Function at 0x46d3dd
Capabilities:
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ba74d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x3bf0
call fcn.004a9ed0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2208], 0x4435
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x5c4], 0xd14a59e4
mov dword [ebp - 0x2798], 0x484a8630
mov dword [ebp - 0x2404], 0x1f91351d
mov dword [ebp - 0x3848], 1
mov dword [ebp - 0x37b8], 0xffffffff
mov dword [ebp - 0x3510], 0x9d9d
mov dword [ebp - 0x3820], 0xd37137c2
mov dword [ebp - 0x27b0], 0x451af001
mov dword [ebp - 0x86c], 0
jmp 0x46d48a
mov eax, dword [ebp - 0x86c]
inc eax
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x86c], 3
jge 0x46d4a6
mov eax, dword [ebp - 0x86c]
mov dword [ebp + eax*4 - 0x3654], 0
jmp 0x46d47d
mov dword [ebp - 0x4c], 0x12
jmp 0x46d4b6
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffe2
jl 0x46dc26
mov dword [ebp - 0x230], 0x22a149ce
mov dword [ebp - 0x174], 0x58e92eda
mov dword [ebp - 0x4d4], 0xf59ec134
mov dword [ebp - 0x3518], 7
mov dword [ebp - 0x27a0], 1
mov dword [ebp - 0x27c0], 5
mov dword [ebp - 0x5bc], 0
jmp 0x46d515
mov eax, dword [ebp - 0x5bc]
inc eax
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 4
jge 0x46d531
mov eax, dword [ebp - 0x5bc]
mov dword [ebp + eax*4 - 0x2cb4], 0xc9cd49fc
jmp 0x46d508
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x4c], eax
jge 0x46d548
mov dword [ebp - 0x2244], 1
jmp 0x46d54f
and dword [ebp - 0x2244], 0
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x1a00], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a00]
mov dword [ebp + eax - 0x2cb4], ecx
mov dword [ebp - 0x174], 0xb44c
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x1a00], eax
jne 0x46d592
mov dword [ebp - 0x2650], 1
jmp 0x46d599
and dword [ebp - 0x2650], 0
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x37c8], eax
cmp dword [ebp - 0x4c], 0
je 0x46d5c0
mov eax, 0xbde64f6c
test eax, eax
je 0x46d5c0
mov dword [ebp - 0x223c], 1
jmp 0x46d5c7
and dword [ebp - 0x223c], 0
mov eax, dword [ebp - 0x230]
add eax, dword [ebp - 0x223c]
imul eax, dword [ebp - 0x4c]
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 0x4ec]
imul eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x4c]
jge 0x46d5f8
mov dword [ebp - 0x224c], 1
jmp 0x46d5ff
and dword [ebp - 0x224c], 0
mov eax, dword [ebp - 0x2244]
cmp eax, dword [ebp - 0x224c]
jl 0x46d619
mov dword [ebp - 0x2778], 1
jmp 0x46d620
and dword [ebp - 0x2778], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3520], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], eax
jne 0x46d63d
mov dword [ebp - 0x2254], 1
jmp 0x46d644
and dword [ebp - 0x2254], 0
mov eax, dword [ebp - 0x2254]
sub eax, dword [ebp - 0x230]
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3828], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2cb4]
neg eax
mov dword [ebp - 0x174], eax
imul eax, dword [ebp - 0x4c], 0
cmp dword [ebp - 0x174], eax
je 0x46d68c
mov dword [ebp - 0x225c], 1
jmp 0x46d693
and dword [ebp - 0x225c], 0
imul eax, dword [ebp - 0x225c], 0x1b87
imul eax, eax, 0xcb8e
test eax, eax
je 0x46d7e6
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x46d7e6
cmp dword [ebp - 0x230], 0
je 0x46d7e6
mov dword [ebp - 0x2324], 0xe7179999
mov dword [ebp - 0x174], 0
jmp 0x46d6e6
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 4
jle 0x46d7e1
mov dword [ebp - 0x2780], 1
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x3528], eax
mov dword [ebp - 0x4ec], 0x4c99
