Function at 0x42212c
Capabilities:
Check http status code
Parse pe header

Disassembly:
mov ax, word [ebp - 0x18]
add ax, word [ebp - 0x244]
jo 0x41e857
mov word [ebp - 0x18], ax
mov ax, word [ebp - 0x18]
cmp ax, word [ebp - 0x248]
jg 0x41e458
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a8], 0x4002
mov dword [ebp - 0x180], 1
mov dword [ebp - 0x188], 2
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
mov eax, dword [eax]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1b8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a8], 0x4002
mov dword [ebp - 0x180], 2
mov dword [ebp - 0x188], 2
push 0
lea eax, [ebp - 0xc8]
push eax
call fcn.004048bc
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea ecx, [ebp - 0xc8]
call fcn.00404844
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a8], 0x4002
mov dword [ebp - 0x180], 3
mov dword [ebp - 0x188], 2
and dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1b8], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a8], 0x4002
mov dword [ebp - 0x180], 4
mov dword [ebp - 0x188], 2
and dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1b8], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
push dword [0x5212e8]
lea eax, [ebp - 0xa8]
push eax
call fcn.0040482c
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [ebp - 0xa8]
call fcn.00404832
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xa8]
push eax
call fcn.00404820
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
lea edx, [ebp - 0xd8]
lea ecx, [ebp - 0x240]
call fcn.004048d4
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x180], 0x40ba0c
mov dword [ebp - 0x188], 0x8008
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41db0f
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a8], 0x4002
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.004048b6
push eax
push 0x40ba2c
call fcn.0040486e
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea ecx, [ebp - 0xb0]
call fcn.00404868
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x1b8], 2
mov dword [ebp - 0x190], 6
mov dword [ebp - 0x198], 2
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8c9a
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], 8
push dword [0x5212e8]
lea eax, [ebp - 0xa8]
push eax
call fcn.0040482c
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [ebp - 0xa8]
call fcn.00404832
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xa8]
push eax
call fcn.00404820
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x198]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x41e453
mov dword [ebp - 0x180], 0x40ba3c
mov dword [ebp - 0x188], 0x8008
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41ddcc
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a8], 0x4002
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.004048b6
push eax
push 0x40ba4c
call fcn.0040486e
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea ecx, [ebp - 0xb0]
call fcn.00404868
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x1b8], 2
mov dword [ebp - 0x190], 6
mov dword [ebp - 0x198], 2
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8c9a
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], 8
push dword [0x5212e8]
lea eax, [ebp - 0xa8]
push eax
call fcn.0040482c
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [ebp - 0xa8]
call fcn.00404832
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xa8]
push eax
call fcn.00404820
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x198]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x41e453
mov dword [ebp - 0x180], 0x40ba5c
mov dword [ebp - 0x188], 0x8008
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41e089
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a8], 0x4002
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.004048b6
push eax
push 0x40ba6c
call fcn.0040486e
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea ecx, [ebp - 0xb0]
call fcn.00404868
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x1b8], 2
mov dword [ebp - 0x190], 6
mov dword [ebp - 0x198], 2
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8c9a
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], 8
push dword [0x5212e8]
lea eax, [ebp - 0xa8]
push eax
call fcn.0040482c
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [ebp - 0xa8]
call fcn.00404832
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xa8]
push eax
call fcn.00404820
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x198]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x41e453
mov dword [ebp - 0x180], 0x40ba7c
mov dword [ebp - 0x188], 0x8008
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41e346
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a8], 0x4002
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8c9a
mov edx, eax
lea ecx, [ebp - 0xb0]
call fcn.004048b6
push eax
push 0x40ba8c
call fcn.0040486e
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea ecx, [ebp - 0xb0]
call fcn.00404868
lea ecx, [ebp - 0xc8]
call fcn.00404844
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x1b8], 2
mov dword [ebp - 0x190], 6
mov dword [ebp - 0x198], 2
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8bec
sub eax, 4
jo 0x41e857
push eax
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [0x5212e8]
call fcn.00404832
push dword [eax]
call fcn.004d8c9a
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], 8
push dword [0x5212e8]
lea eax, [ebp - 0xa8]
push eax
call fcn.0040482c
mov ax, word [ebp - 0x18]
sub ax, 1
jo 0x41e857
movsx eax, ax
push eax
push dword [ebp - 0xa8]
call fcn.00404832
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xa8]
push eax
call fcn.00404820
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404880
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x198]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.004047d2
mov esi, eax
push 0x10
pop eax
call fcn.004044c0
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x41e453
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a8], 0x4002
mov dword [ebp - 0x180], 5
mov dword [ebp - 0x188], 2
mov dword [ebp - 0x1b0], 0x40a6cc
mov dword [ebp - 0x1b8], 8
or byte [eax], al
add byte [eax], al
or byte [eax], al
add byte [eax], al
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 0x180], 6
mov dword [ebp - 0x188], 2
mov dword [ebp - 0x1c0], 0x40a6cc
mov dword [ebp - 0x1c8], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1a8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x188]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1c8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
jmp 0x41d56b
call fcn.004e4574
call 0x4216ea
mov eax, dword [ebp + 8]
push dword [eax]
push 0x40aeb4
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x1e0], ax
mov dword [ebp - 0x1e8], 0xb
mov eax, dword [ebp + 8]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x188], 0x4008
push 4
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00404796
mov dword [ebp - 0x190], 0x40ba9c
mov dword [ebp - 0x198], 0x8008
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a8], 0x4008
push 4
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.0040487a
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00404796
mov dword [ebp - 0x1b0], 0x40baac
mov dword [ebp - 0x1b8], 0x8008
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1c8], 0x4008
push 4
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.0040487a
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x148]
push eax
call fcn.00404796
mov dword [ebp - 0x1d0], 0x40babc
mov dword [ebp - 0x1d8], 0x8008
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.0040488c
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x158]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x168]
push eax
call fcn.0040488c
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 7
call fcn.00404898
add esp, 0x20
movsx eax, word [ebp - 0x20c]
test eax, eax
je 0x41e707
mov dword [ebp - 0xf0], 0x80020004
mov dword [ebp - 0xf8], 0xa
mov dword [ebp - 0xe0], 0x80020004
mov dword [ebp - 0xe8], 0xa
mov dword [ebp - 0x190], 0x40badc
mov dword [ebp - 0x198], 8
lea edx, [ebp - 0x198]
lea ecx, [ebp - 0xd8]
call fcn.0040478a
mov dword [ebp - 0x180], 0x40bacc
mov dword [ebp - 0x188], 8
lea edx, [ebp - 0x188]
lea ecx, [ebp - 0xc8]
call fcn.0040478a
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
push 0
lea eax, [ebp - 0xc8]
push eax
call fcn.00404790
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xc8]
push eax
push 4
call fcn.00404898
add esp, 0x14
wait
push 0x41e841
jmp 0x41e7a8
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x220]
push eax
push 3
call fcn.00404898
add esp, 0x10
lea ecx, [ebp - 0x14]
call fcn.00404868
lea ecx, [ebp - 0x28]
call fcn.00404844
lea ecx, [ebp - 0x38]
call fcn.00404844
lea eax, [ebp - 0x50]
mov dword [ebp - 0x204], eax
lea eax, [ebp - 0x204]
push eax
push 0
call fcn.00404784
lea ecx, [ebp - 0x64]
call fcn.00404844
lea ecx, [ebp - 0x74]
call fcn.00404844
lea ecx, [ebp - 0x84]
call fcn.00404844
lea ecx, [ebp - 0x88]
call fcn.00404868
lea ecx, [ebp - 0x8c]
call fcn.00404868
lea eax, [ebp - 0x94]
push eax
push 0
call fcn.00404784
lea ecx, [ebp - 0xa4]
call fcn.00404844
ret
call fcn.0040477e
push ebp
mov ebp, esp
push ecx
push ecx
push 0x4044c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x140
call fcn.004044c0
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401398
mov edx, 0x40a6cc
mov ecx, dword [ebp + 0x10]
call fcn.004048b0
mov eax, dword [ebp + 8]
movsx eax, word [eax]
test eax, eax
jne 0x41eb20
mov edx, 0x40bb14
mov ecx, dword [ebp + 0x10]
call fcn.004048b0
or dword [ebp - 0xa0], 0xffffffff
mov dword [ebp - 0xa8], 0x800b
push 0x5211d8
lea eax, [ebp - 0xa8]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41e8ea
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x22
jmp 0x41eb1b
mov dword [ebp - 0xc0], 0x521208
mov dword [ebp - 0xc8], 0x400c
mov dword [ebp - 0xa0], 3
mov dword [ebp - 0xa8], 2
mov dword [ebp - 0xd0], 2
mov dword [ebp - 0xd8], 2
mov ax, word [0x521242]
mov word [ebp - 0xe0], ax
mov dword [ebp - 0xe8], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xa8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
lea eax, [ebp - 0x38]
push eax
call fcn.00404778
add esp, 0x2c
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.004047d2
push eax
call fcn.004047d8
fstp qword [0x5210bc]
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x38]
push eax
push 3
call fcn.00404898
add esp, 0x10
cmp word [0x521220], 0x1e
jl 0x41e9e2
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x41f4b8
push dword [0x5210b0]
lea eax, [ebp - 0x28]
push eax
call fcn.0040482c
push 4
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x41f4b8
call fcn.0040481a
push eax
push dword [ebp - 0x28]
call fcn.00404832
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x28]
push eax
call fcn.00404820
fld qword [0x5210bc]
fadd qword [0x401360]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x41f4b8
mov dword [ebp - 0xc0], 0x521208
mov dword [ebp - 0xc8], 0x400c
mov dword [ebp - 0xa0], 3
mov dword [ebp - 0xa8], 2
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd8], 3
mov ax, word [0x521242]
mov word [ebp - 0xe0], ax
mov dword [ebp - 0xe8], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xa8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
lea eax, [ebp - 0x38]
push eax
call fcn.00404778
add esp, 0x2c
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.004047d2
push eax
call fcn.00404772
call fcn.00526416
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x38]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x41f452
cmp word [0x521220], 0x1e
jl 0x41eb2f
jmp 0x41f452
mov eax, dword [0x5210e0]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], 3
mov eax, dword [ebp + 8]
mov ax, word [eax]
sub ax, 1
jo 0x41f4bd
mov word [ebp - 0xd0], ax
mov dword [ebp - 0xd8], 2
mov dword [ebp - 0x60], 0xf
mov dword [ebp - 0x68], 2
mov dword [ebp - 0x50], 0xe
mov dword [ebp - 0x58], 2
or dword [ebp - 0xa0], 0xffffffff
mov dword [ebp - 0xa8], 0x800b
push 0x5211d8
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.00404886
mov edx, eax
lea ecx, [ebp - 0x48]
call fcn.004048d4
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.004047a2
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0040476c
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.004047d2
push eax
call fcn.00404772
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x48]
push eax
push 5
call fcn.00404898
add esp, 0x18
mov edx, 0x5211c8
lea ecx, [ebp - 0xf8]
call fcn.00404766
mov dword [ebp - 0xa0], 2
mov dword [ebp - 0xa8], 0x8002
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x41ec8b
mov dword [ebp - 0xb0], 7
mov dword [ebp - 0xb8], 0x8002
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41eed2
push 1
push 0xa
push 1
push 0x11
lea eax, [ebp - 0x24]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
mov eax, dword [ebp - 0x18]
add eax, 1
jo 0x41f4bd
mov dword [ebp - 0x18], eax
fild dword [ebp - 0x18]
fstp qword [0x5210bc]
mov word [ebp - 0x100], 0xa
mov word [ebp - 0xfc], 1
mov word [ebp - 0x1c], 1
jmp 0x41eced
mov ax, word [ebp - 0x1c]
add ax, word [ebp - 0xfc]
jo 0x41f4bd
mov word [ebp - 0x1c], ax
mov ax, word [ebp - 0x1c]
cmp ax, word [ebp - 0x100]
jg 0x41ed4c
movsx eax, word [ebp - 0x1c]
mov dword [ebp - 0x130], eax
fild dword [ebp - 0x130]
fstp qword [ebp - 0x138]
fld qword [0x5210bc]
fadd qword [ebp - 0x138]
fnstsw ax
test al, 0xd
jne 0x41f4b8
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov esi, eax
movsx eax, word [ebp - 0x1c]
push eax
push dword [ebp - 0x24]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
jmp 0x41ecd8
fld qword [0x5210bc]
fadd qword [0x401390]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x41f4b8
mov word [ebp - 0x108], 0xa
mov word [ebp - 0x104], 1
mov word [ebp - 0x14], 1
jmp 0x41ed97
mov ax, word [ebp - 0x14]
add ax, word [ebp - 0x104]
jo 0x41f4bd
mov word [ebp - 0x14], ax
mov ax, word [ebp - 0x14]
cmp ax, word [ebp - 0x108]
jg 0x41ee23
movsx eax, word [ebp - 0x14]
push eax
push dword [ebp - 0x24]
call fcn.00404832
movzx eax, byte [eax]
test eax, eax
jne 0x41edba
jmp 0x41ee23
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa8], 8
movsx eax, word [ebp - 0x14]
push eax
push dword [ebp - 0x24]
call fcn.00404832
mov al, byte [eax]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.00404760
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
call fcn.00526416
call fcn.004048b6
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x38]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x41ed82
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa8], 0x4008
push 0
push 0x40
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0040475a
lea eax, [ebp - 0x38]
push eax
call fcn.004048aa
call fcn.00526416
call fcn.004048b6
lea ecx, [ebp - 0x38]
call fcn.00404844
push dword [0x5210b0]
lea eax, [ebp - 0x28]
push eax
call fcn.0040482c
push 4
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x41f4b8
call fcn.0040481a
push eax
push dword [ebp - 0x28]
call fcn.00404832
push eax
push dword [ebp + 0xc]
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x28]
push eax
call fcn.00404820
fld qword [0x5210bc]
fadd qword [0x401360]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x41f4b8
jmp 0x41f452
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0xa8], 0x8002
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x41ef32
mov dword [ebp - 0xb0], 6
mov dword [ebp - 0xb8], 0x8002
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41f16a
push 1
push 0xa
push 1
push 0x11
lea eax, [ebp - 0x24]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
fild dword [ebp - 0x18]
fstp qword [0x5210bc]
mov word [ebp - 0x110], 0xa
mov word [ebp - 0x10c], 1
mov word [ebp - 0x1c], 1
jmp 0x41ef85
mov ax, word [ebp - 0x1c]
add ax, word [ebp - 0x10c]
jo 0x41f4bd
mov word [ebp - 0x1c], ax
mov ax, word [ebp - 0x1c]
cmp ax, word [ebp - 0x110]
jg 0x41efe4
movsx eax, word [ebp - 0x1c]
mov dword [ebp - 0x13c], eax
fild dword [ebp - 0x13c]
fstp qword [ebp - 0x144]
fld qword [0x5210bc]
fadd qword [ebp - 0x144]
fnstsw ax
test al, 0xd
jne 0x41f4b8
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov esi, eax
movsx eax, word [ebp - 0x1c]
push eax
push dword [ebp - 0x24]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
jmp 0x41ef70
fld qword [0x5210bc]
fadd qword [0x401390]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x41f4b8
mov word [ebp - 0x118], 0xa
mov word [ebp - 0x114], 1
mov word [ebp - 0x14], 1
jmp 0x41f02f
mov ax, word [ebp - 0x14]
add ax, word [ebp - 0x114]
jo 0x41f4bd
mov word [ebp - 0x14], ax
mov ax, word [ebp - 0x14]
cmp ax, word [ebp - 0x118]
jg 0x41f0bb
movsx eax, word [ebp - 0x14]
push eax
