Function at 0x4d0c80
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57510a
mov eax, dword fs:[0]
push eax
mov eax, 0x1e3a0
call fcn.00556dd0
mov eax, dword [0x5abc48]
xor eax, ebp
mov dword [ebp - 0x28], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1e354], ecx
push 1
mov ecx, dword [ebp - 0x1e354]
call fcn.0053f2c4
mov dword [ebp - 0x1dfac], 5
mov eax, dword [ebp - 0x1e354]
cmp dword [eax + 0x1e0], 0
je 0x4d0ce9
mov dword [ebp - 0x1dfac], 3
jmp 0x4d0d1d
mov ecx, dword [ebp - 0x1e354]
cmp dword [ecx + 0x1e4], 0
je 0x4d0d04
mov dword [ebp - 0x1dfac], 4
jmp 0x4d0d1d
mov edx, dword [ebp - 0x1e354]
cmp dword [edx + 0x1e8], 0
je 0x4d0d1d
mov dword [ebp - 0x1dfac], 5
mov dword [ebp - 0x494], 0
mov dword [ebp - 0x1dfa8], 0
mov dword [ebp - 0x1ccb8], 0
mov dword [ebp - 0x42c], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x457c], 0
mov dword [ebp - 0x3578], 0
mov dword [ebp - 0x438], 0
lea ecx, [ebp - 0x1df58]
call fcn.004154f0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1dc60]
call fcn.004154f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x428]
call fcn.004154f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4578]
call fcn.004154f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4574]
call fcn.004154f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x424]
call fcn.004154f0
mov byte [ebp - 4], 5
lea eax, [ebp - 0x1df58]
push eax
push 0x413
mov ecx, dword [ebp - 0x1e354]
call fcn.00542213
push 0xa
lea ecx, [ebp - 0x45cc]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x1e328], esp
lea edx, [ebp - 0x1df58]
push edx
call fcn.00415510
mov dword [ebp - 0x1e358], eax
call fcn.00406160
add esp, 0xc
mov dword [ebp - 0x1e35c], eax
mov eax, dword [ebp - 0x1e35c]
add eax, 1
mov dword [ebp - 0x2bbc], eax
mov ecx, dword [ebp - 0x2bbc]
cmp ecx, dword [ebp - 0x1dfac]
je 0x4d0ea6
push 0
push 0
push 0x587a44
mov ecx, dword [ebp - 0x1e354]
call fcn.0053e812
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x424]
call fcn.0052ee60
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4574]
call fcn.0052ee60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4578]
call fcn.0052ee60
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x428]
call fcn.0052ee60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1dc60]
call fcn.0052ee60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1df58]
call fcn.0052ee60
jmp 0x4d39b2
call fcn.00415420
mov dword [ebp - 0x1e360], eax
push 1
mov edx, dword [ebp - 0x1e360]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1e360]
mov edx, dword [eax + 0x9c]
call edx
mov eax, dword [ebp - 0x1dfac]
sub eax, 1
mov dword [ebp - 0x3574], eax
mov ecx, dword [ebp - 0x3574]
sub ecx, 1
mov dword [ebp - 0x1df54], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x1dfac]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00534acf
add esp, 4
mov dword [ebp - 0x1e32c], eax
mov eax, dword [ebp - 0x1e32c]
mov dword [ebp - 0x4570], eax
mov dword [ebp - 0x494], 0
jmp 0x4d0f33
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x1dfac]
jge 0x4d0f68
push 8
call fcn.00534acf
add esp, 4
mov dword [ebp - 0x1e330], eax
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp - 0x4570]
mov edx, dword [ebp - 0x1e330]
mov dword [ecx + eax*4], edx
jmp 0x4d0f24
mov dword [ebp - 0x3570], 1
mov eax, dword [ebp - 0x3574]
mov dword [ebp - 0x42c], eax
jmp 0x4d0f8f
mov ecx, dword [ebp - 0x42c]
sub ecx, 1
mov dword [ebp - 0x42c], ecx
cmp dword [ebp - 0x42c], 0
jl 0x4d0ff3
mov dword [ebp - 0x494], 0
jmp 0x4d0fb3
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 2
jge 0x4d0fe3
mov eax, dword [ebp - 0x494]
imul eax, dword [ebp - 0x3570]
mov ecx, dword [ebp - 0x42c]
mov edx, dword [ebp - 0x4570]
mov ecx, dword [edx + ecx*4]
mov edx, dword [ebp - 0x494]
mov dword [ecx + edx*4], eax
jmp 0x4d0fa4
mov eax, dword [ebp - 0x3570]
shl eax, 1
mov dword [ebp - 0x3570], eax
jmp 0x4d0f80
mov ecx, dword [ebp - 0x3570]
mov dword [ebp - 0x490], ecx
mov dword [ebp - 0x494], 0
jmp 0x4d101a
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
mov eax, dword [ebp - 0x494]
cmp eax, dword [ebp - 0x1dfac]
jge 0x4d103b
mov ecx, dword [ebp - 0x494]
mov dword [ebp + ecx*4 - 0x484], 0
jmp 0x4d100b
mov dword [ebp - 0x420], 0xffffffff
mov edx, 1
test edx, edx
je 0x4d112e
mov eax, dword [ebp - 0x420]
add eax, 1
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x494], 0
jmp 0x4d107c
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x1dfac]
jge 0x4d10b4
mov eax, dword [ebp - 0x420]
imul eax, eax, 0x14
lea ecx, [ebp + eax - 0x1dc5c]
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp - 0x494]
mov ax, word [ebp + eax*4 - 0x484]
mov word [ecx + edx*2], ax
jmp 0x4d106d
mov ecx, dword [ebp - 0x3574]
mov dword [ebp - 0x1dfa8], ecx
jmp 0x4d10d1
mov edx, dword [ebp - 0x1dfa8]
sub edx, 1
mov dword [ebp - 0x1dfa8], edx
cmp dword [ebp - 0x1dfa8], 0
jl 0x4d111e
mov eax, dword [ebp - 0x1dfa8]
mov ecx, dword [ebp + eax*4 - 0x484]
add ecx, 1
mov edx, dword [ebp - 0x1dfa8]
mov dword [ebp + edx*4 - 0x484], ecx
mov eax, dword [ebp - 0x1dfa8]
cmp dword [ebp + eax*4 - 0x484], 1
jg 0x4d110b
jmp 0x4d111e
mov ecx, dword [ebp - 0x1dfa8]
mov dword [ebp + ecx*4 - 0x484], 0
jmp 0x4d10c2
cmp dword [ebp - 0x1dfa8], 0
jge 0x4d1129
jmp 0x4d112e
jmp 0x4d1045
mov dword [ebp - 0x494], 0
jmp 0x4d1149
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 5
jge 0x4d119f
mov dword [ebp - 0x1dfa8], 0
jmp 0x4d116d
mov eax, dword [ebp - 0x1dfa8]
add eax, 1
mov dword [ebp - 0x1dfa8], eax
mov ecx, dword [ebp - 0x1dfa8]
cmp ecx, dword [ebp - 0x490]
jge 0x4d119d
mov edx, dword [ebp - 0x494]
imul edx, edx, 0xc8
lea eax, [ebp + edx - 0x456c]
mov ecx, dword [ebp - 0x1dfa8]
mov dword [eax + ecx*4], 0
jmp 0x4d115e
jmp 0x4d113a
mov dword [ebp - 0x494], 0
jmp 0x4d11ba
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 0x1f4
jge 0x4d11e3
mov eax, dword [ebp - 0x494]
cdq
mov ecx, 0xa
idiv ecx
mov eax, dword [ebp - 0x494]
mov dword [ebp + eax*4 - 0x4184], edx
jmp 0x4d11ab
mov dword [ebp - 0x420], 0xffffffff
mov dword [ebp - 0x494], 0
jmp 0x4d1208
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x1dfac]
jge 0x4d1286
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x1dfa8], eax
jmp 0x4d1236
mov ecx, dword [ebp - 0x1dfa8]
add ecx, 1
mov dword [ebp - 0x1dfa8], ecx
mov edx, dword [ebp - 0x1dfa8]
cmp edx, dword [ebp - 0x1dfac]
jge 0x4d1281
mov eax, dword [ebp - 0x420]
add eax, 1