mov eax, dword [ebp - 0x2780]
cmp dword [ebp - 0x4ec], eax
jg 0x46d72d
mov dword [ebp - 0x2264], 1
jmp 0x46d734
and dword [ebp - 0x2264], 0
cmp dword [ebp - 0x4d4], 0
je 0x46d74f
cmp dword [ebp - 0x4c], 0
je 0x46d74f
mov dword [ebp - 0x2788], 1
jmp 0x46d756
and dword [ebp - 0x2788], 0
mov eax, dword [ebp - 0x2324]
imul eax, dword [ebp - 0x2264]
test eax, eax
je 0x46d773
mov dword [ebp - 0x230c], 1
jmp 0x46d77a
and dword [ebp - 0x230c], 0
mov eax, dword [ebp - 0x230c]
mov dword [ebp - 0x5c4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2cb4]
cmp dword [ebp - 0x5c4], eax
jle 0x46d7a7
mov dword [ebp - 0x2314], 1
jmp 0x46d7ae
and dword [ebp - 0x2314], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x2314], eax
jge 0x46d7c5
mov dword [ebp - 0x231c], 1
jmp 0x46d7cc
and dword [ebp - 0x231c], 0
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x231c]
mov dword [ebp - 0x2324], eax
jmp 0x46d6d9
jmp 0x46dc21
mov dword [ebp - 0xba8], 0xfffffff8
mov dword [ebp - 0x27d0], 0x28543b57
mov dword [ebp - 0x53c], 0
mov dword [ebp - 0x2374], 0x120b879b
push 2
lea ecx, [ebp - 0x25fc]
call fcn.00432107
mov dword [ebp - 0x2344], 0x6b68
mov dword [ebp - 0xa3c], 0x37a9e214
mov dword [ebp - 0x838], 0
jmp 0x46d848
mov eax, dword [ebp - 0x838]
inc eax
mov dword [ebp - 0x838], eax
cmp dword [ebp - 0x838], 2
jge 0x46d86a
push dword [ebp - 0x838]
lea ecx, [ebp - 0x25fc]
call fcn.004321f5
mov dword [eax], 6
jmp 0x46d83b
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0xba8], eax
mov eax, dword [ebp - 0xba8]
mov dword [ebp - 0x4d4], eax
cmp dword [ebp - 0x4d4], 0
jne 0x46db16
mov eax, dword [ebp - 0xa3c]
mov ecx, dword [ebp - 0xa3c]
inc ecx
mov dword [ebp - 0xa3c], ecx
test eax, eax
je 0x46d8c1
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2cb4], 0
je 0x46d8c1
mov dword [ebp - 0x237c], 1
jmp 0x46d8c8
and dword [ebp - 0x237c], 0
mov dword [ebp - 0x4d4], 1
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x37d8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3654]
mov dword [ebp - 0x3530], eax
cmp dword [ebp - 0x4ec], 0
jne 0x46d90c
cmp dword [ebp - 0x53c], 0
jne 0x46d90c
and dword [ebp - 0x232c], 0
jmp 0x46d916
mov dword [ebp - 0x232c], 1
mov eax, dword [ebp - 0x53c]
add eax, dword [ebp - 0x232c]
cmp eax, dword [ebp - 0x53c]
jle 0x46d936
mov dword [ebp - 0x2334], 1
jmp 0x46d93d
and dword [ebp - 0x2334], 0
mov eax, dword [ebp - 0x2344]
cmp dword [ebp - 0x2334], eax
je 0x46d957
mov dword [ebp - 0x233c], 1
jmp 0x46d95e
and dword [ebp - 0x233c], 0
cmp dword [ebp - 0x233c], 2
jb 0x46d973
mov dword [ebp - 0x2790], 1
jmp 0x46d97a
and dword [ebp - 0x2790], 0
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x3830], eax
cmp dword [ebp - 0x2798], 0
je 0x46d9a0
xor eax, eax
inc eax
je 0x46d9a0
mov dword [ebp - 0x234c], 1
jmp 0x46d9a7
and dword [ebp - 0x234c], 0
mov eax, dword [ebp - 0x2344]
imul eax, dword [ebp - 0x234c]
sub eax, dword [ebp - 0x27a0]
jne 0x46d9d2
xor eax, eax
jne 0x46d9d2
cmp dword [ebp - 0x53c], 0
jne 0x46d9d2
and dword [ebp - 0x2354], 0
jmp 0x46d9dc
mov dword [ebp - 0x2354], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2cb4]
cmp dword [ebp - 0x2354], eax
jl 0x46da03
mov eax, 0x13a2
test eax, eax
jne 0x46da03
and dword [ebp - 0x27a8], 0
jmp 0x46da0d
mov dword [ebp - 0x27a8], 1
mov eax, dword [ebp - 0x27b0]
mov dword [ebp - 0x3538], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2cb4], 6
jae 0x46da35
mov dword [ebp - 0x235c], 1
jmp 0x46da3c
and dword [ebp - 0x235c], 0