push dword [ebp - 0x24]
call fcn.00404832
movzx eax, byte [eax]
test eax, eax
jne 0x41f052
jmp 0x41f0bb
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa8], 8
movsx eax, word [ebp - 0x14]
push eax
push dword [ebp - 0x24]
call fcn.00404832
mov al, byte [eax]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.00404760
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
call fcn.00526416
call fcn.004048b6
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x38]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x41f01a
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa8], 0x4008
push 0
push 0x40
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0040475a
lea eax, [ebp - 0x38]
push eax
call fcn.004048aa
call fcn.00526416
call fcn.004048b6
lea ecx, [ebp - 0x38]
call fcn.00404844
push dword [0x5210b0]
lea eax, [ebp - 0x28]
push eax
call fcn.0040482c
push 4
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x41f4b8
call fcn.0040481a
push eax
push dword [ebp - 0x28]
call fcn.00404832
push eax
push dword [ebp + 0xc]
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x28]
push eax
call fcn.00404820
fld qword [0x5210bc]
fadd qword [0x401360]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x41f4b8
jmp 0x41f452
push 1
push 0xb
push 1
push 0x11
lea eax, [ebp - 0x24]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
mov eax, dword [ebp - 0x18]
add eax, 1
jo 0x41f4bd
mov dword [ebp - 0x18], eax
fild dword [ebp - 0x18]
fstp qword [0x5210bc]
mov word [ebp - 0x120], 0xb
mov word [ebp - 0x11c], 1
mov word [ebp - 0x1c], 1
jmp 0x41f1cc
mov ax, word [ebp - 0x1c]
add ax, word [ebp - 0x11c]
jo 0x41f4bd
mov word [ebp - 0x1c], ax
mov ax, word [ebp - 0x1c]
cmp ax, word [ebp - 0x120]
jg 0x41f22b
movsx eax, word [ebp - 0x1c]
mov dword [ebp - 0x148], eax
fild dword [ebp - 0x148]
fstp qword [ebp - 0x150]
fld qword [0x5210bc]
fadd qword [ebp - 0x150]
fnstsw ax
test al, 0xd
jne 0x41f4b8
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov esi, eax
movsx eax, word [ebp - 0x1c]
push eax
push dword [ebp - 0x24]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
jmp 0x41f1b7
fld qword [0x5210bc]
fadd qword [0x401388]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x41f4b8
mov word [ebp - 0x128], 0xb
mov word [ebp - 0x124], 1
mov word [ebp - 0x14], 1
jmp 0x41f276
mov ax, word [ebp - 0x14]
add ax, word [ebp - 0x124]
jo 0x41f4bd
mov word [ebp - 0x14], ax
mov ax, word [ebp - 0x14]
cmp ax, word [ebp - 0x128]
jg 0x41f302
movsx eax, word [ebp - 0x14]
push eax
push dword [ebp - 0x24]
call fcn.00404832
movzx eax, byte [eax]
test eax, eax
jne 0x41f299
jmp 0x41f302
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa8], 8
movsx eax, word [ebp - 0x14]
push eax
push dword [ebp - 0x24]
call fcn.00404832
mov al, byte [eax]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.00404760
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
call fcn.00526416
call fcn.004048b6
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x38]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x41f261
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa8], 0x4008
push 0
push 0x40
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0040475a
lea eax, [ebp - 0x38]
push eax
call fcn.004048aa
call fcn.00526416
call fcn.004048b6
lea ecx, [ebp - 0x38]
call fcn.00404844
push dword [0x5210b0]
lea eax, [ebp - 0x28]
push eax
call fcn.0040482c
push 4
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x41f4b8
call fcn.0040481a
push eax
push dword [ebp - 0x28]
call fcn.00404832
push eax
push dword [ebp + 0xc]
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x28]
push eax
call fcn.00404820
fld qword [0x5210bc]
fadd qword [0x401360]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x41f4b8
call fcn.00526416
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd8], 3
mov dword [ebp - 0xc0], 0x521208
mov dword [ebp - 0xc8], 0x400c
mov dword [ebp - 0xa0], 3
mov dword [ebp - 0xa8], 2
lea eax, [ebp - 0xd8]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xc8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0xa8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
lea eax, [ebp - 0x38]
push eax
call fcn.00404778
add esp, 0x2c
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004047d2
push eax
call fcn.00404772
call fcn.00526416
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x38]
push eax
push 2
call fcn.00404898
add esp, 0xc
wait
push 0x41f4a7
jmp 0x41f490
lea ecx, [ebp - 0xf8]
call fcn.00404844
lea eax, [ebp - 0x24]
push eax
push 0
call fcn.00404784
ret
jmp fcn.004044cc
call fcn.0040477e
push ebp
mov ebp, esp
sub esp, 0x14
push 0x4044c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x22c
call fcn.004044c0
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x4013a8
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0
push 1
call fcn.00404754
and word [0x521242], 0
or dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0x10c], 0x800b
push 0x5211d8
lea eax, [ebp - 0x10c]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x41f546
fld qword [0x401360]
fstp qword [0x5210bc]
jmp 0x41f5c3
mov dword [ebp - 0x124], 0x521208
mov dword [ebp - 0x12c], 0x400c
mov dword [ebp - 0x104], 3
mov dword [ebp - 0x10c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x12c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x10c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
lea eax, [ebp - 0x8c]
push eax
call fcn.00404778
add esp, 0x2c
push eax
call fcn.004047d8
fstp qword [0x5210bc]
lea ecx, [ebp - 0x8c]
call fcn.00404844
push dword [0x5210b0]
push 1
call fcn.00404838
cmp eax, 0x2e
jl 0x41f698
push 0x2a
push dword [0x5210b0]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0x52
setne bl
push 0x2b
push dword [0x5210b0]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0x65
setne cl
or ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
push 0x2c
push dword [0x5210b0]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0x46
setne cl
or ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
push 0x2d
push dword [0x5210b0]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0x6f
setne cl
or ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
push 0x2e
push dword [0x5210b0]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0x78
setne cl
or ebx, ecx
test ebx, ebx
jne 0x41f690
fld qword [0x4013e0]
fstp qword [0x5210bc]
mov word [0x521242], 0x17
jmp 0x41f698
and word [0x521242], 0
fld qword [0x5210bc]
fadd qword [0x401358]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx eax, byte [eax]
mov dword [ebp - 0x20], eax
mov esi, dword [ebp - 0x20]
imul esi, esi, 0x100
jo 0x4216e5
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx eax, byte [eax]
add esi, eax
jo 0x4216e5
mov dword [ebp - 0x20], esi
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
or dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0x10c], 0x800b
push 0x5211d8
lea eax, [ebp - 0x10c]
push eax
call fcn.004047e4
movsx eax, ax
test eax, eax
je 0x41f836
mov dword [ebp - 0x124], 0x521208
mov dword [ebp - 0x12c], 0x400c
mov dword [ebp - 0x104], 3
mov dword [ebp - 0x10c], 2
mov dword [ebp - 0x134], 6
mov dword [ebp - 0x13c], 2
mov ax, word [0x521242]
mov word [ebp - 0x144], ax
mov dword [ebp - 0x14c], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x12c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x10c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
lea eax, [ebp - 0x8c]
push eax
call fcn.00404778
add esp, 0x2c
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.004047d2
push eax
call fcn.004047d8
fstp qword [0x5210bc]
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
push 3
call fcn.00404898
add esp, 0x10
fld qword [0x5210bc]
call fcn.0040481a
mov dword [ebp - 0x4c], eax
cmp word [0x521220], 0x1e
jl 0x4200e1
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
fld qword [0x5210bc]
call fcn.0040481a
mov dword [ebp - 0x4c], eax
movsx eax, word [0x52121e]
test eax, eax
jne 0x41f8f1
mov ax, word [0x521242]
add ax, 0x2d
jo 0x4216e5
movsx eax, ax
push eax
push dword [0x5210b0]
call fcn.00404832
movzx eax, byte [eax]
mov dword [0x52109c], eax
mov ax, word [0x521242]
add ax, 0x2c
jo 0x4216e5
movsx eax, ax
push eax
push dword [0x5210b0]
call fcn.00404832
movzx eax, byte [eax]
mov ecx, dword [0x52109c]
imul ecx, ecx, 0x100
jo 0x4216e5
add eax, ecx
jo 0x4216e5
mov dword [0x52109c], eax
jmp 0x41f935
push 4
push dword [0x5210b0]
call fcn.00404832
movzx eax, byte [eax]
mov dword [0x52109c], eax
push 3
push dword [0x5210b0]
call fcn.00404832
movzx eax, byte [eax]
mov ecx, dword [0x52109c]
imul ecx, ecx, 0x100
jo 0x4216e5
add eax, ecx
jo 0x4216e5
mov dword [0x52109c], eax
cmp dword [0x52109c], 0xff
jle 0x41f968
mov dword [ebp - 0x104], 0x10000
mov dword [ebp - 0x10c], 3
lea edx, [ebp - 0x10c]
lea ecx, [ebp - 0x5c]
call fcn.004048d4
jmp 0x42160e
mov eax, dword [0x52109c]
mov dword [0x521310], eax
and dword [ebp - 0x3c], 0
cmp word [0x521220], 0x1e
je 0x41f98a
cmp word [0x521220], 0x3c
jne 0x41f991
mov dword [ebp - 0x3c], 1
cmp dword [0x52109c], 0
jle 0x4200e1
cmp dword [0x52109c], 0xfde8
jge 0x4200e1
movsx eax, word [0x52121e]
test eax, eax
jne 0x41fa17
push dword [0x5210b0]
lea eax, [ebp - 0x6c]
push eax
call fcn.0040482c
push 4
mov eax, dword [ebp - 0x3c]
add eax, 0x35
jo 0x4216e5
movsx ecx, word [0x521242]
add eax, ecx
jo 0x4216e5
push eax
push dword [ebp - 0x6c]
call fcn.00404832
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x6c]
push eax
call fcn.00404820
mov eax, dword [ebp - 0x48]
add eax, 0x29
jo 0x4216e5
mov dword [ebp - 0x48], eax
jmp 0x41fa64
push dword [0x5210b0]
lea eax, [ebp - 0x6c]
push eax
call fcn.0040482c
push 4
mov eax, dword [ebp - 0x3c]
add eax, 0xc
jo 0x4216e5
movsx ecx, word [0x521242]
add eax, ecx
jo 0x4216e5
push eax
push dword [ebp - 0x6c]
call fcn.00404832
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x6c]
push eax
call fcn.00404820
fild dword [ebp - 0x48]
fstp qword [0x5210bc]
cmp dword [0x52109c], 0
je 0x4200e1
cmp dword [0x52109c], 0x200
jge 0x4200e1
push 1
push dword [0x52109c]
push 1
push 8
push 0x5210a0
push 4
push 0x180
call fcn.00404862
add esp, 0x1c
push 1
push dword [0x52109c]
push 1
push 3
push 0x5210a4
push 4
push 0x80
call fcn.00404862
add esp, 0x1c
push 1
push dword [0x52109c]
push 1
push 8
push 0x5210a8
push 4
push 0x180
call fcn.00404862
add esp, 0x1c
mov ecx, dword [0x52109c]
call fcn.0040479c
mov word [ebp - 0x188], ax
mov word [ebp - 0x184], 1
mov word [ebp - 0x24], 1
jmp 0x41fb22
mov ax, word [ebp - 0x24]
add ax, word [ebp - 0x184]
jo 0x4216e5
mov word [ebp - 0x24], ax
mov ax, word [ebp - 0x24]
cmp ax, word [ebp - 0x188]
jg 0x4200e1
mov edx, 0x40a6cc
lea ecx, [ebp - 0x38]
call fcn.004048b0
and dword [ebp - 0x64], 0
fld qword [0x5210bc]
fadd qword [0x401358]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx eax, byte [eax]
mov dword [ebp - 0x64], eax
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx eax, byte [eax]
mov ecx, dword [ebp - 0x64]
imul ecx, ecx, 0x100
jo 0x4216e5
add eax, ecx
jo 0x4216e5
mov dword [ebp - 0x64], eax
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
mov ecx, dword [ebp - 0x64]
call fcn.0040479c
mov word [ebp - 0x190], ax
mov word [ebp - 0x18c], 1
mov word [ebp - 0x44], 1
jmp 0x41fc06
mov ax, word [ebp - 0x44]
add ax, word [ebp - 0x18c]
jo 0x4216e5
mov word [ebp - 0x44], ax
mov ax, word [ebp - 0x44]
cmp ax, word [ebp - 0x190]
jg 0x41fcbd
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x10c], 8
movsx eax, word [ebp - 0x44]
mov dword [ebp - 0x1e0], eax
fild dword [ebp - 0x1e0]
fstp qword [ebp - 0x1e8]
fld qword [0x5210bc]
fadd qword [ebp - 0x1e8]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov al, byte [eax]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.00404760
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.004048b6
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x41fbf1
fild dword [ebp - 0x64]
fstp qword [ebp - 0x1f0]
fld qword [0x5210bc]
fadd qword [ebp - 0x1f0]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x10c], 0x4008
push 0
push 0x40
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.0040475a
lea eax, [ebp - 0x8c]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.004048b6
lea ecx, [ebp - 0x8c]
call fcn.00404844
mov esi, dword [ebp - 0x38]
movsx eax, word [ebp - 0x24]
push eax
push dword [0x5210a0]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
fld qword [0x5210bc]
fadd qword [0x401358]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx eax, byte [eax]
mov dword [ebp - 0x64], eax
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx eax, byte [eax]
mov ecx, dword [ebp - 0x64]
imul ecx, ecx, 0x100
jo 0x4216e5
add eax, ecx
jo 0x4216e5
mov dword [ebp - 0x64], eax
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
mov edx, 0x40a6cc
lea ecx, [ebp - 0x38]
call fcn.004048b0
mov ecx, dword [ebp - 0x64]
call fcn.0040479c
mov word [ebp - 0x198], ax
mov word [ebp - 0x194], 1
mov word [ebp - 0x44], 1
jmp 0x41fe18
mov ax, word [ebp - 0x44]
add ax, word [ebp - 0x194]
jo 0x4216e5
mov word [ebp - 0x44], ax
mov ax, word [ebp - 0x44]
cmp ax, word [ebp - 0x198]
jg 0x41fecf
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x10c], 8
movsx eax, word [ebp - 0x44]
mov dword [ebp - 0x1f4], eax
fild dword [ebp - 0x1f4]
fstp qword [ebp - 0x1fc]
fld qword [0x5210bc]
fadd qword [ebp - 0x1fc]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov al, byte [eax]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.00404760
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.004048b6
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x41fe03
fild dword [ebp - 0x64]
fstp qword [ebp - 0x204]
fld qword [0x5210bc]
fadd qword [ebp - 0x204]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x10c], 0x4008
push 0
push 0x40
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.0040475a
lea eax, [ebp - 0x8c]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.004048b6
lea ecx, [ebp - 0x8c]
call fcn.00404844
mov esi, dword [ebp - 0x38]
movsx eax, word [ebp - 0x24]
push eax
push dword [0x5210a8]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
push dword [0x5210b0]
lea eax, [ebp - 0x70]
push eax
call fcn.0040482c
push dword [0x5210a4]
lea eax, [ebp - 0x6c]
push eax
call fcn.0040482c
push 4
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [ebp - 0x70]
call fcn.00404832
push eax
movsx eax, word [ebp - 0x24]
push eax
push dword [ebp - 0x6c]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x6c]
push eax
call fcn.00404820
lea eax, [ebp - 0x70]
push eax
call fcn.00404820
movsx eax, word [ebp - 0x24]
push eax
push dword [0x5210a4]
call fcn.00404832
mov eax, dword [eax]
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x14c], 3
mov dword [ebp - 0x124], 1
mov dword [ebp - 0x12c], 2
mov dword [ebp - 0x104], 3
mov dword [ebp - 0x10c], 2
lea eax, [ebp - 0x14c]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x12c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x10c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
lea eax, [ebp - 0x8c]
push eax
call fcn.00404778
add esp, 0x2c
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.004047d2
push eax
call fcn.00404772
mov esi, eax
movsx eax, word [ebp - 0x24]
push eax
push dword [0x5210a4]
call fcn.00404832
mov dword [eax], esi
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
push 2
call fcn.00404898
add esp, 0xc
cmp word [0x521220], 0x1e
jne 0x4200c0
fld qword [0x5210bc]
fadd qword [0x401360]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
jmp 0x4200dc
fld qword [0x5210bc]
fadd qword [0x4013d8]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
jmp 0x41fb0d
fild dword [ebp - 0x4c]
fstp qword [0x5210bc]
cmp word [0x52121e], 0xffff
jne 0x42015c
mov ax, word [0x521220]
mov word [ebp - 0x19c], ax
movsx eax, word [ebp - 0x19c]
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x19
je 0x420134
cmp dword [ebp - 0x208], 0x1e
je 0x420142
cmp dword [ebp - 0x208], 0x32
je 0x420150
cmp dword [ebp - 0x208], 0x3c
je 0x420150
jmp 0x42015c
fld qword [0x4013d8]
fstp qword [0x5210bc]
jmp 0x42015c
fld qword [0x4013d0]
fstp qword [0x5210bc]
jmp 0x42015c
fld qword [0x4013d0]
fstp qword [0x5210bc]
push dword [0x5210b0]
lea eax, [ebp - 0x6c]
push eax
call fcn.0040482c
push 4
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [ebp - 0x6c]
call fcn.00404832
push eax
push 0x5210e0
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x6c]
push eax
call fcn.00404820
fld qword [0x5210bc]
fadd qword [0x401360]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
mov eax, dword [0x5210e0]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x15c], 3
mov dword [ebp - 0x134], 0x521208
mov dword [ebp - 0x13c], 0x400c
mov dword [ebp - 0x114], 3
mov dword [ebp - 0x11c], 2
and dword [ebp - 0xa4], 0
