Function at 0x413f9e
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x401bf6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x588
call fcn.004036ae
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x4018c8
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 0xffffffffffffffff
call dword [0x401058]
mov dword [ebp - 4], 3
push 0
push 0x403644
lea eax, [ebp - 0x2d4]
push eax
call dword [0x4010f4]
lea ecx, [ebp - 0x2d4]
push ecx
lea edx, [ebp - 0x1a0]
push edx
call dword [0x401140]
mov dword [ebp - 4], 4
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x354], 2
push 0x403df8
call dword [0x401014]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x364], 3
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x374], 2
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x364]
push ecx
lea edx, [ebp - 0x374]
push edx
lea eax, [ebp - 0x39c]
push eax
lea ecx, [ebp - 0x38c]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [0x401050]
mov dword [ebp - 0x570], eax
jmp 0x414226
mov dword [ebp - 4], 5
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0x34c], 0x403df8
mov dword [ebp - 0x354], 8
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x2d4]
call dword [0x401154]
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [0x401144]
push eax
lea edx, [ebp - 0x2d4]
push edx
lea eax, [ebp - 0x2f4]
push eax
call dword [0x401088]
lea ecx, [ebp - 0x2f4]
push ecx
lea edx, [ebp - 0x2c4]
push edx
call dword [0x401100]
push eax
call dword [0x401034]
mov word [ebp - 0x36c], ax
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0x1c0]
call dword [0x40100c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
lea edx, [ebp - 0x2d4]
push edx
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 6
mov dword [ebp - 0x34c], 0xd
mov dword [ebp - 0x354], 2
lea eax, [ebp - 0x1c0]
push eax
lea ecx, [ebp - 0x354]
push ecx
lea edx, [ebp - 0x2d4]
push edx
call dword [section..text]
push eax
call dword [0x401144]
push eax
lea eax, [ebp - 0x2e4]
push eax
call dword [0x4010f0]
lea edx, [ebp - 0x2e4]
lea ecx, [ebp - 0x280]
call dword [0x40100c]
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x1b0]
push ecx
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [0x401104]
mov edx, eax
lea ecx, [ebp - 0x1b0]
call dword [0x40100c]
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x39c]
push ecx
lea edx, [ebp - 0x38c]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [0x40118c]
mov dword [ebp - 0x570], eax
cmp dword [ebp - 0x570], 0
jne 0x4140a3
mov dword [ebp - 4], 9
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x354], 2
push 0x403e10
call dword [0x401014]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x364], 3
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x374], 2
lea ecx, [ebp - 0x354]
push ecx
lea edx, [ebp - 0x364]
push edx
lea eax, [ebp - 0x374]
push eax
lea ecx, [ebp - 0x3bc]
push ecx
lea edx, [ebp - 0x3ac]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [0x401050]
mov dword [ebp - 0x574], eax
jmp 0x414438
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0x34c], 0x403e10
mov dword [ebp - 0x354], 8
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x2d4]
call dword [0x401154]
lea ecx, [ebp - 0x2e4]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [0x401144]
push eax
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x2f4]
push ecx
call dword [0x401088]
lea edx, [ebp - 0x2f4]
push edx
lea eax, [ebp - 0x2c4]
push eax
call dword [0x401100]
push eax
call dword [0x401034]
mov word [ebp - 0x36c], ax
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0x160]
call dword [0x40100c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea ecx, [ebp - 0x2f4]
push ecx
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x2d4]
push eax
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x34c], 0xd
mov dword [ebp - 0x354], 2
lea ecx, [ebp - 0x160]
push ecx
lea edx, [ebp - 0x354]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [section..text]
push eax
call dword [0x401144]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
call dword [0x4010f0]
lea edx, [ebp - 0x2e4]
lea ecx, [ebp - 0x150]
call dword [0x40100c]
mov dword [ebp - 4], 0xc
lea edx, [ebp - 0x220]
push edx
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
call dword [0x401104]
mov edx, eax
lea ecx, [ebp - 0x220]
call dword [0x40100c]
mov dword [ebp - 4], 0xd
lea edx, [ebp - 0x3bc]
push edx
lea eax, [ebp - 0x3ac]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [0x40118c]
mov dword [ebp - 0x574], eax
cmp dword [ebp - 0x574], 0
jne 0x4142b5
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x354], 2
push 0x403e34
call dword [0x401014]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x364], 3
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x354]
push edx
lea eax, [ebp - 0x364]
push eax
lea ecx, [ebp - 0x374]
push ecx
lea edx, [ebp - 0x3dc]
push edx
lea eax, [ebp - 0x3cc]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [0x401050]
