Function at 0x414d73
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x420
movzx eax, byte [ebp + 0x44]
test eax, eax
je 0x416ba2
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x33c], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp + 0x48]
mov dword [ebp - 0x2cc], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x26c]
movzx eax, byte [eax]
test eax, eax
je 0x414de2
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x344], eax
push dword [ebp - 0x344]
push 1
call fcn.00416c86
pop ecx
pop ecx
jmp 0x416b9d
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
movzx eax, byte [eax]
test eax, eax
je 0x414e45
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
movzx eax, byte [eax]
test eax, eax
je 0x414e40
push 0
call dword [0xa8f3b8]
jmp 0x416b9d
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x28], 0xfffffff8
mov dword [ebp - 0x78], 0
jmp 0x414e65
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x414e7b
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x38c], 0xffffffff
jmp 0x414e5e
mov dword [ebp - 0x28], 0
jmp 0x414e8b
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x41509c
mov dword [ebp - 0x23c], 0x1e2db80e
mov dword [ebp - 0x27c], 0xfffffffb
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x38c], 0
je 0x41507b
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x284], 0xffffffff
mov dword [ebp - 0x5c], 0
jmp 0x414edb
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jg 0x415079
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x2f4], 0xfffffffb
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x38c], 0
jne 0x414f98
mov dword [ebp - 0x19c], 0x9933
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x19c]
cmp ecx, dword [ebp + eax*4 - 0x38c]
jge 0x414f3f
mov dword [ebp - 0x244], 1
jmp 0x414f46
and dword [ebp - 0x244], 0
cmp dword [ebp - 0x244], 0
jne 0x414f5b
mov dword [ebp - 0x24c], 1
jmp 0x414f62
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x24c], eax
jle 0x414f79
mov dword [ebp - 0x1a0], 1
jmp 0x414f80
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
dec eax
mov dword [ebp - 0x23c], eax
jne 0x414f98
and dword [ebp - 0xf8], 0
jmp 0x414fa2
mov dword [ebp - 0xf8], 1
cmp dword [ebp - 0xf8], 0x4856
je 0x414fba
mov dword [ebp - 0x274], 1
jmp 0x414fc1
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x38c], 0
je 0x414ffc
mov eax, 0x37c5
test eax, eax
je 0x414ffc
mov dword [ebp - 0x2ec], 1
jmp 0x415003
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x3b8], eax
mov eax, 0x81d2
test eax, eax
jne 0x415024
mov dword [ebp - 0x1f8], 1
jmp 0x41502b
and dword [ebp - 0x1f8], 0
cmp dword [ebp - 0x1f8], 1
jge 0x415040
mov dword [ebp - 0x100], 1
jmp 0x415047
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x2f4]
cmp dword [ebp - 0x100], eax
jle 0x415061
mov dword [ebp - 0x1a8], 1
jmp 0x415068
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x284], eax
jmp 0x414ed4
jmp 0x415097
mov dword [ebp - 0x2fc], 0x336a
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x38c]
mov dword [ebp - 0x2fc], eax
jmp 0x414e84
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xd8], 0xd0
mov dword [ebp - 0x1c], 0xfffffff7
mov dword [ebp - 0x304], 0x89d38951
mov dword [ebp - 8], 0
jmp 0x4150dc
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x4150ef
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x64], 0xfffffffa
jmp 0x4150d5
mov dword [ebp - 8], 0
jmp 0x4150ff
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x415112
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x10], 0
jmp 0x4150f8
mov dword [ebp - 8], 0
jmp 0x415122
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x415138
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x294], 0xe1ab
jmp 0x41511b
mov byte [ebp - 0x35], 0
push 0
lea eax, [ebp - 0x35]
push eax
push 0
push 1
call fcn.0040bae1
add esp, 0x10