mov dword [ebp - 0xac], 2
or dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0x10c], 0x800b
push 0x5211d8
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.00404886
mov edx, eax
lea ecx, [ebp - 0x9c]
call fcn.004048d4
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x13c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x11c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
lea eax, [ebp - 0x6c]
push eax
push 0x5210f4
lea eax, [ebp - 0xbc]
push eax
call fcn.00404748
add esp, 0x30
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.004047a2
lea eax, [ebp - 0x6c]
push eax
call fcn.00404820
mov dword [ebp - 0x164], 1
mov dword [ebp - 0x16c], 2
mov ax, word [0x521242]
mov word [ebp - 0x174], ax
mov dword [ebp - 0x17c], 2
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.0040474e
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.004047d2
push eax
call fcn.00404772
mov dword [0x5210e0], eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x9c]
push eax
push 6
call fcn.00404898
add esp, 0x1c
mov eax, dword [ebp - 0x20]
mov dword [0x52130c], eax
cmp word [0x521220], 0x1e
jl 0x420b6b
mov eax, dword [0x5210e0]
add eax, 1
jo 0x4216e5
mov dword [0x5210e0], eax
push dword [0x52128c]
push dword [0x5211b4]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
push eax
call fcn.0040485c
xor ecx, ecx
cmp dword [0x5210e0], eax
setg cl
neg ecx
mov word [ebp - 0x180], cx
lea ecx, [ebp - 0x74]
call fcn.00404868
movsx eax, word [ebp - 0x180]
test eax, eax
je 0x4203d2
jmp 0x42160e
fild dword [0x5210e0]
fstp qword [0x5210bc]
cmp dword [ebp - 0x20], 0
jg 0x4203f1
cmp dword [0x52109c], 0
jle 0x420b6b
cmp dword [0x52109c], 0xfde8
jge 0x420b6b
mov dword [ebp - 0x124], 0x52109c
mov dword [ebp - 0x12c], 0x4003
lea eax, [ebp - 0x20]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x11c], 0x4003
call fcn.00526416
cmp eax, dword [0x52109c]
setg cl
neg ecx
mov word [ebp - 0x104], cx
mov dword [ebp - 0x10c], 0xb
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.004047a2
lea eax, [ebp - 0x8c]
push eax
call fcn.00404772
mov dword [0x521098], eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x10c]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [0x521098]
mov dword [ebp - 0x20], eax
push 1
push dword [0x521098]
push 1
push 8
push 0x521228
push 4
push 0x180
call fcn.00404862
add esp, 0x1c
push 1
push dword [0x521098]
push 1
push 3
push 0x52122c
push 4
push 0x80
call fcn.00404862
add esp, 0x1c
push 0
push dword [0x521098]
push 1
push 3
push 0x521230
push 4
push 0x80
call fcn.00404862
add esp, 0x1c
push 0
push dword [0x521098]
push 1
push 3
push 0x521234
push 4
push 0x80
call fcn.00404862
add esp, 0x1c
mov ecx, dword [0x521098]
call fcn.0040479c
mov word [ebp - 0x1a4], ax
mov word [ebp - 0x1a0], 1
mov word [ebp - 0x24], 1
jmp 0x420553
mov ax, word [ebp - 0x24]
add ax, word [ebp - 0x1a0]
jo 0x4216e5
mov word [ebp - 0x24], ax
mov ax, word [ebp - 0x24]
cmp ax, word [ebp - 0x1a4]
jg 0x420b6b
mov edx, 0x40a6cc
lea ecx, [ebp - 0x38]
call fcn.004048b0
push dword [0x5210b0]
push 1
call fcn.00404838
mov dword [ebp - 0x20c], eax
fild dword [ebp - 0x20c]
fstp qword [ebp - 0x214]
fld qword [0x5210bc]
fcomp qword [ebp - 0x214]
fnstsw ax
sahf
ja 0x420b66
fld qword [0x5210bc]
fadd qword [0x401358]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx eax, byte [eax]
mov dword [ebp - 0x64], eax
mov esi, dword [ebp - 0x64]
imul esi, esi, 0x100
jo 0x4216e5
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx eax, byte [eax]
add esi, eax
jo 0x4216e5
mov dword [ebp - 0x64], esi
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
fild dword [ebp - 0x64]
fstp qword [ebp - 0x21c]
fld qword [0x5210bc]
fadd qword [ebp - 0x21c]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.00404742
fstp qword [ebp - 0x224]
push dword [0x5210b0]
push 1
call fcn.00404838
mov dword [ebp - 0x228], eax
fild dword [ebp - 0x228]
fstp qword [ebp - 0x230]
fld qword [ebp - 0x224]
fcomp qword [ebp - 0x230]
fnstsw ax
sahf
ja 0x420b66
mov ecx, dword [ebp - 0x64]
call fcn.0040479c
mov word [ebp - 0x1ac], ax
mov word [ebp - 0x1a8], 1
mov word [ebp - 0x44], 1
jmp 0x4206c5
mov ax, word [ebp - 0x44]
add ax, word [ebp - 0x1a8]
jo 0x4216e5
mov word [ebp - 0x44], ax
mov ax, word [ebp - 0x44]
cmp ax, word [ebp - 0x1ac]
jg 0x42077c
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x10c], 8
movsx eax, word [ebp - 0x44]
mov dword [ebp - 0x234], eax
fild dword [ebp - 0x234]
fstp qword [ebp - 0x23c]
fld qword [0x5210bc]
fadd qword [ebp - 0x23c]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov al, byte [eax]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.00404760
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.004048b6
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4206b0
fild dword [ebp - 0x64]
fstp qword [ebp - 0x244]
fld qword [0x5210bc]
fadd qword [ebp - 0x244]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x10c], 0x4008
push 0
push 0x40
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.0040475a
lea eax, [ebp - 0x8c]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.004048b6
lea ecx, [ebp - 0x8c]
call fcn.00404844
mov esi, dword [ebp - 0x38]
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521228]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
push dword [0x5210b0]
lea eax, [ebp - 0x70]
push eax
call fcn.0040482c
push dword [0x52122c]
lea eax, [ebp - 0x6c]
push eax
call fcn.0040482c
push 4
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [ebp - 0x70]
call fcn.00404832
push eax
movsx eax, word [ebp - 0x24]
push eax
push dword [ebp - 0x6c]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x6c]
push eax
call fcn.00404820
lea eax, [ebp - 0x70]
push eax
call fcn.00404820
movsx eax, word [ebp - 0x24]
push eax
push dword [0x52122c]
call fcn.00404832
mov eax, dword [eax]
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x14c], 3
mov dword [ebp - 0x124], 1
mov dword [ebp - 0x12c], 2
mov dword [ebp - 0x104], 3
mov dword [ebp - 0x10c], 2
mov ax, word [0x521242]
mov word [ebp - 0x154], ax
mov dword [ebp - 0x15c], 2
lea eax, [ebp - 0x14c]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x12c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x10c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
lea eax, [ebp - 0x8c]
push eax
call fcn.00404778
add esp, 0x2c
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.004047d2
push eax
call fcn.00404772
mov esi, eax
movsx eax, word [ebp - 0x24]
push eax
push dword [0x52122c]
call fcn.00404832
mov dword [eax], esi
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x8c]
push eax
push 3
call fcn.00404898
add esp, 0x10
fld qword [0x5210bc]
fadd qword [0x401360]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
cmp word [0x521220], 0x1e
jl 0x420b24
cmp dword [0x52109c], 0
jle 0x420b24
fld qword [0x5210bc]
fadd qword [0x401358]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx esi, byte [eax]
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521230]
call fcn.00404832
mov dword [eax], esi
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx esi, byte [eax]
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521230]
call fcn.00404832
mov eax, dword [eax]
imul eax, eax, 0x100
jo 0x4216e5
add esi, eax
jo 0x4216e5
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521230]
call fcn.00404832
mov dword [eax], esi
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
fld qword [0x5210bc]
fadd qword [0x401358]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx esi, byte [eax]
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521234]
call fcn.00404832
mov dword [eax], esi
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x4216e0
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx esi, byte [eax]
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521234]
call fcn.00404832
mov eax, dword [eax]
imul eax, eax, 0x100
jo 0x4216e5
add esi, eax
jo 0x4216e5
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521234]
call fcn.00404832
mov dword [eax], esi
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
jmp 0x420b66
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
cmp word [0x521220], 0x32
jl 0x420b66
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x4216e0
jmp 0x42053e
mov eax, dword [0x52130c]
add eax, dword [0x521310]
jo 0x4216e5
test eax, eax
jle 0x421607
cmp word [0x521220], 0x1e
jl 0x421607
cmp dword [0x52109c], 0xfde8
jge 0x421607
push 1
mov eax, dword [0x52130c]
add eax, dword [0x521310]
jo 0x4216e5
push eax
push 1
push 8
push 0x521314
push 4
push 0x180
call fcn.00404862
add esp, 0x1c
push 1
mov eax, dword [0x52130c]
add eax, dword [0x521310]
jo 0x4216e5
push eax
push 1
push 3
push 0x521318
push 4
push 0x80
call fcn.00404862
add esp, 0x1c
push 1
mov eax, dword [0x52130c]
add eax, dword [0x521310]
jo 0x4216e5
push eax
push 1
push 8
push 0x52131c
push 4
push 0x180
call fcn.00404862
add esp, 0x1c
push 1
mov eax, dword [0x52130c]
add eax, dword [0x521310]
jo 0x4216e5
push eax
push 1
push 8
push 0x521320
push 4
push 0x180
call fcn.00404862
add esp, 0x1c
and dword [ebp - 0x64], 0
mov word [ebp - 0x2c], 1
mov word [ebp - 0x68], 1
mov ecx, dword [0x52130c]
call fcn.0040479c
mov word [ebp - 0x1b4], ax
mov word [ebp - 0x1b0], 1
mov word [ebp - 0x24], 1
jmp 0x420c9a
mov ax, word [ebp - 0x24]
add ax, word [ebp - 0x1b0]
jo 0x4216e5
mov word [ebp - 0x24], ax
mov ax, word [ebp - 0x24]
cmp ax, word [ebp - 0x1b4]
jg 0x421264
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521228]
call fcn.00404832
mov esi, dword [eax]
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521314]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
movsx eax, word [ebp - 0x24]
push eax
push dword [0x52122c]
call fcn.00404832
mov esi, eax
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521318]
call fcn.00404832
mov ecx, dword [esi]
mov dword [eax], ecx
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521234]
call fcn.00404832
xor ebx, ebx
cmp dword [eax], 0xffff
setne bl
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521230]
call fcn.00404832
xor ecx, ecx
cmp dword [eax], 0
setne cl
and ebx, ecx
test ebx, ebx
jne 0x420d58
mov esi, 0x40bb28
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x52131c]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
jmp 0x42124d
cmp dword [0x521310], 0
jle 0x4211de
mov ax, word [ebp - 0x24]
sub ax, 1
jo 0x4216e5
movsx eax, ax
push eax
push dword [0x521234]
call fcn.00404832
xor ebx, ebx
cmp dword [eax], 0xffff
setne bl
mov ax, word [ebp - 0x24]
sub ax, 1
jo 0x4216e5
movsx eax, ax
push eax
push dword [0x521230]
call fcn.00404832
xor ecx, ecx
cmp dword [eax], 0
setne cl
and ebx, ecx
neg ebx
sbb ebx, ebx
neg ebx
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521234]
call fcn.00404832
xor ecx, ecx
cmp dword [eax], 0xffff
sete cl
or ebx, ecx
test ebx, ebx
jne 0x420de2
cmp word [ebp - 0x2c], 1
jne 0x420df5
cmp word [ebp - 0x2c], 1
je 0x420df5
mov dword [ebp - 0x248], 1
jmp 0x420dfc
and dword [ebp - 0x248], 0
mov ax, word [ebp - 0x24]
sub ax, 1
jo 0x4216e5
movsx eax, ax
push eax
push dword [0x521234]
call fcn.00404832
mov esi, eax
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521234]
call fcn.00404832
mov ecx, dword [esi]
sub ecx, dword [eax]
neg ecx
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x248]
and eax, ecx
test eax, eax
jne 0x42116d
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521234]
call fcn.00404832
mov eax, dword [eax]
cmp eax, dword [ebp - 0x64]
jle 0x420fbb
push 0x40bb30
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521234]
call fcn.00404832
movsx ecx, word [ebp - 0x68]
mov eax, dword [eax]
add eax, ecx
jo 0x4216e5
sub eax, 1
jo 0x4216e5
push eax
push dword [0x5210a0]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
push eax
push 0x40bb50
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x78]
call fcn.004048b6
push eax
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521234]
call fcn.00404832
movsx ecx, word [ebp - 0x68]
mov eax, dword [eax]
add eax, ecx
jo 0x4216e5
sub eax, 1
jo 0x4216e5
push eax
push dword [0x5210a8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x7c]
call fcn.004048b6
mov esi, eax
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521314]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x74]
push eax
push 3
call fcn.0040489e
add esp, 0x10
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521234]
call fcn.00404832
movsx ecx, word [ebp - 0x68]
mov eax, dword [eax]
add eax, ecx
jo 0x4216e5
sub eax, 1
jo 0x4216e5
push eax
push dword [0x5210a4]
call fcn.00404832
mov esi, eax
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521318]
call fcn.00404832
mov ecx, dword [esi]
mov dword [eax], ecx
mov esi, 0x40bb60
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x52131c]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov eax, dword [ebp - 0x64]
add eax, 1
jo 0x4216e5
mov dword [ebp - 0x64], eax
mov ax, word [ebp - 0x2c]
add ax, 1
jo 0x4216e5
mov word [ebp - 0x2c], ax
push 0x40bb30
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521234]
call fcn.00404832
movsx ecx, word [ebp - 0x68]
mov eax, dword [eax]
add eax, ecx
jo 0x4216e5
push eax
push dword [0x5210a0]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
push eax
push 0x40bb50
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x78]
call fcn.004048b6
push eax
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521234]
call fcn.00404832
movsx ecx, word [ebp - 0x68]
mov eax, dword [eax]
add eax, ecx
jo 0x4216e5
push eax
push dword [0x5210a8]
call fcn.00404832
push dword [eax]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x7c]
call fcn.004048b6
mov esi, eax
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521314]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x74]
push eax
push 3
call fcn.0040489e
add esp, 0x10
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521234]
call fcn.00404832
movsx ecx, word [ebp - 0x68]
mov eax, dword [eax]
add eax, ecx
jo 0x4216e5
push eax
push dword [0x5210a4]
call fcn.00404832
mov esi, eax
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521318]
call fcn.00404832
mov ecx, dword [esi]
mov dword [eax], ecx
mov esi, 0x40bb60
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x52131c]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov eax, dword [ebp - 0x64]
add eax, 1
jo 0x4216e5
mov dword [ebp - 0x64], eax
mov ax, word [ebp - 0x2c]
add ax, 1
jo 0x4216e5
mov word [ebp - 0x2c], ax
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521228]
call fcn.00404832
mov esi, dword [eax]
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521314]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
movsx eax, word [ebp - 0x24]
push eax
push dword [0x52122c]
call fcn.00404832
mov esi, eax
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521318]
call fcn.00404832
mov ecx, dword [esi]
mov dword [eax], ecx
mov esi, 0x40bb68
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x52131c]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
jmp 0x4211dc
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521228]
call fcn.00404832
mov esi, dword [eax]
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521314]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
movsx eax, word [ebp - 0x24]
push eax
push dword [0x52122c]
call fcn.00404832
mov esi, eax
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521318]
call fcn.00404832
mov ecx, dword [esi]
mov dword [eax], ecx
mov esi, 0x40bb68
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x52131c]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
jmp 0x42124d
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521228]
call fcn.00404832
mov esi, dword [eax]
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521314]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
movsx eax, word [ebp - 0x24]
push eax
push dword [0x52122c]
call fcn.00404832
mov esi, eax
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521318]
call fcn.00404832
mov ecx, dword [esi]
mov dword [eax], ecx
mov esi, 0x40bb68
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x52131c]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [ebp - 0x2c]
add ax, 1
jo 0x4216e5
mov word [ebp - 0x2c], ax
jmp 0x420c85
push 1
mov eax, dword [0x52130c]
add eax, dword [0x521310]
jo 0x4216e5
push eax
push 1
push 8
lea eax, [ebp - 0x60]
push eax
push 4
push 0x180
call fcn.00404862
add esp, 0x1c
push 1
mov eax, dword [0x52130c]
add eax, dword [0x521310]
jo 0x4216e5
push eax
push 1
push 3
lea eax, [ebp - 0x40]
push eax
push 4
push 0x80
call fcn.00404862
add esp, 0x1c
push 1
mov eax, dword [0x52130c]
add eax, dword [0x521310]
jo 0x4216e5
push eax
push 1
push 8
lea eax, [ebp - 0x28]
push eax
push 4
push 0x180