cmp dword [ebp - 0x235c], 0xbb53
jle 0x46da54
mov dword [ebp - 0x2364], 1
jmp 0x46da5b
and dword [ebp - 0x2364], 0
mov eax, dword [ebp - 0x2404]
cmp dword [ebp - 0x2364], eax
jl 0x46da75
mov dword [ebp - 0x236c], 1
jmp 0x46da7c
and dword [ebp - 0x236c], 0
mov eax, dword [ebp - 0x236c]
mov dword [ebp - 0x2374], eax
cmp dword [ebp - 0x2374], 0
jne 0x46daaa
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2cb4], 0
jne 0x46daaa
and dword [ebp - 0x27b8], 0
jmp 0x46dab4
mov dword [ebp - 0x27b8], 1
push 0
lea ecx, [ebp - 0x25fc]
call fcn.004321f5
push 0
lea ecx, [ebp - 0x25fc]
call fcn.004321f5
mov eax, dword [ebp - 0x27c0]
mov dword [ebp - 0x37e8], eax
mov eax, 0x2eba3859
sub eax, dword [ebp - 0xba8]
je 0x46daf8
xor eax, eax
inc eax
je 0x46daf8
mov dword [ebp - 0x2384], 1
jmp 0x46daff
and dword [ebp - 0x2384], 0
mov eax, dword [ebp - 0x237c]
add eax, dword [ebp - 0x2384]
jne 0x46db16
and dword [ebp - 0x238c], 0
jmp 0x46db20
mov dword [ebp - 0x238c], 1
push 0
lea ecx, [ebp - 0x25fc]
call fcn.004321f5
mov ecx, dword [ebp - 0x238c]
cmp ecx, dword [eax]
jle 0x46db43
mov dword [ebp - 0x2394], 1
jmp 0x46db4a
and dword [ebp - 0x2394], 0
cmp dword [ebp - 0x2394], 8
jb 0x46db5f
mov dword [ebp - 0x239c], 1
jmp 0x46db66
and dword [ebp - 0x239c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3654]
imul eax, dword [ebp - 0x239c]
cmp eax, 5
jg 0x46db8b
mov dword [ebp - 0x23a4], 1
jmp 0x46db92
and dword [ebp - 0x23a4], 0
mov eax, dword [ebp - 0x5c4]
cmp dword [ebp - 0x23a4], eax
jge 0x46dbac
mov dword [ebp - 0x23ac], 1
jmp 0x46dbb3
and dword [ebp - 0x23ac], 0
push 0
lea ecx, [ebp - 0x25fc]
call fcn.004321f5
mov ecx, dword [ebp - 0x23ac]
cmp ecx, dword [eax]
jg 0x46dbd6
mov dword [ebp - 0x23b4], 1
jmp 0x46dbdd
and dword [ebp - 0x23b4], 0
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x23b4], eax
jne 0x46dbf7
mov dword [ebp - 0x27c8], 1
jmp 0x46dbfe
and dword [ebp - 0x27c8], 0
mov eax, dword [ebp - 0x2404]
mov dword [ebp - 0x3540], eax
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0x27d0], eax
lea ecx, [ebp - 0x25fc]
call fcn.004321d9
jmp 0x46d4af
mov dword [ebp - 0x840], 0x399841b3
mov dword [ebp - 0x3838], 0x2d149feb
mov dword [ebp - 0x840], 0xffffffe4
jmp 0x46dc53
mov eax, dword [ebp - 0x840]
inc eax
mov dword [ebp - 0x840], eax
cmp dword [ebp - 0x840], 0x17
jne 0x46dc7a
mov byte [ebp - 0x3d6], 0
movzx eax, byte [ebp - 0x3d6]
test eax, eax
je 0x46dc78
push 0
push 0
call dword [0xabc020]
jmp 0x46dc46
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x23c], 8
mov dword [ebp - 0x240c], 0xffffffff
push 2
lea ecx, [ebp - 0x2614]
call fcn.00432107
mov dword [ebp - 0x5cc], 0x5637
mov dword [ebp - 0x2954], 0x25739271
mov dword [ebp - 0x295c], 0xffffffff
mov dword [ebp - 0x1ec], 0
jmp 0x46dcd9
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 2
jge 0x46dcfb
push dword [ebp - 0x1ec]
lea ecx, [ebp - 0x2614]
call fcn.004321f5
mov dword [eax], 1
jmp 0x46dccc
mov dword [ebp - 0x1ec], 0
jmp 0x46dd14
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 3
jge 0x46dd30
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x2ef8], 0x5a44198d
jmp 0x46dd07
cmp dword [ebp - 0x23c], 1
je 0x46dd45
mov dword [ebp - 0x2414], 1
jmp 0x46dd4c
and dword [ebp - 0x2414], 0
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x240c], eax
mov eax, dword [ebp - 0x240c]
cmp eax, dword [ebp - 0x2414]
jg 0x46dd72
mov dword [ebp - 0x2424], 1
jmp 0x46dd79
and dword [ebp - 0x2424], 0
mov eax, dword [ebp - 0x23c]