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x10], 0
jmp 0x415173
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x10], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 1
jg 0x4156c4
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x34], 3
mov dword [ebp - 0xe0], 0x382bdb97
mov dword [ebp - 0x1c0], 0xffffffff
mov dword [ebp - 0x2a4], 0xf122
mov dword [ebp - 0x31c], 4
mov dword [ebp - 0xbc], 0
jmp 0x4151d3
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x4151ef
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0xb8], 0xffffffff
jmp 0x4151c6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
mov eax, dword [ebp + eax*4 - 0x64]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x3c0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
mov dword [ebp - 0x3c8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x64], 0xda2ae7b7
jbe 0x415247
mov dword [ebp - 0x108], 1
jmp 0x41524e
and dword [ebp - 0x108], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
mov eax, dword [ebp + eax*4 - 0x64]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x108]
jg 0x41527c
mov dword [ebp - 0x28c], 1
jmp 0x415283
and dword [ebp - 0x28c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x3d0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
mov eax, dword [ebp + eax*4 - 0x64]
mov dword [ebp - 0x3d8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp dword [ebp + eax*4 - 0x64], 0x9a56
je 0x4152c7
mov dword [ebp - 0x238], 1
jmp 0x4152ce
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 0xe5034859
jb 0x4152e6
mov dword [ebp - 0x110], 1
jmp 0x4152ed
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x415478
mov dword [ebp - 0x68], 0xc195
mov dword [ebp - 0x128], 0xffffffff
mov dword [ebp - 0x130], 0
cmp dword [ebp - 0x68], 0
jne 0x415333
cmp dword [ebp - 0x304], 0
jne 0x415333
and dword [ebp - 0x1b0], 0
jmp 0x41533d
mov dword [ebp - 0x1b0], 1
imul eax, dword [ebp - 0x44], 0xfff7
add eax, dword [ebp - 0x1b0]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xb8]
jge 0x41536f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
jne 0x41536f
and dword [ebp - 0x118], 0
jmp 0x415379
mov dword [ebp - 0x118], 1
mov eax, dword [ebp - 0x1c0]
imul eax, dword [ebp - 0x118]
test eax, eax
je 0x41539c
cmp dword [ebp - 0x68], 0
je 0x41539c
mov dword [ebp - 0x200], 1
jmp 0x4153a3
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x5dd4
je 0x4153c1
mov dword [ebp - 0x120], 1
jmp 0x4153c8
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x1c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x3e8], eax
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0x68]
jne 0x415404
mov eax, 0xdb9b
test eax, eax
jne 0x415404
and dword [ebp - 0x1b8], 0
jmp 0x41540e
mov dword [ebp - 0x1b8], 1
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x128], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
mov eax, dword [ebp + eax*4 - 0x64]
cmp dword [ebp - 0x128], eax
jg 0x41543c
mov dword [ebp - 0x228], 1
jmp 0x415443
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x228]
neg eax
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x3f0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
mov eax, dword [ebp + eax*4 - 0x64]
sub eax, 0xb252dc0
mov dword [ebp - 0x1c], eax
jmp 0x4156bf
mov dword [ebp - 0x90], 0x9e69c17
mov dword [ebp - 0x30c], 1
mov dword [ebp - 0x6c], 9
mov eax, dword [ebp - 0x1c0]
inc eax
jne 0x4154f3
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x138], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x138]
mov dword [ebp + eax - 0x294], ecx
mov eax, dword [ebp - 0x30c]
imul eax, dword [ebp - 0x138]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x10]
cmp dword [ebp + ecx*4 - 0x64], eax
jle 0x4154ea
cmp dword [ebp - 0xd8], 0
jne 0x4154f3
and dword [ebp - 0x29c], 0
jmp 0x4154fd
mov dword [ebp - 0x29c], 1