call fcn.00404862
add esp, 0x1c
mov ecx, dword [0x52130c]
add ecx, dword [0x521310]
jo 0x4216e5
call fcn.0040479c
mov word [ebp - 0x1bc], ax
mov word [ebp - 0x1b8], 1
mov word [ebp - 0x24], 1
jmp 0x421329
mov ax, word [ebp - 0x24]
add ax, word [ebp - 0x1b8]
jo 0x4216e5
mov word [ebp - 0x24], ax
mov ax, word [ebp - 0x24]
cmp ax, word [ebp - 0x1bc]
jg 0x421401
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521314]
call fcn.00404832
mov esi, dword [eax]
movsx eax, word [ebp - 0x24]
push eax
push dword [ebp - 0x60]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521318]
call fcn.00404832
mov esi, eax
movsx eax, word [ebp - 0x24]
push eax
push dword [ebp - 0x40]
call fcn.00404832
mov ecx, dword [esi]
mov dword [eax], ecx
movsx eax, word [ebp - 0x24]
push eax
push dword [0x52131c]
call fcn.00404832
mov esi, dword [eax]
movsx eax, word [ebp - 0x24]
push eax
push dword [ebp - 0x28]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov esi, 0x40a6cc
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521314]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
movsx eax, word [ebp - 0x24]
push eax
push dword [0x521318]
call fcn.00404832
and dword [eax], 0
mov esi, 0x40a6cc
movsx eax, word [ebp - 0x24]
push eax
push dword [0x52131c]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
jmp 0x421314
mov word [ebp - 0x2c], 1
mov ecx, dword [0x52130c]
add ecx, dword [0x521310]
jo 0x4216e5
call fcn.0040479c
mov word [ebp - 0x1c4], ax
mov word [ebp - 0x1c0], 1
mov word [ebp - 0x24], 1
jmp 0x42144b
mov ax, word [ebp - 0x24]
add ax, word [ebp - 0x1c0]
jo 0x4216e5
mov word [ebp - 0x24], ax
mov ax, word [ebp - 0x24]
cmp ax, word [ebp - 0x1c4]
jg 0x421507
movsx eax, word [ebp - 0x24]
push eax
push dword [ebp - 0x28]
call fcn.00404832
push dword [eax]
push 0x40bb28
call fcn.004048ce
test eax, eax
jne 0x421502
movsx eax, word [ebp - 0x24]
push eax
push dword [ebp - 0x60]
call fcn.00404832
mov esi, dword [eax]
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521314]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
movsx eax, word [ebp - 0x24]
push eax
push dword [ebp - 0x40]
call fcn.00404832
mov esi, eax
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521318]
call fcn.00404832
mov ecx, dword [esi]
mov dword [eax], ecx
movsx eax, word [ebp - 0x24]
push eax
push dword [ebp - 0x28]
call fcn.00404832
mov esi, dword [eax]
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x52131c]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [ebp - 0x2c]
add ax, 1
jo 0x4216e5
mov word [ebp - 0x2c], ax
jmp 0x421436
mov ecx, dword [0x52130c]
add ecx, dword [0x521310]
jo 0x4216e5
call fcn.0040479c
mov word [ebp - 0x1cc], ax
mov word [ebp - 0x1c8], 1
mov word [ebp - 0x24], 1
jmp 0x42154b
mov ax, word [ebp - 0x24]
add ax, word [ebp - 0x1c8]
jo 0x4216e5
mov word [ebp - 0x24], ax
mov ax, word [ebp - 0x24]
cmp ax, word [ebp - 0x1cc]
jg 0x421607
movsx eax, word [ebp - 0x24]
push eax
push dword [ebp - 0x28]
call fcn.00404832
push dword [eax]
push 0x40bb28
call fcn.004048ce
test eax, eax
je 0x421602
movsx eax, word [ebp - 0x24]
push eax
push dword [ebp - 0x60]
call fcn.00404832
mov esi, dword [eax]
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521314]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
movsx eax, word [ebp - 0x24]
push eax
push dword [ebp - 0x40]
call fcn.00404832
mov esi, eax
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x521318]
call fcn.00404832
mov ecx, dword [esi]
mov dword [eax], ecx
movsx eax, word [ebp - 0x24]
push eax
push dword [ebp - 0x28]
call fcn.00404832
mov esi, dword [eax]
movsx eax, word [ebp - 0x2c]
push eax
push dword [0x52131c]
call fcn.00404832
mov ecx, eax
mov edx, esi
call fcn.004048b0
mov ax, word [ebp - 0x2c]
add ax, 1
jo 0x4216e5
mov word [ebp - 0x2c], ax
jmp 0x421536
push 0
call fcn.00404754
call fcn.0040473c
wait
push 0x4216c2
jmp 0x421698
lea eax, [ebp - 0x28]
push eax
push 0
call fcn.00404784
lea ecx, [ebp - 0x38]
call fcn.00404868
lea eax, [ebp - 0x40]
push eax
push 0
call fcn.00404784
lea eax, [ebp - 0x60]
push eax
push 0
call fcn.00404784
ret
jmp fcn.004044cc
call fcn.0040477e
push ebp
mov ebp, esp
push ecx
push ecx
push 0x4044c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1f0
call fcn.004044c0
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x4013e8
call fcn.004d9106
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x114], 2
push 0x5210f4
call fcn.00404730
push dword [eax]
push 1
call fcn.00404838
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x124], 3
mov dword [ebp - 0x12c], 1
mov dword [ebp - 0x134], 2
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x1e8]
push eax
push 0x521208
call fcn.00404736
mov dword [ebp - 0x200], eax
jmp 0x422067
mov dword [ebp - 0x12c], 0x521208
mov dword [ebp - 0x134], 0x400c
mov dword [ebp - 0x10c], 5
mov dword [ebp - 0x114], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x134]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x114]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
lea eax, [ebp - 0x18]
push eax
push 0x5210f4
lea eax, [ebp - 0x34]
push eax
call fcn.00404748
add esp, 0x30
push eax
call fcn.0040472a
mov word [ebp - 0x1c8], ax
lea eax, [ebp - 0x18]
push eax
call fcn.00404820
xor eax, eax
cmp word [ebp - 0x1c8], 0xffff
setne al
neg eax
mov word [ebp - 0x1d8], ax
lea ecx, [ebp - 0x34]
call fcn.00404844
movsx eax, word [ebp - 0x1d8]
test eax, eax
je 0x422049
mov dword [ebp - 0x12c], 0x521208
mov dword [ebp - 0x134], 0x400c
mov dword [ebp - 0x10c], 2
mov dword [ebp - 0x114], 2
push 0
lea eax, [ebp - 0x34]
push eax
call fcn.004048bc
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x134]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x114]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
lea eax, [ebp - 0x44]
push eax
call fcn.00404778
add esp, 0x2c
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040480e
mov word [ebp - 0x1d8], ax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x44]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1d8]
test eax, eax
je 0x422049
cmp word [0x52121e], 0xffff
jne 0x421f0e
cmp word [0x521248], 0xffff
je 0x421f0e
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x114], 2
push 0x521208
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040474e
push eax
call fcn.00404772
push eax
push dword [0x5212e8]
call fcn.00404832
mov edx, dword [eax]
mov ecx, 0x5211b4
call fcn.004048b0
push dword [0x5211b4]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x14c], ax
mov dword [ebp - 0x154], 0xb
mov dword [ebp - 0x12c], 0x521208
mov dword [ebp - 0x134], 0x400c
mov dword [ebp - 0x10c], 5
mov dword [ebp - 0x114], 2
mov dword [ebp - 0x13c], 0x40a6cc
mov dword [ebp - 0x144], 0x8008
lea eax, [ebp - 0x154]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x134]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x114]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
lea eax, [ebp - 0x34]
push eax
call fcn.00404778
add esp, 0x2c
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x1d8], ax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x34]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x1d8]
test eax, eax
je 0x421e82
push dword [0x52128c]
push dword [0x5211b4]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
push eax
push 1
push 0xffffffffffffffff
push 0x20
call fcn.00404874
lea ecx, [ebp - 0x24]
call fcn.00404868
push 1
call fcn.0040483e
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x114], 3
lea edx, [ebp - 0x114]
mov ecx, 0x5211b8
call fcn.004048d4
cmp dword [ebp - 0x14], 0
je 0x421e76
push 1
push dword [ebp - 0x14]
push 1
push 0x11
push 0x5210b0
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push 1
push 0x5210b0
push 0x40b9d8
call fcn.00404856
mov dword [ebp - 0x12c], 0x521208
mov dword [ebp - 0x134], 0x400c
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x114], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x134]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x114]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
lea eax, [ebp - 0x18]
push eax
push 0x5210f4
lea eax, [ebp - 0x34]
push eax
call fcn.00404748
add esp, 0x30
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x16c], 0x521208
mov dword [ebp - 0x174], 0x400c
mov dword [ebp - 0x14c], 1
mov dword [ebp - 0x154], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x174]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x154]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
lea eax, [ebp - 0x1c]
push eax
push 0x5210f4
lea eax, [ebp - 0x74]
push eax
call fcn.00404748
add esp, 0x30
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1ac], 0x521208
mov dword [ebp - 0x1b4], 0x400c
mov dword [ebp - 0x18c], 1
mov dword [ebp - 0x194], 2
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1b4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x194]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
lea eax, [ebp - 0x20]
push eax
push 0x5210f4
lea eax, [ebp - 0xc4]
push eax
call fcn.00404748
add esp, 0x30
mov dword [ebp - 0x1d4], eax
push 4
push dword [ebp - 0x1cc]
lea eax, [ebp - 0x44]
push eax
call fcn.0040487a
lea eax, [ebp - 0x18]
push eax
call fcn.00404820
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00404880
mov dword [ebp - 0x13c], 0x40ba0c
mov dword [ebp - 0x144], 0x8008
push 4
push dword [ebp - 0x1d0]
lea eax, [ebp - 0x84]
push eax
call fcn.0040487a
lea eax, [ebp - 0x1c]
push eax
call fcn.00404820
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.00404880
mov dword [ebp - 0x17c], 0x40ba7c
mov dword [ebp - 0x184], 0x8008
push 4
push dword [ebp - 0x1d4]
lea eax, [ebp - 0xd4]
push eax
call fcn.0040487a
lea eax, [ebp - 0x20]
push eax
call fcn.00404820
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.00404880
mov dword [ebp - 0x1bc], 0x40ba3c
mov dword [ebp - 0x1c4], 0x8008
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.0040488c
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.0040488c
push eax
call fcn.00404892
mov word [ebp - 0x1d8], ax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x34]
push eax
push 9
call fcn.00404898
add esp, 0x28
movsx eax, word [ebp - 0x1d8]
test eax, eax
je 0x421e76
mov eax, dword [0x52128c]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
mov dword [ebp - 0x12c], 0x521208
mov dword [ebp - 0x134], 0x400c
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x114], 2
lea eax, [ebp - 0x144]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x134]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x114]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
lea eax, [ebp - 0x34]
push eax
call fcn.00404778
add esp, 0x2c
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048b6
push eax
push 5
push 0xffffffffffffffff
push 0x20
call fcn.00404874
lea ecx, [ebp - 0x24]
call fcn.00404868
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x34]
push eax
push 2
call fcn.00404898
add esp, 0xc
push 5
push 0x5210b0
push 0x40b9d8
call fcn.00404724
push 5
call fcn.00404850
push 1
call fcn.00404850
jmp 0x421f09
mov dword [ebp - 0x12c], 0x521208
mov dword [ebp - 0x134], 0x400c
mov dword [ebp - 0x10c], 5
mov dword [ebp - 0x114], 2
mov dword [ebp - 0x13c], 0x40a6cc
mov dword [ebp - 0x144], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x134]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x114]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x144]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
call fcn.004047a8
add esp, 0x38
jmp 0x421fa6
push 1
push dword [0x52126c]
push 1
call fcn.00404838
add eax, 1
jo 0x422127
push eax
push 1
push 0x11
push 0x5210b0
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
push dword [0x52126c]
lea eax, [ebp - 0x1c]
push eax
call fcn.0040482c
push dword [0x5210b0]
lea eax, [ebp - 0x18]
push eax
call fcn.0040482c
push dword [0x52126c]
push 1
call fcn.00404838
add eax, 1
jo 0x422127
push eax
push 0
push dword [ebp - 0x1c]
call fcn.00404832
push eax
push 1
push dword [ebp - 0x18]
call fcn.00404832
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x18]
push eax
call fcn.00404820
lea eax, [ebp - 0x1c]
push eax
call fcn.00404820
mov dword [ebp - 0x12c], 0x521208
mov dword [ebp - 0x134], 0x400c
mov dword [ebp - 0x10c], 5
mov dword [ebp - 0x114], 2
mov dword [ebp - 0x13c], 0x40a6cc
mov dword [ebp - 0x144], 0x8008
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x134]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x114]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
lea eax, [ebp - 0x34]
push eax
call fcn.00404778
add esp, 0x2c
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.004047e4
mov word [ebp - 0x1d8], ax
lea ecx, [ebp - 0x34]
call fcn.00404844
movsx eax, word [ebp - 0x1d8]
test eax, eax
je 0x422049
call 0x42212c
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x1e8]
push eax
push 0x521208
call fcn.0040471e
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
jne 0x4217a1
push 0x422118
jmp 0x4220ff
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x1e8]
push eax
push 2
call fcn.00404898
add esp, 0xc
ret
call fcn.0040477e
push ebp
mov ebp, esp
sub esp, 0x18
push 0x4044c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x4c4
call fcn.004044c0
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x4013f8
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 0
push 1
push 1
push 0x11
push 0x5210d8
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
mov dword [ebp - 4], 3
and dword [ebp - 0x24c], 0
mov dword [ebp - 0x254], 2
lea edx, [ebp - 0x254]
mov ecx, 0x5211a4
call fcn.004048d4
mov dword [ebp - 4], 4
and dword [0x521050], 0
mov dword [ebp - 4], 5
mov edx, 0x40a6cc
mov ecx, 0x521054
call fcn.004048b0
mov dword [ebp - 4], 6
push 2
call fcn.00404850
mov dword [ebp - 4], 7
mov eax, dword [0x52128c]
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x284], 8
mov dword [ebp - 0x26c], 0x521208
mov dword [ebp - 0x274], 0x400c
mov dword [ebp - 0x24c], 5
mov dword [ebp - 0x254], 2
lea eax, [ebp - 0x284]
push eax
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x274]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x254]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push 0x5210f4
lea eax, [ebp - 0x1b4]
push eax
call fcn.00404778
add esp, 0x2c
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x194]
call fcn.004048b6
push eax
push 2
push 0xffffffffffffffff
push 2
call fcn.00404874
lea ecx, [ebp - 0x194]
call fcn.00404868
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 4], 8
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x254], 2
lea edx, [ebp - 0x254]
mov ecx, 0x5211a4
call fcn.004048d4
jmp 0x4223cb
mov dword [ebp - 4], 0xf
and dword [ebp - 0x24c], 0
mov dword [ebp - 0x254], 0x8002
push 0x5211a4
lea eax, [ebp - 0x254]
push eax
call fcn.00404718
movsx eax, ax
test eax, eax
je 0x422400
jmp 0x42d9c7
mov dword [ebp - 4], 0x12
push dword [0x5210b0]
push 1
call fcn.00404838
cmp eax, 0x2b
jg 0x42242c
mov dword [ebp - 4], 0x13
push 2
call fcn.00404850
jmp 0x42d9c7
mov dword [ebp - 4], 0x16
and word [0x52121a], 0
mov dword [ebp - 4], 0x17
and word [0x521218], 0
mov dword [ebp - 4], 0x18
and dword [0x5210e0], 0
mov dword [ebp - 4], 0x19
or dword [ebp - 0x24c], 0xffffffff
mov dword [ebp - 0x254], 2
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0xe0]
call fcn.004048d4
mov dword [ebp - 4], 0x1a
or dword [ebp - 0x24c], 0xffffffff
mov dword [ebp - 0x254], 0xb
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x130]
call fcn.004048d4
mov dword [ebp - 4], 0x1b
and dword [ebp - 0x24c], 0
mov dword [ebp - 0x254], 0xb
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x40]
call fcn.004048d4
mov dword [ebp - 4], 0x1c
lea eax, [ebp - 0x1b4]
push eax
call 0x41f4c2
lea edx, [ebp - 0x1b4]
lea ecx, [ebp - 0x11c]
call fcn.004048d4
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x24c], 0xfde8
mov dword [ebp - 0x254], 0x8003
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.00404712
movsx eax, ax
test eax, eax
je 0x42253c
mov dword [ebp - 4], 0x1e
push 2
call fcn.00404850
jmp 0x42d9c7
mov dword [ebp - 4], 0x21
mov eax, dword [0x52130c]
add eax, dword [0x521310]
jo 0x42dbfb
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 3
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x11c]
call fcn.004048d4
mov dword [ebp - 4], 0x22
cmp dword [0x52139c], 0
jne 0x4225a0
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0x444], 0x52139c
jmp 0x4225aa
mov dword [ebp - 0x444], 0x52139c
push 0x40bbac
push 0
push 3
mov eax, dword [ebp - 0x444]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x444]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
push eax
call dword [ecx + 0x404]
push eax
lea eax, [ebp - 0x19c]
push eax
call fcn.0040470c
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00404700
