Function at 0x41e5cf
Capabilities:
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c3ceb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1538
call fcn.004bfe70
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x41e98d
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xa2c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xcdc], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0xa9c], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0xcec], eax
mov eax, dword [ebp - 0xa9c]
movzx eax, byte [eax]
test eax, eax
je 0x41e66a
mov eax, dword [ebp - 0xa2c]
mov dword [ebp - 0xccc], eax
mov eax, dword [ebp - 0xccc]
mov dword [ebp - 0xcd4], eax
mov eax, dword [ebp - 0xcd4]
movzx eax, byte [eax]
test eax, eax
je 0x41e665
push 0x487
call dword [0xadd120]
jmp 0x41e988
mov dword [ebp - 0x6c4], 0x4325
mov dword [ebp - 0xce4], 0xabafc0
cmp dword [ebp - 0x6c4], 0x45cb
jle 0x41e78e
and dword [ebp - 0x18c], 0
jmp 0x41e6a4
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x7474
jge 0x41e78e
and dword [ebp - 0x3cc], 0
jmp 0x41e6ca
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0x2a9f
jge 0x41e789
and dword [ebp - 0x184], 0
jmp 0x41e6f0
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x7e59
jge 0x41e784
and dword [ebp - 0x2d4], 0
jmp 0x41e716
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x472c
jge 0x41e77f
mov eax, dword [ebp - 0x3cc]
cdq
idiv dword [ebp - 0x184]
imul edx, dword [ebp - 0x2d4]
mov eax, dword [ebp - 0x18c]
sub eax, edx
cdq
mov dword [ebp - 0xa38], eax
mov dword [ebp - 0xa34], edx
push dword [ebp - 0xa34]
push dword [ebp - 0xa38]
lea ecx, [ebp - 0x1450]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0044cd8c
push eax
call fcn.004add27
pop ecx
lea ecx, [ebp - 0x1450]
call fcn.0044cd82
jmp 0x41e709
jmp 0x41e6e3
jmp 0x41e6bd
jmp 0x41e697
mov eax, dword [ebp - 0xcdc]
mov dword [ebp - 0xcf4], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x6c4], 0x4199
jge 0x41e7b6
push dword [ebp - 0xce4]
call fcn.004add27
pop ecx
jmp 0x41e7d2
or dword [ebp - 4], 0xffffffff
jmp 0x41e7dc
mov eax, dword [ebp - 0xcec]
mov dword [ebp - 0xcfc], eax
mov dword [ebp - 0x8d4], 0xfb9
mov dword [ebp - 0xd0c], 0xabb008
cmp dword [ebp - 0x8d4], 0x10ba
jle 0x41e8e5
and dword [ebp - 0x19c], 0
jmp 0x41e822
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x2b87
jge 0x41e8e5
and dword [ebp - 0x2dc], 0
jmp 0x41e848
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0x4d7d
jge 0x41e8e0
and dword [ebp - 0x37c], 0
jmp 0x41e86e
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0x519b
jge 0x41e8db
and dword [ebp - 0x194], 0
jmp 0x41e890
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x5d72
jge 0x41e8d9
mov eax, dword [ebp - 0x37c]
add eax, dword [ebp - 0x194]
and eax, dword [ebp - 0x2dc]
or eax, dword [ebp - 0x19c]
cdq
mov dword [ebp - 0xa44], eax
mov dword [ebp - 0xa40], edx
push dword [ebp - 0xa40]
push dword [ebp - 0xa44]
mov ecx, 0xada438
call fcn.0044cd97
jmp 0x41e883
jmp 0x41e861
jmp 0x41e83b
jmp 0x41e815
mov eax, dword [ebp - 0xcf4]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0xcfc]
mov dword [ebp - 0xd04], eax
mov eax, dword [ebp - 0x140]
mov dword [eax], 0
jmp 0x41e91c
mov eax, dword [ebp - 0x140]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x140]
mov dword [ecx], eax
mov eax, dword [ebp - 0x140]
cmp dword [eax], 4
jge 0x41e93f
mov eax, dword [ebp - 0x140]
push dword [eax]
mov ecx, dword [ebp - 0xd04]
call fcn.0044cf9a
or dword [eax], 0xffffffff
jmp 0x41e90b
mov dword [ebp - 4], 2
cmp dword [ebp - 0x8d4], 0xe0b
jge 0x41e962
mov edx, dword [ebp - 0xd0c]
mov ecx, 0xada438
call fcn.0044e73d
jmp 0x41e97e
or dword [ebp - 4], 0xffffffff
jmp 0x41e988
jmp 0x427a8f
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x950], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xa04], eax
lea eax, [ebp + 0x30]
mov dword [ebp - 0xd14], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xd24], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xa24], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x9fc], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xd1c], eax
mov eax, dword [ebp - 0xd14]
movzx eax, byte [eax]
test eax, eax
je 0x427a1a
mov eax, dword [ebp - 0xd1c]
mov dword [ebp - 0x9b8], eax
mov eax, dword [ebp - 0xd24]
mov dword [ebp - 0xc44], eax
mov eax, dword [ebp - 0xa24]
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x950]
mov dword [ebp - 0x46c], eax
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x16c], 0x8f01ba02
push 1
lea ecx, [ebp - 0xd34]
call fcn.0044ceac
mov dword [ebp - 0xcac], 0xb389fa18
push 0
lea eax, [ebp - 0xd34]
push eax
push 0x222
push 0x866
lea eax, [ebp - 0x11c0]
push eax
call fcn.0040467a
add esp, 0x14
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x84]
push eax
push 0
push 0x2774
push 0x76c1
call fcn.00405edb
add esp, 0x14
mov dword [ebp - 0x16c], 0xffffffff
cmp dword [ebp - 0x16c], 0
je 0x41ebf6
cmp dword [ebp - 0x38], 0
je 0x41eafb
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x38], eax
je 0x41eab4
mov dword [ebp - 0x8dc], 1
jmp 0x41eabb
and dword [ebp - 0x8dc], 0
cmp dword [ebp - 0x8dc], 0xaf9d66de
jb 0x41ead3
mov dword [ebp - 0x8e4], 1
jmp 0x41eada
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x8e4]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x84], 0
je 0x41eafb
mov dword [ebp - 0x8ec], 1
jmp 0x41eb02
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x8ec], eax
jle 0x41eb1c
mov dword [ebp - 0x8c0], 1
jmp 0x41eb23
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x8c0], eax
jg 0x41eb3d
mov dword [ebp - 0x4bc], 1
jmp 0x41eb44
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x4bc], eax
jne 0x41eb5b
mov dword [ebp - 0xc10], 1
jmp 0x41eb62
and dword [ebp - 0xc10], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x11e4], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x4b8], eax
push 0
lea ecx, [ebp - 0xd34]
call fcn.0044cf9a
mov ecx, dword [ebp - 0x4b8]
mov dword [eax], ecx
cmp dword [ebp - 0x4b8], 0x1b17
jge 0x41eba4
mov dword [ebp - 0x6e0], 1
jmp 0x41ebab
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x6e0], eax
jne 0x41ebc5
mov dword [ebp - 0x4c0], 1
jmp 0x41ebcc
and dword [ebp - 0x4c0], 0
imul eax, dword [ebp - 0x4c0], 0
cmp eax, dword [ebp - 0x38]
jl 0x41ebea
push 0
lea ecx, [ebp - 0xd34]
call fcn.0044cf9a
cmp dword [eax], 0
je 0x41ebf6
mov dword [ebp - 0x7e4], 1
jmp 0x41ebfd
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x7e4]
jne 0x41ec1d
cmp dword [ebp - 0x16c], 0
je 0x41ec1d
mov dword [ebp - 0x958], 1
jmp 0x41ec24
and dword [ebp - 0x958], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x11ec], eax
push 0
lea ecx, [ebp - 0xd34]
call fcn.0044cf9a
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x84], eax
jl 0x41ec54
mov dword [ebp - 0x4c8], 1
jmp 0x41ec5b
and dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x4c8], 0xc30bca0b
je 0x41ec73
mov dword [ebp - 0x6e4], 1
jmp 0x41ec7a
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x6e4], eax
jle 0x41ec91
mov dword [ebp - 0x4d0], 1
jmp 0x41ec98
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jne 0x41ecb9
mov eax, 0x6dcff2fd
test eax, eax
jne 0x41ecb9
and dword [ebp - 0x8e8], 0
jmp 0x41ecc3
mov dword [ebp - 0x8e8], 1
mov eax, dword [ebp - 0x8e8]
mov dword [ebp - 0xcac], eax
lea ecx, [ebp - 0xd34]
call fcn.0044cf7e
mov dword [ebp - 0x44], 0xd1e1e87d
mov dword [ebp - 0x478], 1
mov dword [ebp - 0x40c], 0
jmp 0x41ed04
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 3
jge 0x41ed20