mov dword [ebp - 0x578], eax
jmp 0x41464a
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0x34c], 0x403e34
mov dword [ebp - 0x354], 8
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x2d4]
call dword [0x401154]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [0x401144]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
lea edx, [ebp - 0x2f4]
push edx
call dword [0x401088]
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [ebp - 0x2c4]
push ecx
call dword [0x401100]
push eax
call dword [0x401034]
mov word [ebp - 0x36c], ax
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0x2c0]
call dword [0x40100c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea edx, [ebp - 0x2f4]
push edx
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x34c], 0xd
mov dword [ebp - 0x354], 2
lea edx, [ebp - 0x2c0]
push edx
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
call dword [section..text]
push eax
call dword [0x401144]
push eax
lea edx, [ebp - 0x2e4]
push edx
call dword [0x4010f0]
lea edx, [ebp - 0x2e4]
lea ecx, [ebp - 0x270]
call dword [0x40100c]
mov dword [ebp - 4], 0x11
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x2d4]
push edx
call dword [0x401104]
mov edx, eax
lea ecx, [ebp - 0xe0]
call dword [0x40100c]
mov dword [ebp - 4], 0x12
lea eax, [ebp - 0x3dc]
push eax
lea ecx, [ebp - 0x3cc]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [0x40118c]
mov dword [ebp - 0x578], eax
cmp dword [ebp - 0x578], 0
jne 0x4144c7
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x354], 2
push 0x403e54
call dword [0x401014]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x364], 3
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x374], 2
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x364]
push ecx
lea edx, [ebp - 0x374]
push edx
lea eax, [ebp - 0x3fc]
push eax
lea ecx, [ebp - 0x3ec]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [0x401050]
mov dword [ebp - 0x57c], eax
jmp 0x41485c
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0x34c], 0x403e54
mov dword [ebp - 0x354], 8
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x2d4]
call dword [0x401154]
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [0x401144]
push eax
lea edx, [ebp - 0x2d4]
push edx
lea eax, [ebp - 0x2f4]
push eax
call dword [0x401088]
lea ecx, [ebp - 0x2f4]
push ecx
lea edx, [ebp - 0x2c4]
push edx
call dword [0x401100]
push eax
call dword [0x401034]
mov word [ebp - 0x36c], ax
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0x270]
call dword [0x40100c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
lea edx, [ebp - 0x2d4]
push edx
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x34c], 0xd
mov dword [ebp - 0x354], 2
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x354]
push ecx
lea edx, [ebp - 0x2d4]
push edx
call dword [section..text]
push eax
call dword [0x401144]
push eax
lea eax, [ebp - 0x2e4]
push eax
call dword [0x4010f0]
lea edx, [ebp - 0x2e4]
lea ecx, [ebp - 0x160]
call dword [0x40100c]
mov dword [ebp - 4], 0x16
lea ecx, [ebp - 0x110]
push ecx
lea edx, [ebp - 0x160]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [0x401104]
mov edx, eax
lea ecx, [ebp - 0x110]
call dword [0x40100c]
mov dword [ebp - 4], 0x17
lea ecx, [ebp - 0x3fc]
push ecx
lea edx, [ebp - 0x3ec]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [0x40118c]
mov dword [ebp - 0x57c], eax
cmp dword [ebp - 0x57c], 0
jne 0x4146d9
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x354], 2
push 0x403e68
call dword [0x401014]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x364], 3
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x374], 2
lea ecx, [ebp - 0x354]
push ecx
lea edx, [ebp - 0x364]
push edx
lea eax, [ebp - 0x374]
push eax
lea ecx, [ebp - 0x41c]
push ecx
lea edx, [ebp - 0x40c]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [0x401050]
mov dword [ebp - 0x580], eax
jmp 0x414a6e
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0x34c], 0x403e68
mov dword [ebp - 0x354], 8
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x2d4]
call dword [0x401154]
lea ecx, [ebp - 0x2e4]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [0x401144]
push eax
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x2f4]
push ecx
call dword [0x401088]
lea edx, [ebp - 0x2f4]
push edx
lea eax, [ebp - 0x2c4]
push eax
call dword [0x401100]
push eax
call dword [0x401034]
mov word [ebp - 0x36c], ax
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xd0]
call dword [0x40100c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea ecx, [ebp - 0x2f4]
push ecx
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x2d4]
push eax
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x34c], 0xd
mov dword [ebp - 0x354], 2
lea ecx, [ebp - 0xd0]
push ecx
lea edx, [ebp - 0x354]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [section..text]
push eax
call dword [0x401144]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