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0x420]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x494]
mov dword [ebp + ecx - 0x28c], edx
mov eax, dword [ebp - 0x420]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x1dfa8]
mov dword [ebp + eax - 0x288], ecx
jmp 0x4d1227
jmp 0x4d11f9
mov edx, dword [ebp - 0x420]
add edx, 1
mov dword [ebp - 0x48c], edx
mov dword [ebp - 0x420], 0xffffffff
mov dword [ebp - 0x494], 0
jmp 0x4d12ba
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [ebp - 0x1dfac]
jge 0x4d1389
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x1dfa8], edx
jmp 0x4d12ec
mov eax, dword [ebp - 0x1dfa8]
add eax, 1
mov dword [ebp - 0x1dfa8], eax
mov ecx, dword [ebp - 0x1dfa8]
cmp ecx, dword [ebp - 0x1dfac]
jge 0x4d1384
mov edx, dword [ebp - 0x1dfa8]
add edx, 1
mov dword [ebp - 0x1ccb8], edx
jmp 0x4d131e
mov eax, dword [ebp - 0x1ccb8]
add eax, 1
mov dword [ebp - 0x1ccb8], eax
mov ecx, dword [ebp - 0x1ccb8]
cmp ecx, dword [ebp - 0x1dfac]
jge 0x4d137f
mov edx, dword [ebp - 0x420]
add edx, 1
mov dword [ebp - 0x420], edx
mov eax, dword [ebp - 0x420]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x494]
mov dword [ebp + eax - 0x39b4], ecx
mov edx, dword [ebp - 0x420]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x1dfa8]
mov dword [ebp + edx - 0x39b0], eax
mov ecx, dword [ebp - 0x420]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x1ccb8]
mov dword [ebp + ecx - 0x39ac], edx
jmp 0x4d130f
jmp 0x4d12dd
jmp 0x4d12ab
mov eax, dword [ebp - 0x420]
add eax, 1
mov dword [ebp - 0x1df50], eax
mov dword [ebp - 0x420], 0xffffffff
mov dword [ebp - 0x494], 0
jmp 0x4d13bd
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x1dfac]
jge 0x4d14dc
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x1dfa8], eax
jmp 0x4d13ef
mov ecx, dword [ebp - 0x1dfa8]
add ecx, 1
mov dword [ebp - 0x1dfa8], ecx
mov edx, dword [ebp - 0x1dfa8]
cmp edx, dword [ebp - 0x1dfac]
jge 0x4d14d7
mov eax, dword [ebp - 0x1dfa8]
add eax, 1
mov dword [ebp - 0x1ccb8], eax
jmp 0x4d1421
mov ecx, dword [ebp - 0x1ccb8]
add ecx, 1
mov dword [ebp - 0x1ccb8], ecx
mov edx, dword [ebp - 0x1ccb8]
cmp edx, dword [ebp - 0x1dfac]
jge 0x4d14d2
mov eax, dword [ebp - 0x1ccb8]
add eax, 1
mov dword [ebp - 0x42c], eax
jmp 0x4d1453
mov ecx, dword [ebp - 0x42c]
add ecx, 1
mov dword [ebp - 0x42c], ecx
mov edx, dword [ebp - 0x42c]
cmp edx, dword [ebp - 0x1dfac]
jge 0x4d14cd
mov eax, dword [ebp - 0x420]
add eax, 1
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0x420]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x494]
mov dword [ebp + ecx - 0x356c], edx
mov eax, dword [ebp - 0x420]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x1dfa8]
mov dword [ebp + eax - 0x3568], ecx
mov edx, dword [ebp - 0x420]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x1ccb8]
mov dword [ebp + edx - 0x3564], eax
mov ecx, dword [ebp - 0x420]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x42c]
mov dword [ebp + ecx - 0x3560], edx
jmp 0x4d1444
jmp 0x4d1412
jmp 0x4d13e0
jmp 0x4d13ae
mov eax, dword [ebp - 0x420]
add eax, 1
mov dword [ebp - 0x2bb8], eax
mov dword [ebp - 0x420], 0xffffffff
mov dword [ebp - 0x4a0], 0xffffffff
mov dword [ebp - 0x494], 0
jmp 0x4d151a
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
cmp dword [ebp - 0x494], 0xa
jge 0x4d15cc
mov dword [ebp - 0x1dfa8], 0
jmp 0x4d1542
mov edx, dword [ebp - 0x1dfa8]
add edx, 1
mov dword [ebp - 0x1dfa8], edx
cmp dword [ebp - 0x1dfa8], 0xa
jge 0x4d15c7
mov eax, dword [ebp - 0x420]
add eax, 1
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [ebp - 0x1dfa8]
jg 0x4d15c2
mov edx, dword [ebp - 0x4a0]
add edx, 1
mov dword [ebp - 0x4a0], edx
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x14
lea ecx, [ebp + eax - 0xf4]
mov edx, dword [ebp - 0x1dfa8]
mov ax, word [ebp - 0x4a0]
mov word [ecx + edx*2], ax
mov ecx, dword [ebp - 0x4a0]
mov dx, word [ebp - 0x494]
mov word [ebp + ecx*4 - 0x3824], dx
mov eax, dword [ebp - 0x4a0]
mov cx, word [ebp - 0x1dfa8]
mov word [ebp + eax*4 - 0x3822], cx
jmp 0x4d1533
jmp 0x4d150b
mov edx, dword [ebp - 0x4a0]
add edx, 1
mov dword [ebp - 0x2bc4], edx
mov dword [ebp - 0x494], 0
jmp 0x4d15f6
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0xa
jge 0x4d166c
mov dword [ebp - 0x1dfa8], 0
jmp 0x4d161a
mov ecx, dword [ebp - 0x1dfa8]
add ecx, 1
mov dword [ebp - 0x1dfa8], ecx
cmp dword [ebp - 0x1dfa8], 0xa
jge 0x4d1667
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x1dfa8]
jle 0x4d1665
mov eax, dword [ebp - 0x1dfa8]
imul eax, eax, 0x14
lea ecx, [ebp + eax - 0xf4]
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x14
lea eax, [ebp + edx - 0xf4]
mov edx, dword [ebp - 0x1dfa8]
mov esi, dword [ebp - 0x494]
mov cx, word [ecx + esi*2]
mov word [eax + edx*2], cx
jmp 0x4d160b
jmp 0x4d15e7
push fcn.0052ee60
push fcn.004154f0
push 0x14
push 4
lea edx, [ebp - 0x3694]
push edx
call fcn.00557db7
mov byte [ebp - 4], 6
push 0x587a58
lea ecx, [ebp - 0x3694]
call fcn.004155d0
push str._01234
lea ecx, [ebp - 0x3690]
call fcn.004155d0
push 0x587a70
lea ecx, [ebp - 0x368c]
call fcn.004155d0
push str._02468
lea ecx, [ebp - 0x3688]
call fcn.004155d0
push 0x587a88
lea ecx, [ebp - 0x3684]
call fcn.004155d0
push 0x587a94
lea ecx, [ebp - 0x3680]
call fcn.004155d0
push 0x587aa0
lea ecx, [ebp - 0x367c]
call fcn.004155d0
push 0x587aac
lea ecx, [ebp - 0x3678]
call fcn.004155d0
push 0x587ab8
lea ecx, [ebp - 0x3674]
call fcn.004155d0
push str._12457
lea ecx, [ebp - 0x3670]
call fcn.004155d0
mov dword [ebp - 0x494], 0
jmp 0x4d1745
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0x32
jge 0x4d17a4
mov ecx, dword [ebp - 0x494]
mov dword [ebp + ecx*4 - 0x1df4c], 0xffffffff
mov dword [ebp - 0x1dfa8], 0
jmp 0x4d177a
mov edx, dword [ebp - 0x1dfa8]
add edx, 1
mov dword [ebp - 0x1dfa8], edx
cmp dword [ebp - 0x1dfa8], 0xa
jge 0x4d17a2
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
lea ecx, [ebp + eax - 0x1d48c]
mov edx, dword [ebp - 0x1dfa8]
mov dword [ecx + edx*4], 0xffffffff
jmp 0x4d176b
jmp 0x4d1736
lea eax, [ebp - 0x1df58]
push eax
mov ecx, dword [ebp - 0x1e354]
add ecx, 0x1d64
call fcn.0045da50
push eax
push 0
mov ecx, dword [ebp - 0x1e354]
add ecx, 0x1d64
call fcn.0053c5de
lea ecx, [ebp - 0x1df58]
call fcn.00415630
add eax, 3
xor ecx, ecx
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00534acf
add esp, 4
mov dword [ebp - 0x1e334], eax
mov eax, dword [ebp - 0x1e334]
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x1df58]
call fcn.00415630
add eax, 1
push eax