mov eax, dword [ebp - 0x40c]
mov dword [ebp + eax*4 - 0xd44], 1
jmp 0x41ecf7
mov byte [ebp - 0xcf], 0
push 0x2cbb
push 0x20c
push 0x1391
push 0x3ddc
lea eax, [ebp - 0xcf]
push eax
push 0
push 0x2582
push 0x3941
push 0x5876
push 0x379d
call fcn.0042caef
add esp, 0x28
mov dword [ebp - 0x44], 0
jmp 0x41ed70
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jg 0x41eed1
mov dword [ebp - 0xe38], 0xfffffffc
mov dword [ebp - 0xe34], 0xfffffffc
mov dword [ebp - 0xe30], 0xfffffffc
mov dword [ebp - 0xe2c], 0xfffffffc
mov dword [ebp - 0x968], 0x8407374f
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
mov edx, dword [ebp + edx*4 - 0xd44]
add edx, 4
sub ecx, edx
cmp dword [ebp + eax*4 - 0xd44], ecx
jne 0x41edd6
mov dword [ebp - 0x960], 1
jmp 0x41eddd
and dword [ebp - 0x960], 0
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0xd44]
mov dword [ebp - 0x11f4], eax
push 2
pop eax
test eax, eax
je 0x41edf8
cmp dword [ebp - 0x44], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xe38], 0xce96b779
jae 0x41ee16
mov dword [ebp - 0x4d8], 1
jmp 0x41ee1d
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x478], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd44]
cmp dword [ebp - 0x478], eax
jg 0x41ee4a
mov dword [ebp - 0x6ec], 1
jmp 0x41ee51
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x6ec], eax
je 0x41ee68
mov dword [ebp - 0x4e0], 1
jmp 0x41ee6f
and dword [ebp - 0x4e0], 0
cmp dword [ebp - 0x4e0], 0x8963
jne 0x41ee87
mov dword [ebp - 0xc1c], 1
jmp 0x41ee8e
and dword [ebp - 0xc1c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe38]
mov dword [ebp - 0x11fc], eax
cmp dword [ebp - 0x968], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp + eax - 0xe38]
mov dword [ebp + ecx*4 - 0xd44], eax
cmp dword [ebp - 0x478], 0
je 0x41eecc
jmp 0x41ed69
jmp 0x41ed69
mov dword [ebp - 0x510], 0x33fe
mov dword [ebp - 0x978], 0xabb058
cmp dword [ebp - 0x510], 0x37b4
jle 0x41ef68
and dword [ebp - 0x1a4], 0
jmp 0x41ef07
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x7f73
jge 0x41ef68
and dword [ebp - 0x2e4], 0
jmp 0x41ef29
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x12b6
jge 0x41ef66
mov eax, dword [ebp - 0x1a4]
or eax, dword [ebp - 0x2e4]
cdq
mov dword [ebp - 0xa50], eax
mov dword [ebp - 0xa4c], edx
push dword [ebp - 0xa4c]
push dword [ebp - 0xa50]
mov ecx, 0xada438
call fcn.0044cd97
jmp 0x41ef1c
jmp 0x41eefa
mov dword [ebp - 0x7ec], 0x3d0f
mov dword [ebp - 0xcb4], 0xabb0a8
cmp dword [ebp - 0x7ec], 0x3f6b
jle 0x41f055
and dword [ebp - 0x1ac], 0
jmp 0x41efa2
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x5e86
jge 0x41f055
and dword [ebp - 0x384], 0
jmp 0x41efc8
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 0x4c6c
jge 0x41f050
and dword [ebp - 0x1b4], 0
jmp 0x41efea
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x6bfd
jge 0x41f04b
mov eax, dword [ebp - 0x1ac]
add eax, dword [ebp - 0x384]
mov ecx, dword [ebp - 0x1b4]
shl eax, cl
cdq
mov dword [ebp - 0xa5c], eax
mov dword [ebp - 0xa58], edx
push dword [ebp - 0xa58]
push dword [ebp - 0xa5c]
lea ecx, [ebp - 0x1390]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0044cd8c
push eax
call fcn.004add27
pop ecx
lea ecx, [ebp - 0x1390]
call fcn.0044cd82
jmp 0x41efdd
jmp 0x41efbb
jmp 0x41ef95
mov dword [ebp - 4], 4
cmp dword [ebp - 0x7ec], 0x3939
jge 0x41f074
push dword [ebp - 0xcb4]
call fcn.004add27
pop ecx
jmp 0x41f090
or dword [ebp - 4], 0xffffffff
jmp 0x41f09a
mov dword [ebp - 0x78], 1
mov dword [ebp - 0xc28], 0x3637
mov dword [ebp - 0x78], 2
jmp 0x41f0bb
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xfffffffc
jle 0x41f2bc
mov dword [ebp - 0xe8], 0xaed23b61
mov dword [ebp - 0x508], 0x966c4779
mov dword [ebp - 0x2ec], 0
jmp 0x41f0f2
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 2
jge 0x41f10e
mov eax, dword [ebp - 0x2ec]
mov dword [ebp + eax*4 - 0x111c], 0xffffffff
jmp 0x41f0e5
mov byte [ebp - 0xfa], 0
lea eax, [ebp - 0xfa]
push eax
push 0
call fcn.0040ea72
pop ecx
pop ecx
mov dword [ebp - 0xe8], 0
jmp 0x41f13e
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jg 0x41f2b7
mov dword [ebp - 0x86c], 6
cmp dword [ebp - 0x86c], 0xbc9c3d06
ja 0x41f16d
mov dword [ebp - 0x4f8], 1
jmp 0x41f174
and dword [ebp - 0x4f8], 0
cmp dword [ebp - 0xe8], 7
jl 0x41f189
mov dword [ebp - 0x4e8], 1
jmp 0x41f190
and dword [ebp - 0x4e8], 0
cmp dword [ebp - 0x4e8], 0x87c7
je 0x41f1ab
cmp dword [ebp - 0x78], 0
jne 0x41f1ab
and dword [ebp - 0x6f4], 0
jmp 0x41f1b5
mov dword [ebp - 0x6f4], 1
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x6f4]
jne 0x41f1cf
mov dword [ebp - 0x4f0], 1
jmp 0x41f1d6
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x4f0], eax
je 0x41f1ed
mov dword [ebp - 0x970], 1
jmp 0x41f1f4
and dword [ebp - 0x970], 0
mov eax, dword [ebp - 0x86c]
mov dword [ebp - 0x1204], eax
cmp dword [ebp - 0x78], 0xcda7
jg 0x41f21e
mov eax, 0x68f62c4d
test eax, eax
je 0x41f21e
mov dword [ebp - 0x6fc], 1
jmp 0x41f225
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x4f8]
cmp eax, dword [ebp - 0x6fc]
jne 0x41f248
cmp dword [ebp - 0xe8], 0
je 0x41f248
mov dword [ebp - 0x500], 1
jmp 0x41f24f
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x500], eax
jle 0x41f266
mov dword [ebp - 0x7f4], 1
jmp 0x41f26d
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x508], eax
mov eax, dword [ebp - 0x508]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x111c]
cmp eax, 0xcc8a
jne 0x41f29f
mov dword [ebp - 0x704], 1
jmp 0x41f2a6
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0xc28], eax
jmp 0x41f131
jmp 0x41f0b4
mov dword [ebp - 4], 6
cmp dword [ebp - 0x510], 0x3221
jge 0x41f2df
mov edx, dword [ebp - 0x978]
mov ecx, 0xada438
call fcn.0044e73d
jmp 0x41f2fb
or dword [ebp - 4], 0xffffffff
jmp 0x41f305
mov dword [ebp - 0x75c], 0
mov dword [ebp - 0x128], 0xfffffff8
mov dword [ebp - 0xf8], 2
mov dword [ebp - 0x980], 0x6721f7d
mov dword [ebp - 0x8ac], 0x722
mov dword [ebp - 0xcbc], 0xabb0f8
cmp dword [ebp - 0x8ac], 0x93c
jle 0x41f3c4
and dword [ebp - 0x1bc], 0
jmp 0x41f363
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x5a70
jge 0x41f3c4
and dword [ebp - 0x3d4], 0
jmp 0x41f385
mov eax, dword [ebp - 0x3d4]
inc eax
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 0x293a
jge 0x41f3c2
mov eax, dword [ebp - 0x1bc]
add eax, dword [ebp - 0x3d4]
cdq
mov dword [ebp - 0xa68], eax
mov dword [ebp - 0xa64], edx
push dword [ebp - 0xa64]
push dword [ebp - 0xa68]
mov ecx, 0xada438
call fcn.0044cd97
jmp 0x41f378
jmp 0x41f356
mov dword [ebp - 4], 8
cmp dword [ebp - 0x8ac], 0x43c
jge 0x41f3e7
mov edx, dword [ebp - 0xcbc]
mov ecx, 0xada438
call fcn.0044e73d
jmp 0x41f403
or dword [ebp - 4], 0xffffffff
jmp 0x41f40d
mov dword [ebp - 0x1c4], 0
jmp 0x41f426
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 2
jge 0x41f442
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0xe88], 3
jmp 0x41f419
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x128], eax
jle 0x41f45c
mov dword [ebp - 0x518], 1
jmp 0x41f463
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x128], eax
je 0x41f47d
mov dword [ebp - 0x70c], 1
jmp 0x41f484
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x518]
cmp eax, dword [ebp - 0x70c]
jne 0x41f49e
mov dword [ebp - 0x714], 1
jmp 0x41f4a5
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0xf8], eax
jg 0x41f4bf
mov dword [ebp - 0x520], 1
jmp 0x41f4c6
and dword [ebp - 0x520], 0
imul eax, dword [ebp - 0x520], 0xfffffffa
cmp eax, dword [ebp - 0xf8]
jge 0x41f4e1
mov dword [ebp - 0x7fc], 1
jmp 0x41f4e8