call dword [0x4010f0]
lea edx, [ebp - 0x2e4]
lea ecx, [ebp - 0xc0]
call dword [0x40100c]
mov dword [ebp - 4], 0x1b
lea edx, [ebp - 0xb0]
push edx
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
call dword [0x401104]
mov edx, eax
lea ecx, [ebp - 0xb0]
call dword [0x40100c]
mov dword [ebp - 4], 0x1c
lea edx, [ebp - 0x41c]
push edx
lea eax, [ebp - 0x40c]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [0x40118c]
mov dword [ebp - 0x580], eax
cmp dword [ebp - 0x580], 0
jne 0x4148eb
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x354], 2
push 0x403e80
call dword [0x401014]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x364], 3
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x354]
push edx
lea eax, [ebp - 0x364]
push eax
lea ecx, [ebp - 0x374]
push ecx
lea edx, [ebp - 0x43c]
push edx
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [0x401050]
mov dword [ebp - 0x584], eax
jmp 0x414c80
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0x34c], 0x403e80
mov dword [ebp - 0x354], 8
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x2d4]
call dword [0x401154]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [0x401144]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
lea edx, [ebp - 0x2f4]
push edx
call dword [0x401088]
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [ebp - 0x2c4]
push ecx
call dword [0x401100]
push eax
call dword [0x401034]
mov word [ebp - 0x36c], ax
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0x90]
call dword [0x40100c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea edx, [ebp - 0x2f4]
push edx
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x34c], 0xd
mov dword [ebp - 0x354], 2
lea edx, [ebp - 0x90]
push edx
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
call dword [section..text]
push eax
call dword [0x401144]
push eax
lea edx, [ebp - 0x2e4]
push edx
call dword [0x4010f0]
lea edx, [ebp - 0x2e4]
lea ecx, [ebp - 0x90]
call dword [0x40100c]
mov dword [ebp - 4], 0x20
lea eax, [ebp - 0x2b0]
push eax
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x2d4]
push edx
call dword [0x401104]
mov edx, eax
lea ecx, [ebp - 0x2b0]
call dword [0x40100c]
mov dword [ebp - 4], 0x21
lea eax, [ebp - 0x43c]
push eax
lea ecx, [ebp - 0x42c]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [0x40118c]
mov dword [ebp - 0x584], eax
cmp dword [ebp - 0x584], 0
jne 0x414afd
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x354], 2
push 0x403ebc
call dword [0x401014]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x364], 3
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x374], 2
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x364]
push ecx
lea edx, [ebp - 0x374]
push edx
lea eax, [ebp - 0x45c]
push eax
lea ecx, [ebp - 0x44c]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [0x401050]
mov dword [ebp - 0x588], eax
jmp 0x414e8c
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0x34c], 0x403ebc
mov dword [ebp - 0x354], 8
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x2d4]
call dword [0x401154]
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [0x401144]
push eax
lea edx, [ebp - 0x2d4]
push edx
lea eax, [ebp - 0x2f4]
push eax
call dword [0x401088]
lea ecx, [ebp - 0x2f4]
push ecx
lea edx, [ebp - 0x2c4]
push edx
call dword [0x401100]
push eax
call dword [0x401034]
mov word [ebp - 0x36c], ax
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0x260]
call dword [0x40100c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
lea edx, [ebp - 0x2d4]
push edx
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x34c], 0xd
mov dword [ebp - 0x354], 2
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x354]
push ecx
lea edx, [ebp - 0x2d4]
push edx
call dword [section..text]
push eax
call dword [0x401144]
push eax
lea eax, [ebp - 0x2e4]
push eax
call dword [0x4010f0]
lea edx, [ebp - 0x2e4]
lea ecx, [ebp - 0x80]
call dword [0x40100c]
mov dword [ebp - 4], 0x25
lea ecx, [ebp - 0x190]
push ecx
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [0x401104]
mov edx, eax
lea ecx, [ebp - 0x190]
call dword [0x40100c]
mov dword [ebp - 4], 0x26
lea ecx, [ebp - 0x45c]
push ecx
lea edx, [ebp - 0x44c]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [0x40118c]
mov dword [ebp - 0x588], eax
cmp dword [ebp - 0x588], 0
jne 0x414d0f
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x354], 2
push 0x403ee0
call dword [0x401014]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x364], 3
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x374], 2
lea ecx, [ebp - 0x354]
push ecx
lea edx, [ebp - 0x364]
push edx
lea eax, [ebp - 0x374]
push eax
lea ecx, [ebp - 0x47c]
push ecx
lea edx, [ebp - 0x46c]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [0x401050]
mov dword [ebp - 0x58c], eax
jmp 0x41509e
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0x34c], 0x403ee0
mov dword [ebp - 0x354], 8