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3f8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb8], 0
je 0x415526
xor eax, eax
je 0x415526
mov dword [ebp - 0x208], 1
jmp 0x41552d
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xb8]
jge 0x41554f
mov dword [ebp - 0x140], 1
jmp 0x415556
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
add eax, 0x616e
cmp eax, dword [ebp - 0xe0]
jg 0x415575
mov dword [ebp - 0x1c8], 1
jmp 0x41557c
and dword [ebp - 0x1c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
add eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x90], eax
jl 0x4155a0
mov dword [ebp - 0x314], 1
jmp 0x4155a7
and dword [ebp - 0x314], 0
cmp dword [ebp - 0x2a4], 0xfffffff8
jl 0x4155bc
mov dword [ebp - 0x148], 1
jmp 0x4155c3
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x34], 0
jmp 0x4155dc
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff2
jg 0x4156bf
mov dword [ebp - 0x1d0], 8
mov dword [ebp - 0x1c], 0xbd129ac0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x6c], eax
jle 0x415623
or eax, 0xffffffff
je 0x415623
mov dword [ebp - 0x248], 1
jmp 0x41562a
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x248]
jle 0x415641
mov dword [ebp - 0x150], 1
jmp 0x415648
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x150], eax
je 0x41565f
mov eax, 0xfff8
test eax, eax
jne 0x415671
cmp dword [ebp - 0x90], 0
jne 0x415671
and dword [ebp - 0x158], 0
jmp 0x41567b
mov dword [ebp - 0x158], 1
mov eax, dword [ebp - 0x1d0]
sub eax, dword [ebp - 0x158]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x5d954113
jge 0x41569f
mov dword [ebp - 0x210], 1
jmp 0x4156a6
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x6c], 0
je 0x4156ba
jmp 0x4155d5
jmp 0x4155d5
jmp 0x41515e
and dword [ebp - 0xe8], 0
jmp 0x4156e3
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x14]
add eax, 0x28
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0xe8], eax
jge 0x416b9d
mov dword [ebp - 4], 0x4f16efa4
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x2b4], 0xffffffff
mov eax, dword [ebp - 4]
sub eax, 0x4837
cmp eax, dword [ebp - 4]
je 0x415729
mov dword [ebp - 0x2ac], 1
jmp 0x415730
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
jle 0x415744
mov dword [ebp - 0x160], 1
jmp 0x41574b
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x160], eax
je 0x415762
mov dword [ebp - 0x1d8], 1
jmp 0x415769
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x1d8]
test eax, eax
je 0x41583f
mov dword [ebp - 0x98], 0
jmp 0x415794
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x4157b0
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x414], 0x19d81479
jmp 0x415787
push 0x4c81
push 0
push 0x462a
push 0x4b05
push 0x2f02
push 0x719f
push 0x2093
lea eax, [ebp - 0x24]
push eax
push 0x3e46
push 1
push 0
push 1
push 0x4f88
push 0x2165
lea eax, [ebp - 4]
push eax
push 0
call fcn.00412937
add esp, 0x40
mov dword [ebp - 4], 0
jmp 0x415807
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jg 0x41583d
mov dword [ebp - 0x24], 2
jmp 0x41581d
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x41583b
push 0
push 0x326f
push 0x549f
push 1
call fcn.00412769
add esp, 0x10
jmp 0x415816
jmp 0x415800
jmp 0x4158a8
mov dword [ebp - 0x24], 0
jmp 0x41584f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x10
jle 0x4158a8
mov dword [ebp - 4], 0
jmp 0x415865
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x12
jne 0x4158a6
mov dword [ebp - 0x80], 0
jmp 0x41587b
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x415891
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x324], 0xfffffff7
jmp 0x415874
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x324]
mov dword [ebp - 0x2b4], eax
jmp 0x41585e
jmp 0x415848
mov dword [ebp - 0x334], 0xfffffff8
mov dword [ebp - 0x354], 2
mov dword [ebp - 0xa0], 0
jmp 0x4158d5
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x4158ee