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x7fc], eax
jge 0x41f503
xor eax, eax
jne 0x41f503
and dword [ebp - 0x528], 0
jmp 0x41f50d
mov dword [ebp - 0x528], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x528]
sub ecx, dword [ebp + eax - 0xe88]
je 0x41f540
cmp dword [ebp - 0xf8], 0
je 0x41f540
mov eax, 0x18bd
test eax, eax
je 0x41f540
mov dword [ebp - 0x530], 1
jmp 0x41f547
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x714]
cmp eax, dword [ebp - 0x530]
jg 0x41f561
mov dword [ebp - 0x874], 1
jmp 0x41f568
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x874], eax
jg 0x41f584
xor eax, eax
inc eax
jne 0x41f584
and dword [ebp - 0x538], 0
jmp 0x41f58e
mov dword [ebp - 0x538], 1
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0xf8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe88]
cmp dword [ebp - 0xf8], eax
jl 0x41f5bb
mov dword [ebp - 0x71c], 1
jmp 0x41f5c2
and dword [ebp - 0x71c], 0
imul eax, dword [ebp - 0x71c], 0xffffffff
mov dword [ebp - 0x980], eax
mov byte [ebp - 0xee], 0
lea eax, [ebp - 0xee]
push eax
push 0
call fcn.0042fbaa
pop ecx
pop ecx
mov dword [ebp - 0x5c0], 0xffffffff
push 1
lea ecx, [ebp - 0x11c]
call fcn.0044ceac
mov dword [ebp - 0x8b4], 0x50a0c201
mov dword [ebp - 0xc4c], 0xffffffff
push 0x102a
push 0x49b9
push 0
push 1
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x120c]
push eax
push 0xa1
call fcn.00401ff0
add esp, 0x1c
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
and dword [eax], 0
jmp 0x41f670
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x540]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x540]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
cmp dword [eax], 0xa
je 0x41fcff
mov dword [ebp - 0x724], 0x679bdd86
or dword [ebp - 0xeac], 0xffffffff
or dword [ebp - 0xea8], 0xffffffff
or dword [ebp - 0xea4], 0xffffffff
or dword [ebp - 0xea0], 0xffffffff
lea ecx, [ebp - 0x45d]
call fcn.0044cfa9
push eax
lea eax, [ebp - 0xe9c]
push eax
lea eax, [ebp - 0xeac]
push eax
lea ecx, [ebp - 0x1298]
call fcn.0044cfac
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x904]
call fcn.0044cf58
mov dword [ebp - 0x598], 0
mov dword [ebp - 0x168], 0x7fad
push 1
lea ecx, [ebp - 0x1160]
call fcn.0044ceac
mov dword [ebp - 0x18], 0
jmp 0x41f712
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x41f728
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x934], 0x6c19
jmp 0x41f70b
mov dword [ebp - 0x18], 0
jmp 0x41f738
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x41f74e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1254], 4
jmp 0x41f731
mov dword [ebp - 0x18], 0
jmp 0x41f75e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x41f774
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1140], 1
jmp 0x41f757
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x1160]
push eax
call fcn.0040a1f1
add esp, 0xc
push 0x70a5
push 1
push 0x6422
push 0
call fcn.0040220d
add esp, 0x10
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
mov esi, eax
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [eax]
sub eax, dword [ebp + ecx - 0x934]
cmp dword [esi], eax
jne 0x41f7da
mov dword [ebp - 0x804], 1
jmp 0x41f7e1
and dword [ebp - 0x804], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x934]
cmp dword [ebp - 0x804], eax
jl 0x41f802
mov dword [ebp - 0x548], 1
jmp 0x41f809
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x1234], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x1254]
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
cmp esi, dword [eax]
jge 0x41f84b
mov dword [ebp - 0x550], 1
jmp 0x41f852
and dword [ebp - 0x550], 0
push 2
lea ecx, [ebp - 0x904]
call fcn.0044cf9a
mov ecx, dword [ebp - 0x550]
cmp ecx, dword [eax]
jg 0x41f875
mov dword [ebp - 0x8d0], 1
jmp 0x41f87c
and dword [ebp - 0x8d0], 0
push 2
lea ecx, [ebp - 0x904]
call fcn.0044cf9a
push 2
lea ecx, [ebp - 0x904]
call fcn.0044cf9a
mov ecx, dword [ebp - 0x598]
cmp dword [eax], ecx
jne 0x41f8ac
mov dword [ebp - 0x558], 1
jmp 0x41f8b3
and dword [ebp - 0x558], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x934]
cmp dword [ebp - 0x558], eax
jg 0x41f8d4
mov dword [ebp - 0x72c], 1
jmp 0x41f8db
and dword [ebp - 0x72c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1140]
cmp dword [ebp - 0x72c], eax
jge 0x41f8fc
mov dword [ebp - 0x560], 1
jmp 0x41f903
and dword [ebp - 0x560], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x934]
cmp dword [ebp - 0x560], eax
jle 0x41f924
mov dword [ebp - 0x80c], 1
jmp 0x41f92b
and dword [ebp - 0x80c], 0
cmp dword [ebp - 0x80c], 0x2987
jge 0x41f943
mov dword [ebp - 0x568], 1
jmp 0x41f94a
and dword [ebp - 0x568], 0
cmp dword [ebp - 0x568], 0xffffffff
jge 0x41f95f
mov dword [ebp - 0x734], 1
jmp 0x41f966
and dword [ebp - 0x734], 0
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
mov ecx, dword [ebp - 0x734]
cmp ecx, dword [eax]
jne 0x41f989
mov dword [ebp - 0x570], 1
jmp 0x41f990
and dword [ebp - 0x570], 0
cmp dword [ebp - 0x570], 0
jne 0x41f9a5
mov dword [ebp - 0x87c], 1
jmp 0x41f9ac
and dword [ebp - 0x87c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x934]
cmp eax, dword [ebp - 0x87c]
jge 0x41f9cd
mov dword [ebp - 0x578], 1
jmp 0x41f9d4
and dword [ebp - 0x578], 0
cmp dword [ebp - 0x578], 0xdd1f
jg 0x41f9ec
mov dword [ebp - 0xcc4], 1
jmp 0x41f9f3
and dword [ebp - 0xcc4], 0
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x123c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1140], 0
jne 0x41fa2a
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
cmp dword [eax], 0
jne 0x41fa2a
and dword [ebp - 0x73c], 0
jmp 0x41fa34
mov dword [ebp - 0x73c], 1
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
mov ecx, dword [ebp - 0x73c]
cmp ecx, dword [eax]
jg 0x41fa57
mov dword [ebp - 0x580], 1
jmp 0x41fa5e
and dword [ebp - 0x580], 0
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
mov ecx, dword [ebp - 0x580]
cmp ecx, dword [eax]
jne 0x41fa81
mov dword [ebp - 0x814], 1
jmp 0x41fa88
and dword [ebp - 0x814], 0
push 0
lea ecx, [ebp - 0x904]
call fcn.0044cf9a
mov esi, dword [ebp - 0x814]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
cmp esi, dword [eax]
jle 0x41faba
mov dword [ebp - 0x588], 1
jmp 0x41fac1
and dword [ebp - 0x588], 0
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
mov ecx, dword [ebp - 0x588]
add ecx, dword [eax]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x934]
jle 0x41faf2
push 2
lea ecx, [ebp - 0x904]
call fcn.0044cf9a
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
cmp dword [eax], 0
jne 0x41fb26
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
cmp dword [eax], 0
jne 0x41fb26
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1254], 0
je 0x41fb38
mov eax, 0xe767e792
test eax, eax
je 0x41fb38
and dword [ebp - 0x744], 0
jmp 0x41fb42
mov dword [ebp - 0x744], 1
cmp dword [ebp - 0x744], 0xc9a7
jge 0x41fb5a
mov dword [ebp - 0x590], 1
jmp 0x41fb61
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x8b4], eax
mov esi, dword [ebp - 0x8b4]
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
cmp esi, dword [eax]
jg 0x41fb90
mov dword [ebp - 0x988], 1
jmp 0x41fb97
and dword [ebp - 0x988], 0
mov eax, dword [ebp - 0xc4c]
mov dword [ebp - 0x1244], eax
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
push 2
lea ecx, [ebp - 0x904]
call fcn.0044cf9a
push 0
lea ecx, [ebp - 0x11c]
call fcn.0044cf9a
mov ecx, dword [ebp - 0x598]
add ecx, dword [eax]
jne 0x41fc18
mov byte [ebp - 0xde], 0
movzx eax, byte [ebp - 0xde]
test eax, eax
je 0x41fc13
push 0