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x2d4]
call dword [0x401154]
lea ecx, [ebp - 0x2e4]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [0x401144]
push eax
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x2f4]
push ecx
call dword [0x401088]
lea edx, [ebp - 0x2f4]
push edx
lea eax, [ebp - 0x2c4]
push eax
call dword [0x401100]
push eax
call dword [0x401034]
mov word [ebp - 0x36c], ax
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0x140]
call dword [0x40100c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea ecx, [ebp - 0x2f4]
push ecx
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x2d4]
push eax
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 0x29
mov dword [ebp - 0x34c], 0xd
mov dword [ebp - 0x354], 2
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0x354]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [section..text]
push eax
call dword [0x401144]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
call dword [0x4010f0]
lea edx, [ebp - 0x2e4]
lea ecx, [ebp - 0x100]
call dword [0x40100c]
mov dword [ebp - 4], 0x2a
lea edx, [ebp - 0x210]
push edx
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
call dword [0x401104]
mov edx, eax
lea ecx, [ebp - 0x210]
call dword [0x40100c]
mov dword [ebp - 4], 0x2b
lea edx, [ebp - 0x47c]
push edx
lea eax, [ebp - 0x46c]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [0x40118c]
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x58c], 0
jne 0x414f1b
mov dword [ebp - 4], 0x2c
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x354], 2
push 0x403f1c
call dword [0x401014]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x364], 3
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x354]
push edx
lea eax, [ebp - 0x364]
push eax
lea ecx, [ebp - 0x374]
push ecx
lea edx, [ebp - 0x49c]
push edx
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [0x401050]
mov dword [ebp - 0x590], eax
jmp 0x4152aa
mov dword [ebp - 4], 0x2d
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0x34c], 0x403f1c
mov dword [ebp - 0x354], 8
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x2d4]
call dword [0x401154]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [0x401144]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
lea edx, [ebp - 0x2f4]
push edx
call dword [0x401088]
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [ebp - 0x2c4]
push ecx
call dword [0x401100]
push eax
call dword [0x401034]
mov word [ebp - 0x36c], ax
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xa0]
call dword [0x40100c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea edx, [ebp - 0x2f4]
push edx
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 0x2e
mov dword [ebp - 0x34c], 0xd
mov dword [ebp - 0x354], 2
lea edx, [ebp - 0xa0]
push edx
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
call dword [section..text]
push eax
call dword [0x401144]
push eax
lea edx, [ebp - 0x2e4]
push edx
call dword [0x4010f0]
lea edx, [ebp - 0x2e4]
lea ecx, [ebp - 0x40]
call dword [0x40100c]
mov dword [ebp - 4], 0x2f
lea eax, [ebp - 0x250]
push eax
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x2d4]
push edx
call dword [0x401104]
mov edx, eax
lea ecx, [ebp - 0x250]
call dword [0x40100c]
mov dword [ebp - 4], 0x30
lea eax, [ebp - 0x49c]
push eax
lea ecx, [ebp - 0x48c]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [0x40118c]
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x590], 0
jne 0x41512d
mov dword [ebp - 4], 0x31
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x354], 2
push 0x403f4c
call dword [0x401014]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x364], 3
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x374], 2
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x364]
push ecx
lea edx, [ebp - 0x374]
push edx
lea eax, [ebp - 0x4bc]
push eax
lea ecx, [ebp - 0x4ac]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [0x401050]
mov dword [ebp - 0x594], eax
jmp 0x4154b0
mov dword [ebp - 4], 0x32
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0x34c], 0x403f4c
mov dword [ebp - 0x354], 8
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x2d4]
call dword [0x401154]
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [0x401144]
push eax
lea edx, [ebp - 0x2d4]
push edx
lea eax, [ebp - 0x2f4]
push eax
call dword [0x401088]
lea ecx, [ebp - 0x2f4]
push ecx
lea edx, [ebp - 0x2c4]
push edx
call dword [0x401100]
push eax
call dword [0x401034]
mov word [ebp - 0x36c], ax
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0x70]
call dword [0x40100c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
lea edx, [ebp - 0x2d4]
push edx
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 0x33
mov dword [ebp - 0x34c], 0xd
mov dword [ebp - 0x354], 2
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x354]
push ecx
lea edx, [ebp - 0x2d4]
push edx
call dword [section..text]
push eax
call dword [0x401144]
push eax
lea eax, [ebp - 0x2e4]