mov ecx, dword [ebp - 0x24]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x1e338], esp
lea edx, [ebp - 0x1df58]
push edx
call fcn.00415510
mov dword [ebp - 0x1e364], eax
call fcn.00406160
add esp, 0xc
mov dword [ebp - 0x1e368], eax
mov eax, dword [ebp - 0x1e368]
add eax, 1
mov dword [ebp - 0x2c0c], eax
mov eax, dword [ebp - 0x2c0c]
cdq
idiv dword [ebp - 0x1dfac]
mov dword [ebp - 0x488], eax
mov ecx, dword [ebp - 0x2c0c]
imul ecx, ecx, 0x12
add ecx, 0xd9038
push ecx
call fcn.00534acf
add esp, 4
mov dword [ebp - 0x1e33c], eax
mov edx, dword [ebp - 0x1e33c]
mov dword [ebp - 0x49c], edx
mov dword [ebp - 0x2c08], 0
mov dword [ebp - 0x4610], 0
mov dword [ebp - 0x460c], 0
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x494], 0
jmp 0x4d18d1
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [ebp - 0x1dfac]
jge 0x4d197e
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp + eax*4 - 0x45cc]
mov dword [ebp + edx*4 - 0x1de84], ecx
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp - 0x4610]
add eax, dword [ebp + edx*4 - 0x1de84]
mov dword [ebp - 0x4610], eax
mov ecx, dword [ebp - 0x494]
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp + edx*4 - 0x1de84]
mov dword [ebp + ecx*4 - 0x1dfa4], eax
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov edx, dword [ebp - 0x494]
imul ecx, dword [ebp + edx*4 - 0x1de84]
add ecx, dword [ebp - 0x460c]
mov dword [ebp - 0x460c], ecx
mov eax, dword [ebp - 0x1dfac]
sub eax, dword [ebp - 0x494]
mov ecx, dword [ebp - 0x494]
imul eax, dword [ebp + ecx*4 - 0x1de84]
add eax, dword [ebp - 0x434]
mov dword [ebp - 0x434], eax
jmp 0x4d18c2
mov dword [ebp - 0x1dfa8], 0
jmp 0x4d1999
mov edx, dword [ebp - 0x1dfa8]
add edx, 1
mov dword [ebp - 0x1dfa8], edx
cmp dword [ebp - 0x1dfa8], 5
jge 0x4d1a60
mov dword [ebp - 0x1dfb0], 0
mov dword [ebp - 0x494], 0
jmp 0x4d19cb
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [ebp - 0x1dfac]
jge 0x4d1a20
mov edx, dword [ebp - 0x1dfa8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x1ec]
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp + edx*4 - 0x1de84]
movsx ecx, word [ecx + eax*2]
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp - 0x4570]
mov edx, dword [eax + edx*4]
mov eax, dword [ebp - 0x1dfb0]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1dfb0], eax
jmp 0x4d19bc
mov ecx, dword [ebp - 0x1dfa8]
imul ecx, ecx, 0xc8
lea edx, [ebp + ecx - 0x456c]
mov eax, dword [ebp - 0x1dfb0]
mov ecx, dword [edx + eax*4]
add ecx, 1
mov edx, dword [ebp - 0x1dfa8]
imul edx, edx, 0xc8
lea eax, [ebp + edx - 0x456c]
mov edx, dword [ebp - 0x1dfb0]
mov dword [eax + edx*4], ecx
jmp 0x4d198a
mov eax, dword [ebp - 0x3574]
push eax
lea ecx, [ebp - 0x1dfa4]
push ecx
call fcn.004014c0
add esp, 8
mov edx, dword [ebp - 0x3574]
mov eax, dword [ebp + edx*4 - 0x1dfa4]
sub eax, dword [ebp - 0x1dfa4]
mov dword [ebp - 0x4580], eax
mov dword [ebp - 0x494], 0
jmp 0x4d1aaa
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x1dfac]
jge 0x4d1ae3
mov eax, dword [ebp - 0x1df4c]
add eax, 1
mov dword [ebp - 0x1df4c], eax
mov ecx, dword [ebp - 0x1df4c]
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp + edx*4 - 0x1de84]
mov dword [ebp + ecx*4 - 0x2bb4], eax
jmp 0x4d1a9b
mov dword [ebp - 0x494], 0
jmp 0x4d1afe
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x48c]
jge 0x4d1fa3
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x28c]
mov edx, dword [ebp + ecx*4 - 0x1de84]
imul edx, edx, 0x14
lea eax, [ebp + edx - 0xf4]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov ecx, dword [ebp + edx*4 - 0x1de84]
movsx edx, word [eax + ecx*2]
mov eax, dword [ebp - 0x494]
mov dword [ebp + eax*4 - 0x41c], edx
mov ecx, dword [ebp - 0x1df48]
add ecx, 1
mov dword [ebp - 0x1df48], ecx
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x288]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x28c]
mov ecx, dword [ebp + edx*4 - 0x1de84]
add ecx, dword [ebp + eax*4 - 0x1de84]
mov edx, dword [ebp - 0x1df48]
mov eax, dword [ebp + ecx*4 - 0x4184]
mov dword [ebp + edx*4 - 0x2aec], eax
mov ecx, dword [ebp - 0x1df44]
add ecx, 1
mov dword [ebp - 0x1df44], ecx
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x288]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x28c]
mov ecx, dword [ebp + edx*4 - 0x1de84]
sub ecx, dword [ebp + eax*4 - 0x1de84]
push ecx
call fcn.0055a0b3
add esp, 4
mov edx, dword [ebp - 0x1df44]
mov dword [ebp + edx*4 - 0x2a24], eax
mov eax, dword [ebp - 0x1df3c]
add eax, 1
mov dword [ebp - 0x1df3c], eax
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x28c]
mov eax, dword [ebp + ecx*4 - 0x1de84]
add eax, dword [ebp + edx*4 - 0x1de84]
mov ecx, dword [ebp - 0x1df3c]
mov edx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp + ecx*4 - 0x2894], edx
mov eax, dword [ebp - 0x1df3c]
add eax, 1
mov dword [ebp - 0x1df3c], eax
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x28c]
mov eax, dword [ebp + ecx*4 - 0x1de84]
sub eax, dword [ebp + edx*4 - 0x1de84]
push eax
call fcn.0055a0b3
add esp, 4
mov ecx, dword [ebp - 0x1df3c]
mov dword [ebp + ecx*4 - 0x2894], eax
mov edx, dword [ebp - 0x1df40]
add edx, 1
mov dword [ebp - 0x1df40], edx
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x288]
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x28c]
mov edx, dword [ebp + eax*4 - 0x1de84]
sub edx, dword [ebp + ecx*4 - 0x1de84]
push edx
call fcn.0055a0b3
add esp, 4
mov ecx, dword [ebp - 0x1df40]
mov dword [ebp + ecx*4 - 0x295c], eax
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x28c]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov eax, dword [ebp + eax*4 - 0x1de84]
cmp eax, dword [ebp + edx*4 - 0x1de84]
jge 0x4d1d7a
mov ecx, dword [ebp - 0x1df40]
add ecx, 1
mov dword [ebp - 0x1df40], ecx
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x288]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x28c]
mov ecx, dword [ebp + edx*4 - 0x1de84]
add ecx, 0xa
sub ecx, dword [ebp + eax*4 - 0x1de84]
mov edx, dword [ebp - 0x1df40]
mov eax, dword [ebp + ecx*4 - 0x4184]
mov dword [ebp + edx*4 - 0x295c], eax
jmp 0x4d1dce
mov ecx, dword [ebp - 0x1df40]
add ecx, 1
mov dword [ebp - 0x1df40], ecx
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x28c]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov ecx, dword [ebp + edx*4 - 0x1de84]
add ecx, 0xa
sub ecx, dword [ebp + eax*4 - 0x1de84]
mov edx, dword [ebp - 0x1df40]
mov eax, dword [ebp + ecx*4 - 0x4184]
mov dword [ebp + edx*4 - 0x295c], eax