push 0x2b80
push 0xd81
push 0x2d9d
push 0x3d73
push 0x3452
push 0x5df5
push 0x79f4
call fcn.0042f421
add esp, 0x20
jmp 0x41fce4
push 3
lea ecx, [ebp - 0x1150]
call fcn.0044ceac
mov dword [ebp - 0x1238], 0xee8e20e6
mov dword [ebp - 0x2f4], 0
jmp 0x41fc48
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 3
jge 0x41fc6a
push dword [ebp - 0x2f4]
lea ecx, [ebp - 0x1150]
call fcn.0044cf9a
mov dword [eax], 0xd7069838
jmp 0x41fc3b
mov dword [ebp - 0x168], 0
jmp 0x41fc83
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 2
jg 0x41fcd9
push 2
lea ecx, [ebp - 0xf4c]
call fcn.0044ceac
push 0
lea eax, [ebp - 0x1228]
push eax
lea eax, [ebp - 0xf4c]
push eax
call fcn.004138be
add esp, 0xc
push 0
push 0x17b7
push 0x6341
lea eax, [ebp - 0xf4c]
push eax
call fcn.0040a7ad
add esp, 0x10
lea ecx, [ebp - 0xf4c]
call fcn.0044cf7e
jmp 0x41fc76
lea ecx, [ebp - 0x1150]
call fcn.0044cf7e
lea ecx, [ebp - 0x1160]
call fcn.0044cf7e
lea ecx, [ebp - 0x904]
call fcn.0044cf7e
jmp 0x41f64c
lea ecx, [ebp - 0x11c]
call fcn.0044cf7e
mov dword [ebp - 0x9b0], 0x8f01ba02
push 1
lea ecx, [ebp - 0xf88]
call fcn.0044ceac
mov dword [ebp - 0x990], 0
push 1
lea ecx, [ebp - 0xf64]
call fcn.0044ceac
mov dword [ebp - 0xc38], 7
mov dword [ebp - 0x74c], 0x2d34caa8
mov dword [ebp - 0x998], 1
lea eax, [ebp - 0x11c4]
push eax
push 0x12d
lea eax, [ebp - 0xf64]
push eax
push 0
push 0x5113
call fcn.00409b8d
add esp, 0x14
lea eax, [ebp - 0x990]
push eax
push 0x7a80
push 0
push 0x3932
lea eax, [ebp - 0xc38]
push eax
push 0x50f7
lea eax, [ebp - 0x74c]
push eax
lea eax, [ebp - 0xf64]
push eax
lea eax, [ebp - 0x998]
push eax
call fcn.0041b4c9
add esp, 0x24
push 0x4c19
push 0x364c
push 0x45f5
lea eax, [ebp - 0x74c]
push eax
push 0x7008
push 0
call fcn.0043173b
add esp, 0x18
lea ecx, [ebp - 0xf64]
call fcn.0044cf7e
mov dword [ebp - 0xc48], 0xb389fa18
mov dword [ebp - 0x2c], 0xaf5a
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x80], 0xf746e33a
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x41fe23
push 0
push 0
push 0
push 0
call dword [0xadd308]
cmp dword [ebp - 0x2c], 0
jne 0x41fe85
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1224], eax
cmp dword [ebp - 0x2c], 0
je 0x41fe6a
cmp dword [ebp - 0x2c], 0
jne 0x41fe4e
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x41fe4e
and dword [ebp - 0xce8], 0
jmp 0x41fe58
mov dword [ebp - 0xce8], 1
cmp dword [ebp - 0x3c], 0
je 0x41fe6a
mov dword [ebp - 0x5a0], 1
jmp 0x41fe71
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x5a0], eax
jg 0x41fe85
and dword [ebp - 0x81c], 0
jmp 0x41fe8f
mov dword [ebp - 0x81c], 1
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x81c], eax
jge 0x41fea6
mov dword [ebp - 0x9a0], 1
jmp 0x41fead
and dword [ebp - 0x9a0], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1040], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1184], eax
cmp dword [ebp - 0x3c], 0
je 0x41feda
mov eax, 0x9a2b82c4
test eax, eax
je 0x41feda
mov dword [ebp - 0x5a8], 1
jmp 0x41fee1
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x5a8]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0x3c]
je 0x41ff0d
cmp dword [ebp - 0x2c], 0
je 0x41ff0d
cmp dword [ebp - 0x2c], 0
je 0x41ff0d
mov dword [ebp - 0x754], 1
jmp 0x41ff14
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x754], eax
je 0x42004c
push 1
lea ecx, [ebp - 0xe44]
call fcn.0044ceac
push 0x5dfc
push 0
lea eax, [ebp - 0xe44]
push eax
push 0x1f5b
push 0x3ee3
push 1
push 0x3219
push 0
lea eax, [ebp - 0x1048]
push eax
push 0x1363
push 0x72dc
push 0x747f
call fcn.0041e5cf
add esp, 0x30
mov dword [ebp - 0x2c], 0
jmp 0x41ff7f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xa
jg 0x42003f
mov dword [ebp - 0x5b0], 0xc19583e3
mov dword [ebp - 0xc40], 0xfffffff7
mov dword [ebp - 0x3c], 0
jmp 0x41ffad
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x38
jne 0x420012
mov dword [ebp - 0x1cc], 0
jmp 0x41ffcc
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 2
jge 0x41ffe8
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0x10cc], 0xfffffff7
jmp 0x41ffbf
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10cc]
mov dword [ebp - 0x11f8], eax
mov esi, dword [ebp - 0x5b0]
push 0
lea ecx, [ebp - 0xe44]
call fcn.0044cf9a
mov dword [eax], esi
jmp 0x41ffa6
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0xc40]
push eax
lea eax, [ebp - 0x5b0]
push eax
push 0
push 0x74eb
lea eax, [ebp - 0xe44]
push eax
call fcn.0040bc41
add esp, 0x18
jmp 0x41ff78
lea ecx, [ebp - 0xe44]
call fcn.0044cf7e
jmp 0x4200bc
mov dword [ebp - 0x9a8], 0xd8ac507
push 0
lea eax, [ebp - 0x9a8]
push eax
push 0x6858
lea eax, [ebp - 0x80]
push eax
call fcn.0041652d
add esp, 0x10
mov dword [ebp - 0x80], 0xffffffed
jmp 0x420080
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x1a
je 0x4200bc
mov dword [ebp - 0x884], 0xfffffffa
cmp dword [ebp - 0x884], 0
je 0x42009b
jmp 0x4200bc
push 0x634d
lea eax, [ebp - 0x884]
push eax
push 0x5e56
push 0
lea eax, [ebp - 0x2c]
push eax
call fcn.00405665
add esp, 0x14
jmp 0x420079
mov dword [ebp - 0x1220], 0x61928c17
mov dword [ebp - 0x121c], 0x61928c17
mov dword [ebp - 0x1218], 0x61928c17
mov dword [ebp - 0x1214], 0x61928c17
mov dword [ebp - 0xd58], 0x3aa9ac70
push 0x7f37
push 0x1e5b
lea eax, [ebp - 0xd58]
push eax
push 0x3ae6
push 0x38ba
push 0x2340
push 0
push 0x1c3b
call fcn.004048f6
add esp, 0x20
push 1
push 1
call fcn.00401c59
pop ecx
pop ecx
push 0x708c
lea eax, [ebp - 0x1050]
push eax
push 0
push 0
lea eax, [ebp - 0xf88]
push eax
push 0x1369
push 0x4ead
call fcn.0040c4c7
add esp, 0x1c
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x5c0], eax
push 4
lea ecx, [ebp - 0xd54]
call fcn.0044ceac
mov dword [ebp - 0x130], 0
jmp 0x420183
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 4
jge 0x42019f
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x1548], 0xfffffff7
jmp 0x420176
lea eax, [ebp - 0xd54]
push eax
lea eax, [ebp - 0x130]
push eax
push 0
call fcn.0040b104
add esp, 0xc
push 2
lea ecx, [ebp - 0xd54]
call fcn.0044cf9a
and dword [eax], 0
jmp 0x4201ed
push 2
lea ecx, [ebp - 0xd54]
call fcn.0044cf9a
mov dword [ebp - 0x5b8], eax
mov eax, dword [ebp - 0x5b8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x5b8]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xd54]
call fcn.0044cf9a
cmp dword [eax], 3
jg 0x42022c
push 0x1dbc
push 0
call fcn.00406e4e
pop ecx
pop ecx
mov byte [ebp - 0xe0], 0
push 0x3d7e
lea eax, [ebp - 0xe0]
push eax
push 0
call fcn.00405a22
add esp, 0xc
jmp 0x4201c9
lea ecx, [ebp - 0xd54]
call fcn.0044cf7e
lea eax, [ebp - 0xf88]
push eax
push 0x62b3
lea eax, [ebp - 0x9b0]
push eax
lea eax, [ebp - 0x75c]
push eax
push 0
lea eax, [ebp - 0x5c0]
push eax
lea eax, [ebp - 0xc48]
push eax
call fcn.0040f8a1
add esp, 0x1c
lea ecx, [ebp - 0xf88]
call fcn.0044cf7e
mov eax, dword [ebp - 0x9b8]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x464], eax
mov dword [ebp - 0xec0], 1
mov dword [ebp - 0xebc], 1
mov dword [ebp - 0xeb8], 1
mov dword [ebp - 0xeb4], 1
lea ecx, [ebp - 0x435]
call fcn.0044cfa9
push eax
lea eax, [ebp - 0xeb0]
push eax
lea eax, [ebp - 0xec0]
push eax
lea ecx, [ebp - 0x12f0]
call fcn.0044cfac
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd64]
call fcn.0044cf58
mov dword [ebp - 0xc58], 0xfffffff9
mov dword [ebp - 0x9c8], 1
mov dword [ebp - 0xc50], 0x2541
push 0
lea ecx, [ebp - 0xd64]
call fcn.0044cf9a
and dword [eax], 0
jmp 0x420334
push 0
lea ecx, [ebp - 0xd64]
call fcn.0044cf9a
mov dword [ebp - 0x824], eax