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x54], 0xfffffffe
jmp 0x4158c8
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x54], 0xffffffe4
jmp 0x415913
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x54], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0x14
jg 0x415946
mov dword [ebp - 0x32c], 0xfffffffb
cmp dword [ebp - 0x32c], 0
je 0x415935
jmp 0x415946
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0
je 0x415944
jmp 0x4158fe
jmp 0x4158fe
push 1
push 0
push 0x499b
lea eax, [ebp - 0x334]
push eax
push 0x522f
push 0x9c8
push 0x50d1
lea eax, [ebp - 0x354]
push eax
push 0
push 0x45e1
push 0x53ef
push 0x4a1
call fcn.0040d72a
add esp, 0x30
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
je 0x41599e
mov dword [ebp - 0x168], 1
jmp 0x4159a5
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x30], 0x37d437f1
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x88], 0
jmp 0x4159d8
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x4159f1
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x50], 0xffffffff
jmp 0x4159cb
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x50], 0
jne 0x415a12
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x50], 0
jne 0x415a12
and dword [ebp - 0x230], 0
jmp 0x415a1c
mov dword [ebp - 0x230], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x230], eax
jg 0x415a39
mov dword [ebp - 0x1e8], 1
jmp 0x415a40
and dword [ebp - 0x1e8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x404], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x50], 0xe55a4419
jae 0x415a6b
mov dword [ebp - 0x170], 1
jmp 0x415a72
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 9
je 0x415a87
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x50], 0
jne 0x415a93
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x50], 0
je 0x415aab
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x50], 0
je 0x415aab
mov dword [ebp - 0x1e0], 1
jmp 0x415ab2
and dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1e0], 1
jl 0x415ac7
mov dword [ebp - 0x178], 1
jmp 0x415ace
and dword [ebp - 0x178], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x178]
sub ecx, dword [ebp + eax - 0x50]
jne 0x415af7
xor eax, eax
inc eax
jne 0x415af7
mov eax, 0x3927
test eax, eax
jne 0x415af7
and dword [ebp - 0x218], 0
jmp 0x415b01
mov dword [ebp - 0x218], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x218], eax
jl 0x415b1e
mov dword [ebp - 0x180], 1
jmp 0x415b25
and dword [ebp - 0x180], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x180], eax
jge 0x415b42
mov dword [ebp - 0x2d0], 1
jmp 0x415b49
and dword [ebp - 0x2d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x3ac], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x50], 0
je 0x415b7a
mov eax, 0xe467
test eax, eax
je 0x415b7a
mov dword [ebp - 0x328], 1
jmp 0x415b81
and dword [ebp - 0x328], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x408], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x1e8], eax
je 0x415bb4
mov eax, 0x81c5860b
test eax, eax
jne 0x415bb4
and dword [ebp - 0x188], 0
jmp 0x415bbe
mov dword [ebp - 0x188], 1
cmp dword [ebp - 0x188], 0x2ff3
jge 0x415bd6
mov dword [ebp - 0x240], 1
jmp 0x415bdd
and dword [ebp - 0x240], 0
cmp dword [ebp - 0x240], 0x41b6
jg 0x415bf5
mov dword [ebp - 0x190], 1
jmp 0x415bfc
and dword [ebp - 0x190], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x190], eax
je 0x415c19
mov dword [ebp - 0x1f0], 1
jmp 0x415c20
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x415d7d
mov dword [ebp - 0xa8], 0
jmp 0x415c4c
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x415c68
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0xb0], 1
jmp 0x415c3f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb0], 0
jne 0x415c8d
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x50], 0