add eax, dword [ebp - 0x23c]
cmp eax, dword [ebp - 0x23c]
jl 0x46dd99
mov dword [ebp - 0x241c], 1
jmp 0x46dda0
and dword [ebp - 0x241c], 0
push 1
lea ecx, [ebp - 0x2614]
call fcn.004321f5
mov ecx, dword [ebp - 0x241c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x3548], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x37f8], eax
cmp dword [ebp - 0x2424], 1
ja 0x46dde2
mov dword [ebp - 0xbb0], 1
jmp 0x46dde9
and dword [ebp - 0xbb0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xbb0]
mov dword [ebp + eax - 0x2ef8], ecx
cmp dword [ebp - 0xbb0], 0xfffffffd
jge 0x46de10
mov dword [ebp - 0x242c], 1
jmp 0x46de17
and dword [ebp - 0x242c], 0
mov eax, dword [ebp - 0x5cc]
add eax, dword [ebp - 0x242c]
test eax, eax
jg 0x46de33
mov dword [ebp - 0x23d0], 1
jmp 0x46de3a
and dword [ebp - 0x23d0], 0
mov eax, dword [ebp - 0x23c]
cmp dword [ebp - 0x23d0], eax
jge 0x46de54
mov dword [ebp - 0x2288], 1
jmp 0x46de5b
and dword [ebp - 0x2288], 0
mov eax, dword [ebp - 0x5cc]
cmp dword [ebp - 0x2288], eax
je 0x46de75
mov dword [ebp - 0xd4c], 1
jmp 0x46de7c
and dword [ebp - 0xd4c], 0
mov eax, dword [ebp - 0xd4c]
mov dword [ebp - 0x2954], eax
push 0
lea ecx, [ebp - 0x2614]
call fcn.004321f5
cmp dword [eax], 0
je 0x46deb5
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2ef8], 0
je 0x46deb5
mov dword [ebp - 0x1c8c], 1
jmp 0x46debc
and dword [ebp - 0x1c8c], 0
cmp dword [ebp - 0x1c8c], 0x37d4
je 0x46ded4
mov dword [ebp - 0xd54], 1
jmp 0x46dedb
and dword [ebp - 0xd54], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2ef8]
imul eax, dword [ebp - 0xd54]
add eax, dword [ebp - 0x23c]
jne 0x46df08
mov eax, 0x64d9
test eax, eax
jne 0x46df08
and dword [ebp - 0x1c94], 0
jmp 0x46df12
mov dword [ebp - 0x1c94], 1
push 0
lea ecx, [ebp - 0x2614]
call fcn.004321f5
mov ecx, dword [ebp - 0x1c94]
cmp ecx, dword [eax]
jle 0x46df35
mov dword [ebp - 0xd5c], 1
jmp 0x46df3c
and dword [ebp - 0xd5c], 0
push 0
lea ecx, [ebp - 0x2614]
call fcn.004321f5
mov ecx, dword [ebp - 0xd5c]
cmp ecx, dword [eax]
je 0x46df5f
mov dword [ebp - 0x1c9c], 1
jmp 0x46df66
and dword [ebp - 0x1c9c], 0
mov eax, dword [ebp - 0x5cc]
cmp eax, dword [ebp - 0x1c9c]
jg 0x46df80
mov dword [ebp - 0xd64], 1
jmp 0x46df87
and dword [ebp - 0xd64], 0
cmp dword [ebp - 0xd64], 0
jb 0x46df9c
mov dword [ebp - 0x1ca4], 1
jmp 0x46dfa3
and dword [ebp - 0x1ca4], 0
mov eax, dword [ebp - 0x1ca4]
mov dword [ebp - 0x295c], eax
lea ecx, [ebp - 0x2614]
call fcn.004321d9
mov dword [ebp - 0x578], 0
mov dword [ebp - 0x694], 0xd14a59e4
mov dword [ebp - 0x12c], 0xfffffff7
mov dword [ebp - 0x1f4], 8
mov dword [ebp - 0x480], 0xfffffffe
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x12c], eax
jl 0x46e79f
mov dword [ebp - 0x1ce4], 0xfffffffe
mov dword [ebp - 0xdac], 2
mov dword [ebp - 0x5d4], 0x1cfe0c2d
mov dword [ebp - 0xc00], 0xfb07d6e1
mov dword [ebp - 0xddc], 0x1f68849
mov dword [ebp - 0x1f4], 0
jmp 0x46e055
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xb
jge 0x46e60c
mov dword [ebp - 0x1cac], 0xfe874d4a
mov dword [ebp - 0xbb8], 0
mov dword [ebp - 0xdb4], 0x55a6f0ed
mov dword [ebp - 0x848], 0
jmp 0x46e099
mov eax, dword [ebp - 0x848]
inc eax
mov dword [ebp - 0x848], eax
cmp dword [ebp - 0x848], 4
jge 0x46e0b5
mov eax, dword [ebp - 0x848]
mov dword [ebp + eax*4 - 0xa28], 0xffffffff
jmp 0x46e08c
mov dword [ebp - 0x12c], 0xffffffe4
jmp 0x46e0ce
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0xffffffff
je 0x46e4d2
mov dword [ebp - 0x9c], 0x607a9881