mov eax, dword [ebp - 0x824]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x824]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xd64]
call fcn.0044cf9a
cmp dword [eax], 0xb
jg 0x42048b
push 2
lea ecx, [ebp - 0x928]
call fcn.0044ceac
mov dword [ebp - 0x9c0], 0
mov dword [ebp - 0x1194], 1
mov dword [ebp - 0x38c], 0
jmp 0x420384
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 2
jge 0x4203a6
push dword [ebp - 0x38c]
lea ecx, [ebp - 0x928]
call fcn.0044cf9a
mov dword [eax], 1
jmp 0x420377
push 1
lea ecx, [ebp - 0x928]
call fcn.0044cf9a
and dword [eax], 0
jmp 0x4203dc
push 1
lea ecx, [ebp - 0x928]
call fcn.0044cf9a
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x5c8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x5c8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x928]
call fcn.0044cf9a
cmp dword [eax], 0xfffffff4
jge 0x42047b
mov dword [ebp - 0xcf0], 0
mov dword [ebp - 0x9d0], 0xa0246c38
mov dword [ebp - 0xde4], 0xffffffff
push 0x73f2
lea eax, [ebp - 0xcf0]
push eax
lea eax, [ebp - 0x9c0]
push eax
lea eax, [ebp - 0xc50]
push eax
lea eax, [ebp - 0x9c8]
push eax
lea eax, [ebp - 0xde4]
push eax
lea eax, [ebp - 0x9d0]
push eax
push 0
lea eax, [ebp - 0xd64]
push eax
push 0x3681
push 0x2a4c
push 0x1a65
push 0x3817
lea eax, [ebp - 0x928]
push eax
call fcn.00402fbe
add esp, 0x38
cmp dword [ebp - 0xc58], 0
je 0x420476
jmp 0x42047b
jmp 0x4203b8
lea ecx, [ebp - 0x928]
call fcn.0044cf7e
jmp 0x420310
lea ecx, [ebp - 0xd64]
call fcn.0044cf7e
cmp dword [ebp - 0x464], 0
jle 0x427a18
mov dword [ebp - 0x8c], 0xca4f833f
mov dword [ebp - 0x784], 0xffffffff
mov dword [ebp - 0x5c], 0
jmp 0x4204c7
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x4204dd
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x48c], 4
jmp 0x4204c0
mov dword [ebp - 0x5c], 0
jmp 0x4204ed
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x420503
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xd4], 0x589fe57f
jmp 0x4204e6
mov dword [ebp - 0x8c], 2
jmp 0x42051c
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x42077b
mov dword [ebp - 0x4c], 0x77dd6887
mov dword [ebp - 0x100], 0xe5b14f4e
mov dword [ebp - 0x1d4], 0
jmp 0x420553
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 1
jge 0x42056f
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x468], 9
jmp 0x420546
mov dword [ebp - 0x4c], 2
jmp 0x42057f
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x420776
mov eax, dword [ebp - 0x8c]
cmp dword [ebp + eax*4 - 0x48c], 0
jne 0x4205a5
mov dword [ebp - 0x5d0], 1
jmp 0x4205ac
and dword [ebp - 0x5d0], 0
cmp dword [ebp - 0x4c], 1
jne 0x4205be
mov dword [ebp - 0x764], 1
jmp 0x4205c5
and dword [ebp - 0x764], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4c]
cmp dword [ebp + eax - 0x48c], ecx
jne 0x4205e3
mov dword [ebp - 0x440], 1
jmp 0x4205ea
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x5d0]
imul eax, dword [ebp - 0x100]
mov dword [ebp - 0x8e0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8e0]
mov dword [ebp + eax - 0xd4], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x440]
mov dword [ebp + eax - 0x468], ecx
mov eax, dword [ebp - 0x8e0]
imul eax, dword [ebp - 0x440]
mov ecx, dword [ebp - 0x4c]
cmp dword [ebp + ecx*4 - 0x48c], eax
jl 0x420654
mov dword [ebp - 0x5d8], 1
jmp 0x42065b
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x5d8]
sub eax, dword [ebp - 0x4c]
jne 0x42067f
mov eax, dword [ebp - 0x8c]
cmp dword [ebp + eax*4 - 0x48c], 0
jne 0x42067f
and dword [ebp - 0x76c], 0
jmp 0x420689
mov dword [ebp - 0x76c], 1
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x76c], eax
jge 0x4206a0
mov dword [ebp - 0x9d8], 1
jmp 0x4206a7
and dword [ebp - 0x9d8], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x48c], 0xd266
jle 0x4206d1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x468], 0
je 0x4206cc
jmp 0x420776
jmp 0x42075d
mov dword [ebp - 0x100], 2
jmp 0x4206ea
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jl 0x42074b
mov dword [ebp - 0xcf8], 1
mov byte [ebp - 0x9d], 0
lea eax, [ebp - 0x9d]
push eax
push 0
push 0x5be3
push 0x5653
call fcn.00410692
add esp, 0x10
push 0
push 0x21b1
push 0x61d7
push 0x4c4b
lea eax, [ebp - 0xcf8]
push eax
push 0x4058
push 0x1fc
call fcn.004024b4
add esp, 0x1c
jmp 0x4206dd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x468], 0
je 0x42075d
jmp 0x420776
push 0x4e2c
push 0x3156
push 0
call fcn.0041bdb8
add esp, 0xc
jmp 0x420578
jmp 0x42050f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd4], 0
je 0x420809
mov eax, 0xf5ee
test eax, eax
je 0x4207a9
cmp dword [ebp - 0x784], 0
je 0x4207a9
mov dword [ebp - 0x5e0], 1
jmp 0x4207b0
and dword [ebp - 0x5e0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x48c]
cmp dword [ebp - 0x5e0], eax
jge 0x4207de
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd4], 0
jne 0x4207de
and dword [ebp - 0x82c], 0
jmp 0x4207e8
mov dword [ebp - 0x82c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd4]
cmp dword [ebp - 0x82c], eax
jl 0x420809
mov dword [ebp - 0x5e8], 1
jmp 0x420810
and dword [ebp - 0x5e8], 0
cmp dword [ebp - 0x5e8], 0
jb 0x420825
mov dword [ebp - 0x774], 1
jmp 0x42082c
and dword [ebp - 0x774], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48c]
imul eax, dword [ebp - 0x774]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xd4]
jg 0x42085b
mov dword [ebp - 0x5f0], 1
jmp 0x420862
and dword [ebp - 0x5f0], 0
cmp dword [ebp - 0x5f0], 4
jb 0x420877
mov dword [ebp - 0x88c], 1
jmp 0x42087e
and dword [ebp - 0x88c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48c]
cmp dword [ebp - 0x88c], eax
jne 0x42089f
mov dword [ebp - 0x5f8], 1
jmp 0x4208a6
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x5f8]
sub eax, dword [ebp - 0x8c]
cmp eax, 0x842b
jg 0x4208c5
mov dword [ebp - 0x77c], 1
jmp 0x4208cc
and dword [ebp - 0x77c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x48c]
cmp dword [ebp - 0x77c], eax
jle 0x4208fc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd4], 0
je 0x4208fc
mov dword [ebp - 0x600], 1
jmp 0x420903
and dword [ebp - 0x600], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd4]
imul eax, dword [ebp - 0x600]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x48c]
jl 0x42093b
mov eax, 0xb2d4ad44
test eax, eax
je 0x42093b
mov dword [ebp - 0x834], 1
jmp 0x420942
and dword [ebp - 0x834], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x48c]
cmp dword [ebp - 0x834], eax
je 0x420962
mov dword [ebp - 0x608], 1
jmp 0x420969
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x608]
mov dword [ebp - 0x784], eax
push 0
push 0x26ce
call fcn.0040274a
pop ecx
pop ecx
mov dword [ebp - 0x150], 0xfffffff9
mov dword [ebp - 0x2fc], 0
jmp 0x4209a6
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 3
jge 0x4209c2
mov eax, dword [ebp - 0x2fc]
mov dword [ebp + eax*4 - 0x1260], 0xfff7
jmp 0x420999
mov dword [ebp - 0x150], 0
jmp 0x4209db
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 2
jg 0x420a27
mov byte [ebp - 0xe2], 0
movzx eax, byte [ebp - 0xe2]
test eax, eax
je 0x420a25
push 0
push 0x60df
push 0x45b1
push 0x334d
push 0x1142
push 0x4adb
push 0
push 0x2401
push 0x111c
call fcn.004294c8
add esp, 0x24
jmp 0x4209ce
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1260]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0xee8], 1
mov dword [ebp - 0xee4], 1
mov dword [ebp - 0xee0], 1
mov dword [ebp - 0xedc], 1
lea ecx, [ebp - 0x42d]
call fcn.0044cfa9
push eax
lea eax, [ebp - 0xed8]
push eax
lea eax, [ebp - 0xee8]
push eax
lea ecx, [ebp - 0x1300]
call fcn.0044cfac