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x28c]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x288]
mov edx, dword [ebp + edx*4 - 0x1de84]
cmp edx, dword [ebp + ecx*4 - 0x1de84]
jge 0x4d1e54
mov eax, dword [ebp - 0x1df38]
add eax, 1
mov dword [ebp - 0x1df38], eax
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x28c]
mov eax, dword [ebp + ecx*4 - 0x1de84]
add eax, 0xa
sub eax, dword [ebp + edx*4 - 0x1de84]
mov ecx, dword [ebp - 0x1df38]
mov edx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp + ecx*4 - 0x27cc], edx
jmp 0x4d1ea8
mov eax, dword [ebp - 0x1df38]
add eax, 1
mov dword [ebp - 0x1df38], eax
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x28c]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x288]
mov eax, dword [ebp + ecx*4 - 0x1de84]
add eax, 0xa
sub eax, dword [ebp + edx*4 - 0x1de84]
mov ecx, dword [ebp - 0x1df38]
mov edx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp + ecx*4 - 0x27cc], edx
mov eax, dword [ebp - 0x1df38]
add eax, 1
mov dword [ebp - 0x1df38], eax
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x28c]
mov eax, dword [ebp + ecx*4 - 0x1de84]
add eax, dword [ebp + edx*4 - 0x1de84]
mov ecx, dword [ebp - 0x1df38]
mov edx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp + ecx*4 - 0x27cc], edx
mov eax, dword [ebp - 0x1df38]
add eax, 1
mov dword [ebp - 0x1df38], eax
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x288]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x28c]
mov eax, dword [ebp + ecx*4 - 0x1de84]
sub eax, dword [ebp + edx*4 - 0x1de84]
push eax
call fcn.0055a0b3
add esp, 4
mov ecx, dword [ebp - 0x1df38]
mov dword [ebp + ecx*4 - 0x27cc], eax
mov edx, dword [ebp - 0x1df34]
add edx, 1
mov dword [ebp - 0x1df34], edx
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
mov ecx, dword [ebp + eax - 0x288]
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x28c]
mov edx, dword [ebp + eax*4 - 0x1de84]
imul edx, dword [ebp + ecx*4 - 0x1de84]
mov eax, dword [ebp - 0x1df34]
mov ecx, dword [ebp + edx*4 - 0x4184]
mov dword [ebp + eax*4 - 0x2704], ecx
jmp 0x4d1aef
mov edx, dword [ebp - 0x4610]
mov eax, dword [ebp + edx*4 - 0x4184]
mov dword [ebp - 0x4610], eax
mov ecx, dword [ebp - 0x1df30]
add ecx, 1
mov dword [ebp - 0x1df30], ecx
mov edx, dword [ebp - 0x1df30]
mov eax, dword [ebp - 0x4610]
mov dword [ebp + edx*4 - 0x263c], eax
mov ecx, dword [ebp - 0x1df2c]
add ecx, 1
mov dword [ebp - 0x1df2c], ecx
mov edx, dword [ebp - 0x1df2c]
mov eax, dword [ebp - 0x4580]
mov dword [ebp + edx*4 - 0x2574], eax
mov ecx, dword [ebp - 0x1df28]
add ecx, 1
mov dword [ebp - 0x1df28], ecx
mov edx, dword [ebp - 0x4610]
add edx, dword [ebp - 0x4580]
mov eax, dword [ebp - 0x1df28]
mov ecx, dword [ebp + edx*4 - 0x4184]
mov dword [ebp + eax*4 - 0x24ac], ecx
mov edx, dword [ebp - 0x1df24]
add edx, 1
mov dword [ebp - 0x1df24], edx
mov eax, dword [ebp - 0x4610]
sub eax, dword [ebp - 0x4580]
push eax
call fcn.0055a0b3
add esp, 4
mov ecx, dword [ebp - 0x1df24]
mov dword [ebp + ecx*4 - 0x23e4], eax
mov edx, dword [ebp - 0x1df20]
add edx, 1
mov dword [ebp - 0x1df20], edx
mov eax, dword [ebp - 0x1de84]
add eax, dword [ebp - 0x1de80]
mov ecx, dword [ebp - 0x1df54]
add eax, dword [ebp + ecx*4 - 0x1de84]
mov edx, dword [ebp - 0x3574]
add eax, dword [ebp + edx*4 - 0x1de84]
mov ecx, dword [ebp - 0x1df20]
mov edx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp + ecx*4 - 0x231c], edx
mov eax, dword [ebp - 0x1de84]
add eax, 0xa
sub eax, dword [ebp - 0x1de80]
mov ecx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp - 0x357c], ecx
mov edx, dword [ebp - 0x1df54]
mov eax, dword [ebp + edx*4 - 0x1de84]
add eax, 0xa
mov ecx, dword [ebp - 0x3574]
sub eax, dword [ebp + ecx*4 - 0x1de84]
mov edx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp - 0x498], edx
mov eax, dword [ebp - 0x1df1c]
add eax, 1
mov dword [ebp - 0x1df1c], eax
mov ecx, dword [ebp - 0x357c]
add ecx, 0xa
sub ecx, dword [ebp - 0x498]
mov edx, dword [ebp - 0x1df1c]
mov eax, dword [ebp + ecx*4 - 0x4184]
mov dword [ebp + edx*4 - 0x2254], eax
mov ecx, dword [ebp - 0x1df18]
add ecx, 1
mov dword [ebp - 0x1df18], ecx
mov edx, dword [ebp - 0x1df18]
mov eax, dword [ebp - 0x460c]
mov ecx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp + edx*4 - 0x218c], ecx
mov edx, dword [ebp - 0x1df14]
add edx, 1
mov dword [ebp - 0x1df14], edx
mov eax, dword [ebp - 0x1df14]
mov ecx, dword [ebp - 0x434]
mov edx, dword [ebp + ecx*4 - 0x4184]
mov dword [ebp + eax*4 - 0x20c4], edx
mov eax, dword [ebp - 0x1df10]
add eax, 1
mov dword [ebp - 0x1df10], eax
mov ecx, dword [ebp - 0x4610]
shl ecx, 1
mov edx, dword [ebp - 0x1df10]
mov eax, dword [ebp + ecx*4 - 0x4184]
mov dword [ebp + edx*4 - 0x1ffc], eax
mov ecx, dword [ebp - 0x1df0c]
add ecx, 1
mov dword [ebp - 0x1df0c], ecx
mov edx, dword [ebp - 0x4580]
shl edx, 1
mov eax, dword [ebp - 0x1df0c]
mov ecx, dword [ebp + edx*4 - 0x4184]
mov dword [ebp + eax*4 - 0x1f34], ecx
mov dword [ebp - 0x494], 0
jmp 0x4d21de
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
mov eax, dword [ebp - 0x494]
cmp eax, dword [ebp - 0x1dfac]
jge 0x4d223b
mov ecx, dword [ebp - 0x494]
mov edx, dword [ebp + ecx*4 - 0x1d48c]
add edx, 1
mov eax, dword [ebp - 0x494]
mov dword [ebp + eax*4 - 0x1d48c], edx
mov ecx, dword [ebp - 0x494]
mov edx, dword [ebp + ecx*4 - 0x1d48c]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0xc8
lea ecx, [ebp + eax - 0x1ccb4]
mov eax, dword [ebp - 0x494]
mov eax, dword [ebp + eax*4 - 0x1de84]
mov dword [ecx + edx*4], eax
jmp 0x4d21cf
cmp dword [ebp - 0x1dfac], 3
jne 0x4d23dc
mov dword [ebp - 0x494], 0
jmp 0x4d2263
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x48c]
jge 0x4d23dc
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp + eax*4 - 0x1d464]
add ecx, 1
mov edx, dword [ebp - 0x494]
mov dword [ebp + edx*4 - 0x1d464], ecx
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp + eax*4 - 0x1d464]
mov edx, dword [ebp - 0x494]
imul edx, edx, 0xc8
lea eax, [ebp + edx - 0x1c4e4]
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov edx, dword [ebp + edx - 0x288]
mov esi, dword [ebp - 0x494]
imul esi, esi, 0x28
mov esi, dword [ebp + esi - 0x28c]
mov esi, dword [ebp + esi*4 - 0x1de84]
add esi, dword [ebp + edx*4 - 0x1de84]
mov edx, dword [ebp + esi*4 - 0x4184]
mov dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp + eax*4 - 0x1d43c]
add ecx, 1
mov edx, dword [ebp - 0x494]
mov dword [ebp + edx*4 - 0x1d43c], ecx
mov eax, dword [ebp - 0x494]
mov esi, dword [ebp + eax*4 - 0x1d43c]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0xc8
lea edi, [ebp + ecx - 0x1bd14]
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
mov eax, dword [ebp + edx - 0x288]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov edx, dword [ebp + ecx - 0x28c]
mov ecx, dword [ebp + edx*4 - 0x1de84]
sub ecx, dword [ebp + eax*4 - 0x1de84]
push ecx
call fcn.0055a0b3
add esp, 4
mov dword [edi + esi*4], eax
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp + edx*4 - 0x1d414]
add eax, 1
mov ecx, dword [ebp - 0x494]
mov dword [ebp + ecx*4 - 0x1d414], eax
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp + edx*4 - 0x1d414]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0xc8
lea edx, [ebp + ecx - 0x1b544]
mov ecx, dword [ebp - 0x494]
imul ecx, ecx, 0x28
mov ecx, dword [ebp + ecx - 0x288]
mov esi, dword [ebp - 0x494]
imul esi, esi, 0x28
mov esi, dword [ebp + esi - 0x28c]
mov esi, dword [ebp + esi*4 - 0x1de84]
imul esi, dword [ebp + ecx*4 - 0x1de84]
mov ecx, dword [ebp + esi*4 - 0x4184]
mov dword [edx + eax*4], ecx
jmp 0x4d2254
cmp dword [ebp - 0x1dfac], 4
jl 0x4d24f3
mov dword [ebp - 0x494], 0
jmp 0x4d2404
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
mov eax, dword [ebp - 0x494]
cmp eax, dword [ebp - 0x1df50]
jge 0x4d24f3
mov dword [ebp - 0x1dfb4], 0
mov dword [ebp - 0x1dfa8], 0
jmp 0x4d243b
mov ecx, dword [ebp - 0x1dfa8]
add ecx, 1
mov dword [ebp - 0x1dfa8], ecx
cmp dword [ebp - 0x1dfa8], 3
jge 0x4d248c
mov edx, dword [ebp - 0x494]
imul edx, edx, 0x28
lea eax, [ebp + edx - 0x39b4]
mov ecx, dword [ebp - 0x1dfa8]
mov edx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x1dfa8]
mov ecx, dword [ebp + edx*4 - 0x1de84]
mov dword [ebp + eax*4 - 0x1dcac], ecx
mov edx, dword [ebp - 0x1dfa8]
mov eax, dword [ebp - 0x1dfb4]
add eax, dword [ebp + edx*4 - 0x1dcac]
mov dword [ebp - 0x1dfb4], eax
jmp 0x4d242c
mov ecx, dword [ebp - 0x1df08]
add ecx, 1
mov dword [ebp - 0x1df08], ecx
mov edx, dword [ebp - 0x1df08]
mov eax, dword [ebp - 0x1dfb4]
mov ecx, dword [ebp + eax*4 - 0x4184]
mov dword [ebp + edx*4 - 0x1e6c], ecx
push 2
lea edx, [ebp - 0x1dcac]
push edx
call fcn.004014c0
add esp, 8
mov eax, dword [ebp - 0x1df04]
add eax, 1
mov dword [ebp - 0x1df04], eax
mov ecx, dword [ebp - 0x1dca4]
sub ecx, dword [ebp - 0x1dcac]
mov edx, dword [ebp - 0x1df04]
mov dword [ebp + edx*4 - 0x1da4], ecx
jmp 0x4d23f5
cmp dword [ebp - 0x1dfac], 5
jl 0x4d260a
mov dword [ebp - 0x494], 0
jmp 0x4d251b
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [ebp - 0x2bb8]
jge 0x4d260a
mov dword [ebp - 0x1dfb8], 0
mov dword [ebp - 0x1dfa8], 0
jmp 0x4d2552
mov edx, dword [ebp - 0x1dfa8]
add edx, 1
mov dword [ebp - 0x1dfa8], edx
cmp dword [ebp - 0x1dfa8], 4
jge 0x4d25a3
mov eax, dword [ebp - 0x494]
imul eax, eax, 0x28
lea ecx, [ebp + eax - 0x356c]
mov edx, dword [ebp - 0x1dfa8]
mov eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x1dfa8]
mov edx, dword [ebp + eax*4 - 0x1de84]
mov dword [ebp + ecx*4 - 0x1dcac], edx
mov eax, dword [ebp - 0x1dfa8]
mov ecx, dword [ebp - 0x1dfb8]
add ecx, dword [ebp + eax*4 - 0x1dcac]
mov dword [ebp - 0x1dfb8], ecx
jmp 0x4d2543
mov edx, dword [ebp - 0x1df00]
add edx, 1
mov dword [ebp - 0x1df00], edx
mov eax, dword [ebp - 0x1df00]
mov ecx, dword [ebp - 0x1dfb8]
mov edx, dword [ebp + ecx*4 - 0x4184]
mov dword [ebp + eax*4 - 0x1cdc], edx
push 3
lea eax, [ebp - 0x1dcac]
push eax
call fcn.004014c0
add esp, 8
mov ecx, dword [ebp - 0x1defc]
add ecx, 1
mov dword [ebp - 0x1defc], ecx
mov edx, dword [ebp - 0x1dca0]
sub edx, dword [ebp - 0x1dcac]
mov eax, dword [ebp - 0x1defc]
mov dword [ebp + eax*4 - 0x1c14], edx
jmp 0x4d250c
mov dword [ebp - 0xf8], 0
jmp 0x4d2625
mov ecx, dword [ebp - 0xf8]
add ecx, 1
mov dword [ebp - 0xf8], ecx
cmp dword [ebp - 0xf8], 0x10
jg 0x4d28d7
push 0x3c
push 0
lea edx, [ebp - 0x1e00c]
push edx
call fcn.00556a10
add esp, 0xc
lea eax, [ebp - 0x1e00c]
push eax
mov ecx, dword [ebp - 0xf8]
imul ecx, ecx, 0x78
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x414]
call fcn.0053c4d3
mov dword [ebp - 0x1e00c], 0x3c
mov eax, dword [ebp - 0x1e004]
and eax, 0xbfffffff
mov dword [ebp - 0x1e004], eax
push 0x3c
push 0
lea ecx, [ebp - 0x1e00c]
push ecx
call fcn.00556a10
add esp, 0xc
push 0x3c
push 0
lea edx, [ebp - 0x1e048]
push edx
call fcn.00556a10
add esp, 0xc
mov dword [ebp - 0x1e038], 0x2bc
lea eax, [ebp - 0x1dff2]
push eax
lea ecx, [ebp - 0x1e02c]
push ecx
call fcn.0055842c
add esp, 8
mov edx, dword [ebp - 0x1e008]
or edx, 0x40000000
mov dword [ebp - 0x1e008], edx
mov eax, dword [ebp - 0x1e008]
or eax, 0x80000000
mov dword [ebp - 0x1e008], eax
mov ecx, dword [ebp - 0x1e008]
or ecx, 0x20000000
mov dword [ebp - 0x1e008], ecx
mov edx, dword [ebp - 0x1e00c]
shl edx, 1
mov dword [ebp - 0x1e00c], edx
mov dword [ebp - 0x1dff8], 0xff
mov dword [ebp - 0x1dfd0], 0xffffffff
mov dword [ebp - 0x1dfcc], 0
mov dword [ebp - 0x1dfc8], 0xffffffff
mov dword [ebp - 0x494], 0
jmp 0x4d274e
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp + ecx*4 - 0x1df4c]
jg 0x4d28d2
mov eax, dword [ebp - 0xf8]
imul eax, eax, 0xc8
lea ecx, [ebp + eax - 0x2bb4]
mov edx, dword [ebp - 0x494]
mov eax, dword [ecx + edx*4]
push eax
push 0x587ad0
lea ecx, [ebp - 0x424]
push ecx
call fcn.00416090
add esp, 0xc
call fcn.00415ea0
mov dword [ebp - 0x1e05c], eax
lea ecx, [ebp - 0x424]
call fcn.0052f0e0
mov dword [ebp - 0x1e060], eax
cmp dword [ebp - 0x1e060], 0
jne 0x4d27c9
mov dword [ebp - 0x1e36c], 0
jmp 0x4d283d
mov edx, dword [ebp - 0x1e060]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x1e050], eax
cmp dword [ebp - 0x1e050], 0x3fffffff
jle 0x4d27f7
mov dword [ebp - 0x1e370], 0
jmp 0x4d2831
mov eax, dword [ebp - 0x1e050]
shl eax, 1
call fcn.00558400
mov dword [ebp - 0x1e374], esp
mov eax, dword [ebp - 0x1e05c]
push eax
mov ecx, dword [ebp - 0x1e050]
push ecx
mov edx, dword [ebp - 0x1e060]
push edx
mov eax, dword [ebp - 0x1e374]
push eax
call fcn.004847d0
mov dword [ebp - 0x1e370], eax
mov ecx, dword [ebp - 0x1e370]
mov dword [ebp - 0x1e36c], ecx
mov edx, dword [ebp - 0x1e36c]
mov dword [ebp - 0x1e04c], edx
mov eax, dword [ebp - 0x1e04c]
mov dword [ebp - 0x1dfc4], eax
lea ecx, [ebp - 0x1dfcc]
push ecx
push 1
mov edx, dword [ebp - 0xf8]
imul edx, edx, 0x78
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x414]
call fcn.00484900
mov dword [ebp - 0x1e058], eax
mov ecx, dword [ebp - 0x1e058]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x1e058]
push edx
mov eax, dword [ebp - 0xf8]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c43f
lea edx, [ebp - 0x1e00c]
push edx
mov eax, dword [ebp - 0xf8]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c48d
jmp 0x4d273f
jmp 0x4d2616
mov dword [ebp - 0xf8], 0
jmp 0x4d28f2
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x1dfac]
jge 0x4d2ba3
mov ecx, dword [ebp - 0xf8]
add ecx, 0x13
mov dword [ebp - 0x1e084], ecx
cmp dword [ebp - 0x1dfac], 4
jne 0x4d292d
mov edx, dword [ebp - 0xf8]
add edx, 0x12
mov dword [ebp - 0x1e084], edx
jmp 0x4d2945
cmp dword [ebp - 0x1dfac], 5
jne 0x4d2945
mov eax, dword [ebp - 0xf8]
add eax, 0x11
mov dword [ebp - 0x1e084], eax
push 0x3c
push 0
lea ecx, [ebp - 0x1e0c4]
push ecx
call fcn.00556a10
add esp, 0xc
lea edx, [ebp - 0x1e0c4]
push edx
mov eax, dword [ebp - 0x1e084]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c4d3
mov dword [ebp - 0x1e0c4], 0x3c
mov edx, dword [ebp - 0x1e0bc]
and edx, 0xbfffffff
mov dword [ebp - 0x1e0bc], edx
push 0x3c
push 0
lea eax, [ebp - 0x1e0c4]
push eax
call fcn.00556a10
add esp, 0xc
push 0x3c
push 0
lea ecx, [ebp - 0x1e104]
push ecx
call fcn.00556a10
add esp, 0xc
mov dword [ebp - 0x1e0f4], 0x2bc
lea edx, [ebp - 0x1e0aa]
push edx
lea eax, [ebp - 0x1e0e8]
push eax
call fcn.0055842c
add esp, 8
mov ecx, dword [ebp - 0x1e0c0]
or ecx, 0x40000000
mov dword [ebp - 0x1e0c0], ecx
mov edx, dword [ebp - 0x1e0c0]
or edx, 0x80000000
mov dword [ebp - 0x1e0c0], edx
mov eax, dword [ebp - 0x1e0c0]
or eax, 0x20000000
mov dword [ebp - 0x1e0c0], eax
mov ecx, dword [ebp - 0x1e0c4]
shl ecx, 1
mov dword [ebp - 0x1e0c4], ecx
mov dword [ebp - 0x1e0b0], 0xff
mov dword [ebp - 0x1e088], 0xffffffff
mov dword [ebp - 0x1e078], 0
mov dword [ebp - 0x1e074], 0xffffffff
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp + edx*4 - 0x45cc]
push eax
push 0x587ad4
lea ecx, [ebp - 0x424]
push ecx
call fcn.00416090
add esp, 0xc
call fcn.00415ea0
mov dword [ebp - 0x1e108], eax
lea ecx, [ebp - 0x424]
call fcn.0052f0e0
mov dword [ebp - 0x1e10c], eax
cmp dword [ebp - 0x1e10c], 0
jne 0x4d2a9a
mov dword [ebp - 0x1e378], 0
jmp 0x4d2b0e
mov edx, dword [ebp - 0x1e10c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x1e07c], eax
cmp dword [ebp - 0x1e07c], 0x3fffffff
jle 0x4d2ac8
mov dword [ebp - 0x1e37c], 0
jmp 0x4d2b02
mov eax, dword [ebp - 0x1e07c]
shl eax, 1
call fcn.00558400
mov dword [ebp - 0x1e380], esp
mov eax, dword [ebp - 0x1e108]
push eax
mov ecx, dword [ebp - 0x1e07c]
push ecx
mov edx, dword [ebp - 0x1e10c]
push edx
mov eax, dword [ebp - 0x1e380]
push eax
call fcn.004847d0
mov dword [ebp - 0x1e37c], eax
mov ecx, dword [ebp - 0x1e37c]
mov dword [ebp - 0x1e378], ecx
mov edx, dword [ebp - 0x1e378]
mov dword [ebp - 0x1e064], edx
mov eax, dword [ebp - 0x1e064]
mov dword [ebp - 0x1e070], eax
lea ecx, [ebp - 0x1e078]
push ecx
push 1
mov edx, dword [ebp - 0x1e084]
imul edx, edx, 0x78
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x414]
call fcn.00484900
mov dword [ebp - 0x1e0c8], eax
mov ecx, dword [ebp - 0x1e0c8]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x1e0c8]
push edx
mov eax, dword [ebp - 0x1e084]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c43f
lea edx, [ebp - 0x1e0c4]
push edx
mov eax, dword [ebp - 0x1e084]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c48d
jmp 0x4d28e3
cmp dword [ebp - 0x1dfac], 3
jne 0x4d2e9f
mov dword [ebp - 0xf8], 1
jmp 0x4d2bcb
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
cmp dword [ebp - 0xf8], 3
jg 0x4d2e9f
mov eax, dword [ebp - 0xf8]
sub eax, 1
imul eax, eax, 3
add eax, 0x16
mov dword [ebp - 0x1e110], eax
mov dword [ebp - 0x494], 0
jmp 0x4d2c08
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
cmp dword [ebp - 0x494], 3
jge 0x4d2e9a
mov edx, dword [ebp - 0x1e110]
add edx, dword [ebp - 0x494]
mov dword [ebp - 0x1e1bc], edx
push 0x3c
push 0
lea eax, [ebp - 0x1e170]
push eax
call fcn.00556a10
add esp, 0xc
lea ecx, [ebp - 0x1e170]
push ecx
mov edx, dword [ebp - 0x1e1bc]
imul edx, edx, 0x78
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x414]
call fcn.0053c4d3
mov dword [ebp - 0x1e170], 0x3c
mov ecx, dword [ebp - 0x1e168]
and ecx, 0xbfffffff
mov dword [ebp - 0x1e168], ecx
push 0x3c
push 0
lea edx, [ebp - 0x1e170]
push edx
call fcn.00556a10
add esp, 0xc
push 0x3c
push 0
lea eax, [ebp - 0x1e1b0]
push eax
call fcn.00556a10
add esp, 0xc
mov dword [ebp - 0x1e1a0], 0x2bc
lea ecx, [ebp - 0x1e156]
push ecx
lea edx, [ebp - 0x1e194]
push edx
call fcn.0055842c
add esp, 8
mov eax, dword [ebp - 0x1e16c]
or eax, 0x40000000
mov dword [ebp - 0x1e16c], eax
mov ecx, dword [ebp - 0x1e16c]
or ecx, 0x80000000
mov dword [ebp - 0x1e16c], ecx
mov edx, dword [ebp - 0x1e16c]
or edx, 0x20000000
mov dword [ebp - 0x1e16c], edx
mov eax, dword [ebp - 0x1e170]
shl eax, 1
mov dword [ebp - 0x1e170], eax
mov dword [ebp - 0x1e15c], 0xff
mov dword [ebp - 0x1e134], 0xffffffff
mov dword [ebp - 0x1e128], 0
mov dword [ebp - 0x1e124], 0xffffffff
mov ecx, dword [ebp - 0xf8]
imul ecx, ecx, 0x7d0
lea edx, [ebp + ecx - 0x1ccb4]
mov eax, dword [ebp - 0x494]
imul eax, eax, 0xc8
mov ecx, dword [edx + eax]
push ecx
push 0x587ad8
lea edx, [ebp - 0x424]
push edx
call fcn.00416090
add esp, 0xc
call fcn.00415ea0
mov dword [ebp - 0x1e1b4], eax
lea ecx, [ebp - 0x424]
call fcn.0052f0e0
mov dword [ebp - 0x1e1b8], eax
cmp dword [ebp - 0x1e1b8], 0
jne 0x4d2d91
mov dword [ebp - 0x1e384], 0
jmp 0x4d2e05
mov eax, dword [ebp - 0x1e1b8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x1e12c], eax
cmp dword [ebp - 0x1e12c], 0x3fffffff
jle 0x4d2dbf
mov dword [ebp - 0x1e388], 0
jmp 0x4d2df9
mov eax, dword [ebp - 0x1e12c]
shl eax, 1
call fcn.00558400
mov dword [ebp - 0x1e38c], esp
mov ecx, dword [ebp - 0x1e1b4]
push ecx
mov edx, dword [ebp - 0x1e12c]
push edx
mov eax, dword [ebp - 0x1e1b8]
push eax
mov ecx, dword [ebp - 0x1e38c]
push ecx
call fcn.004847d0
mov dword [ebp - 0x1e388], eax
mov edx, dword [ebp - 0x1e388]
mov dword [ebp - 0x1e384], edx
mov eax, dword [ebp - 0x1e384]
mov dword [ebp - 0x1e114], eax
mov ecx, dword [ebp - 0x1e114]
mov dword [ebp - 0x1e120], ecx
lea edx, [ebp - 0x1e128]
push edx
push 1
mov eax, dword [ebp - 0x1e1bc]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.00484900
mov dword [ebp - 0x1e174], eax
mov edx, dword [ebp - 0x1e174]
add edx, 1
push edx
mov eax, dword [ebp - 0x1e174]
push eax
mov ecx, dword [ebp - 0x1e1bc]
imul ecx, ecx, 0x78
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x414]
call fcn.0053c43f
lea eax, [ebp - 0x1e170]
push eax
mov ecx, dword [ebp - 0x1e1bc]
imul ecx, ecx, 0x78
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x414]
call fcn.0053c48d
jmp 0x4d2bf9
jmp 0x4d2bbc
cmp dword [ebp - 0x1dfac], 4
jl 0x4d3188
mov dword [ebp - 0xf8], 0x11
jmp 0x4d2ec7
mov eax, dword [ebp - 0xf8]
add eax, 1
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x12
jg 0x4d3188
mov ecx, dword [ebp - 0xf8]
add ecx, 0xe
mov dword [ebp - 0x1e1d4], ecx
push 0x3c
push 0
lea edx, [ebp - 0x1e214]
push edx
call fcn.00556a10
add esp, 0xc
lea eax, [ebp - 0x1e214]
push eax
mov ecx, dword [ebp - 0x1e1d4]
imul ecx, ecx, 0x78
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x414]
call fcn.0053c4d3
mov dword [ebp - 0x1e214], 0x3c
mov eax, dword [ebp - 0x1e20c]
and eax, 0xbfffffff
mov dword [ebp - 0x1e20c], eax
push 0x3c
push 0
lea ecx, [ebp - 0x1e214]
push ecx
call fcn.00556a10
add esp, 0xc
push 0x3c
push 0
lea edx, [ebp - 0x1e250]
push edx
call fcn.00556a10
add esp, 0xc
mov dword [ebp - 0x1e240], 0x2bc
lea eax, [ebp - 0x1e1fa]
push eax
lea ecx, [ebp - 0x1e234]
push ecx
call fcn.0055842c
add esp, 8
mov edx, dword [ebp - 0x1e210]
or edx, 0x40000000
mov dword [ebp - 0x1e210], edx
mov eax, dword [ebp - 0x1e210]
or eax, 0x80000000
mov dword [ebp - 0x1e210], eax
mov ecx, dword [ebp - 0x1e210]
or ecx, 0x20000000
mov dword [ebp - 0x1e210], ecx
mov edx, dword [ebp - 0x1e214]
shl edx, 1
mov dword [ebp - 0x1e214], edx
mov dword [ebp - 0x1e200], 0xff
mov dword [ebp - 0x1e1d8], 0xffffffff
mov dword [ebp - 0x1e1d0], 0
mov dword [ebp - 0x1e1cc], 0xffffffff
mov dword [ebp - 0x494], 0
jmp 0x4d2fff
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp + ecx*4 - 0x1df4c]
jg 0x4d3183
mov eax, dword [ebp - 0xf8]
imul eax, eax, 0xc8
lea ecx, [ebp + eax - 0x2bb4]
mov edx, dword [ebp - 0x494]
mov eax, dword [ecx + edx*4]
push eax
push 0x587adc
lea ecx, [ebp - 0x424]
push ecx
call fcn.00416090
add esp, 0xc
call fcn.00415ea0
mov dword [ebp - 0x1e264], eax
lea ecx, [ebp - 0x424]
call fcn.0052f0e0
mov dword [ebp - 0x1e268], eax
cmp dword [ebp - 0x1e268], 0
jne 0x4d307a
mov dword [ebp - 0x1e390], 0
jmp 0x4d30ee
mov edx, dword [ebp - 0x1e268]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x1e258], eax
cmp dword [ebp - 0x1e258], 0x3fffffff
jle 0x4d30a8
mov dword [ebp - 0x1e394], 0
jmp 0x4d30e2
mov eax, dword [ebp - 0x1e258]
shl eax, 1
call fcn.00558400
mov dword [ebp - 0x1e398], esp
mov eax, dword [ebp - 0x1e264]
push eax
mov ecx, dword [ebp - 0x1e258]
push ecx
mov edx, dword [ebp - 0x1e268]
push edx
mov eax, dword [ebp - 0x1e398]
push eax
call fcn.004847d0
mov dword [ebp - 0x1e394], eax
mov ecx, dword [ebp - 0x1e394]
mov dword [ebp - 0x1e390], ecx
mov edx, dword [ebp - 0x1e390]
mov dword [ebp - 0x1e254], edx
mov eax, dword [ebp - 0x1e254]
mov dword [ebp - 0x1e1c8], eax
lea ecx, [ebp - 0x1e1d0]
push ecx
push 1
mov edx, dword [ebp - 0x1e1d4]
imul edx, edx, 0x78
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x414]
call fcn.00484900
mov dword [ebp - 0x1e260], eax
mov ecx, dword [ebp - 0x1e260]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x1e260]
push edx
mov eax, dword [ebp - 0x1e1d4]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c43f
lea edx, [ebp - 0x1e214]
push edx
mov eax, dword [ebp - 0x1e1d4]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c48d
jmp 0x4d2ff0
jmp 0x4d2eb8
cmp dword [ebp - 0x1dfac], 5
jl 0x4d3472
mov dword [ebp - 0xf8], 0x13
jmp 0x4d31b0
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
cmp dword [ebp - 0xf8], 0x14
jg 0x4d3472
mov eax, dword [ebp - 0xf8]
add eax, 0xe
mov dword [ebp - 0x1e280], eax
push 0x3c
push 0
lea ecx, [ebp - 0x1e2c0]
push ecx
call fcn.00556a10
add esp, 0xc
lea edx, [ebp - 0x1e2c0]
push edx
mov eax, dword [ebp - 0x1e280]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c4d3
mov dword [ebp - 0x1e2c0], 0x3c
mov edx, dword [ebp - 0x1e2b8]
and edx, 0xbfffffff
mov dword [ebp - 0x1e2b8], edx
push 0x3c
push 0
lea eax, [ebp - 0x1e2c0]
push eax
call fcn.00556a10
add esp, 0xc
push 0x3c
push 0
lea ecx, [ebp - 0x1e2fc]
push ecx
call fcn.00556a10
add esp, 0xc
mov dword [ebp - 0x1e2ec], 0x2bc
lea edx, [ebp - 0x1e2a6]
push edx
lea eax, [ebp - 0x1e2e0]
push eax
call fcn.0055842c
add esp, 8
mov ecx, dword [ebp - 0x1e2bc]
or ecx, 0x40000000
mov dword [ebp - 0x1e2bc], ecx
mov edx, dword [ebp - 0x1e2bc]
or edx, 0x80000000
mov dword [ebp - 0x1e2bc], edx
mov eax, dword [ebp - 0x1e2bc]
or eax, 0x20000000
mov dword [ebp - 0x1e2bc], eax
mov ecx, dword [ebp - 0x1e2c0]
shl ecx, 1
mov dword [ebp - 0x1e2c0], ecx
mov dword [ebp - 0x1e2ac], 0xff
mov dword [ebp - 0x1e284], 0xffffffff
mov dword [ebp - 0x1e27c], 0
mov dword [ebp - 0x1e278], 0xffffffff
mov dword [ebp - 0x494], 0
jmp 0x4d32e9
mov edx, dword [ebp - 0x494]
add edx, 1
mov dword [ebp - 0x494], edx
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [ebp + eax*4 - 0x1df4c]
jg 0x4d346d
mov edx, dword [ebp - 0xf8]
imul edx, edx, 0xc8
lea eax, [ebp + edx - 0x2bb4]
mov ecx, dword [ebp - 0x494]
mov edx, dword [eax + ecx*4]
push edx
push 0x587ae0
lea eax, [ebp - 0x424]
push eax
call fcn.00416090
add esp, 0xc
call fcn.00415ea0
mov dword [ebp - 0x1e310], eax
lea ecx, [ebp - 0x424]
call fcn.0052f0e0
mov dword [ebp - 0x1e314], eax
cmp dword [ebp - 0x1e314], 0
jne 0x4d3364
mov dword [ebp - 0x1e39c], 0
jmp 0x4d33d8
mov ecx, dword [ebp - 0x1e314]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x1e304], eax
cmp dword [ebp - 0x1e304], 0x3fffffff
jle 0x4d3392
mov dword [ebp - 0x1e3a0], 0
jmp 0x4d33cc
mov eax, dword [ebp - 0x1e304]
shl eax, 1
call fcn.00558400
mov dword [ebp - 0x1e3a4], esp
mov edx, dword [ebp - 0x1e310]
push edx
mov eax, dword [ebp - 0x1e304]
push eax
mov ecx, dword [ebp - 0x1e314]
push ecx
mov edx, dword [ebp - 0x1e3a4]
push edx
call fcn.004847d0
mov dword [ebp - 0x1e3a0], eax
mov eax, dword [ebp - 0x1e3a0]
mov dword [ebp - 0x1e39c], eax
mov ecx, dword [ebp - 0x1e39c]
mov dword [ebp - 0x1e300], ecx
mov edx, dword [ebp - 0x1e300]
mov dword [ebp - 0x1e274], edx
lea eax, [ebp - 0x1e27c]
push eax
push 1
mov ecx, dword [ebp - 0x1e280]
imul ecx, ecx, 0x78
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x414]
call fcn.00484900
mov dword [ebp - 0x1e30c], eax
mov eax, dword [ebp - 0x1e30c]
add eax, 1
push eax
mov ecx, dword [ebp - 0x1e30c]
push ecx
mov edx, dword [ebp - 0x1e280]
imul edx, edx, 0x78
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x414]
call fcn.0053c43f
lea ecx, [ebp - 0x1e2c0]
push ecx
mov edx, dword [ebp - 0x1e280]
imul edx, edx, 0x78
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x414]
call fcn.0053c48d
jmp 0x4d32da
jmp 0x4d31a1
mov dword [ebp - 0x2c08], 0
mov dword [ebp - 0x2bc0], 0x23
push 0x3c
push 0
lea ecx, [ebp - 0x2c04]
push ecx
call fcn.00556a10
add esp, 0xc
lea edx, [ebp - 0x2c04]
push edx
mov eax, dword [ebp - 0x2bc0]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c4d3
mov dword [ebp - 0x2c04], 0x3c
mov edx, dword [ebp - 0x2bfc]
and edx, 0xbfffffff
mov dword [ebp - 0x2bfc], edx
push 0x3c
push 0
lea eax, [ebp - 0x2c04]
push eax
call fcn.00556a10
add esp, 0xc
push 0x3c
push 0
lea ecx, [ebp - 0x4608]
push ecx
call fcn.00556a10
add esp, 0xc
mov dword [ebp - 0x45f8], 0x2bc
lea edx, [ebp - 0x2bea]
push edx
lea eax, [ebp - 0x45ec]
push eax
call fcn.0055842c
add esp, 8
mov ecx, dword [ebp - 0x2c00]
or ecx, 0x40000000
mov dword [ebp - 0x2c00], ecx
mov edx, dword [ebp - 0x2c00]
or edx, 0x80000000
mov dword [ebp - 0x2c00], edx
mov eax, dword [ebp - 0x2c00]
or eax, 0x20000000
mov dword [ebp - 0x2c00], eax
mov ecx, dword [ebp - 0x2c04]
shl ecx, 1
mov dword [ebp - 0x2c04], ecx
mov dword [ebp - 0x2bf0], 0xff
mov dword [ebp - 0x2bc8], 0xffffffff
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xffffffff
push 1
push 0
push 0x587ae4
lea edx, [ebp - 0x424]
push edx
call fcn.00416090
add esp, 0x10
mov dword [ebp - 0x430], 4
mov dword [ebp - 0x494], 0
jmp 0x4d35bf
mov eax, dword [ebp - 0x494]
add eax, 1
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [ebp - 0x48c]
jge 0x4d36b5
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp + edx*4 - 0x41c]
movsx ecx, word [ebp + eax*4 - 0x3822]
push ecx
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp + edx*4 - 0x41c]
movsx ecx, word [ebp + eax*4 - 0x3824]
push ecx
push 0x587af0
lea edx, [ebp - 0x424]
push edx
call fcn.00416090
add esp, 0x10
lea ecx, [ebp - 0x424]
call fcn.00413d40
mov dword [ebp - 0x1e318], eax
mov eax, dword [ebp - 0x1e318]
mov dword [ebp - 0x18], eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x424]
call fcn.00415650
lea ecx, [ebp - 0x20]
push ecx
push 1
mov edx, dword [ebp - 0x2bc0]
imul edx, edx, 0x78
mov eax, dword [ebp - 0x1e354]
lea ecx, [eax + edx + 0x414]
call fcn.00484900
mov dword [ebp - 0x1e31c], eax
mov ecx, dword [ebp - 0x1e31c]
add ecx, dword [ebp - 0x430]
push ecx
mov edx, dword [ebp - 0x1e31c]
push edx
mov eax, dword [ebp - 0x2bc0]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c43f
lea edx, [ebp - 0x2c04]
push edx
mov eax, dword [ebp - 0x2bc0]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.0053c48d
jmp 0x4d35b0
mov dword [ebp - 0x438], 0
jmp 0x4d36d0
mov edx, dword [ebp - 0x438]
add edx, 1
mov dword [ebp - 0x438], edx
cmp dword [ebp - 0x438], 5
jge 0x4d387c
mov dword [ebp - 0x2c08], 0
push 0x587afc
lea eax, [ebp - 0x2c08]
push eax
mov ecx, dword [ebp - 0x49c]
push ecx
call fcn.00401a00
add esp, 0xc
mov dword [ebp - 0x1dfa8], 0
jmp 0x4d371d
mov edx, dword [ebp - 0x1dfa8]
add edx, 1
mov dword [ebp - 0x1dfa8], edx
mov eax, dword [ebp - 0x1dfa8]
cmp eax, dword [ebp - 0x1dfac]
jge 0x4d3798
mov ecx, dword [ebp - 0x438]
mov edx, dword [ebp - 0x1e354]
lea eax, [edx + ecx*8 + 0x2b4]
mov ecx, dword [ebp - 0x438]
imul ecx, ecx, 0x14
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x1ec]
mov edx, dword [ebp - 0x1dfa8]
mov edx, dword [ebp + edx*4 - 0x45cc]
movsx ecx, word [ecx + edx*2]
lea edx, [eax + ecx*4]
push ecx
mov ecx, esp
mov dword [ebp - 0x1e340], esp
push edx
call fcn.00415510
mov dword [ebp - 0x1e3a8], eax
lea eax, [ebp - 0x2c08]
push eax
mov ecx, dword [ebp - 0x49c]
push ecx
call fcn.00401ff0
add esp, 0xc
jmp 0x4d370e
push 0x587b00
lea edx, [ebp - 0x2c08]
push edx
mov eax, dword [ebp - 0x49c]
push eax
call fcn.00401a00
add esp, 0xc
mov ecx, dword [ebp - 0x49c]
add ecx, dword [ebp - 0x2c08]
mov byte [ecx], 0
mov edx, dword [ebp - 0x49c]
push edx
lea ecx, [ebp - 0x424]
call fcn.004155d0
lea ecx, [ebp - 0x424]
call fcn.00415630
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x1e320], eax
mov ecx, dword [ebp - 0x1e320]
mov dword [ebp - 0x18], ecx
lea edx, [ebp - 0x20]
push edx
push 1
mov eax, dword [ebp - 0x2bc0]
imul eax, eax, 0x78
mov ecx, dword [ebp - 0x1e354]
lea ecx, [ecx + eax + 0x414]
call fcn.00484900
mov dword [ebp - 0x1e324], eax
mov edx, dword [ebp - 0x1e324]
add edx, dword [ebp - 0x430]
push edx
mov eax, dword [ebp - 0x1e324]
push eax
mov ecx, dword [ebp - 0x2bc0]
imul ecx, ecx, 0x78
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x414]
call fcn.0053c43f
lea eax, [ebp - 0x2c04]
push eax
mov ecx, dword [ebp - 0x2bc0]
imul ecx, ecx, 0x78
mov edx, dword [ebp - 0x1e354]
lea ecx, [edx + ecx + 0x414]
call fcn.0053c48d
jmp 0x4d36c1
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1e344], eax
mov ecx, dword [ebp - 0x1e344]
push ecx
call fcn.00534ac4
add esp, 4
mov edx, dword [ebp - 0x49c]
mov dword [ebp - 0x1e348], edx
mov eax, dword [ebp - 0x1e348]
push eax
call fcn.00534ac4
add esp, 4
mov dword [ebp - 0x494], 0
jmp 0x4d38ca
mov ecx, dword [ebp - 0x494]
add ecx, 1
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x494]
cmp edx, dword [ebp - 0x1dfac]
jge 0x4d38fe
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp - 0x4570]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0x1e34c], edx
mov eax, dword [ebp - 0x1e34c]
push eax
call fcn.00534ac4
add esp, 4
jmp 0x4d38bb
mov ecx, dword [ebp - 0x4570]
mov dword [ebp - 0x1e350], ecx
mov edx, dword [ebp - 0x1e350]
push edx
call fcn.00534ac4
add esp, 4
call fcn.00415420
mov dword [ebp - 0x1e3ac], eax
push 0xffffffffffffffff
mov eax, dword [ebp - 0x1e3ac]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1e3ac]
mov eax, dword [edx + 0x9c]
call eax
mov byte [ebp - 4], 5
push fcn.0052ee60
push 0x14
push 4
lea ecx, [ebp - 0x3694]
push ecx
call fcn.00557d54
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x424]
call fcn.0052ee60
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4574]
call fcn.0052ee60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4578]
call fcn.0052ee60
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x428]
call fcn.0052ee60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1dc60]
call fcn.0052ee60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1df58]
call fcn.0052ee60
lea esp, [ebp - 0x1e3b8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x28]
xor ecx, ebp
call fcn.00556710
mov esp, ebp
pop ebp
ret