mov dword [ebp - 0x9c], 0
jmp 0x46e0fe
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jg 0x46e4cd
mov dword [ebp - 0x17c], 1
mov dword [ebp - 0x17c], 0
jmp 0x46e12e
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 3
jg 0x46e4c8
mov dword [ebp - 0x2fc], 0xfffffffd
mov byte [ebp - 0x2c6], 0
movzx eax, byte [ebp - 0x2c6]
test eax, eax
je 0x46e166
push 0
call dword [0xabc4bc]
push eax
call dword [0xabc46c]
mov dword [ebp - 0x2fc], 0
jmp 0x46e17f
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 3
jg 0x46e4c3
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ebp + ecx*4 - 0xa28]
cmp dword [ebp + eax*4 - 0xa28], ecx
jl 0x46e1b4
mov dword [ebp - 0xda4], 1
jmp 0x46e1bb
and dword [ebp - 0xda4], 0
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp + eax*4 - 0xa28]
mov dword [ebp - 0x3550], eax
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x1ce4], eax
jle 0x46e1e8
mov dword [ebp - 0xd6c], 1
jmp 0x46e1ef
and dword [ebp - 0xd6c], 0
mov eax, dword [ebp - 0xd6c]
mov dword [ebp - 0x1cac], eax
mov eax, dword [ebp - 0x1cac]
mov dword [ebp - 0xbb8], eax
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp + eax*4 - 0xa28]
cmp dword [ebp - 0xbb8], eax
jl 0x46e228
mov dword [ebp - 0xd74], 1
jmp 0x46e22f
and dword [ebp - 0xd74], 0
cmp dword [ebp - 0xd74], 0xfffe
ja 0x46e247
mov dword [ebp - 0x1cb4], 1
jmp 0x46e24e
and dword [ebp - 0x1cb4], 0
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x1cb4], eax
je 0x46e268
mov dword [ebp - 0xd7c], 1
jmp 0x46e26f
and dword [ebp - 0xd7c], 0
cmp dword [ebp - 0xd7c], 0x629bad2c
jge 0x46e287
mov dword [ebp - 0x1cbc], 1
jmp 0x46e28e
and dword [ebp - 0x1cbc], 0
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp + eax*4 - 0xa28]
add eax, dword [ebp - 0x1cbc]
sub eax, dword [ebp - 0x12c]
sub eax, 8
imul eax, dword [ebp - 0x1f4]
test eax, eax
je 0x46e2d1
mov eax, dword [ebp - 0x9c]
cmp dword [ebp + eax*4 - 0xa28], 0
je 0x46e2d1
mov dword [ebp - 0xd84], 1
jmp 0x46e2d8
and dword [ebp - 0xd84], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0xd84], eax
jne 0x46e2f2
mov dword [ebp - 0x2964], 1
jmp 0x46e2f9
and dword [ebp - 0x2964], 0
cmp dword [ebp - 0x2fc], 3
jb 0x46e30e
mov dword [ebp - 0x1cc4], 1
jmp 0x46e315
and dword [ebp - 0x1cc4], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x1cc4], eax
jle 0x46e32f
mov dword [ebp - 0xd8c], 1
jmp 0x46e336
and dword [ebp - 0xd8c], 0
mov eax, dword [ebp - 0xd8c]
add eax, 4
mov ecx, dword [ebp - 0x9c]
cmp eax, dword [ebp + ecx*4 - 0xa28]
jl 0x46e35a
mov dword [ebp - 0x1ccc], 1
jmp 0x46e361
and dword [ebp - 0x1ccc], 0
mov eax, dword [ebp - 0x1ccc]
sub eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x17c]
jg 0x46e381
mov dword [ebp - 0x296c], 1
jmp 0x46e388
and dword [ebp - 0x296c], 0
mov eax, dword [ebp - 0x12c]
imul eax, dword [ebp - 0x1f4]
test eax, eax
jne 0x46e3a9
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x46e3a9
and dword [ebp - 0xd94], 0
jmp 0x46e3b3
mov dword [ebp - 0xd94], 1
cmp dword [ebp - 0xd94], 1
jg 0x46e3c8
mov dword [ebp - 0x2974], 1
jmp 0x46e3cf
and dword [ebp - 0x2974], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa28]
mov dword [ebp - 0x31b0], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x31b4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa28]
cmp dword [ebp - 0x2fc], eax
jne 0x46e40e
mov dword [ebp - 0x1cd4], 1
jmp 0x46e415
and dword [ebp - 0x1cd4], 0
mov eax, dword [ebp - 0x1cd4]
mov dword [ebp - 0xdac], eax
cmp dword [ebp - 0x17c], 0
je 0x46e43f