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xdd0]
call fcn.0044cf58
or dword [ebp - 0xf10], 0xffffffff
or dword [ebp - 0xf0c], 0xffffffff
or dword [ebp - 0xf08], 0xffffffff
or dword [ebp - 0xf04], 0xffffffff
lea ecx, [ebp - 0x471]
call fcn.0044cfa9
push eax
lea eax, [ebp - 0xf00]
push eax
lea eax, [ebp - 0xf10]
push eax
lea ecx, [ebp - 0x12b0]
call fcn.0044cfac
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xff4]
call fcn.0044cf58
mov dword [ebp - 0x618], 0x51dba1dd
mov dword [ebp - 0x448], 0x2d505bc9
push 2
lea ecx, [ebp - 0xe50]
call fcn.0044ceac
mov dword [ebp - 0x9e0], 0xffffffff
mov dword [ebp - 0x1dc], 0
jmp 0x420b2b
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 2
jge 0x420b4a
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0xe50]
call fcn.0044cf9a
and dword [eax], 0
jmp 0x420b1e
push 0x6c4c
push 0
lea eax, [ebp - 0xff4]
push eax
lea eax, [ebp - 0x618]
push eax
lea eax, [ebp - 0x448]
push eax
call fcn.00406506
add esp, 0x14
push 0
lea ecx, [ebp - 0xe50]
call fcn.0044cf9a
cmp dword [eax], 0
je 0x420b8c
mov dword [ebp - 0x610], 1
jmp 0x420b93
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x8bc], eax
push 0
lea ecx, [ebp - 0xe50]
call fcn.0044cf9a
mov ecx, dword [ebp - 0x8bc]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0xff4]
call fcn.0044cf9a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x8bc]
jg 0x420be3
mov dword [ebp - 0x78c], 1
jmp 0x420bea
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x618]
cmp dword [ebp - 0x78c], eax
jne 0x420c04
mov dword [ebp - 0x620], 1
jmp 0x420c0b
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x620]
mov dword [ebp - 0x9e0], eax
lea ecx, [ebp - 0xe50]
call fcn.0044cf7e
lea ecx, [ebp - 0xff4]
call fcn.0044cf7e
mov dword [ebp - 0xb5c], 0xfffffff9
mov dword [ebp - 0x138], 0xfffffff9
mov dword [ebp - 0x83c], 0x1f83
mov dword [ebp - 0xc60], 0xabb148
cmp dword [ebp - 0x83c], 0x233a
jle 0x420cfc
and dword [ebp - 0x3fc], 0
jmp 0x420c7b
mov eax, dword [ebp - 0x3fc]
inc eax
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0x2bbb
jge 0x420cfc
and dword [ebp - 0x1e4], 0
jmp 0x420c9d
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x846
jge 0x420cf7
mov eax, dword [ebp - 0x3fc]
imul eax, dword [ebp - 0x1e4]
cdq
mov dword [ebp - 0xa74], eax
mov dword [ebp - 0xa70], edx
push dword [ebp - 0xa70]
push dword [ebp - 0xa74]
lea ecx, [ebp - 0x1510]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0044cd8c
push eax
call fcn.004add27
pop ecx
lea ecx, [ebp - 0x1510]
call fcn.0044cd82
jmp 0x420c90
jmp 0x420c6e
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x83c], 0x1e15
jge 0x420d1b
push dword [ebp - 0xc60]
call fcn.004add27
pop ecx
jmp 0x420d37
or dword [ebp - 4], 0xffffffff
jmp 0x420d41
mov dword [ebp - 0x1c], 0
jmp 0x420d51
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x420d67
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd74], 0xec0ae971
jmp 0x420d4a
mov dword [ebp - 0x1c], 0
jmp 0x420d77
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x420d8a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x14], 0x136951ad
jmp 0x420d70
mov dword [ebp - 0x1c], 0
jmp 0x420d9a
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x420db0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x8cc], 0x87c5c6a8
jmp 0x420d93
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x14], 0
jmp 0x420dd5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x14], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 2
jg 0x420e75
mov dword [ebp - 0x88], 0xf47a6d
mov dword [ebp - 0x88], 0
jmp 0x420e09
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jg 0x420e36
mov byte [ebp - 0xa5], 0
push 0x6b8d
push 0
lea eax, [ebp - 0xa5]
push eax
push 0x5856
call fcn.0040c2c0
add esp, 0x10
jmp 0x420dfc
mov dword [ebp - 0x88], 0
jmp 0x420e4f
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jg 0x420e70
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp + eax*4 - 0xd74], 0
je 0x420e6e
jmp 0x420e70
jmp 0x420e42
jmp 0x420dc0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xd74], 0
je 0x4210bd
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x14]
cmp dword [ebp + eax - 0x14], ecx
jne 0x420eaa
mov dword [ebp - 0x628], 1
jmp 0x420eb1
and dword [ebp - 0x628], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x628]
sub ecx, dword [ebp + eax - 0x14]
push 4
pop eax
imul eax, eax, 0
sub ecx, dword [ebp + eax - 0x14]
je 0x420ee6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
je 0x420ee6
mov dword [ebp - 0x794], 1
jmp 0x420eed
and dword [ebp - 0x794], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x794], eax
jg 0x420f0b
mov dword [ebp - 0x630], 1
jmp 0x420f12
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
sub eax, 0x5f19
je 0x420f3b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8cc], 0
je 0x420f3b
mov dword [ebp - 0x894], 1
jmp 0x420f42
and dword [ebp - 0x894], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8cc]
cmp dword [ebp - 0x894], eax
jne 0x420f63
mov dword [ebp - 0x638], 1
jmp 0x420f6a
and dword [ebp - 0x638], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8cc]
cmp dword [ebp - 0x638], eax
jl 0x420f8b
mov dword [ebp - 0x79c], 1
jmp 0x420f92
and dword [ebp - 0x79c], 0
cmp dword [ebp - 0x79c], 0
je 0x420fac
xor eax, eax
inc eax
je 0x420fac
mov dword [ebp - 0x640], 1
jmp 0x420fb3
and dword [ebp - 0x640], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov ecx, dword [ebp - 0x640]
inc ecx
imul eax, ecx
imul eax, dword [ebp - 0x138]
test eax, eax
je 0x420fed
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xd74], 0
je 0x420fed
mov dword [ebp - 0x844], 1
jmp 0x420ff4
and dword [ebp - 0x844], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x844], eax
jle 0x42101b
cmp dword [ebp - 0x138], 0
je 0x42101b
mov dword [ebp - 0x648], 1
jmp 0x421022
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x648], 9
jne 0x421037
mov dword [ebp - 0x480], 1
jmp 0x42103e
and dword [ebp - 0x480], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x480]
mov dword [ebp + eax - 0x14], ecx
mov eax, dword [ebp - 0x138]
add eax, dword [ebp - 0x480]
jne 0x421067
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
cmp dword [ebp - 0x138], 0xffffffff
jbe 0x42107c
mov dword [ebp - 0x9e8], 1
jmp 0x421083
and dword [ebp - 0x9e8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd74]
mov dword [ebp - 0x1058], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xd74]
cmp dword [ebp + eax - 0x8cc], ecx
jl 0x4210bd
mov dword [ebp - 0x7a4], 1
jmp 0x4210c4
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x7a4], eax
jl 0x4210de
mov dword [ebp - 0x650], 1
jmp 0x4210e5
and dword [ebp - 0x650], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x650]
mov dword [ebp + eax - 0x8cc], ecx
mov dword [ebp - 0x450], 1
push 4
lea ecx, [ebp - 0xd94]
call fcn.0044ceac
push 1
lea ecx, [ebp - 0xd84]
call fcn.0044ceac
mov dword [ebp - 0x9f8], 0x9b58331c
mov dword [ebp - 0x8d8], 0x451c
mov dword [ebp - 0xd68], 0xabb1c0
cmp dword [ebp - 0x8d8], 0x4625
jle 0x421248
and dword [ebp - 0x1f4], 0
jmp 0x421160
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x4356
jge 0x421248
and dword [ebp - 0x304], 0
jmp 0x421186
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0x2d8c
jge 0x421243
and dword [ebp - 0x1ec], 0
jmp 0x4211ac
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x7975
jge 0x42123e
and dword [ebp - 0x394], 0
jmp 0x4211d2
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 0x524f
jge 0x421239
mov eax, dword [ebp - 0x304]