push eax
call dword [0x4010f0]
lea edx, [ebp - 0x2e4]
lea ecx, [ebp - 0x200]
call dword [0x40100c]
mov dword [ebp - 4], 0x34
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x200]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [0x401104]
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [0x40100c]
mov dword [ebp - 4], 0x35
lea ecx, [ebp - 0x4bc]
push ecx
lea edx, [ebp - 0x4ac]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [0x40118c]
mov dword [ebp - 0x594], eax
cmp dword [ebp - 0x594], 0
jne 0x415339
mov dword [ebp - 4], 0x36
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x354], 2
push 0x403f7c
call dword [0x401014]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x364], 3
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x374], 2
lea ecx, [ebp - 0x354]
push ecx
lea edx, [ebp - 0x364]
push edx
lea eax, [ebp - 0x374]
push eax
lea ecx, [ebp - 0x4dc]
push ecx
lea edx, [ebp - 0x4cc]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [0x401050]
mov dword [ebp - 0x598], eax
jmp 0x4156c2
mov dword [ebp - 4], 0x37
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0x34c], 0x403f7c
mov dword [ebp - 0x354], 8
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x2d4]
call dword [0x401154]
lea ecx, [ebp - 0x2e4]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [0x401144]
push eax
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x2f4]
push ecx
call dword [0x401088]
lea edx, [ebp - 0x2f4]
push edx
lea eax, [ebp - 0x2c4]
push eax
call dword [0x401100]
push eax
call dword [0x401034]
mov word [ebp - 0x36c], ax
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0x130]
call dword [0x40100c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea ecx, [ebp - 0x2f4]
push ecx
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x2d4]
push eax
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 0x38
mov dword [ebp - 0x34c], 0xd
mov dword [ebp - 0x354], 2
lea ecx, [ebp - 0x130]
push ecx
lea edx, [ebp - 0x354]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [section..text]
push eax
call dword [0x401144]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
call dword [0x4010f0]
lea edx, [ebp - 0x2e4]
lea ecx, [ebp - 0x170]
call dword [0x40100c]
mov dword [ebp - 4], 0x39
lea edx, [ebp - 0x1f0]
push edx
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
call dword [0x401104]
mov edx, eax
lea ecx, [ebp - 0x1f0]
call dword [0x40100c]
mov dword [ebp - 4], 0x3a
lea edx, [ebp - 0x4dc]
push edx
lea eax, [ebp - 0x4cc]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [0x40118c]
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 0
jne 0x41553f
mov dword [ebp - 4], 0x3b
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x354], 2
push 0x403fbc
call dword [0x401014]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x364], 3
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x354]
push edx
lea eax, [ebp - 0x364]
push eax
lea ecx, [ebp - 0x374]
push ecx
lea edx, [ebp - 0x4fc]
push edx
lea eax, [ebp - 0x4ec]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [0x401050]
mov dword [ebp - 0x59c], eax
jmp 0x4158d4
mov dword [ebp - 4], 0x3c
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0x34c], 0x403fbc
mov dword [ebp - 0x354], 8
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x2d4]
call dword [0x401154]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [0x401144]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
lea edx, [ebp - 0x2f4]
push edx
call dword [0x401088]
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [ebp - 0x2c4]
push ecx
call dword [0x401100]
push eax
call dword [0x401034]
mov word [ebp - 0x36c], ax
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0x1e0]
call dword [0x40100c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea edx, [ebp - 0x2f4]
push edx
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 0x3d
mov dword [ebp - 0x34c], 0xd
mov dword [ebp - 0x354], 2
lea edx, [ebp - 0x1e0]
push edx
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
call dword [section..text]
push eax
call dword [0x401144]
push eax
lea edx, [ebp - 0x2e4]
push edx
call dword [0x4010f0]
lea edx, [ebp - 0x2e4]
lea ecx, [ebp - 0x180]
call dword [0x40100c]
mov dword [ebp - 4], 0x3e
lea eax, [ebp - 0x2a0]
push eax
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x2d4]
push edx
call dword [0x401104]
mov edx, eax
lea ecx, [ebp - 0x2a0]
call dword [0x40100c]
mov dword [ebp - 4], 0x3f
lea eax, [ebp - 0x4fc]
push eax
lea ecx, [ebp - 0x4ec]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [0x40118c]
mov dword [ebp - 0x59c], eax
cmp dword [ebp - 0x59c], 0
jne 0x415751
mov dword [ebp - 4], 0x40
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x354], 2
push 0x404004
call dword [0x401014]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x364], 3
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x374], 2
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x364]