cmp dword [ebp - 0x2fc], 0
je 0x46e43f
mov dword [ebp - 0xd9c], 1
jmp 0x46e446
and dword [ebp - 0xd9c], 0
cmp dword [ebp - 0xd9c], 0x257b06f8
jle 0x46e45e
mov dword [ebp - 0x1cdc], 1
jmp 0x46e465
and dword [ebp - 0x1cdc], 0
mov eax, dword [ebp - 0x1cdc]
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0x5d4]
cmp dword [ebp - 0xda4], eax
je 0x46e48b
mov dword [ebp - 0x297c], 1
jmp 0x46e492
and dword [ebp - 0x297c], 0
mov eax, dword [ebp - 0x1ce4]
mov dword [ebp - 0x31bc], eax
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp + eax*4 - 0xa28]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0xa28]
mov dword [ebp - 0xc00], eax
jmp 0x46e172
jmp 0x46e121
jmp 0x46e0f1
jmp 0x46e0c1
mov eax, dword [ebp - 0xdac]
dec eax
jne 0x46e4f3
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa28], 0
jne 0x46e4f3
and dword [ebp - 0x1cec], 0
jmp 0x46e4fd
mov dword [ebp - 0x1cec], 1
mov eax, dword [ebp - 0xdb4]
imul eax, dword [ebp - 0x1cec]
mov dword [ebp - 0x5d4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa28]
mov dword [ebp - 0x31c4], eax
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x31cc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa28]
cmp dword [ebp - 0xdb4], eax
je 0x46e54f
mov dword [ebp - 0x1cf4], 1
jmp 0x46e556
and dword [ebp - 0x1cf4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa28]
imul eax, dword [ebp - 0x1cf4]
cmp eax, 0x1efb40ac
je 0x46e57c
mov dword [ebp - 0xdbc], 1
jmp 0x46e583
and dword [ebp - 0xdbc], 0
cmp dword [ebp - 0xdbc], 6
jg 0x46e598
mov dword [ebp - 0x1cfc], 1
jmp 0x46e59f
and dword [ebp - 0x1cfc], 0
mov eax, dword [ebp - 0xc00]
cmp eax, dword [ebp - 0x1cfc]
jl 0x46e5bf
cmp dword [ebp - 0xbb8], 0
jne 0x46e5bf
and dword [ebp - 0xdc4], 0
jmp 0x46e5c9
mov dword [ebp - 0xdc4], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa28]
cmp dword [ebp - 0xdc4], eax
jne 0x46e5ea
mov dword [ebp - 0x1d04], 1
jmp 0x46e5f1
and dword [ebp - 0x1d04], 0
mov eax, dword [ebp - 0x1d04]
mov dword [ebp - 0xc00], eax
mov dword [ebp - 0x480], 1
jmp 0x46e048
mov dword [ebp - 0x480], 0
jmp 0x46e625
mov eax, dword [ebp - 0x480]
dec eax
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 0xfffffff2
jne 0x46e79d
push 1
lea ecx, [ebp - 0x2438]
call fcn.00432107
mov dword [ebp - 0x1d0c], 0xb839b477
mov dword [ebp - 0x850], 0
jmp 0x46e662
mov eax, dword [ebp - 0x850]
inc eax
mov dword [ebp - 0x850], eax
cmp dword [ebp - 0x850], 1
jge 0x46e684
push dword [ebp - 0x850]
lea ecx, [ebp - 0x2438]
call fcn.004321f5
mov dword [eax], 0xf6402d6f
jmp 0x46e655
mov esi, dword [ebp - 0x1f4]
push 0
lea ecx, [ebp - 0x2438]
call fcn.004321f5
cmp esi, dword [eax]
jne 0x46e6a7
mov dword [ebp - 0x2984], 1
jmp 0x46e6ae
and dword [ebp - 0x2984], 0
push 0
lea ecx, [ebp - 0x2438]
call fcn.004321f5
cmp dword [eax], 0xffffffff
jg 0x46e6cc
mov dword [ebp - 0xdcc], 1
jmp 0x46e6d3
and dword [ebp - 0xdcc], 0
mov eax, dword [ebp - 0xdcc]
mov dword [ebp - 0x1d0c], eax
cmp dword [ebp - 0x1d0c], 0xffffffff
jle 0x46e6f4
mov dword [ebp - 0xdd4], 1
jmp 0x46e6fb
and dword [ebp - 0xdd4], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0xdd4], eax
jne 0x46e715
mov dword [ebp - 0x298c], 1
jmp 0x46e71c
and dword [ebp - 0x298c], 0
push 0
lea ecx, [ebp - 0x2438]
call fcn.004321f5
push 0
lea ecx, [ebp - 0x2438]
call fcn.004321f5
cmp dword [eax], 0
jne 0x46e74d
mov eax, 0x34bcd012
test eax, eax
jne 0x46e74d
and dword [ebp - 0x1d14], 0
jmp 0x46e757
mov dword [ebp - 0x1d14], 1
push 0
lea ecx, [ebp - 0x2438]
call fcn.004321f5