add esp, 0x10
push eax
call fcn.00404706
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.0040470c
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x1bc], 1
mov dword [ebp - 0x1c4], 2
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x1c4]
push eax
mov eax, dword [ebp - 0x2b4]
mov eax, dword [eax]
push dword [ebp - 0x2b4]
call dword [eax + 0x24]
fnclex
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0
jge 0x422666
push 0x24
push 0x40bbac
push dword [ebp - 0x2b4]
push dword [ebp - 0x2b8]
call fcn.004048c2
mov dword [ebp - 0x448], eax
jmp 0x42266d
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x2bc], eax
push 0x40bb9c
push dword [0x5211b4]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x194]
call fcn.004048b6
push eax
mov eax, dword [ebp - 0x2bc]
mov eax, dword [eax]
push dword [ebp - 0x2bc]
call dword [eax + 0x80]
fnclex
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0
jge 0x4226df
push 0x80
push 0x40bbbc
push dword [ebp - 0x2bc]
push dword [ebp - 0x2c0]
call fcn.004048c2
mov dword [ebp - 0x44c], eax
jmp 0x4226e6
and dword [ebp - 0x44c], 0
lea ecx, [ebp - 0x194]
call fcn.00404868
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x19c]
push eax
push 3
call fcn.004046fa
add esp, 0x10
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 4], 0x23
lea eax, [ebp - 0x11c]
push eax
call fcn.0040484a
mov word [ebp - 0x3c8], ax
mov word [ebp - 0x3c4], 1
and word [ebp - 0xbc], 0
jmp 0x422770
mov ax, word [ebp - 0xbc]
add ax, word [ebp - 0x3c4]
jo 0x42dbfb
mov word [ebp - 0xbc], ax
mov ax, word [ebp - 0xbc]
cmp ax, word [ebp - 0x3c8]
jg 0x42d796
mov dword [ebp - 4], 0x24
and dword [ebp - 0xe4], 0
mov dword [ebp - 4], 0x25
cmp word [0x521220], 0x1e
jl 0x4227ae
movsx eax, word [ebp - 0xbc]
test eax, eax
jne 0x4227d1
mov dword [ebp - 4], 0x26
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xbc]
push eax
call 0x41e85c
jmp 0x422a21
mov dword [ebp - 4], 0x28
cmp dword [0x521310], 0
je 0x4229be
mov dword [ebp - 4], 0x29
movsx eax, word [ebp - 0xbc]
push eax
push dword [0x521314]
call fcn.00404832
mov edx, dword [eax]
lea ecx, [ebp - 0x70]
call fcn.004048b0
mov dword [ebp - 4], 0x2a
push 1
push dword [ebp - 0x70]
push 0x40bbd0
push 0
call fcn.004047ea
push eax
call fcn.004046f4
mov edx, eax
lea ecx, [ebp - 0x150]
call fcn.004048b6
mov dword [ebp - 4], 0x2b
mov edx, dword [ebp - 0x70]
lea ecx, [ebp - 0xa8]
call fcn.004048b0
mov dword [ebp - 4], 0x2c
push dword [ebp - 0x150]
call fcn.00404802
fcomp qword [0x401350]
fnstsw ax
sahf
je 0x42299a
mov dword [ebp - 4], 0x2d
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 0x4008
push dword [ebp - 0x150]
call fcn.00404802
fsub qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004047c0
mov dword [ebp - 0x25c], 0x40bbd8
mov dword [ebp - 0x264], 8
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x274], 0x4008
push dword [ebp - 0xa8]
call fcn.004d8bec
mov dword [ebp - 0x450], eax
fild dword [ebp - 0x450]
fstp qword [ebp - 0x458]
push dword [ebp - 0x150]
call fcn.00404802
fsubr qword [ebp - 0x458]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040487a
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1e4]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x70]
call fcn.004048b6
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 4
call fcn.00404898
add esp, 0x14
mov dword [ebp - 4], 0x2f
movsx eax, word [ebp - 0xbc]
push eax
push dword [0x521318]
call fcn.00404832
mov eax, dword [eax]
mov dword [ebp - 0xe4], eax
jmp 0x422a04
mov dword [ebp - 4], 0x31
movsx eax, word [ebp - 0xbc]
push eax
push dword [0x521228]
call fcn.00404832
mov edx, dword [eax]
lea ecx, [ebp - 0x70]
call fcn.004048b0
mov dword [ebp - 4], 0x32
movsx eax, word [ebp - 0xbc]
push eax
push dword [0x52122c]
call fcn.00404832
mov eax, dword [eax]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 4], 0x34
push dword [ebp - 0x70]
push 0x40a6cc
call fcn.004048ce
test eax, eax
jne 0x422a21
jmp 0x42d796
mov dword [ebp - 4], 0x38
push dword [0x5210b0]
push 1
call fcn.00404838
cmp dword [ebp - 0xe4], eax
jl 0x422a42
jmp 0x42d32b
mov dword [ebp - 4], 0x3b
cmp word [0x521220], 0x1e
jl 0x422cfd
mov dword [ebp - 4], 0x3c
cmp word [ebp - 0xbc], 0
jle 0x422b23
mov dword [ebp - 4], 0x3d
movsx eax, word [ebp - 0xbc]
push eax
push dword [0x52131c]
call fcn.00404832
push dword [eax]
push 0x40bb60
call fcn.004048ce
test eax, eax
jne 0x422b23
mov dword [ebp - 4], 0x3e
mov edx, 0x40a6cc
lea ecx, [ebp - 0x194]
call fcn.004048b0
lea eax, [ebp - 0x194]
push eax
call fcn.0042e17b
lea ecx, [ebp - 0x194]
call fcn.00404868
mov dword [ebp - 4], 0x3f
push 2
call fcn.004046ee
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 3
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0xe0]
call fcn.004048d4
mov dword [ebp - 4], 0x40
mov edx, dword [ebp - 0x70]
lea ecx, [ebp - 0x194]
call fcn.004048b0
lea eax, [ebp - 0x194]
push eax
call fcn.0042e17b
lea ecx, [ebp - 0x194]
call fcn.00404868
mov dword [ebp - 4], 0x43
cmp word [ebp - 0xbc], 0
jle 0x422cf8
mov dword [ebp - 4], 0x44
mov edx, 0x40a6cc
lea ecx, [ebp - 0x194]
call fcn.004048b0
lea eax, [ebp - 0x194]
push eax
call fcn.0042e17b
lea ecx, [ebp - 0x194]
call fcn.00404868
mov dword [ebp - 4], 0x45
push 2
call fcn.004046ee
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 3
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0xe0]
call fcn.004048d4
mov dword [ebp - 4], 0x46
movsx eax, word [ebp - 0xbc]
push eax
push dword [0x52131c]
call fcn.00404832
push dword [eax]
push 0x40bb68
call fcn.004048ce
test eax, eax
jne 0x422c96
mov dword [ebp - 4], 0x47
movsx eax, word [ebp - 0xbc]
push eax
push dword [0x521320]
call fcn.00404832
push dword [eax]
push 0x40bbe8
call fcn.004048ce
test eax, eax
je 0x422c5c
mov dword [ebp - 4], 0x48
movsx eax, word [ebp - 0xbc]
push eax
push dword [0x521320]
call fcn.00404832
push dword [eax]
push 0x40bbfc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x194]
call fcn.004048b6
push eax
push dword [ebp - 0x70]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x198]
call fcn.004048b6
lea eax, [ebp - 0x198]
push eax
call fcn.0042e17b
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x194]
push eax
push 2
call fcn.0040489e
add esp, 0xc
jmp 0x422c94
mov dword [ebp - 4], 0x4a
push 0x40bbfc
push dword [ebp - 0x70]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x194]
call fcn.004048b6
lea eax, [ebp - 0x194]
push eax
call fcn.0042e17b
lea ecx, [ebp - 0x194]
call fcn.00404868
jmp 0x422cf8
mov dword [ebp - 4], 0x4c
movsx eax, word [ebp - 0xbc]
push eax
push dword [0x52131c]
call fcn.00404832
push dword [eax]
push 0x40bb28
call fcn.004048ce
test eax, eax
jne 0x422cf8
mov dword [ebp - 4], 0x4d
push 0x40bc14
push dword [ebp - 0x70]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x194]
call fcn.004048b6
lea eax, [ebp - 0x194]
push eax
call fcn.0042e17b
lea ecx, [ebp - 0x194]
call fcn.00404868
jmp 0x422da7
mov dword [ebp - 4], 0x50
cmp word [ebp - 0xbc], 0
jle 0x422da7
mov dword [ebp - 4], 0x51
mov edx, 0x40a6cc
lea ecx, [ebp - 0x194]
call fcn.004048b0
lea eax, [ebp - 0x194]
push eax
call fcn.0042e17b
lea ecx, [ebp - 0x194]
call fcn.00404868
mov dword [ebp - 4], 0x52
push 2
call fcn.004046ee
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 3
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0xe0]
call fcn.004048d4
mov dword [ebp - 4], 0x53
push 0x40bc14
push dword [ebp - 0x70]
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x194]
call fcn.004048b6
lea eax, [ebp - 0x194]
push eax
call fcn.0042e17b
lea ecx, [ebp - 0x194]
call fcn.00404868
mov dword [ebp - 4], 0x55
fild dword [ebp - 0xe4]
fstp qword [0x5210bc]
mov dword [ebp - 4], 0x56
push dword [0x5210b0]
push 1
call fcn.00404838
mov dword [ebp - 0x45c], eax
fild dword [ebp - 0x45c]
fstp qword [ebp - 0x464]
fld qword [0x5210bc]
fcomp qword [ebp - 0x464]
fnstsw ax
sahf
jb 0x422df6
jmp 0x42d32b
mov dword [ebp - 4], 0x59
push dword [0x5210b0]
lea eax, [ebp - 0x190]
push eax
call fcn.0040482c
push 2
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
push dword [ebp - 0x190]
call fcn.00404832
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0040ad4c
call fcn.00404826
lea eax, [ebp - 0x190]
push eax
call fcn.00404820
mov dword [ebp - 4], 0x5a
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x42dbf6
mov dword [ebp - 4], 0x5b
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 3
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x18c]
call fcn.004048d4
mov dword [ebp - 4], 0x5c
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 3
mov dword [ebp - 0x25c], 2
mov dword [ebp - 0x264], 2
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.004047d2
push eax
call fcn.004047d8
fstp qword [0x5210bc]
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 4], 0x5d
mov dword [ebp - 0x24c], 3
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.004046e8
movsx eax, ax
test eax, eax
je 0x422ff1
mov dword [ebp - 4], 0x5e
push 0xffffffffffffffff
call fcn.00404754
mov dword [ebp - 4], 0x5f
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx si, byte [eax]
fld qword [0x5210bc]
fadd qword [0x401358]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x100
jo 0x42dbfb
add si, ax
jo 0x42dbfb
mov word [ebp - 0x14c], si
mov dword [ebp - 4], 0x60
push 1
call fcn.00404754
mov dword [ebp - 4], 0x62
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x42dbf6
mov dword [ebp - 4], 0x63
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 3
mov dword [ebp - 0x25c], 4
mov dword [ebp - 0x264], 2
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.004047d2
push eax
call fcn.004047d8
fstp qword [0x5210bc]
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 4], 0x64
push dword [0x5210b0]
push 1
call fcn.00404838
mov dword [ebp - 0x468], eax
fild dword [ebp - 0x468]
fstp qword [ebp - 0x470]
fld qword [0x5210bc]
fcomp qword [ebp - 0x470]
fnstsw ax
sahf
ja 0x4230d9
cmp word [ebp - 0x14c], 0x2710
jle 0x4230e3
jmp 0x42d78a
mov dword [ebp - 4], 0x68
push 1
call fcn.00404754
mov dword [ebp - 4], 0x69
push 1
push 0x10000
push 1
push 0x5210e4
push 8
call fcn.004047ae
add esp, 0x14
mov dword [ebp - 4], 0x6a
cmp word [ebp - 0x14c], 0
jle 0x4237b2
mov dword [ebp - 4], 0x6b
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x254], 2
mov ax, word [ebp - 0x14c]
mov word [ebp - 0x25c], ax
mov dword [ebp - 0x264], 2
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0x274], 2
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404736
mov dword [ebp - 0x428], eax
jmp 0x4237a5
mov dword [ebp - 4], 0x6c
mov edx, 0x40a6cc
lea ecx, [ebp - 0x68]
call fcn.004048b0
mov dword [ebp - 4], 0x6d
and dword [ebp - 0x158], 0
mov dword [ebp - 4], 0x6e
cmp word [0x521220], 0x1e
jl 0x423406
mov dword [ebp - 4], 0x6f
fld qword [0x5210bc]
fadd qword [0x401358]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x10
jo 0x42dbfb
movsx eax, ax
mov dword [ebp - 0x144], eax
mov dword [ebp - 4], 0x70
mov eax, dword [ebp - 0x144]
imul eax, eax, 0x10
jo 0x42dbfb
mov dword [ebp - 0x144], eax
mov dword [ebp - 4], 0x71
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx eax, byte [eax]
add eax, dword [ebp - 0x144]
jo 0x42dbfb
mov dword [ebp - 0x158], eax
mov dword [ebp - 4], 0x72
cmp dword [ebp - 0x158], 0x80
jg 0x4233cd
mov dword [ebp - 4], 0x73
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x42dbf6
mov dword [ebp - 4], 0x74
mov ecx, dword [ebp - 0x158]
call fcn.0040479c
mov word [ebp - 0x3d0], ax
mov word [ebp - 0x3cc], 1
mov word [ebp - 0xfc], 1
jmp 0x423300
mov ax, word [ebp - 0xfc]
add ax, word [ebp - 0x3cc]
jo 0x42dbfb
mov word [ebp - 0xfc], ax
mov ax, word [ebp - 0xfc]
cmp ax, word [ebp - 0x3d0]
jg 0x4233cb
mov dword [ebp - 4], 0x75
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 8
movsx eax, word [ebp - 0xfc]
mov dword [ebp - 0x474], eax
fild dword [ebp - 0x474]
fstp qword [ebp - 0x47c]
fld qword [0x5210bc]
fadd qword [ebp - 0x47c]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov al, byte [eax]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00404760
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x68]
call fcn.004048b6
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 4], 0x76
jmp 0x4232e5
jmp 0x4233d2
jmp 0x4237b2
mov dword [ebp - 4], 0x7a
fild dword [ebp - 0x158]
fstp qword [ebp - 0x484]
fld qword [0x5210bc]
fadd qword [ebp - 0x484]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x42dbf6
jmp 0x423533
mov dword [ebp - 4], 0x7c
mov word [ebp - 0x3d8], 0xa
mov word [ebp - 0x3d4], 1
mov word [ebp - 0xfc], 1
jmp 0x423445
mov ax, word [ebp - 0xfc]
add ax, word [ebp - 0x3d4]
jo 0x42dbfb
mov word [ebp - 0xfc], ax
mov ax, word [ebp - 0xfc]
cmp ax, word [ebp - 0x3d8]
jg 0x423510
mov dword [ebp - 4], 0x7d
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 8
movsx eax, word [ebp - 0xfc]
mov dword [ebp - 0x488], eax
fild dword [ebp - 0x488]
fstp qword [ebp - 0x490]
fld qword [0x5210bc]
fadd qword [ebp - 0x490]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov al, byte [eax]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00404760
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x68]
call fcn.004048b6
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 4], 0x7e
jmp 0x42342a
mov dword [ebp - 4], 0x7f
fld qword [0x5210bc]
fadd qword [0x401390]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x42dbf6
mov dword [ebp - 4], 0x81
lea eax, [ebp - 0x68]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 0x4008
push 0
push 0x40
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.0040475a
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x68]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
mov dword [ebp - 4], 0x82
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 8
push 0
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048bc
and dword [ebp - 0x25c], 0
mov dword [ebp - 0x264], 0x8002
push 1
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 0
lea eax, [ebp - 0x1c4]
push eax
call fcn.004047de
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047e4
mov word [ebp - 0x2b4], ax
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [ebp - 0x2b4]
test eax, eax
je 0x42371d
mov dword [ebp - 4], 0x83
lea eax, [ebp - 0x30]
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x284], 0x400c
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 8
push 0
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048bc
mov dword [ebp - 0x25c], 1
mov dword [ebp - 0x264], 2
lea eax, [ebp - 0x68]
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x274], 0x4008
push 1
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 0
lea eax, [ebp - 0x1c4]
push eax
call fcn.004047de
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040474e
push eax
call fcn.00404772
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x1e4]
push eax
call fcn.004047c0
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x284]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x1e4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
call fcn.004047a8
add esp, 0x28
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x423781
mov dword [ebp - 4], 0x85
lea eax, [ebp - 0x30]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 0x400c
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x264], 8
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x254]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x264]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push 0x5210e4
call fcn.004047a8
add esp, 0x28
mov dword [ebp - 4], 0x87
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040471e
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 0
jne 0x4231a3
mov dword [ebp - 4], 0x89
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x254], 0x8002
push 0x5211c8
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x423810
mov dword [ebp - 4], 0x8a
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x254], 2
lea edx, [ebp - 0x254]
mov ecx, 0x5211c8
call fcn.004048d4
mov dword [ebp - 4], 0x8c
mov eax, dword [ebp - 0xe4]
add eax, 2
jo 0x42dbfb
mov dword [ebp - 0x494], eax
fild dword [ebp - 0x494]
fstp qword [0x5210bc]
mov dword [ebp - 4], 0x8d
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x254], 0x8002
mov dword [ebp - 0x25c], 7
mov dword [ebp - 0x264], 0x8002
push 0x5211c8
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040488c
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x423944
mov dword [ebp - 4], 0x8e
push 0
push 0
push 1
push 0x11
lea eax, [ebp - 0x154]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
mov dword [ebp - 4], 0x8f
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov esi, eax
push 0
push dword [ebp - 0x154]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
mov dword [ebp - 4], 0x90
fld qword [0x5210bc]