push ecx
lea edx, [ebp - 0x374]
push edx
lea eax, [ebp - 0x51c]
push eax
lea ecx, [ebp - 0x50c]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [0x401050]
mov dword [ebp - 0x5a0], eax
jmp 0x415ae6
mov dword [ebp - 4], 0x41
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0x34c], 0x404004
mov dword [ebp - 0x354], 8
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x2d4]
call dword [0x401154]
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [0x401144]
push eax
lea edx, [ebp - 0x2d4]
push edx
lea eax, [ebp - 0x2f4]
push eax
call dword [0x401088]
lea ecx, [ebp - 0x2f4]
push ecx
lea edx, [ebp - 0x2c4]
push edx
call dword [0x401100]
push eax
call dword [0x401034]
mov word [ebp - 0x36c], ax
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0x1d0]
call dword [0x40100c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
lea edx, [ebp - 0x2d4]
push edx
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 0x42
mov dword [ebp - 0x34c], 0xd
mov dword [ebp - 0x354], 2
lea eax, [ebp - 0x1d0]
push eax
lea ecx, [ebp - 0x354]
push ecx
lea edx, [ebp - 0x2d4]
push edx
call dword [section..text]
push eax
call dword [0x401144]
push eax
lea eax, [ebp - 0x2e4]
push eax
call dword [0x4010f0]
lea edx, [ebp - 0x2e4]
lea ecx, [ebp - 0xf0]
call dword [0x40100c]
mov dword [ebp - 4], 0x43
lea ecx, [ebp - 0x240]
push ecx
lea edx, [ebp - 0xf0]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [0x401104]
mov edx, eax
lea ecx, [ebp - 0x240]
call dword [0x40100c]
mov dword [ebp - 4], 0x44
lea ecx, [ebp - 0x51c]
push ecx
lea edx, [ebp - 0x50c]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [0x40118c]
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x5a0], 0
jne 0x415963
mov dword [ebp - 4], 0x45
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x354], 2
push 0x404024
call dword [0x401014]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x364], 3
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x374], 2
lea ecx, [ebp - 0x354]
push ecx
lea edx, [ebp - 0x364]
push edx
lea eax, [ebp - 0x374]
push eax
lea ecx, [ebp - 0x53c]
push ecx
lea edx, [ebp - 0x52c]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [0x401050]
mov dword [ebp - 0x5a4], eax
jmp 0x415cf2
mov dword [ebp - 4], 0x46
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0x34c], 0x404024
mov dword [ebp - 0x354], 8
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x2d4]
call dword [0x401154]
lea ecx, [ebp - 0x2e4]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [0x401144]
push eax
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x2f4]
push ecx
call dword [0x401088]
lea edx, [ebp - 0x2f4]
push edx
lea eax, [ebp - 0x2c4]
push eax
call dword [0x401100]
push eax
call dword [0x401034]
mov word [ebp - 0x36c], ax
mov dword [ebp - 0x374], 2
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0x230]
call dword [0x40100c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea ecx, [ebp - 0x2f4]
push ecx
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x2d4]
push eax
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 0x47
mov dword [ebp - 0x34c], 0xd
mov dword [ebp - 0x354], 2
lea ecx, [ebp - 0x230]
push ecx
lea edx, [ebp - 0x354]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [section..text]
push eax
call dword [0x401144]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
call dword [0x4010f0]
lea edx, [ebp - 0x2e4]
lea ecx, [ebp - 0x290]
call dword [0x40100c]
mov dword [ebp - 4], 0x48
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
call dword [0x401104]
mov edx, eax
lea ecx, [ebp - 0x60]
call dword [0x40100c]
mov dword [ebp - 4], 0x49
lea edx, [ebp - 0x53c]
push edx
lea eax, [ebp - 0x52c]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [0x40118c]
mov dword [ebp - 0x5a4], eax
cmp dword [ebp - 0x5a4], 0
jne 0x415b75
mov dword [ebp - 4], 0x4a
push 0
push 0x403dd0
lea edx, [ebp - 0x1a0]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [0x401164]
add esp, 0x10
mov edx, eax
lea ecx, [ebp - 0x54c]
call dword [0x401084]
lea ecx, [ebp - 0x54c]
push ecx
lea edx, [ebp - 0x120]
push edx
lea eax, [ebp - 0x37c]
push eax
lea ecx, [ebp - 0x554]
push ecx
lea edx, [ebp - 0x558]
push edx
lea eax, [ebp - 0x550]
push eax
call dword [0x401178]
mov dword [ebp - 0x5a8], eax
jmp 0x4164bd
mov dword [ebp - 4], 0x4b
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x354], 0x8002
mov dword [ebp - 0x35c], 3
mov dword [ebp - 0x364], 0x8002
mov dword [ebp - 0x36c], 0x40407c
mov dword [ebp - 0x374], 0x8008
push 0
push 0x403de0
lea ecx, [ebp - 0x120]
push ecx
lea edx, [ebp - 0x2d4]
push edx
call dword [0x401164]
add esp, 0x10
push eax
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
call dword [0x401148]
push eax
push 0
push 0x403de0
lea edx, [ebp - 0x120]
push edx
lea eax, [ebp - 0x2f4]
push eax
call dword [0x401164]
add esp, 0x10
push eax
lea ecx, [ebp - 0x364]
push ecx
lea edx, [ebp - 0x304]
push edx
call dword [0x401148]
push eax