jne 0x415c8d
and dword [ebp - 0x198], 0
jmp 0x415c97
mov dword [ebp - 0x198], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x50]
cmp eax, dword [ebp - 0x198]
jne 0x415cb4
mov dword [ebp - 0x220], 1
jmp 0x415cbb
and dword [ebp - 0x220], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
cmp dword [ebp - 0x220], eax
jle 0x415cdc
mov dword [ebp - 0xf0], 1
jmp 0x415ce3
and dword [ebp - 0xf0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
cmp dword [ebp - 0xf0], eax
jl 0x415d04
mov dword [ebp - 0xf4], 1
jmp 0x415d0b
and dword [ebp - 0xf4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
cmp dword [ebp - 0xf4], eax
jg 0x415d2c
mov dword [ebp - 0xfc], 1
jmp 0x415d33
and dword [ebp - 0xfc], 0
cmp dword [ebp - 0xfc], 0x71c25028
jg 0x415d4b
mov dword [ebp - 0x2d8], 1
jmp 0x415d52
and dword [ebp - 0x2d8], 0
push 0xfffffffffffffffe
pop eax
neg eax
cmp eax, 2
jl 0x415d68
mov dword [ebp - 0x104], 1
jmp 0x415d6f
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x30], eax
jmp 0x415ea2
mov dword [ebp - 0xdc], 0x1f84
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xdc], eax
jg 0x415e4c
mov dword [ebp - 0x30], 0
jmp 0x415da9
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffec
jle 0x415e4a
push 0x419a
push 0
lea eax, [ebp - 0xdc]
push eax
push 0x1209
push 0x1883
push 0x67ec
push 0xfcd
push 0x7738
push 0x3e72
lea eax, [ebp - 0x58]
push eax
push 0x1171
push 0
call fcn.004221e8
add esp, 0x30
mov dword [ebp - 0x58], 0
jmp 0x415e02
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jg 0x415e45
mov byte [ebp - 0x37], 0
lea eax, [ebp - 0x37]
push eax
push 1
push 1
push 0
push 1
call fcn.00408bd8
add esp, 0x14
push 1
push 1
push 0
push 1
push 0x7462
push 0x3b8b
push 1
push 1
push 0x5cd2
call fcn.0040d45a
add esp, 0x24
jmp 0x415dfb
jmp 0x415da2
jmp 0x415ea2
push 0
push 0x17f
push 0x5d49
push 0x235e
push 0x6f64
push 1
push 0x1066
push 1
push 0x998
push 0x394e
push 0x3a58
push 0x3afa
push 0x82e
push 0x6fd3
push 0
push 0x3b6f
push 0x30c6
push 0x1de8
call fcn.0041bb8c
add esp, 0x48
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
je 0x415ebb
mov dword [ebp - 0x10c], 1
jmp 0x415ec2
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x11c], 5
mov dword [ebp - 0x2e8], 1
mov dword [ebp - 0x2c], 0
jmp 0x415ef2
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x415f08
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xc4], 0x13dd33a4
jmp 0x415eeb
mov dword [ebp - 0x2c], 0
jmp 0x415f18
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x415f2e
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x2c8], 0xffff
jmp 0x415f11
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc4], 0
jmp 0x415f5c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc4], 0xfffffff9
jle 0x4161d1
mov dword [ebp - 0x3c], 3
mov dword [ebp - 0x144], 0
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0x13c], 0xd0c0
mov dword [ebp - 0x134], 1
mov dword [ebp - 0x3c], 0
jmp 0x415faf
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x1c
jge 0x415ff7
mov dword [ebp - 0x378], 0x8987f2fb
push 0x5ca6
push 1
push 1
push 1
push 0
call fcn.00408bd8
add esp, 0x14
push 1
push 1
push 0x6d62
lea eax, [ebp - 0x378]
push eax
push 0x4692
push 0
push 0
call fcn.0041dc8a
add esp, 0x1c
jmp 0x415fa8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc4]
mov dword [ebp - 0x3b4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc4], 0
jne 0x416159
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x3c], eax
je 0x41603c
mov dword [ebp - 0x114], 1
jmp 0x416043
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x3e4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc4]
mov dword [ebp - 0x3bc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2c8]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0xd4]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x2c8]
lea eax, [eax + ecx - 8]