fadd qword [0x401370]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x42dbf6
jmp 0x423a0e
mov dword [ebp - 4], 0x92
push 0
push 1
push 1
push 0x11
lea eax, [ebp - 0x154]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
mov dword [ebp - 4], 0x93
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov esi, eax
push 0
push dword [ebp - 0x154]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
mov dword [ebp - 4], 0x94
fld qword [0x5210bc]
fadd qword [0x401358]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov esi, eax
push 1
push dword [ebp - 0x154]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
mov dword [ebp - 4], 0x95
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x42dbf6
mov dword [ebp - 4], 0x97
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x254], 0x8002
mov dword [ebp - 0x25c], 7
mov dword [ebp - 0x264], 0x8002
push 0x5211c8
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040488c
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x423a98
mov dword [ebp - 4], 0x98
and dword [ebp - 0xf8], 0
jmp 0x423adf
mov dword [ebp - 4], 0x9a
push 1
push dword [ebp - 0x154]
call fcn.00404832
movzx ax, byte [eax]
imul ax, ax, 0x10
jo 0x42dbfb
movsx eax, ax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 4], 0x9b
mov eax, dword [ebp - 0xf8]
imul eax, eax, 0x10
jo 0x42dbfb
mov dword [ebp - 0xf8], eax
mov dword [ebp - 4], 0x9d
cmp dword [ebp - 0xf8], 0x1000
jge 0x423b38
mov dword [ebp - 4], 0x9e
push 0
push dword [ebp - 0x154]
call fcn.00404832
movzx eax, byte [eax]
add eax, dword [ebp - 0xf8]
jo 0x42dbfb
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 3
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x178]
call fcn.004048d4
jmp 0x423b6f
mov dword [ebp - 4], 0xa0
push 0
push dword [ebp - 0x154]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x24c], al
mov dword [ebp - 0x254], 0x11
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x178]
call fcn.004048d4
mov dword [ebp - 4], 0xa2
mov dword [ebp - 0x1fc], 2
mov dword [ebp - 0x204], 2
and dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1f4], 2
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x254], 0x8002
mov dword [ebp - 0x25c], 7
mov dword [ebp - 0x264], 0x8002
push 0x5211c8
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040488c
mov edx, eax
lea ecx, [ebp - 0x1e4]
call fcn.004048d4
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.004047a2
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.0040474e
push eax
call fcn.0040484a
mov word [ebp - 0x17c], ax
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x1e4]
push eax
push 4
call fcn.00404898
add esp, 0x14
mov dword [ebp - 4], 0xa3
cmp word [ebp - 0x17c], 0
jg 0x423c92
jmp 0x42d78a
mov dword [ebp - 4], 0xa6
push 1
movsx eax, word [ebp - 0x17c]
push eax
push 1
push 0x11
push 0x5210d8
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
mov dword [ebp - 4], 0xa7
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x254], 0x8002
mov dword [ebp - 0x25c], 7
mov dword [ebp - 0x264], 0x8002
push 0x5211c8
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040488c
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x423d5f
mov dword [ebp - 4], 0xa8
mov eax, dword [ebp - 0xe4]
add eax, 3
jo 0x42dbfb
mov dword [ebp - 0x498], eax
fild dword [ebp - 0x498]
fstp qword [0x5210bc]
jmp 0x423d87
mov dword [ebp - 4], 0xaa
mov eax, dword [ebp - 0xe4]
add eax, 4
jo 0x42dbfb
mov dword [ebp - 0x49c], eax
fild dword [ebp - 0x49c]
fstp qword [0x5210bc]
mov dword [ebp - 4], 0xac
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x254], 2
mov ax, word [ebp - 0x17c]
mov word [ebp - 0x25c], ax
mov dword [ebp - 0x264], 2
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0x274], 2
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404736
mov dword [ebp - 0x42c], eax
jmp 0x423e95
mov dword [ebp - 4], 0xad
fld qword [0x5210bc]
fstp qword [ebp - 0x24c]
mov dword [ebp - 0x254], 5
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004047d2
push eax
call fcn.00404772
push eax
push dword [0x5210b0]
call fcn.00404832
mov esi, eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [0x5210d8]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
lea ecx, [ebp - 0x1b4]
call fcn.00404844
mov dword [ebp - 4], 0xae
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040471e
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0
jne 0x423e05
mov dword [ebp - 4], 0xaf
movsx eax, word [ebp - 0x17c]
mov dword [ebp - 0x4a0], eax
fild dword [ebp - 0x4a0]
fstp qword [ebp - 0x4a8]
fld qword [0x5210bc]
fadd qword [ebp - 0x4a8]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x42dbf6
mov dword [ebp - 4], 0xb0
push 0
push 0x78
push 1
push 8
push 0x5210c8
push 4
push 0x180
call fcn.00404862
add esp, 0x1c
mov dword [ebp - 4], 0xb1
push 0
push 0x78
push 1
push 8
push 0x5210d0
push 4
push 0x180
call fcn.00404862
add esp, 0x1c
mov dword [ebp - 4], 0xb2
push 1
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x24c], al
mov dword [ebp - 0x254], 0x11
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x94]
call fcn.004048d4
mov dword [ebp - 4], 0xb3
mov word [ebp - 0x120], 1
mov dword [ebp - 4], 0xb4
push dword [0x5210b0]
push 1
call fcn.00404838
mov dword [ebp - 0x4ac], eax
fild dword [ebp - 0x4ac]
fstp qword [ebp - 0x4b4]
fld qword [0x5210bc]
fdiv qword [ebp - 0x4b4]
fmul qword [0x402300]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.004046e2
mov dword [ebp - 0x168], eax
mov dword [ebp - 4], 0xb5
fild dword [ebp - 0x168]
fstp dword [ebp - 0x24c]
mov dword [ebp - 0x254], 4
cmp dword [0x52139c], 0
jne 0x423ff9
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0x4b8], 0x52139c
jmp 0x424003
mov dword [ebp - 0x4b8], 0x52139c
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x254]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 5
mov eax, dword [ebp - 0x4b8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b8]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
push eax
call dword [ecx + 0x400]
push eax
lea eax, [ebp - 0x19c]
push eax
call fcn.0040470c
push eax
call fcn.004046dc
lea ecx, [ebp - 0x19c]
call fcn.004046d6
mov dword [ebp - 4], 0xb6
cmp dword [0x52139c], 0
jne 0x42407b
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0x4bc], 0x52139c
jmp 0x424085
mov dword [ebp - 0x4bc], 0x52139c
mov eax, dword [ebp - 0x4bc]
mov eax, dword [eax]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x2b4]
mov eax, dword [eax]
push dword [ebp - 0x2b4]
call dword [eax + 0x2a0]
fnclex
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0
jge 0x4240db
push 0x2a0
push 0x40aeb8
push dword [ebp - 0x2b4]
push dword [ebp - 0x2b8]
call fcn.004048c2
mov dword [ebp - 0x4c0], eax
jmp 0x4240e2
and dword [ebp - 0x4c0], 0
mov dword [ebp - 4], 0xb7
and word [0x52121a], 0
mov dword [ebp - 4], 0xb8
mov dword [ebp - 0x24c], 0x55
mov dword [ebp - 0x254], 0x8002
and dword [ebp - 0x25c], 0
mov dword [ebp - 0x264], 0x8002
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.00404808
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x42cfb4
mov dword [ebp - 4], 0xb9
mov word [0x5210dc], 1
mov dword [ebp - 4], 0xba
mov edx, 0x40a6cc
lea ecx, [ebp - 0xd0]
call fcn.004048b0
mov dword [ebp - 4], 0xbb
push 1
call fcn.00404754
mov dword [ebp - 4], 0xbc
lea eax, [ebp - 0x94]
push eax
call fcn.00404772
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x100
jae 0x4241d3
and dword [ebp - 0x4c4], 0
jmp 0x4241de
call fcn.004046d0
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x2b4]
shl eax, 4
mov edx, dword [0x521198]
add edx, eax
lea ecx, [ebp - 0x310]
call fcn.00404766
mov dword [ebp - 4], 0xbd
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x42426b
mov dword [ebp - 4], 0xbe
lea eax, [ebp - 0x1b4]
push eax
call fcn.00432915
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xbf
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x4242ce
mov dword [ebp - 0x25c], 3
mov dword [ebp - 0x264], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x42430a
mov dword [ebp - 4], 0xc0
lea eax, [ebp - 0x1b4]
push eax
call fcn.00452525
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xc1
mov dword [ebp - 0x24c], 4
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424432
mov dword [ebp - 4], 0xc2
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x254], 0x8002
mov dword [ebp - 0x25c], 7
mov dword [ebp - 0x264], 0x8002
push 0x5211c8
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040488c
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x4243f6
mov dword [ebp - 4], 0xc3
lea eax, [ebp - 0x1b4]
push eax
call fcn.004c3692
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42442d
mov dword [ebp - 4], 0xc5
lea eax, [ebp - 0x1b4]
push eax
call fcn.00452ede
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xc7
mov dword [ebp - 0x24c], 5
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4244a3
mov dword [ebp - 4], pe_nt_image_headers32
lea eax, [ebp - 0x1b4]
push eax
call fcn.004bb93f
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xc9
mov dword [ebp - 0x24c], 6
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424514
mov dword [ebp - 4], 0xca
lea eax, [ebp - 0x1b4]
push eax
call fcn.00458f79
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xcb
mov dword [ebp - 0x24c], 7
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424565
mov dword [ebp - 4], 0xcc
mov edx, 0x40bc30
lea ecx, [ebp - 0xd0]
call fcn.004048b0
jmp 0x42c3bd
mov dword [ebp - 4], 0xcd
mov dword [ebp - 0x24c], 8
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4245d6
mov dword [ebp - 4], 0xce
lea eax, [ebp - 0x1b4]
push eax
call fcn.0045b2b9
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xcf
mov dword [ebp - 0x24c], 9
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424647
mov dword [ebp - 4], 0xd0
lea eax, [ebp - 0x1b4]
push eax
call fcn.0045b75b
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xd1
mov dword [ebp - 0x24c], 0xa
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4246b8
mov dword [ebp - 4], 0xd2
lea eax, [ebp - 0x1b4]
push eax
call fcn.0045f73e
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xd3
mov dword [ebp - 0x24c], 0xb
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424709
mov dword [ebp - 4], 0xd4
mov edx, 0x40bc44
lea ecx, [ebp - 0xd0]
call fcn.004048b0
jmp 0x42c3bd
mov dword [ebp - 4], 0xd5
mov dword [ebp - 0x24c], 0xc
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424843
mov dword [ebp - 4], 0xd6
mov word [0x521218], 3
mov dword [ebp - 4], 0xd7
and dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1c4], 2
mov ax, word [0x52121a]
sub ax, word [0x521218]
jo 0x42dbfb
mov word [ebp - 0x1ac], ax
mov dword [ebp - 0x1b4], 2
xor eax, eax
cmp word [0x52121a], 0
setg al
neg eax
mov word [ebp - 0x24c], ax
mov dword [ebp - 0x254], 0xb
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.004047a2
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040484a
mov word [0x52121a], ax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x254]
push eax
push 4
call fcn.00404898
add esp, 0x14
mov dword [ebp - 4], 0xd8
lea eax, [ebp - 0x1b4]
push eax
call fcn.0045fc07
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xd9
mov dword [ebp - 0x24c], 0xd
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4248b4
mov dword [ebp - 4], 0xda
lea eax, [ebp - 0x1b4]
push eax
call fcn.0045fd68
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xdb
mov dword [ebp - 0x24c], 0xe
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424925
mov dword [ebp - 4], 0xdc
lea eax, [ebp - 0x1b4]
push eax
call fcn.00462595
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xdd
mov dword [ebp - 0x24c], 0xf
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424996
mov dword [ebp - 4], 0xde
lea eax, [ebp - 0x1b4]
push eax
call fcn.00463194
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xdf
mov dword [ebp - 0x24c], 0x10
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4249e7
mov dword [ebp - 4], 0xe0
mov edx, 0x40bc58
lea ecx, [ebp - 0xd0]
call fcn.004048b0
jmp 0x42c3bd
mov dword [ebp - 4], 0xe1
mov dword [ebp - 0x24c], 0x11
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424a58
mov dword [ebp - 4], 0xe2
lea eax, [ebp - 0x1b4]
push eax
call fcn.00464255
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xe3
mov dword [ebp - 0x24c], 0x12
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424ac9
mov dword [ebp - 4], 0xe4
lea eax, [ebp - 0x1b4]
push eax
call fcn.00466418
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xe5
mov dword [ebp - 0x24c], 0x13
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424b3a
mov dword [ebp - 4], 0xe6
lea eax, [ebp - 0x1b4]
push eax
call fcn.0046686e
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xe7
mov dword [ebp - 0x24c], 0x14
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424bab
mov dword [ebp - 4], 0xe8
lea eax, [ebp - 0x1b4]
push eax
call fcn.00470d2e
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xe9
mov dword [ebp - 0x24c], 0x15
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424c1c
mov dword [ebp - 4], 0xea
lea eax, [ebp - 0x1b4]
push eax
call fcn.0046aacb
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xeb
mov dword [ebp - 0x24c], 0x16
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424c8d
mov dword [ebp - 4], 0xec
lea eax, [ebp - 0x1b4]
push eax
call fcn.00471cf7
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xed
mov dword [ebp - 0x24c], 0x17
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424cfe
mov dword [ebp - 4], 0xee
lea eax, [ebp - 0x1b4]
push eax
call fcn.004722c3
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xef
mov dword [ebp - 0x24c], 0x18
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424f1a
mov dword [ebp - 4], 0xf0
lea eax, [ebp - 0x1b4]
push eax
call fcn.00476318
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
mov dword [ebp - 4], 0xf1
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 0x4008
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00404880
mov dword [ebp - 0x25c], 0x40bc70
mov dword [ebp - 0x264], 0x8008
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x274], 0x4008
push 8
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.004047c0
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1e4]
push eax
call fcn.00404880
mov dword [ebp - 0x27c], 0x40bc84
mov dword [ebp - 0x284], 0x8008
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x294], 0x4008
push 9
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.004047c0
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.00404880
mov dword [ebp - 0x29c], 0x40bc9c
mov dword [ebp - 0x2a4], 0x8008
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x1f4]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x204]
push eax
call fcn.0040488c
push eax
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.0040488c
push eax
call fcn.00404892
mov word [ebp - 0x2b4], ax
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 5
call fcn.00404898
add esp, 0x18
movsx eax, word [ebp - 0x2b4]
test eax, eax
je 0x424f15
mov dword [ebp - 4], 0xf2
mov word [0x521218], 3
jmp 0x42c3bd
mov dword [ebp - 4], 0xf4
mov dword [ebp - 0x24c], 0x19
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424f8b
mov dword [ebp - 4], 0xf5
lea eax, [ebp - 0x1b4]
push eax
call fcn.0045fd68
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xf6
mov dword [ebp - 0x24c], 0x1a
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x424ffc
mov dword [ebp - 4], 0xf7
lea eax, [ebp - 0x1b4]
push eax
call fcn.00477472
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0xf8
mov dword [ebp - 0x24c], 0x1b
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425116
mov dword [ebp - 4], 0xf9
mov word [0x521218], 3
mov dword [ebp - 4], 0xfa
and dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1c4], 2
mov ax, word [0x52121a]
sub ax, word [0x521218]
jo 0x42dbfb
mov word [ebp - 0x1ac], ax
mov dword [ebp - 0x1b4], 2
xor eax, eax
cmp word [0x52121a], 0
setg al
neg eax
mov word [ebp - 0x24c], ax
mov dword [ebp - 0x254], 0xb
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.004047a2
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040484a
mov word [0x52121a], ax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x254]
push eax
push 4
call fcn.00404898
add esp, 0x14
mov dword [ebp - 4], 0xfb
mov edx, 0x40bcb4
lea ecx, [ebp - 0xd0]
call fcn.004048b0
jmp 0x42c3bd
mov dword [ebp - 4], 0xfc
mov dword [ebp - 0x24c], 0x1c
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4251c5
mov dword [ebp - 4], 0xfd
and dword [ebp - 0x2b0], 0
mov ax, word [0x52121a]
sub ax, 3
jo 0x42dbfb
movsx eax, ax
mov dword [ebp - 0x2ac], eax
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004c605b
lea eax, [ebp - 0x1b4]
push eax
call fcn.0040484a
mov word [0x52121a], ax