push 0
push 0x403cdc
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x314]
push ecx
call dword [0x401164]
add esp, 0x10
push eax
lea edx, [ebp - 0x374]
push edx
lea eax, [ebp - 0x324]
push eax
call dword [0x401040]
push eax
lea ecx, [ebp - 0x334]
push ecx
call dword [0x4010d4]
push eax
lea edx, [ebp - 0x344]
push edx
call dword [0x4010b8]
push eax
call dword [0x401078]
mov word [ebp - 0x378], ax
lea eax, [ebp - 0x314]
push eax
lea ecx, [ebp - 0x2f4]
push ecx
lea edx, [ebp - 0x2d4]
push edx
push 3
call dword [0x401020]
add esp, 0x10
movsx eax, word [ebp - 0x378]
test eax, eax
je 0x416487
mov dword [ebp - 4], 0x4c
push 0
push 0
push 0x403cdc
lea ecx, [ebp - 0x120]
push ecx
lea edx, [ebp - 0x2d4]
push edx
call dword [0x401164]
add esp, 0x10
push eax
lea eax, [ebp - 0x1b0]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
call dword [0x401104]
push eax
call dword [0x401108]
mov edx, eax
lea ecx, [ebp - 0x2c4]
call dword [0x401170]
push eax
call dword [0x401014]
neg eax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x378], ax
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x2d4]
push eax
push 2
call dword [0x401020]
add esp, 0xc
movsx ecx, word [ebp - 0x378]
test ecx, ecx
je 0x416048
mov dword [ebp - 4], 0x4d
push 0
push 0x403cdc
lea edx, [ebp - 0x120]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [0x401164]
add esp, 0x10
push eax
lea ecx, [ebp - 0x1b0]
push ecx
lea edx, [ebp - 0x2e4]
push edx
call dword [0x401104]
push eax
call dword [0x401018]
mov edx, eax
lea ecx, [ebp - 0x2c4]
call dword [0x401170]
lea eax, [ebp - 0x2c4]
push eax
lea ecx, [ebp - 0x2f4]
push ecx
call fcn.0040d9ae
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea edx, [ebp - 0x2f4]
push edx
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 0x4e
push 0
push 0x403cdc
lea edx, [ebp - 0x120]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [0x401164]
add esp, 0x10
push 7
lea ecx, [ebp - 0x2d4]
push ecx
lea edx, [ebp - 0x1b0]
push edx
lea eax, [ebp - 0x2e4]
push eax
call dword [0x401104]
push eax
lea ecx, [ebp - 0x2c4]
push ecx
call dword [0x401100]
push eax
call dword [0x40119c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x2d4]
push eax
push 2
call dword [0x401020]
add esp, 0xc
mov dword [ebp - 4], 0x50
push 0
push 0
push 0x403cdc
lea ecx, [ebp - 0x120]
push ecx
lea edx, [ebp - 0x2d4]
push edx
call dword [0x401164]
add esp, 0x10
push eax
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
call dword [0x401104]
push eax
call dword [0x401108]
mov edx, eax
lea ecx, [ebp - 0x2c4]
call dword [0x401170]
push eax
call dword [0x401014]
neg eax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x378], ax
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x2d4]
push eax
push 2
call dword [0x401020]
add esp, 0xc
movsx ecx, word [ebp - 0x378]
test ecx, ecx
je 0x416170
mov dword [ebp - 4], 0x51
push 0
push 0x403cdc
lea edx, [ebp - 0x120]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [0x401164]
add esp, 0x10
push eax
lea ecx, [ebp - 0x220]
push ecx
lea edx, [ebp - 0x2e4]
push edx
call dword [0x401104]
push eax
call dword [0x401018]
mov edx, eax
lea ecx, [ebp - 0x2c4]
call dword [0x401170]
lea eax, [ebp - 0x2c4]
push eax
lea ecx, [ebp - 0x2f4]
push ecx
call fcn.0040d9ae
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea edx, [ebp - 0x2f4]
push edx
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
push 3
call dword [0x401020]
add esp, 0x10
mov dword [ebp - 4], 0x53
push 0
push 0x403cdc
lea edx, [ebp - 0x120]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [0x401164]
add esp, 0x10
push 0
lea ecx, [ebp - 0x2d4]
push ecx
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0x2e4]
push eax
call dword [0x401104]
push eax
lea ecx, [ebp - 0x2c4]
push ecx
call dword [0x401100]
push eax
call dword [0x40119c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x2d4]
push eax
push 2
call dword [0x401020]
add esp, 0xc
mov dword [ebp - 4], 0x54
push 0
push 0x403cdc
lea ecx, [ebp - 0x120]
push ecx
lea edx, [ebp - 0x2d4]
push edx
call dword [0x401164]
add esp, 0x10
push eax
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
call dword [0x401104]
push eax
call dword [0x401018]
mov edx, eax
lea ecx, [ebp - 0x2c4]
call dword [0x401170]
push eax
push 1
push 0xffffffffffffffff
push 2
call dword [0x401114]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x2d4]
push eax
push 2
call dword [0x401020]
add esp, 0xc
mov dword [ebp - 4], 0x55
lea ecx, [ebp - 0x110]
push ecx
push 1
push 0x404088
call dword [0x4010e0]
add esp, 0xc
mov dword [ebp - 4], 0x56
lea edx, [ebp - 0xb0]
push edx
push 1
push 0x404088
call dword [0x4010e0]
add esp, 0xc
mov dword [ebp - 4], 0x57
lea eax, [ebp - 0x240]
push eax
push 1
push 0x404088
call dword [0x4010e0]
add esp, 0xc
mov dword [ebp - 4], 0x58
lea ecx, [ebp - 0x60]
push ecx
push 1
push 0x404088
call dword [0x4010e0]
add esp, 0xc
mov dword [ebp - 4], 0x59
lea edx, [ebp - 0x2b0]
push edx