imul eax, eax, 0xce1c
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x2c8]
jg 0x4160b6
mov dword [ebp - 0x124], 1
jmp 0x4160bd
and dword [ebp - 0x124], 0
imul eax, dword [ebp - 0x124], 0x67d9
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x2c8]
jne 0x4160e1
mov dword [ebp - 0x2e0], 1
jmp 0x4160e8
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x2f82966b
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x2c8]
jge 0x416122
mov dword [ebp - 0x12c], 1
jmp 0x416129
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x134], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x134]
imul ecx, dword [ebp + eax - 0x2c8]
test ecx, ecx
jne 0x416159
and dword [ebp - 0x330], 0
jmp 0x416163
mov dword [ebp - 0x330], 1
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x144], eax
jge 0x416189
mov dword [ebp - 0x14c], 1
jmp 0x416190
and dword [ebp - 0x14c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2c8]
cmp dword [ebp - 0x14c], eax
jne 0x4161b6
mov eax, 0x636e
test eax, eax
jne 0x4161b6
and dword [ebp - 0x154], 0
jmp 0x4161c0
mov dword [ebp - 0x154], 1
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x2e8], eax
jmp 0x415f41
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
je 0x4161ea
mov dword [ebp - 0x15c], 1
jmp 0x4161f1
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x94], 0
jmp 0x41621d
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x416239
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x164], 0xfffffffd
jmp 0x416210
mov dword [ebp - 0x40], 0
jmp 0x416249
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x416351
mov dword [ebp - 0xac], 0
jmp 0x41626c
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x416288
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x370], 0xfffffff7
jmp 0x41625f
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x370], 0
jmp 0x4162b3
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x370]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x370], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x370], 0
jl 0x41634c
mov dword [ebp - 0x360], 0xffffffff
mov eax, dword [ebp - 0x40]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x370]
mov eax, dword [ebp + eax*4 - 0x164]
mov dword [ebp + ecx*4 - 0x164], eax
push 0x4cfd
push 0
push 0x52f8
push 0x6c13
push 0x242b
push 1
push 0x78de
push 0x4f7d
lea eax, [ebp - 0x40]
push eax
push 0
push 0x7e1f
push 0x15d4
push 0x5366
push 0x1141
push 0x6d2f
lea eax, [ebp - 0x360]
push eax
push 0x223f
push 0x7e1a
call fcn.0040e778
add esp, 0x48
jmp 0x41629a
jmp 0x416242
push 0
call fcn.004202c0
pop ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
je 0x41638f
push 0x4000
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
push dword [eax + 8]
push 0xb2ec
push 0xe3af
call fcn.00406ee4
pop ecx
pop ecx
call eax
jmp 0x4156cd
mov dword [ebp - 0xb4], 0xfffffff8
mov dword [ebp - 0x9c], 0
jmp 0x4163b2
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x4163ce
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x420], 0x313dd33a
jmp 0x4163a5
mov dword [ebp - 0xb4], 0
jmp 0x4163e7
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jg 0x416436
mov dword [ebp - 0xa4], 0x7a888ada
mov dword [ebp - 0xa4], 0
jmp 0x416413
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jg 0x416434
push 0
call fcn.0041e0bc
pop ecx
push 0x2d5a
push 0
call fcn.0042001b
pop ecx
pop ecx
jmp 0x416406
jmp 0x4163da
push 0x587b
push 0
lea eax, [ebp - 0x14]
push eax
push 0x41e8
lea eax, [ebp - 0x2f0]
push eax
push 1
push 0x40ca
push 0x32a4
push 0x1cd9
push 1
push 0x3a58
lea eax, [ebp - 0x338]
push eax
push 0x3697
lea eax, [ebp - 0x2f8]
push eax
lea eax, [ebp - 0x320]
push eax
push 0x4535
push 0x3312
push 0x2f2a
call fcn.0040e778
add esp, 0x48
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x3cc], 2
mov dword [ebp - 0x374], 0x3925b974