mov ecx, dword [ebp - 0x1ec]
sar eax, cl
xor eax, dword [ebp - 0x394]
or eax, dword [ebp - 0x1f4]
cdq
mov dword [ebp - 0xa80], eax
mov dword [ebp - 0xa7c], edx
push dword [ebp - 0xa7c]
push dword [ebp - 0xa80]
lea ecx, [ebp - 0x1318]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0044cd8c
push eax
call fcn.004add27
pop ecx
lea ecx, [ebp - 0x1318]
call fcn.0044cd82
jmp 0x4211c5
jmp 0x42119f
jmp 0x421179
jmp 0x421153
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x8d8], 0x415a
jge 0x421267
push dword [ebp - 0xd68]
call fcn.004add27
pop ecx
jmp 0x421283
or dword [ebp - 4], 0xffffffff
jmp 0x42128d
lea eax, [ebp - 0xd94]
push eax
push 0
lea eax, [ebp - 0xc68]
push eax
push 0x3091
call fcn.0041e591
add esp, 0x10
mov dword [ebp - 0x658], 0x3789
mov dword [ebp - 0x9f0], 0xabb240
cmp dword [ebp - 0x658], 0x38e8
jle 0x4213ac
and dword [ebp - 0x3dc], 0
jmp 0x4212e4
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 0x72c7
jge 0x4213ac
and dword [ebp - 0x30c], 0
jmp 0x42130a
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0x7ff5
jge 0x4213a7
and dword [ebp - 0x1fc], 0
jmp 0x421330
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x6a18
jge 0x4213a2
and dword [ebp - 0x204], 0
jmp 0x421352
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x6a9a
jge 0x4213a0
mov ecx, dword [ebp - 0x30c]
imul ecx, dword [ebp - 0x1fc]
mov eax, dword [ebp - 0x3dc]
shl eax, cl
mov ecx, dword [ebp - 0x204]
shl eax, cl
cdq
mov dword [ebp - 0xa8c], eax
mov dword [ebp - 0xa88], edx
push dword [ebp - 0xa88]
push dword [ebp - 0xa8c]
mov ecx, 0xada438
call fcn.0044cd97
jmp 0x421345
jmp 0x421323
jmp 0x4212fd
jmp 0x4212d7
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x658], 0x3530
jge 0x4213cf
mov edx, dword [ebp - 0x9f0]
mov ecx, 0xada438
call fcn.0044e73d
jmp 0x4213eb
or dword [ebp - 4], 0xffffffff
jmp 0x4213f5
lea eax, [ebp - 0xc68]
push eax
push 0xc09
push 0
lea eax, [ebp - 0xd84]
push eax
call fcn.00431e0f
add esp, 0x10
push 2
lea ecx, [ebp - 0xd94]
call fcn.0044cf9a
mov dword [eax], 0x11
jmp 0x42144b
push 2
lea ecx, [ebp - 0xd94]
call fcn.0044cf9a
mov dword [ebp - 0x7ac], eax
mov eax, dword [ebp - 0x7ac]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x7ac]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xd94]
call fcn.0044cf9a
cmp dword [eax], 7
jge 0x42164d
push 3
lea ecx, [ebp - 0x6dc]
call fcn.0044ceac
mov dword [ebp - 0x668], 0x9934b0b4
lea eax, [ebp - 0x6dc]
push eax
push 0
lea eax, [ebp - 0x11b8]
push eax
call fcn.00405692
add esp, 0xc
push 0
lea ecx, [ebp - 0x6dc]
call fcn.0044cf9a
and dword [eax], 0
jmp 0x4214c6
push 0
lea ecx, [ebp - 0x6dc]
call fcn.0044cf9a
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x660]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x660]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x6dc]
call fcn.0044cf9a
cmp dword [eax], 0
jg 0x42163d
mov dword [ebp - 0x6c], 0
jmp 0x4214ec
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x421502
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x314], 0x1a9565e0
jmp 0x4214e5
mov dword [ebp - 0x6c], 0
jmp 0x421512
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x421528
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xe98], 5
jmp 0x42150b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x314], 0
jmp 0x421556
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x314]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x314], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x314], 0
jg 0x421614
mov dword [ebp - 0x20c], 0xffffffff
mov dword [ebp - 0x1060], 0xfffffff8
mov dword [ebp - 0x20c], 0
jmp 0x421597
mov eax, dword [ebp - 0x20c]
dec eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
jl 0x4215bd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe98]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xe98], eax
jmp 0x42158a
push 0
lea ecx, [ebp - 0x6dc]
call fcn.0044cf9a
push dword [eax]
lea ecx, [ebp - 0xd84]
call fcn.0044cf9a
mov dword [ebp - 0x84c], eax
push 0
lea ecx, [ebp - 0x6dc]
call fcn.0044cf9a
push dword [eax]
lea ecx, [ebp - 0xd84]
call fcn.0044cf9a
mov ecx, dword [ebp - 0x84c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x84c]
mov eax, dword [eax]
mov dword [ebp - 0x668], eax
jmp 0x42153b
lea eax, [ebp - 0xd84]
push eax
lea eax, [ebp - 0x6dc]
push eax
push 0
push 0x3a67
lea eax, [ebp - 0x668]
push eax
call fcn.0041df3b
add esp, 0x14
jmp 0x4214a2
lea ecx, [ebp - 0x6dc]
call fcn.0044cf7e
jmp 0x421427
lea eax, [ebp - 0x9f8]
push eax
push 0
call fcn.0041115d
pop ecx
pop ecx
lea ecx, [ebp - 0xd84]
call fcn.0044cf7e
lea ecx, [ebp - 0xd94]
call fcn.0044cf7e
mov dword [ebp - 0x428], 0x2541
mov dword [ebp - 0xa08], 0
mov dword [ebp - 0x7b4], 0x75b9
mov dword [ebp - 0xd00], 0xabb29c
cmp dword [ebp - 0x7b4], 0x77ec
jle 0x421756
and dword [ebp - 0x39c], 0
jmp 0x4216c1
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0x2ea7
jge 0x421756
and dword [ebp - 0x214], 0
jmp 0x4216e7
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x4cc2
jge 0x421751
and dword [ebp - 0x31c], 0
jmp 0x421709
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0x27ee
jge 0x42174f
mov eax, dword [ebp - 0x39c]
imul eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x31c]
sar eax, cl
cdq
mov dword [ebp - 0xa98], eax
mov dword [ebp - 0xa94], edx
push dword [ebp - 0xa94]
push dword [ebp - 0xa98]
mov ecx, 0xada438
call fcn.0044cd97
jmp 0x4216fc
jmp 0x4216da
jmp 0x4216b4
push 1
lea ecx, [ebp - 0xf28]
call fcn.0044ceac
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x7b4], 0x7236
jge 0x421786
mov edx, dword [ebp - 0xd00]
mov ecx, 0xada438
call fcn.0044e73d
jmp 0x4217a2
or dword [ebp - 4], 0xffffffff
jmp 0x4217ac
mov dword [ebp - 0xa00], 7
mov dword [ebp - 0x670], 0x2d34caa8
mov dword [ebp - 0xc70], 1
mov dword [ebp - 0x21c], 0
jmp 0x4217e3
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 1
jge 0x421805
push dword [ebp - 0x21c]
lea ecx, [ebp - 0xf28]
call fcn.0044cf9a
mov dword [eax], 0xd21dfe4b
jmp 0x4217d6
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0xa00]
push eax
push 0
lea eax, [ebp - 0xc70]
push eax
lea eax, [ebp - 0xa08]
push eax
lea eax, [ebp - 0xf28]
push eax
call fcn.00404df9
add esp, 0x18
push 0x2e91
push 0
lea eax, [ebp - 0x670]
push eax
push 0x159f
call fcn.0040427f
add esp, 0x10
lea ecx, [ebp - 0xf28]
call fcn.0044cf7e
mov dword [ebp - 0x54], 4
mov dword [ebp - 0x11a4], 0x78fa
mov dword [ebp - 0x41c], 0
jmp 0x421882
mov eax, dword [ebp - 0x41c]
inc eax
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 2
jge 0x42189e
mov eax, dword [ebp - 0x41c]
mov dword [ebp + eax*4 - 0x1128], 0xde0bcd8c
jmp 0x421875
mov dword [ebp - 0x54], 0
jmp 0x4218ae
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jg 0x4218de
mov dword [ebp - 0xdc4], 0x10b999fb
lea eax, [ebp - 0xdc4]
push eax
push 0
call fcn.00406d6c
pop ecx
pop ecx
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x1128], 1
jmp 0x4218a7
mov dword [ebp - 0x54], 2
jmp 0x4218ee
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xf
jl 0x421967
mov dword [ebp - 0x224], 0xad9bacc5
mov dword [ebp - 0x1068], 0xffcf33f2
mov dword [ebp - 0x11bc], 0xffffffff
mov dword [ebp - 0x1070], 0x348f4a8f
mov dword [ebp - 0x224], 0
jmp 0x421935
mov eax, dword [ebp - 0x224]
dec eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0xffffffff
jg 0x421965
mov dword [ebp - 0xa10], 0x329ef4a0
push 0x7356
lea eax, [ebp - 0xa10]
push eax
push 0x11e
push 0
call fcn.0040ae13
add esp, 0x10
jmp 0x421928
jmp 0x4218e7