mov ecx, dword [ebp - 0x1d14]
cmp ecx, dword [eax]
jne 0x46e77a
mov dword [ebp - 0x2994], 1
jmp 0x46e781
and dword [ebp - 0x2994], 0
mov eax, dword [ebp - 0xddc]
mov dword [ebp - 0xddc], eax
lea ecx, [ebp - 0x2438]
call fcn.004321d9
jmp 0x46e618
jmp 0x46e7a9
mov dword [ebp - 0x480], 0x110bdbe7
mov dword [ebp - 0x2b50], 0x484a8630
mov dword [ebp - 0x50], 0x9cf1813f
mov dword [ebp - 0xdec], 0xc017f215
mov dword [ebp - 0xc08], 4
mov dword [ebp - 0xe04], 0xc795c380
mov dword [ebp - 0x30b8], 0x7716e311
mov dword [ebp - 0x30b4], 0x7716e311
mov dword [ebp - 0x30b0], 0x7716e311
mov dword [ebp - 0x30ac], 0x7716e311
push 2
lea ecx, [ebp - 0x2f10]
call fcn.00432107
mov dword [ebp - 0x5dc], 0
jmp 0x46e826
mov eax, dword [ebp - 0x5dc]
inc eax
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x5dc], 2
jge 0x46e848
push dword [ebp - 0x5dc]
lea ecx, [ebp - 0x2f10]
call fcn.004321f5
mov dword [eax], 1
jmp 0x46e819
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x31d4], eax
cmp dword [ebp - 0x50], 0
jne 0x46e8cb
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x50], eax
jle 0x46e86b
mov dword [ebp - 0x1d1c], 1
jmp 0x46e872
and dword [ebp - 0x1d1c], 0
cmp dword [ebp - 0x1d1c], 0xffffffff
jle 0x46e887
mov dword [ebp - 0xde4], 1
jmp 0x46e88e
and dword [ebp - 0xde4], 0
cmp dword [ebp - 0xde4], 0xf780
jg 0x46e8a6
mov dword [ebp - 0x1d24], 1
jmp 0x46e8ad
and dword [ebp - 0x1d24], 0
mov eax, dword [ebp - 0x1d24]
mov dword [ebp - 0xdec], eax
cmp dword [ebp - 0xdec], 0
jne 0x46e8cb
and dword [ebp - 0x1d2c], 0
jmp 0x46e8d5
mov dword [ebp - 0x1d2c], 1
mov eax, dword [ebp - 0x1d2c]
add eax, 0x915bb00
je 0x46e8f5
push 9
pop eax
test eax, eax
je 0x46e8f5
mov dword [ebp - 0xdf4], 1
jmp 0x46e8fc
and dword [ebp - 0xdf4], 0
mov eax, dword [ebp - 0xdf4]
mov dword [ebp - 0xc08], eax
imul eax, dword [ebp - 0xc08], 0x3bd3
add eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x50]
jne 0x46e929
mov dword [ebp - 0x1d34], 1
jmp 0x46e930
and dword [ebp - 0x1d34], 0
mov eax, dword [ebp - 0x1d34]
sub eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x50]
jg 0x46e94d
mov dword [ebp - 0x299c], 1
jmp 0x46e954
and dword [ebp - 0x299c], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x31dc], eax
mov eax, dword [ebp - 0xc08]
mov dword [ebp - 0x3170], eax
cmp dword [ebp - 0x50], 3
jne 0x46e97b
mov dword [ebp - 0xdfc], 1
jmp 0x46e982
and dword [ebp - 0xdfc], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0xdfc]
jne 0x46e999
mov dword [ebp - 0x1d3c], 1
jmp 0x46e9a0
and dword [ebp - 0x1d3c], 0
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x1d3c]
mov dword [ebp - 0xe04], eax
mov eax, dword [ebp - 0xe04]
mov ecx, dword [ebp - 0x50]
lea eax, [eax + ecx + 6]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x30b8]
je 0x46e9d7
mov dword [ebp - 0x1d44], 1
jmp 0x46e9de
and dword [ebp - 0x1d44], 0
cmp dword [ebp - 0x1d44], 0xfffffffb
jg 0x46e9f3
mov dword [ebp - 0xe0c], 1
jmp 0x46e9fa
and dword [ebp - 0xe0c], 0
mov eax, dword [ebp - 0xe0c]
inc eax
cmp eax, dword [ebp - 0x50]
jl 0x46ea12
mov dword [ebp - 0x1d4c], 1
jmp 0x46ea19
and dword [ebp - 0x1d4c], 0
push 1
lea ecx, [ebp - 0x2f10]
call fcn.004321f5
mov ecx, dword [ebp - 0x1d4c]
mov dword [eax], ecx
lea ecx, [ebp - 0x2f10]
call fcn.004321d9
mov dword [ebp - 0x210c], 0x1f91351d
mov dword [ebp - 0x1fc], 0xfffffff8
mov dword [ebp - 0xc18], 0xd0f4f230
mov dword [ebp - 0xe2c], 1
mov dword [ebp - 0x29a4], 1
push 1
lea ecx, [ebp - 0x3664]
call fcn.00432107