lea ecx, [ebp - 0x1b4]
call fcn.00404844
mov dword [ebp - 4], 0xfe
mov edx, 0x40bcc4
lea ecx, [ebp - 0xd0]
call fcn.004048b0
jmp 0x42c3bd
mov dword [ebp - 4], 0xff
mov dword [ebp - 0x24c], 0x1d
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425274
mov dword [ebp - 4], 0x100
and dword [ebp - 0x2b0], 0
mov ax, word [0x52121a]
sub ax, 3
jo 0x42dbfb
movsx eax, ax
mov dword [ebp - 0x2ac], eax
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004c605b
lea eax, [ebp - 0x1b4]
push eax
call fcn.0040484a
mov word [0x52121a], ax
lea ecx, [ebp - 0x1b4]
call fcn.00404844
mov dword [ebp - 4], 0x101
mov edx, 0x40bcd8
lea ecx, [ebp - 0xd0]
call fcn.004048b0
jmp 0x42c3bd
mov dword [ebp - 4], 0x102
mov dword [ebp - 0x24c], 0x1e
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x4252d7
mov dword [ebp - 0x25c], 0xb8
mov dword [ebp - 0x264], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425351
mov dword [ebp - 4], 0x103
and dword [ebp - 0x2b0], 0
mov ax, word [0x52121a]
sub ax, 3
jo 0x42dbfb
movsx eax, ax
mov dword [ebp - 0x2ac], eax
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004c605b
lea eax, [ebp - 0x1b4]
push eax
call fcn.0040484a
mov word [0x52121a], ax
lea ecx, [ebp - 0x1b4]
call fcn.00404844
mov dword [ebp - 4], 0x104
mov edx, 0x40bce8
lea ecx, [ebp - 0xd0]
call fcn.004048b0
jmp 0x42c3bd
mov dword [ebp - 4], 0x105
mov dword [ebp - 0x24c], 0x1f
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4253e1
mov dword [ebp - 4], 0x106
lea eax, [ebp - 0x10c]
push eax
call fcn.0040484a
mov word [0x52121a], ax
mov dword [ebp - 4], 0x107
mov edx, 0x40bcf8
lea ecx, [ebp - 0xd0]
call fcn.004048b0
mov dword [ebp - 4], 0x108
and dword [ebp - 0x24c], 0
mov dword [ebp - 0x254], 0xb
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x40]
call fcn.004048d4
jmp 0x42c3bd
mov dword [ebp - 4], 0x109
mov dword [ebp - 0x24c], 0x20
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425452
mov dword [ebp - 4], 0x10a
lea eax, [ebp - 0x1b4]
push eax
call fcn.004775a3
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x10b
mov dword [ebp - 0x24c], 0x21
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4254a3
mov dword [ebp - 4], 0x10c
mov edx, 0x40bd0c
lea ecx, [ebp - 0xd0]
call fcn.004048b0
jmp 0x42c3bd
mov dword [ebp - 4], 0x10d
mov dword [ebp - 0x24c], 0x22
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425583
mov dword [ebp - 4], 0x10e
mov edx, 0x40bd1c
lea ecx, [ebp - 0xd0]
call fcn.004048b0
mov dword [ebp - 4], 0x10f
mov ax, word [0x5210dc]
add ax, 1
jo 0x42dbfb
mov word [0x5210dc], ax
mov dword [ebp - 4], 0x110
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 8
lea eax, [ebp - 0x1b4]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x42c3bd
mov dword [ebp - 4], 0x111
mov dword [ebp - 0x24c], 0x23
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4255f4
mov dword [ebp - 4], 0x112
lea eax, [ebp - 0x1b4]
push eax
call fcn.00479653
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x113
mov dword [ebp - 0x24c], 0x24
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425665
mov dword [ebp - 4], 0x114
lea eax, [ebp - 0x1b4]
push eax
call fcn.004c1c0b
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x115
mov dword [ebp - 0x24c], 0x25
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425791
mov dword [ebp - 4], 0x116
mov word [0x521218], 3
mov dword [ebp - 4], 0x117
push 0xffffffffffffffff
call fcn.00404754
mov dword [ebp - 4], 0x118
lea eax, [ebp - 0x1b4]
push eax
call fcn.0047a0b3
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
mov dword [ebp - 4], 0x119
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 0x4008
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004046ca
mov dword [ebp - 0x25c], 0x40bd2c
mov dword [ebp - 0x264], 0x8008
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.0040480e
mov word [ebp - 0x2b4], ax
lea ecx, [ebp - 0x1b4]
call fcn.00404844
movsx eax, word [ebp - 0x2b4]
test eax, eax
je 0x42577e
mov dword [ebp - 4], 0x11a
mov edx, 0x40bd38
lea ecx, [ebp - 0xd0]
call fcn.004048b0
mov dword [ebp - 4], 0x11c
push 0
call fcn.00404754
jmp 0x42c3bd
mov dword [ebp - 4], 0x11d
mov dword [ebp - 0x24c], 0x26
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425802
mov dword [ebp - 4], 0x11e
lea eax, [ebp - 0x1b4]
push eax
call fcn.0047abe4
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x11f
mov dword [ebp - 0x24c], 0x27
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425873
mov dword [ebp - 4], 0x120
lea eax, [ebp - 0x1b4]
push eax
call fcn.0047b4bf
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x121
mov dword [ebp - 0x24c], 0x28
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4258e4
mov dword [ebp - 4], 0x122
lea eax, [ebp - 0x1b4]
push eax
call fcn.0047b70f
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x123
mov dword [ebp - 0x24c], 0x29
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425955
mov dword [ebp - 4], 0x124
lea eax, [ebp - 0x1b4]
push eax
call fcn.0047b8d9
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x125
mov dword [ebp - 0x24c], 0x2a
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4259c6
mov dword [ebp - 4], 0x126
lea eax, [ebp - 0x1b4]
push eax
call fcn.0047bfd1
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x127
mov dword [ebp - 0x24c], 0x2b
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425a37
mov dword [ebp - 4], 0x128
lea eax, [ebp - 0x1b4]
push eax
call fcn.004722c3
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x129
mov dword [ebp - 0x24c], 0x2c
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425aa8
mov dword [ebp - 4], 0x12a
lea eax, [ebp - 0x1b4]
push eax
call fcn.0047d054
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x12b
mov dword [ebp - 0x24c], 0x2d
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425b19
mov dword [ebp - 4], 0x12c
lea eax, [ebp - 0x1b4]
push eax
call fcn.0047d2ca
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x12d
mov dword [ebp - 0x24c], 0x2e
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425b6a
mov dword [ebp - 4], 0x12e
mov edx, 0x40bd54
lea ecx, [ebp - 0xd0]
call fcn.004048b0
jmp 0x42c3bd
mov dword [ebp - 4], 0x12f
mov dword [ebp - 0x24c], 0x2f
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425bdb
mov dword [ebp - 4], 0x130
lea eax, [ebp - 0x1b4]
push eax
call fcn.0047db26
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x131
mov dword [ebp - 0x24c], 0x31
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425c4c
mov dword [ebp - 4], 0x132
lea eax, [ebp - 0x1b4]
push eax
call fcn.00483508
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x133
mov dword [ebp - 0x24c], 0x32
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425d66
mov dword [ebp - 4], 0x134
mov word [0x521218], 3
mov dword [ebp - 4], 0x135
and dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1c4], 2
mov ax, word [0x52121a]
sub ax, word [0x521218]
jo 0x42dbfb
mov word [ebp - 0x1ac], ax
mov dword [ebp - 0x1b4], 2
xor eax, eax
cmp word [0x52121a], 0
setg al
neg eax
mov word [ebp - 0x24c], ax
mov dword [ebp - 0x254], 0xb
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.004047a2
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040484a
mov word [0x52121a], ax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x254]
push eax
push 4
call fcn.00404898
add esp, 0x14
mov dword [ebp - 4], 0x136
mov edx, 0x40bd64
lea ecx, [ebp - 0xd0]
call fcn.004048b0
jmp 0x42c3bd
mov dword [ebp - 4], 0x137
mov dword [ebp - 0x24c], 0x33
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425dd7
mov dword [ebp - 4], 0x138
lea eax, [ebp - 0x1b4]
push eax
call fcn.00485261
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x139
mov dword [ebp - 0x24c], 0x34
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425e48
mov dword [ebp - 4], 0x13a
lea eax, [ebp - 0x1b4]
push eax
call fcn.0048545c
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x13b
mov dword [ebp - 0x24c], 0x35
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425eb9
mov dword [ebp - 4], 0x13c
lea eax, [ebp - 0x1b4]
push eax
call fcn.00485ccb
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x13d
mov dword [ebp - 0x24c], 0x37
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425f2a
mov dword [ebp - 4], 0x13e
lea eax, [ebp - 0x1b4]
push eax
call fcn.004861da
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x13f
mov dword [ebp - 0x24c], 0x38
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425f7b
mov dword [ebp - 4], 0x140
mov edx, 0x40bd7c
lea ecx, [ebp - 0xd0]
call fcn.004048b0
jmp 0x42c3bd
mov dword [ebp - 4], 0x141
mov dword [ebp - 0x24c], 0x39
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x425fec
mov dword [ebp - 4], 0x142
lea eax, [ebp - 0x1b4]
push eax
call fcn.0048663d
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x143
mov dword [ebp - 0x24c], 0x3a
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x42605d
mov dword [ebp - 4], 0x144
lea eax, [ebp - 0x1b4]
push eax
call fcn.004879e7
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x145
mov dword [ebp - 0x24c], 0x3b
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4260ce
mov dword [ebp - 4], 0x146
lea eax, [ebp - 0x1b4]
push eax
call fcn.00487bfc
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x147
mov dword [ebp - 0x24c], 0x3c
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x42613f
mov dword [ebp - 4], 0x148
lea eax, [ebp - 0x1b4]
push eax
call fcn.00487d1f
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x149
mov dword [ebp - 0x24c], 0x3d
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4261b0
mov dword [ebp - 4], 0x14a
lea eax, [ebp - 0x1b4]
push eax
call fcn.0048ca3e
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x14b
mov dword [ebp - 0x24c], 0x3e
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x426221
mov dword [ebp - 4], 0x14c
lea eax, [ebp - 0x1b4]
push eax
call fcn.0048cdc5
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x14d
mov dword [ebp - 0x24c], 0x3f
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x426292
mov dword [ebp - 4], 0x14e
lea eax, [ebp - 0x1b4]
push eax
call fcn.0048d386
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x14f
mov dword [ebp - 0x24c], 0x40
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x426303
mov dword [ebp - 4], 0x150
lea eax, [ebp - 0x1b4]
push eax
call fcn.0048f74c
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x151
mov dword [ebp - 0x24c], 0x41
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x426354
mov dword [ebp - 4], 0x152
mov edx, 0x40bd8c
lea ecx, [ebp - 0xd0]
call fcn.004048b0
jmp 0x42c3bd
mov dword [ebp - 4], 0x153
mov dword [ebp - 0x24c], 0x42
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4264b4
mov dword [ebp - 4], 0x154
lea eax, [ebp - 0x1b4]
push eax
call fcn.00490e00
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
mov dword [ebp - 4], 0x155
or dword [ebp - 0x24c], 0xffffffff
mov dword [ebp - 0x254], 0x800b
and dword [ebp - 0x25c], 0
mov dword [ebp - 0x264], 0x8002
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.004047f6
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.00404808
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x4264af
mov dword [ebp - 4], 0x156
lea eax, [ebp - 0xe0]
push eax
call fcn.004047d8
fstp qword [0x5210bc]
mov dword [ebp - 4], 0x157
push 0x40bbfc
push 2
push 0x40bda0
call fcn.004046c4
add esp, 0xc
mov dword [ebp - 4], 0x158
push 2
push 2
call fcn.0040483e
push eax
call fcn.004046be
mov dword [ebp - 4], 0x159
or dword [ebp - 0x24c], 0xffffffff
mov dword [ebp - 0x254], 2
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0xe0]
call fcn.004048d4
jmp 0x42c3bd
mov dword [ebp - 4], 0x15b
mov dword [ebp - 0x24c], 0x43
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x426525
mov dword [ebp - 4], 0x15c
lea eax, [ebp - 0x1b4]
push eax
call fcn.0049144b
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x15d
mov dword [ebp - 0x24c], 0x44
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x426596
mov dword [ebp - 4], 0x15e
lea eax, [ebp - 0x1b4]
push eax
call fcn.00491507
lea eax, [ebp - 0x1b4]
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea ecx, [ebp - 0x1b4]
call fcn.00404844
jmp 0x42c3bd
mov dword [ebp - 4], 0x15f
mov dword [ebp - 0x24c], 0x45
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x426607
mov dword [ebp - 4], 0x348
push dword [ebp - 0xd0]
call fcn.004d8bec
xor ecx, ecx
test eax, eax
setg cl
neg ecx
mov word [ebp - 0x24c], cx
mov dword [ebp - 0x254], 0xb
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.0040488c
push eax
call fcn.00404892
mov word [ebp - 0x2b4], ax
lea ecx, [ebp - 0x254]
call fcn.00404844
movsx eax, word [ebp - 0x2b4]
test eax, eax
je 0x42c53f
mov dword [ebp - 4], 0x349
mov dword [ebp - 0x24c], 0x40bffc
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x1b4]
call fcn.0040478a
lea eax, [ebp - 0x1b4]
push eax
movsx eax, word [0x52121a]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.004046ac
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x264], 0x4008
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.004046a6
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1e4]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xd0]
call fcn.004048b6
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 4
call fcn.00404898
add esp, 0x14
mov dword [ebp - 4], 0x34a
mov edx, dword [ebp - 0xd0]
lea ecx, [ebp - 0x194]
call fcn.004048b0
lea eax, [ebp - 0x194]
push eax
call fcn.0042e17b
lea ecx, [ebp - 0x194]
call fcn.00404868
mov dword [ebp - 4], 0x34b
and dword [ebp - 0x24c], 0
mov dword [ebp - 0x254], 0xb
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x40]
call fcn.004048d4
mov dword [ebp - 4], 0x34d
mov ax, word [0x52121a]
add ax, word [0x521218]
jo 0x42dbfb
mov word [0x52121a], ax
mov dword [ebp - 4], 0x34e
and word [0x521218], 0
mov dword [ebp - 4], 0x350
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x254], 0x8002
mov dword [ebp - 0x25c], 7
mov dword [ebp - 0x264], 0x8002
push 0x5211c8
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040488c
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x42c67a
mov dword [ebp - 4], 0x351
push 0
push 0
push 1
push 0x11
lea eax, [ebp - 0x154]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
mov dword [ebp - 4], 0x352
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov esi, eax
push 0
push dword [ebp - 0x154]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
mov dword [ebp - 4], 0x353
fld qword [0x5210bc]
fadd qword [0x401370]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x42dbf6
jmp 0x42c744
mov dword [ebp - 4], 0x355
push 0
push 1
push 1
push 0x11
lea eax, [ebp - 0x154]
push eax
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
mov dword [ebp - 4], 0x356
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov esi, eax
push 0
push dword [ebp - 0x154]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
mov dword [ebp - 4], 0x357
fld qword [0x5210bc]
fadd qword [0x401358]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
mov esi, eax
push 1
push dword [ebp - 0x154]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
mov dword [ebp - 4], 0x358
fld qword [0x5210bc]
fadd qword [0x401358]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x42dbf6
mov dword [ebp - 4], 0x35a
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x254], 0x8002
mov dword [ebp - 0x25c], 7
mov dword [ebp - 0x264], 0x8002
push 0x5211c8
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040488c
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x42c7ce
mov dword [ebp - 4], 0x35b
and dword [ebp - 0xf8], 0
jmp 0x42c80a
mov dword [ebp - 4], 0x35d
push 1
push dword [ebp - 0x154]
call fcn.00404832
movzx eax, byte [eax]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 4], 0x35e
mov eax, dword [ebp - 0xf8]
imul eax, eax, 0x100
jo 0x42dbfb
mov dword [ebp - 0xf8], eax
mov dword [ebp - 4], 0x360
push 0
push dword [ebp - 0x154]
call fcn.00404832
movzx eax, byte [eax]
add eax, dword [ebp - 0xf8]
jo 0x42dbfb
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 3
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x178]
call fcn.004048d4
mov dword [ebp - 4], 0x361
mov dword [ebp - 0x24c], 0x2328
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.004046e8
movsx eax, ax
test eax, eax
je 0x42c8ba
mov dword [ebp - 4], 0x362
push 0
push dword [ebp - 0x154]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x24c], al
mov dword [ebp - 0x254], 0x11
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x178]
call fcn.004048d4
mov dword [ebp - 4], 0x364
mov dword [ebp - 0x24c], 0x1000
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.004046e8
movsx eax, ax
test eax, eax
je 0x42cb7f
mov dword [ebp - 4], 0x365
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x254], 2
push dword [0x5210b0]
push 1
call fcn.00404838
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x264], 3
fld qword [0x5210bc]
fsub qword [0x401358]
fstp qword [ebp - 0x26c]
fnstsw ax
test al, 0xd
jne 0x42dbf6
mov dword [ebp - 0x274], 5
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404736
mov dword [ebp - 0x434], eax
jmp 0x42cb4f
mov dword [ebp - 4], 0x366
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [0x5210b0]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xfe
jne 0x42cb2b
mov dword [ebp - 4], 0x367
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x254], 2
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004047d2
push eax
call fcn.004047d8
fstp qword [0x5210bc]
lea ecx, [ebp - 0x1b4]
call fcn.00404844
mov dword [ebp - 4], 0x368
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x254], 0x8002
mov dword [ebp - 0x25c], 7
mov dword [ebp - 0x264], 0x8002
push 0x5211c8
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040488c
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x42ca85
mov dword [ebp - 4], 0x369
and dword [ebp - 0xf8], 0
jmp 0x42cadb
mov dword [ebp - 4], 0x36b
fld qword [0x5210bc]
fadd qword [0x401370]
fnstsw ax
test al, 0xd
jne 0x42dbf6
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx eax, byte [eax]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 4], 0x36c
mov eax, dword [ebp - 0xf8]
imul eax, eax, 0x100
jo 0x42dbfb
mov dword [ebp - 0xf8], eax
mov dword [ebp - 4], 0x36e
fld qword [0x5210bc]
call fcn.0040481a
push eax
push dword [0x5210b0]
call fcn.00404832
movzx eax, byte [eax]
add eax, dword [ebp - 0xf8]
jo 0x42dbfb
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 3
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x178]
call fcn.004048d4
jmp 0x42cb5c
mov dword [ebp - 4], 0x371
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040471e
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 0
jne 0x42c988
mov dword [ebp - 4], 0x372
fld qword [0x5210bc]
fadd qword [0x401370]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x42dbf6
mov dword [ebp - 4], 0x374
mov dword [ebp - 0x24c], 0x1000
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.004046e8
movsx eax, ax
test eax, eax
je 0x42cbb9
jmp 0x42d78a
mov dword [ebp - 4], 0x377
mov dword [ebp - 0x1fc], 2
mov dword [ebp - 0x204], 2
and dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1f4], 2
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x254], 0x8002
mov dword [ebp - 0x25c], 7
mov dword [ebp - 0x264], 0x8002
push 0x5211c8
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00404886
push eax
push 0x5211c8
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040488c
mov edx, eax
lea ecx, [ebp - 0x1e4]
call fcn.004048d4
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.004047a2
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.0040474e
push eax
call fcn.0040484a
mov word [ebp - 0x17c], ax
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x1e4]
push eax
push 4
call fcn.00404898
add esp, 0x14
mov dword [ebp - 4], 0x378
cmp word [ebp - 0x17c], 0
jg 0x42ccdc
jmp 0x42d78a
mov dword [ebp - 4], 0x37b
push 1
movsx eax, word [ebp - 0x17c]
push eax
push 1
push 0x11
push 0x5210d8
push 1
push 0x80
call fcn.00404862
add esp, 0x1c
mov dword [ebp - 4], 0x37c
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x254], 2
mov ax, word [ebp - 0x17c]
mov word [ebp - 0x25c], ax
mov dword [ebp - 0x264], 2
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0x274], 2
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x370]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404736
mov dword [ebp - 0x438], eax
jmp 0x42ce13
mov dword [ebp - 4], 0x37d
fld qword [0x5210bc]
fstp qword [ebp - 0x24c]
mov dword [ebp - 0x254], 5
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004047d2
push eax
call fcn.00404772
push eax
push dword [0x5210b0]
call fcn.00404832
mov esi, eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [0x5210d8]
call fcn.00404832
mov cl, byte [esi]
mov byte [eax], cl
lea ecx, [ebp - 0x1b4]
call fcn.00404844
mov dword [ebp - 4], 0x37e
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x370]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040471e
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 0
jne 0x42cd83
mov dword [ebp - 4], 0x37f
movsx eax, word [ebp - 0x17c]
mov dword [ebp - 0x4cc], eax
fild dword [ebp - 0x4cc]
fstp qword [ebp - 0x4d4]
fld qword [0x5210bc]
fadd qword [ebp - 0x4d4]
fstp qword [0x5210bc]
fnstsw ax
test al, 0xd
jne 0x42dbf6
mov dword [ebp - 4], 0x380
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 0x4008
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004046ca
mov dword [ebp - 0x25c], 0x40bdc0
mov dword [ebp - 0x264], 8
push 1
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x264]
push eax
push 0
lea eax, [ebp - 0x1c4]
push eax
call fcn.004047de
push eax
call fcn.00404892
mov word [ebp - 0x2b4], ax
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 4], 0x382
and word [0x5210c4], 0
mov dword [ebp - 4], 0x383
and word [0x5210cc], 0
mov dword [ebp - 4], 0x384
push 0
push 0x78
push 1
push 8
push 0x5210c8
push 4
push 0x180
call fcn.00404862
add esp, 0x1c
mov dword [ebp - 4], 0x385
push 0
push 0x78
push 1
push 8
push 0x5210d0
push 4
push 0x180
call fcn.00404862
add esp, 0x1c
mov dword [ebp - 4], 0x386
push 1
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x24c], al
mov dword [ebp - 0x254], 0x11
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x94]
call fcn.004048d4
mov dword [ebp - 4], 0x387
mov eax, dword [0x521050]
add eax, 1
jo 0x42dbfb
mov dword [0x521050], eax
mov dword [ebp - 4], 0x388
mov edx, dword [ebp - 0xd0]
mov ecx, 0x521054
call fcn.004048b0
jmp 0x4240f1
mov dword [ebp - 4], 0x38a
cmp word [ebp - 0xbc], 0
jle 0x42d326
cmp dword [0x521310], 0
jle 0x42d326
mov dword [ebp - 4], 0x38b
movsx eax, word [ebp - 0xbc]
push eax
push dword [0x52131c]
call fcn.00404832
push dword [eax]
push 0x40bb68
call fcn.004048ce
test eax, eax
jne 0x42d046
mov dword [ebp - 4], 0x38c
mov edx, 0x40c24c
lea ecx, [ebp - 0xd0]
call fcn.004048b0
mov dword [ebp - 4], 0x38d
mov edx, dword [ebp - 0xd0]
lea ecx, [ebp - 0x194]
call fcn.004048b0
lea eax, [ebp - 0x194]
push eax
call fcn.0042e17b
lea ecx, [ebp - 0x194]
call fcn.00404868
mov dword [ebp - 4], 0x38f
mov ax, word [ebp - 0xbc]
mov word [ebp - 0x24c], ax
mov dword [ebp - 0x254], 0x8002
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.004046a0
movsx eax, ax
test eax, eax
je 0x42d29d
mov dword [ebp - 4], 0x390
movsx eax, word [ebp - 0xbc]
push eax
push dword [0x52131c]
call fcn.00404832
push dword [eax]
push 0x40bb68
call fcn.004048ce
mov esi, eax
neg esi
sbb esi, esi
neg esi
mov ax, word [ebp - 0xbc]
add ax, 1
jo 0x42dbfb
movsx eax, ax
push eax
push dword [0x52131c]
call fcn.00404832
push dword [eax]
push 0x40bb28
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
or esi, eax
neg esi
sbb esi, esi
neg esi
movsx eax, word [ebp - 0xbc]
push eax
push dword [0x52131c]
call fcn.00404832
push dword [eax]
push 0x40bb68
call fcn.004048ce
mov edi, eax
neg edi
sbb edi, edi
neg edi
mov ax, word [ebp - 0xbc]
add ax, 1
jo 0x42dbfb
movsx eax, ax
push eax
push dword [0x52131c]
call fcn.00404832
push dword [eax]
push 0x40a6cc
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
or edi, eax
neg edi
sbb edi, edi
neg edi
and esi, edi
neg esi
sbb esi, esi
neg esi
movsx eax, word [ebp - 0xbc]
push eax
push dword [0x52131c]
call fcn.00404832
push dword [eax]
push 0x40bb60
call fcn.004048ce
mov edi, eax
neg edi
sbb edi, edi
neg edi
mov ax, word [ebp - 0xbc]
add ax, 1
jo 0x42dbfb
movsx eax, ax
push eax
push dword [0x52131c]
call fcn.00404832
push dword [eax]
push 0x40bb60
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
or edi, eax
neg edi
sbb edi, edi
neg edi
and esi, edi
neg esi
sbb esi, esi
neg esi
movsx eax, word [ebp - 0xbc]
push eax
push dword [0x52131c]
call fcn.00404832
push dword [eax]
push 0x40bb68
call fcn.004048ce
mov edi, eax
neg edi
sbb edi, edi
neg edi
mov ax, word [ebp - 0xbc]
add ax, 1
jo 0x42dbfb
movsx eax, ax
push eax
push dword [0x52131c]
call fcn.00404832
push dword [eax]
push 0x40bb60
call fcn.004048ce
neg eax
sbb eax, eax
neg eax
or edi, eax
neg edi
sbb edi, edi
neg edi
and esi, edi
test esi, esi
jne 0x42d298
mov dword [ebp - 4], 0x391
mov edx, 0x40c260
lea ecx, [ebp - 0xd0]
call fcn.004048b0
mov dword [ebp - 4], 0x392
mov edx, 0x40a6cc
lea ecx, [ebp - 0x194]
call fcn.004048b0
lea eax, [ebp - 0x194]
push eax
call fcn.0042e17b
lea ecx, [ebp - 0x194]
call fcn.00404868
mov dword [ebp - 4], 0x393
mov edx, dword [ebp - 0xd0]
lea ecx, [ebp - 0x194]
call fcn.004048b0
lea eax, [ebp - 0x194]
push eax
call fcn.0042e17b
lea ecx, [ebp - 0x194]
call fcn.00404868
jmp 0x42d326
mov dword [ebp - 4], 0x396
cmp dword [0x521310], 0
je 0x42d326
mov dword [ebp - 4], 0x397
mov edx, 0x40c260
lea ecx, [ebp - 0xd0]
call fcn.004048b0
mov dword [ebp - 4], 0x398
mov edx, 0x40a6cc
lea ecx, [ebp - 0x194]
call fcn.004048b0
lea eax, [ebp - 0x194]
push eax
call fcn.0042e17b
lea ecx, [ebp - 0x194]
call fcn.00404868
mov dword [ebp - 4], 0x399
mov edx, dword [ebp - 0xd0]
lea ecx, [ebp - 0x194]
call fcn.004048b0
lea eax, [ebp - 0x194]
push eax
call fcn.0042e17b
lea ecx, [ebp - 0x194]
call fcn.00404868
jmp 0x42d78a
jmp 0x42d78a
mov dword [ebp - 4], 0x3a0
push dword [0x5210d8]
push 1
call fcn.00404838
test eax, eax
jle 0x42d78a
mov dword [ebp - 4], 0x3a1
push 1
push dword [0x5210d8]
call fcn.00404832
movzx si, byte [eax]
sub si, 0xa2
neg si
sbb esi, esi
inc esi
push 1
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xa3
neg ax
sbb eax, eax
inc eax
or esi, eax
neg esi
sbb esi, esi
neg esi
push 1
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0x9e
neg ax
sbb eax, eax
inc eax
or esi, eax
test esi, esi
jne 0x42d78a
mov dword [ebp - 4], 0x3a2
mov edx, 0x40c204
lea ecx, [ebp - 0x68]
call fcn.004048b0
mov dword [ebp - 4], 0x3a3
push dword [0x5210d8]
push 1
call fcn.00404838
cmp eax, 8
jle 0x42d556
mov dword [ebp - 4], 0x3a4
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x254], 2
mov dword [ebp - 0x25c], 8
mov dword [ebp - 0x264], 2
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0x274], 2
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404736
mov dword [ebp - 0x43c], eax
jmp 0x42d544
mov dword [ebp - 4], 0x3a5
push dword [ebp - 0x68]
push 0x40c240
call fcn.0040486e
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1c4], 8
push dword [0x5210d8]
lea eax, [ebp - 0x190]
push eax
call fcn.0040482c
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [ebp - 0x190]
call fcn.00404832
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 0x4011
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004046b2
lea eax, [ebp - 0x190]
push eax
call fcn.00404820
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x68]
call fcn.004048b6
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x1c4]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 4], 0x3a6
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040471e
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 0
jne 0x42d45d
jmp 0x42d6cd
mov dword [ebp - 4], 0x3a8
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x254], 2
push dword [0x5210d8]
push 1
call fcn.00404838
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x264], 3
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0x274], 2
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x3c0]
push eax
lea eax, [ebp - 0x3b0]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404736
mov dword [ebp - 0x440], eax
jmp 0x42d6c0
mov dword [ebp - 4], 0x3a9
push dword [ebp - 0x68]
push 0x40c240
call fcn.0040486e
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1c4], 8
push dword [0x5210d8]
lea eax, [ebp - 0x190]
push eax
call fcn.0040482c
lea eax, [ebp - 0x30]
push eax
call fcn.00404772
push eax
push dword [ebp - 0x190]
call fcn.00404832
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], 0x4011
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004046b2
lea eax, [ebp - 0x190]
push eax
call fcn.00404820
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x68]
call fcn.004048b6
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x1c4]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 4], 0x3aa
lea eax, [ebp - 0x3c0]
push eax
lea eax, [ebp - 0x3b0]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040471e
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0
jne 0x42d5d9
mov dword [ebp - 4], 0x3ac
mov dword [ebp - 0x24c], 0x40bffc
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x1b4]
call fcn.0040478a
lea eax, [ebp - 0x1b4]
push eax
movsx eax, word [0x52121a]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.004046ac
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x264], 8
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x194]
call fcn.004048b6
lea eax, [ebp - 0x194]
push eax
call fcn.0042e17b
lea ecx, [ebp - 0x194]
call fcn.00404868
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 4], 0x3b0
jmp 0x422755
mov dword [ebp - 4], 0x3b2
fldz
fstp dword [ebp - 0x24c]
mov dword [ebp - 0x254], 4
cmp dword [0x52139c], 0
jne 0x42d7d3
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0x4d8], 0x52139c
jmp 0x42d7dd
mov dword [ebp - 0x4d8], 0x52139c
push 0x10
pop eax
call fcn.004044c0
lea esi, [ebp - 0x254]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 5
mov eax, dword [ebp - 0x4d8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4d8]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
push eax
call dword [ecx + 0x400]
push eax
lea eax, [ebp - 0x19c]
push eax
call fcn.0040470c
push eax
call fcn.004046dc
lea ecx, [ebp - 0x19c]
call fcn.004046d6
mov dword [ebp - 4], 0x3b3
cmp dword [0x52139c], 0
jne 0x42d855
push 0x52139c
push 0x407ca4
call fcn.004048c8
mov dword [ebp - 0x4dc], 0x52139c
jmp 0x42d85f
mov dword [ebp - 0x4dc], 0x52139c
push 0x40bbac
push 0
push 3
mov eax, dword [ebp - 0x4dc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4dc]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
push eax
call dword [ecx + 0x404]
push eax
lea eax, [ebp - 0x19c]
push eax
call fcn.0040470c
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00404700
add esp, 0x10
push eax
call fcn.00404706
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.0040470c
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x1bc], 1
mov dword [ebp - 0x1c4], 2
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x1c4]
push eax
mov eax, dword [ebp - 0x2b4]
mov eax, dword [eax]
push dword [ebp - 0x2b4]
call dword [eax + 0x24]
fnclex
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0
jge 0x42d91b
push 0x24
push 0x40bbac
push dword [ebp - 0x2b4]
push dword [ebp - 0x2b8]
call fcn.004048c2
mov dword [ebp - 0x4e0], eax
jmp 0x42d922
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x2bc], eax
push 0x40c278
mov eax, dword [ebp - 0x2bc]
mov eax, dword [eax]
push dword [ebp - 0x2bc]
call dword [eax + 0x80]
fnclex
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0
jge 0x42d97b
push 0x80
push 0x40bbbc
push dword [ebp - 0x2bc]
push dword [ebp - 0x2c0]
call fcn.004048c2
mov dword [ebp - 0x4e4], eax
jmp 0x42d982
and dword [ebp - 0x4e4], 0
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x19c]
push eax
push 3
call fcn.004046fa
add esp, 0x10
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 4], 0x3b4
push 2
call fcn.00404850
call fcn.0040473c
wait
push 0x42dbe7
jmp 0x42da6b
lea eax, [ebp - 0x3c0]
push eax
lea eax, [ebp - 0x3b0]
push eax
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x370]
push eax
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2d0]
push eax
push 0x10
call fcn.00404898
add esp, 0x44
lea ecx, [ebp - 0x30]
call fcn.00404844
lea ecx, [ebp - 0x40]
call fcn.00404844
lea ecx, [ebp - 0x54]
call fcn.00404844
lea ecx, [ebp - 0x64]
call fcn.00404844
lea ecx, [ebp - 0x68]
call fcn.00404868
lea ecx, [ebp - 0x70]
call fcn.00404868
lea ecx, [ebp - 0x74]
call fcn.00404868
lea ecx, [ebp - 0x84]
call fcn.00404844
lea ecx, [ebp - 0x94]
call fcn.00404844
lea ecx, [ebp - 0xa4]
call fcn.00404844
lea ecx, [ebp - 0xa8]
call fcn.00404868
lea ecx, [ebp - 0xb8]
call fcn.00404844
lea ecx, [ebp - 0xcc]
call fcn.00404844
lea ecx, [ebp - 0xd0]
call fcn.00404868
lea ecx, [ebp - 0xe0]
call fcn.00404844
lea ecx, [ebp - 0xf4]
call fcn.00404844
lea ecx, [ebp - 0x10c]
call fcn.00404844
lea ecx, [ebp - 0x11c]
call fcn.00404844
lea ecx, [ebp - 0x130]
call fcn.00404844
lea ecx, [ebp - 0x140]
call fcn.00404844
lea ecx, [ebp - 0x148]
call fcn.00404868
lea ecx, [ebp - 0x150]
call fcn.00404868
lea eax, [ebp - 0x154]
push eax
push 0
call fcn.00404784
lea ecx, [ebp - 0x178]
call fcn.00404844
lea ecx, [ebp - 0x18c]
call fcn.00404844
ret
jmp fcn.004044cc
call fcn.0040477e