mov dword [ebp - 0xc], 0
jmp 0x4164c1
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffec
jne 0x4167b9
mov dword [ebp - 0x184], 0x5a80e358
mov dword [ebp - 0xec], 6
mov dword [ebp - 0x1ac], 0xde8cc195
mov dword [ebp - 0x400], 0x4b6369dd
mov dword [ebp - 0x18], 0
jmp 0x416503
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x416519
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x350], 0x4c7a
jmp 0x4164fc
mov dword [ebp - 0x18], 0
jmp 0x416529
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x41653f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x394], 0xfffffff7
jmp 0x416522
cmp dword [ebp - 0xc], 0
je 0x4165c2
mov dword [ebp - 0x16c], 0xfffffffa
cmp dword [ebp - 0x16c], 0
je 0x416572
mov eax, dword [ebp - 0x16c]
cmp dword [ebp - 0x184], eax
je 0x416572
mov dword [ebp - 0x174], 1
jmp 0x416579
and dword [ebp - 0x174], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x174]
mov dword [ebp + eax - 0x350], ecx
push 1
push 0x6ab8
push 0x254c
push 0x4cd6
push 1
push 0x126b
push 0x144f
push 0x943
push 0
push 0x2ca0
call fcn.00410034
add esp, 0x28
jmp 0x4167b4
mov dword [ebp - 0xe4], 0xd35da2
mov dword [ebp - 0x300], 0xd847
mov dword [ebp - 0x3d4], 0x674f
mov dword [ebp - 0x8c], 0
jmp 0x4165f9
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x416615
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x308], 0xdd4d14b7
jmp 0x4165ec
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x350]
mov dword [ebp - 0xec], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x350], 0
jne 0x4166d6
cmp dword [ebp - 0xe4], 0xc0e0
jge 0x416654
mov dword [ebp - 0x17c], 1
jmp 0x41665b
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x17c], eax
jg 0x416672
mov dword [ebp - 0x18c], 1
jmp 0x416679
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x18c], eax
je 0x416693
mov dword [ebp - 0x194], 1
jmp 0x41669a
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x194], eax
jl 0x4166b1
mov dword [ebp - 0x364], 1
jmp 0x4166b8
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0xec], 0
jne 0x4166d6
and dword [ebp - 0x1a4], 0
jmp 0x4166e0
mov dword [ebp - 0x1a4], 1
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x1ac], eax
jle 0x416706
mov dword [ebp - 0x1b4], 1
jmp 0x41670d
and dword [ebp - 0x1b4], 0
mov eax, 0xa00d
sub eax, dword [ebp - 0x1b4]
sub eax, 0xa
jne 0x416729
mov dword [ebp - 0x340], 1
jmp 0x416730
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x3dc], eax
mov eax, 0xc48b
cmp eax, 0x6f80366e
jne 0x416749
cmp dword [ebp - 0xc], 0
cmp dword [ebp - 0xe4], 0xfffa
je 0x416761
mov dword [ebp - 0x1bc], 1
jmp 0x416768
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x1bc], eax
jg 0x41677f
mov dword [ebp - 0x1c4], 1
jmp 0x416786
and dword [ebp - 0x1c4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp + eax - 0x308], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x394]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x394], eax
jmp 0x4164ba
mov dword [ebp - 0xc], 1
jmp 0x4167c9
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xfffffff2
jne 0x416829
mov dword [ebp - 0x1cc], 0
push 1
push 0x527e
push 1
push 0
push 0x42eb
push 0x3d11
push 0
push 1
lea eax, [ebp - 0x374]
push eax
push 0x4825
lea eax, [ebp - 0x1cc]
push eax
push 0x3d1
push 0x3109
push 0x6c3f
call fcn.0041f43c
add esp, 0x38
cmp dword [ebp - 0x1cc], 0
je 0x416827
jmp 0x416829
jmp 0x4167c2
push 1
push 0x635a
push 1
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x234]
push eax
push 0
push 0
push 0x3a20
call fcn.00424f3d
add esp, 0x24
mov dword [ebp - 0x7c], 9
mov dword [ebp - 0xcc], 0xec79cf18
mov dword [ebp - 0x214], 0xfffffff9
mov dword [ebp - 0x20], 0
jmp 0x41687d
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x416893
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x35c], 0xff60
jmp 0x416876
mov dword [ebp - 0x20], 0
jmp 0x4168a3
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x4168b9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x3a0], 0xc863cc1
jmp 0x41689c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x35c], 0
je 0x416912
mov dword [ebp - 0x310], 0x543beb71
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x35c]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x310]
cmp dword [ebp - 0x7c], eax
jg 0x4168fa
mov dword [ebp - 0x1d4], 1
jmp 0x416901
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0xcc], eax
jmp 0x416b47
mov dword [ebp - 0x84], 0x1d91e66
mov dword [ebp - 0x204], 2
mov dword [ebp - 0xd0], 0xc73f5cfe
mov dword [ebp - 0x380], 1
mov dword [ebp - 0x74], 0
jmp 0x41694a
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x416960
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x1f4], 0x4bc795c3
jmp 0x416943
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3a0], 0xf4e1c2e9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x35c], 0xff
je 0x416990
mov dword [ebp - 0x1dc], 1
jmp 0x416997
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x1dc], eax
jle 0x4169b1
mov dword [ebp - 0x348], 1
jmp 0x4169b8
and dword [ebp - 0x348], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f4]
cmp dword [ebp - 0x84], eax
jge 0x4169d9
mov dword [ebp - 0x1e4], 1
jmp 0x4169e0
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x1e4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x3a0]
jle 0x416a1b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3a0], 0
jne 0x416a1b
and dword [ebp - 0x1ec], 0
jmp 0x416a25
mov dword [ebp - 0x1ec], 1
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x1ec], eax
jne 0x416a3f
mov dword [ebp - 0x318], 1
jmp 0x416a46
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x3a8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f4], 0x12ef
je 0x416a71
mov dword [ebp - 0x1fc], 1
jmp 0x416a78
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
sub eax, dword [ebp - 0x204]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0xd0], eax
je 0x416aa4
mov dword [ebp - 0x20c], 1
jmp 0x416aab
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x20c], eax
jge 0x416ace
cmp dword [ebp - 0x214], 0
je 0x416ace
mov dword [ebp - 0x21c], 1
jmp 0x416ad5
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x21c]
je 0x416af5
cmp dword [ebp - 0xd0], 0
jne 0x416af5
and dword [ebp - 0x224], 0
jmp 0x416aff
mov dword [ebp - 0x224], 1
cmp dword [ebp - 0x224], 0x292c5eb2
je 0x416b17
mov dword [ebp - 0x22c], 1
jmp 0x416b1e
and dword [ebp - 0x22c], 0
imul eax, dword [ebp - 0x22c], 0x8d6e
mov dword [ebp - 0x380], eax
mov byte [ebp - 0x36], 0
lea eax, [ebp - 0x36]
push eax
push 0x4371
push 1
push 0
call fcn.004212da
add esp, 0x10
cmp dword [ebp - 0x234], 0
jbe 0x416b98
push 0x80f
push 0
push 0
push 1
push 0x5494
push 0
push 1
call fcn.00410e3d
add esp, 0x1c
lea eax, [ebp - 0x3b0]
push eax
push dword [ebp - 0x320]
push dword [ebp - 0x234]
mov eax, dword [ebp - 0x14]
push dword [eax + 8]
push 0xb2ec
push 0xce03
call fcn.00406ee4
pop ecx
pop ecx
call eax
jmp 0x4156cd
jmp 0x416c82
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x258], eax
lea eax, [ebp + 0x34]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp + 0x4c]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp + 0x50]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp + 0x54]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x2b0], eax
push dword [ebp - 0x2b8]
push 1
push dword [ebp - 0x254]
push dword [ebp - 0x258]
push dword [ebp - 0x260]
push dword [ebp - 0x268]
push dword [ebp - 0x270]
push dword [ebp - 0x278]
mov eax, dword [ebp - 0x280]
movzx eax, byte [eax]
push eax
push dword [ebp - 0x288]
push dword [ebp - 0x290]
push dword [ebp - 0x298]
push dword [ebp - 0x2a0]
push dword [ebp - 0x2a8]
push dword [ebp - 0x2b0]
call fcn.0040e631
add esp, 0x3c
mov esp, ebp
pop ebp
ret