push 0
lea ecx, [ebp - 0xdd0]
call fcn.0044cf9a
and dword [eax], 0
jmp 0x42199d
push 0
lea ecx, [ebp - 0xdd0]
call fcn.0044cf9a
cmp dword [eax], 0xb
jg 0x42409b
mov dword [ebp - 0x58], 0xe57bf5cd
mov dword [ebp - 0x324], 0
jmp 0x4219d3
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 3
jge 0x4219ef
mov eax, dword [ebp - 0x324]
mov dword [ebp + eax*4 - 0x126c], 0
jmp 0x4219c6
cmp dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x11b4], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1078], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x10d4], eax
mov eax, 0x6c74aa0d
test eax, eax
jne 0x421a26
cmp dword [ebp - 0x58], 0
jne 0x421a26
and dword [ebp - 0x678], 0
jmp 0x421a30
mov dword [ebp - 0x678], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x678]
mov dword [ebp + eax - 0x126c], ecx
mov dword [ebp - 0x58], 8
jmp 0x421a53
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x32
jl 0x421af7
mov dword [ebp - 0x1080], 0x44401d1b
mov dword [ebp - 0xc78], 0x5542afa0
mov dword [ebp - 0x22c], 0
jmp 0x421a8a
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 2
jge 0x421aa6
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x12f8], 0xffffffff
jmp 0x421a7d
push 0
push 0x2dd
lea eax, [ebp - 0xc78]
push eax
push 0x1182
call fcn.0041b0c2
add esp, 0x10
mov byte [ebp - 0xe9], 0
push 0x4e03
push 0x7a8a
push 0x42ab
lea eax, [ebp - 0xe9]
push eax
push 0x2d5d
push 0
push 0x2729
call fcn.00404927
add esp, 0x1c
jmp 0x421a4c
push 2
lea ecx, [ebp - 0x91c]
call fcn.0044ceac
mov dword [ebp - 0x5f4], 0
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0xa20], 1
push 0x7e62
push 0
push 0x5b3
push 0x6a8d
push 0x66ca
push 0x1a75
push 0x2373
push 0x5d88
call fcn.00430c0d
add esp, 0x20
mov dword [ebp - 0x10c], 0
jmp 0x421b68
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 2
jge 0x421c44
mov dword [ebp - 0x7bc], 0xade2167
mov dword [ebp - 0xc80], 0x1e3ff14e
mov dword [ebp - 0xd08], 0xf5ac3d6c
mov dword [ebp - 0xd78], 4
mov dword [ebp - 0xa18], 0xac3a6081
mov dword [ebp - 0xa28], 6
push 0x21d0
lea eax, [ebp - 0x10c]
push eax
push 0x5e9a
push 1
push 0x3dd
lea eax, [ebp - 0x7bc]
push eax
push 0x1698
push 0
push 0x431d
call fcn.00401e65
add esp, 0x24
lea eax, [ebp - 0xa18]
push eax
push 0x2e5
lea eax, [ebp - 0xd08]
push eax
lea eax, [ebp - 0xa20]
push eax
push 0
push 0x175e
lea eax, [ebp - 0xc80]
push eax
lea eax, [ebp - 0x10c]
push eax
push 0x3987
lea eax, [ebp - 0xa28]
push eax
push 0x6db6
lea eax, [ebp - 0xd78]
push eax
push 0x3063
lea eax, [ebp - 0x7bc]
push eax
call fcn.00432984
add esp, 0x38
jmp 0x421b5b
mov dword [ebp - 0x10d8], 1
mov dword [ebp - 0xc88], 0xfffffffa
mov dword [ebp - 0xa48], 0xa29822cb
mov dword [ebp - 0xd10], 0xffff
mov dword [ebp - 0xa3c], 0x37c5b151
push 2
lea ecx, [ebp - 0xf34]
call fcn.0044ceac
mov dword [ebp - 0xa30], 0
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0xf34]
push eax
push 0x660c
push 0
push 0x2f2b
call fcn.00406e1f
add esp, 0x14
mov dword [ebp - 0x160], 0
jmp 0x421cc8
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 2
jge 0x421ce4
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x12c0], 6
jmp 0x421cbb
push 0
lea eax, [ebp - 0xf34]
push eax
lea eax, [ebp - 0xa30]
push eax
lea eax, [ebp - 0xc88]
push eax
lea eax, [ebp - 0xa3c]
push eax
lea eax, [ebp - 0xd10]
push eax
lea eax, [ebp - 0xa48]
push eax
call fcn.0042a5bf
add esp, 0x1c
lea ecx, [ebp - 0xf34]
call fcn.0044cf7e
mov dword [ebp - 0x680], 0x3947
mov dword [ebp - 0xc90], 0xabb310
cmp dword [ebp - 0x680], 0x3c8a
jle 0x421e0e
and dword [ebp - 0x3a4], 0
jmp 0x421d5d
cmp dword [ebp - 0x3a4], 0x714f
jge 0x421e0e
mov dword [ebp - 0x32c], 0xf7e2799a
mov dword [ebp - 0x32c], 0
jmp 0x421e31
cmp dword [ebp - 0x32c], 0xffffffe9
jge 0x421ed6
lea ecx, [ebp - 0xdd0]
call fcn.0044cf7e
mov dword [ebp - 0xc3c], 0xc5a654fd
mov dword [ebp - 0xb68], 0xdb785b64
lea eax, [ebp - 0xc3c]
push eax
push 0x3832
push 0
push 0xc6a
push 0x6fe7
lea eax, [ebp - 0xb68]
push eax
push 0x7120
push 0x3195
call fcn.00447667
add esp, 0x20
mov dword [ebp - 0x604], 0x64e9
mov dword [ebp - 0xb74], 0xabb678
cmp dword [ebp - 0x604], 0x65ed
jle 0x4241b7
and dword [ebp - 0x374], 0
jmp 0x424125
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0x798a
jge 0x4241b7
and dword [ebp - 0x2cc], 0
jmp 0x42414b
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0x6e87
jge 0x4241b2
and dword [ebp - 0x178], 0
jmp 0x42416d
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x5404
jge 0x4241b0
mov eax, dword [ebp - 0x374]
sub eax, dword [ebp - 0x2cc]
xor eax, dword [ebp - 0x178]
cdq
mov dword [ebp - 0xb28], eax
mov dword [ebp - 0xb24], edx
push dword [ebp - 0xb24]
push dword [ebp - 0xb28]
mov ecx, 0xada438
call fcn.0044cd97
jmp 0x424160
jmp 0x42413e
jmp 0x424118
push 4
push 0x1000
push dword [ebp - 0x464]
mov eax, dword [ebp - 0x8b0]
mov ecx, dword [ebp - 0xc44]
add ecx, dword [eax + 0xc]
push ecx
push 0x574a
push 0x4c0a
call fcn.0045604f
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x46c]
mov dword [ecx], eax
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x604], 0x61bf
jge 0x424212
mov edx, dword [ebp - 0xb74]
mov ecx, 0xada438
call fcn.0044e73d
jmp 0x42422e
or dword [ebp - 4], 0xffffffff
jmp 0x424238
push 3
lea ecx, [ebp - 0xfdc]
call fcn.0044ceac
lea eax, [ebp - 0x122c]
push eax
lea eax, [ebp - 0xfdc]
push eax
push 0
call fcn.00402cf6
add esp, 0xc
push 0x295a
push 0x628f
push 0
push 1
push 0x5d9c
lea eax, [ebp - 0xfdc]
push eax
push 0x718
call fcn.0040c4c7
add esp, 0x1c
lea ecx, [ebp - 0xfdc]
call fcn.0044cf7e
mov dword [ebp - 0x60c], 0x1bdc
mov dword [ebp - 0xc2c], 0xabb6e0
cmp dword [ebp - 0x60c], 0x1f6b
jle 0x42437a
and dword [ebp - 0x190], 0
jmp 0x4242c9
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x7ef5
jge 0x42437a
and dword [ebp - 0x180], 0
jmp 0x4242ef
cmp dword [ebp - 0x180], 0x7cd8
jge 0x424375
and dword [ebp - 0x188], 0
jmp 0x424311
cmp dword [ebp - 0x188], 0x1569
jge 0x424370
mov eax, dword [ebp - 0x180]
xor eax, dword [ebp - 0x188]
or eax, dword [ebp - 0x190]
cdq
mov dword [ebp - 0xb34], eax
mov dword [ebp - 0xb30], edx
push dword [ebp - 0xb30]
push dword [ebp - 0xb34]
lea ecx, [ebp - 0x14e0]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0044cd8c
push eax
call fcn.004add27
pop ecx
lea ecx, [ebp - 0x14e0]
call fcn.0044cd82
jmp 0x424304
jmp 0x4242e2
jmp 0x4242bc
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x60c], 0x18f6
jge 0x424399
push dword [ebp - 0xc2c]
call fcn.004add27
pop ecx
jmp 0x4243b5
or dword [ebp - 4], 0xffffffff
jmp 0x4243bf
mov dword [ebp - 0x60], 9
mov dword [ebp - 0x1104], 0xda7ef5d8
mov dword [ebp - 0x198], 0
jmp 0x4243e9
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 3
jge 0x424405
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x1290], 0
jmp 0x4243dc
mov dword [ebp - 0x60], 0
jmp 0x424415
cmp dword [ebp - 0x60], 2
jg 0x42452f
jmp 0x427a8f
mov eax, dword [ebp - 0x9fc]
mov dword [ebp - 0xa0c], eax
mov eax, dword [ebp - 0xa04]
mov dword [ebp - 0xa14], eax
mov eax, dword [ebp - 0xa0c]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0xa14]
mov dword [ebp - 0xa1c], eax
mov eax, dword [ebp - 0x164]
mov dword [eax], 0
jmp 0x427a69
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x164]
mov dword [ecx], eax
mov eax, dword [ebp - 0x164]
cmp dword [eax], 1
jge 0x427a8f
mov eax, dword [ebp - 0x164]
push dword [eax]
mov ecx, dword [ebp - 0xa1c]
call fcn.0044cf9a
mov dword [eax], 0x589d
jmp 0x427a58
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret