 4
jmp 0x4091e0
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x409192
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4091a5
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [ebp - 0x28]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x4091e0
push 6
call fcn.0042f28f
add esp, 4
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4091fd
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x409210
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x409250
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35ac], 1
push dword [ebp + 0x10]
call fcn.00409d17
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jne 0x4092bf
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40928c
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40929f
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
cmp dword [ebx], 0x43
jne 0x4092bf
mov eax, 1
jmp 0x4092c1
xor eax, eax
test eax, eax
je 0x40948e
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4092e6
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4092f9
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x2c], ebx
fild dword [ebp - 0x24]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
mov ebx, dword [ebp - 0x2c]
fild dword [ebx]
fstp qword [ebp - 0x3c]
fadd qword [ebp - 0x3c]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
call fcn.00401544
mov dword [ebp - 0x28], eax
mov eax, dword [0x5f35c0]
cmp dword [ebp - 0x28], eax
jl 0x4093a9
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x409353
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x409366
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [0x5f35c0]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x4093a4
push 6
call fcn.0042f28f
add esp, 4
jmp 0x409414
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4093c6
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4093d9
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [ebp - 0x28]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x409414
push 6
call fcn.0042f28f
add esp, 4
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x409431
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x409444
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x409484
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35ac], 1
push dword [ebp + 0x10]
call fcn.00409d17
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jne 0x4094f3
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4094c0
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4094d3
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
cmp dword [ebx], 0x44
jne 0x4094f3
mov eax, 1
jmp 0x4094f5
xor eax, eax
test eax, eax
je 0x4096c2
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40951a
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40952d
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x2c], ebx
fild dword [ebp - 0x24]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
mov ebx, dword [ebp - 0x2c]
fild dword [ebx]
fstp qword [ebp - 0x3c]
fsub qword [ebp - 0x3c]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
call fcn.00401544
mov dword [ebp - 0x28], eax
mov eax, dword [0x5f35bc]
cmp dword [ebp - 0x28], eax
jg 0x4095dd
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x409587
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40959a
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [0x5f35bc]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x4095d8
push 6
call fcn.0042f28f
add esp, 4
jmp 0x409648
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4095fa
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40960d
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [ebp - 0x28]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x409648
push 6
call fcn.0042f28f
add esp, 4
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x409665
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x409678
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x4096b8
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35ac], 1
push dword [ebp + 0x10]
call fcn.00409d17
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jne 0x409727
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4096f4
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x409707
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
cmp dword [ebx], 0x45
jne 0x409727
mov eax, 1
jmp 0x409729
xor eax, eax
test eax, eax
je 0x4098f6
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40974e
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x409761
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x2c], ebx
fild dword [ebp - 0x24]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
mov ebx, dword [ebp - 0x2c]
fild dword [ebx]
fstp qword [ebp - 0x3c]
fadd qword [ebp - 0x3c]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
call fcn.00401544
mov dword [ebp - 0x28], eax
mov eax, dword [0x5f35c0]
cmp dword [ebp - 0x28], eax
jl 0x409811
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4097bb
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4097ce
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [0x5f35c0]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x40980c
push 6
call fcn.0042f28f
add esp, 4
jmp 0x40987c
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40982e
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x409841
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [ebp - 0x28]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x40987c
push 6
call fcn.0042f28f
add esp, 4
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x409899
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4098ac
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x4098ec
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35ac], 1
push dword [ebp + 0x10]
call fcn.00409d17
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 5
jne 0x40995b
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x409928
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40993b
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
cmp dword [ebx], 0x46
jne 0x40995b
mov eax, 1
jmp 0x40995d
xor eax, eax
test eax, eax
je 0x409ad6
push dword [ebp + 0x10]
call fcn.00409cdb
mov dword [ebp - 0x28], eax
mov eax, dword [0x5f35c0]
cmp dword [ebp - 0x28], eax
jl 0x4099f1
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40999b
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4099ae
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [0x5f35c0]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x4099ec
push 6
call fcn.0042f28f
add esp, 4
jmp 0x409a5c
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x409a0e
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x409a21
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 1
push dword [ebp - 0x28]
push 0xe0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x13
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x409a5c
push 6
call fcn.0042f28f
add esp, 4
mov ebx, dword [ebp - 0xc]
call fcn.00401370
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x409a79
push 4
call fcn.0042f28f
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x409a8c
push 1
call fcn.0042f28f
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
mov eax, 0x15
call fcn.0042f295
cmp dword [ebp - 0x30], esp
je 0x409acc
push 6
call fcn.0042f28f
add esp, 4
mov dword [0x5f35ac], 1
pop eax
pop ebx
pop ecx
jmp 0x408321
add esp, 0xc
cmp dword [ebp + 0xc], 2
jne 0x409b00
mov eax, dword [0x5f35c4]
cmp dword [ebp + 8], eax
jne 0x409b00
mov eax, 1
jmp 0x409b02
xor eax, eax
test eax, eax
je 0x409b5f
mov dword [ebp - 0x2c], esp
push dword [ebp + 8]
mov eax, 0x1b
call fcn.0042f295
cmp dword [ebp - 0x2c], esp
je 0x409b2c
push 6
call fcn.0042f28f
add esp, 4
mov dword [ebp - 0x2c], esp
push 0x4a984c
mov eax, 0x1c
call fcn.0042f295
cmp dword [ebp - 0x2c], esp
je 0x409b50
push 6
call fcn.0042f28f
add esp, 4
mov eax, 0
jmp 0x409b69
mov eax, 1
jmp 0x409b69
push eax
mov ebx, dword [ebp - 4]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x409b88
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x409b84
imul eax, dword [ebx]
jmp 0x409b79
mov ecx, eax
test ecx, ecx
je 0x409ba3
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0042f283
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x409b8e
call fcn.0042f283
add esp, 4
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x409bc9
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x409bc5
imul eax, dword [ebx]
jmp 0x409bba
mov ecx, eax
test ecx, ecx
je 0x409be4
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0042f283
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x409bcf
call fcn.0042f283
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x409c0a
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x409c06
imul eax, dword [ebx]
jmp 0x409bfb
mov ecx, eax
test ecx, ecx
je 0x409c25
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0042f283
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x409c10
call fcn.0042f283
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x409c4b
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x409c47
imul eax, dword [ebx]
jmp 0x409c3c
mov ecx, eax
test ecx, ecx
je 0x409c66
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0042f283
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x409c51
call fcn.0042f283
add esp, 4
mov ebx, dword [ebp - 0x18]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x409c8c
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x409c88
imul eax, dword [ebx]
jmp 0x409c7d
mov ecx, eax
test ecx, ecx
je 0x409ca7
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0042f283
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x409c92
call fcn.0042f283
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
call fcn.0042f283
add esp, 4
mov ebx, dword [ebp - 0x20]
push ebx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0042f283
add esp, 4
pop ebx
call fcn.0042f283
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x10