push 1
push 0x404088
call dword [0x4010e0]
add esp, 0xc
mov dword [ebp - 4], 0x5a
lea eax, [ebp - 0x190]
push eax
push 1
push 0x404088
call dword [0x4010e0]
add esp, 0xc
mov dword [ebp - 4], 0x5b
lea ecx, [ebp - 0x210]
push ecx
push 1
push 0x404088
call dword [0x4010e0]
add esp, 0xc
mov dword [ebp - 4], 0x5c
lea edx, [ebp - 0x250]
push edx
push 1
push 0x404088
call dword [0x4010e0]
add esp, 0xc
mov dword [ebp - 4], 0x5d
lea eax, [ebp - 0x30]
push eax
push 1
push 0x404088
call dword [0x4010e0]
add esp, 0xc
mov dword [ebp - 4], 0x5e
lea ecx, [ebp - 0x1f0]
push ecx
push 1
push 0x404088
call dword [0x4010e0]
add esp, 0xc
mov dword [ebp - 4], 0x5f
lea edx, [ebp - 0x2a0]
push edx
push 1
push 0x404088
call dword [0x4010e0]
add esp, 0xc
mov dword [ebp - 4], 0x60
push 1
call dword [0x401090]
mov dword [ebp - 4], 0x61
push 0
push 0x403cdc
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
call dword [0x401164]
add esp, 0x10
push 7
lea edx, [ebp - 0x2d4]
push edx
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x2e4]
push ecx
call dword [0x401104]
push eax
lea edx, [ebp - 0x2c4]
push edx
call dword [0x401100]
push eax
call dword [0x40119c]
lea ecx, [ebp - 0x2c4]
call dword [0x401194]
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x2d4]
push ecx
push 2
call dword [0x401020]
add esp, 0xc
mov dword [ebp - 4], 0x62
push 0
push 0x403cdc
lea edx, [ebp - 0x120]
push edx
lea eax, [ebp - 0x2d4]
push eax
call dword [0x40111c]
add esp, 0x10
push eax
lea ecx, [ebp - 0x2e4]
push ecx
call fcn.0040ddde
lea edx, [ebp - 0x2e4]
push edx
lea eax, [ebp - 0x2d4]
push eax
push 2
call dword [0x401020]
add esp, 0xc
mov dword [ebp - 4], 0x64
lea ecx, [ebp - 0x120]
push ecx
lea edx, [ebp - 0x37c]
push edx
lea eax, [ebp - 0x554]
push eax
lea ecx, [ebp - 0x558]
push ecx
lea edx, [ebp - 0x550]
push edx
call dword [0x40102c]
mov dword [ebp - 0x5a8], eax
cmp dword [ebp - 0x5a8], 0
jne 0x415d6d
push 0x414d39
jmp 0x416521
lea edx, [ebp - 0x550]
push edx
call dword [0x401188]
lea ecx, [ebp - 0x37c]
call dword [0x401198]
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x53c]
push ecx
lea edx, [ebp - 0x52c]
push edx
lea eax, [ebp - 0x51c]
push eax
lea ecx, [ebp - 0x50c]
push ecx
lea edx, [ebp - 0x4fc]
push edx
lea eax, [ebp - 0x4ec]
push eax
lea ecx, [ebp - 0x4dc]
push ecx
lea edx, [ebp - 0x4cc]
push edx
lea eax, [ebp - 0x4bc]
push eax
lea ecx, [ebp - 0x4ac]
push ecx
lea edx, [ebp - 0x49c]
push edx
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x47c]
push ecx
lea edx, [ebp - 0x46c]
push edx
lea eax, [ebp - 0x45c]
push eax
lea ecx, [ebp - 0x44c]
push ecx
lea edx, [ebp - 0x43c]
push edx
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x41c]
push ecx
lea edx, [ebp - 0x40c]
push edx
lea eax, [ebp - 0x3fc]
push eax
lea ecx, [ebp - 0x3ec]
push ecx
lea edx, [ebp - 0x3dc]
push edx
lea eax, [ebp - 0x3cc]
push eax
lea ecx, [ebp - 0x3bc]
push ecx
lea edx, [ebp - 0x3ac]
push edx
lea eax, [ebp - 0x39c]
push eax
lea ecx, [ebp - 0x38c]
push ecx
push 0x1d
call dword [0x401020]
add esp, 0x78
lea ecx, [ebp - 0x30]
call dword [0x401010]
lea ecx, [ebp - 0x40]
call dword [0x401010]
lea ecx, [ebp - 0x50]
call dword [0x401010]
lea ecx, [ebp - 0x60]
call dword [0x401010]
lea ecx, [ebp - 0x70]
call dword [0x401010]
lea ecx, [ebp - 0x80]
call dword [0x401010]
lea ecx, [ebp - 0x90]
call dword [0x401010]
lea ecx, [ebp - 0xa0]
call dword [0x401010]
lea ecx, [ebp - 0xb0]
call dword [0x401010]
lea ecx, [ebp - 0xc0]
call dword [0x401010]
lea ecx, [ebp - 0xd0]
call dword [0x401010]
lea ecx, [ebp - 0xe0]
call dword [0x401010]
lea ecx, [ebp - 0xf0]
call dword [0x401010]
lea ecx, [ebp - 0x100]
call dword [0x401010]
lea ecx, [ebp - 0x110]
call dword [0x401010]
lea ecx, [ebp - 0x120]
call dword [0x401010]
lea ecx, [ebp - 0x130]
call dword [0x401010]
lea ecx, [ebp - 0x140]
call dword [0x401010]
lea ecx, [ebp - 0x150]
call dword [0x401010]
lea ecx, [ebp - 0x160]
call dword [0x401010]
lea ecx, [ebp - 0x170]
call dword [0x401010]
lea ecx, [ebp - 0x180]
call dword [0x401010]
lea ecx, [ebp - 0x190]
call dword [0x401010]
lea ecx, [ebp - 0x1a0]
call dword [0x401010]
lea ecx, [ebp - 0x1b0]
call dword [0x401010]
lea ecx, [ebp - 0x1c0]
call dword [0x401010]
lea ecx, [ebp - 0x1d0]
call dword [0x401010]
lea ecx, [ebp - 0x1e0]
call dword [0x401010]
lea ecx, [ebp - 0x1f0]
call dword [0x401010]
lea ecx, [ebp - 0x200]
call dword [0x401010]
lea ecx, [ebp - 0x210]
call dword [0x401010]
lea ecx, [ebp - 0x220]
call dword [0x401010]
lea ecx, [ebp - 0x230]
call dword [0x401010]
lea ecx, [ebp - 0x240]
call dword [0x401010]
lea ecx, [ebp - 0x250]
call dword [0x401010]
lea ecx, [ebp - 0x260]
call dword [0x401010]
lea ecx, [ebp - 0x270]
call dword [0x401010]
lea ecx, [ebp - 0x280]
call dword [0x401010]
lea ecx, [ebp - 0x290]
call dword [0x401010]
lea ecx, [ebp - 0x2a0]
call dword [0x401010]
lea ecx, [ebp - 0x2b0]
call dword [0x401010]
lea ecx, [ebp - 0x2c0]
call dword [0x401010]
ret