mov dword [ebp - 0x184], 0
jmp 0x46ea91
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 3
jge 0x46eaad
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x2f28], 0x4ca77904
jmp 0x46ea84
mov dword [ebp - 0x184], 0
jmp 0x46eac6
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 1
jge 0x46eae8
push dword [ebp - 0x184]
lea ecx, [ebp - 0x3664]
call fcn.004321f5
mov dword [eax], 0xcc7c
jmp 0x46eab9
cmp dword [ebp - 0x1fc], 0xcdb8faaa
jae 0x46eb00
mov dword [ebp - 0x1d6c], 1
jmp 0x46eb07
and dword [ebp - 0x1d6c], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x3178], eax
cmp dword [ebp - 0x1fc], 0
jne 0x46eb29
xor eax, eax
jne 0x46eb29
and dword [ebp - 0xe14], 0
jmp 0x46eb33
mov dword [ebp - 0xe14], 1
mov eax, dword [ebp - 0x1fc]
imul eax, dword [ebp - 0xe14]
test eax, eax
je 0x46eb59
cmp dword [ebp - 0x1fc], 0
je 0x46eb59
mov dword [ebp - 0x1d54], 1
jmp 0x46eb60
and dword [ebp - 0x1d54], 0
mov eax, dword [ebp - 0x1fc]
neg eax
cmp eax, dword [ebp - 0x1d54]
jge 0x46eb7c
mov dword [ebp - 0xe1c], 1
jmp 0x46eb83
and dword [ebp - 0xe1c], 0
mov eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0xe1c], eax
jge 0x46eb9d
mov dword [ebp - 0x1d5c], 1
jmp 0x46eba4
and dword [ebp - 0x1d5c], 0
mov eax, dword [ebp - 0xc18]
cmp dword [ebp - 0x1d5c], eax
je 0x46ebbe
mov dword [ebp - 0xe24], 1
jmp 0x46ebc5
and dword [ebp - 0xe24], 0
mov eax, dword [ebp - 0xc18]
cmp dword [ebp - 0xe24], eax
jg 0x46ebe1
xor eax, eax
inc eax
jne 0x46ebe1
and dword [ebp - 0x1d64], 0
jmp 0x46ebeb
mov dword [ebp - 0x1d64], 1
mov eax, dword [ebp - 0x1d64]
mov dword [ebp - 0xe2c], eax
cmp dword [ebp - 0xe2c], 0
jne 0x46ec12
cmp dword [ebp - 0x1fc], 0
jne 0x46ec12
and dword [ebp - 0xc10], 0
jmp 0x46ec1c
mov dword [ebp - 0xc10], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc10]
mov dword [ebp + eax - 0x2f28], ecx
cmp dword [ebp - 0xc10], 0
jne 0x46ec3f
cmp dword [ebp - 0xc18], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1fc]
cmp dword [ebp + eax - 0x2f28], ecx
je 0x46ec60
mov dword [ebp - 0xe34], 1
jmp 0x46ec67
and dword [ebp - 0xe34], 0
mov eax, dword [ebp - 0x1d6c]
cmp eax, dword [ebp - 0xe34]
je 0x46ec91
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2f28], 0
je 0x46ec91
mov dword [ebp - 0x1d74], 1
jmp 0x46ec98
and dword [ebp - 0x1d74], 0
cmp dword [ebp - 0x1d74], 9
jl 0x46ecad
mov dword [ebp - 0xe3c], 1
jmp 0x46ecb4
and dword [ebp - 0xe3c], 0
mov eax, dword [ebp - 0xe3c]
mov dword [ebp - 0x29a4], eax
lea ecx, [ebp - 0x3664]
call fcn.004321d9
mov dword [ebp - 0x3180], 1
mov dword [ebp - 0x3188], 0xffffffff
mov dword [ebp - 0x5e4], 0x490c4d8e
mov dword [ebp - 0x858], 0
jmp 0x46ed02
mov eax, dword [ebp - 0x858]
inc eax
mov dword [ebp - 0x858], eax
cmp dword [ebp - 0x858], 2
jge 0x46ed1e
mov eax, dword [ebp - 0x858]
mov dword [ebp + eax*4 - 0x3aa8], 0x3df7
jmp 0x46ecf5
mov dword [ebp - 0x5e4], 1
jmp 0x46ed37
mov eax, dword [ebp - 0x5e4]
dec eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 0
jl 0x46ed56
mov dword [ebp - 0x29ac], 0xc1574781
mov dword [ebp - 0x29ac], 0x2e31d83
jmp 0x46ed2a
mov dword [ebp - 0x18c], 0xffffffff
mov dword [ebp - 0x4f4], 0
mov dword [ebp - 0x1d9c], 0x885b
mov dword [ebp - 0x1d94], 0xdfe924f6
mov dword [ebp - 0xe5c], 0xa025ec56
mov dword [ebp - 0x29b4], 0
mov dword [ebp - 0x860], 0
jmp 0x46edab
mov eax, dword [ebp - 0x860]
inc eax
mov dword [ebp - 0x860], eax
cmp dword [ebp - 0x860], 1
jge 0x46edc7
mov eax, dword [ebp - 0x860]
mov dword [ebp + eax*4 - 0xc80], 0xc64a
jmp 0x46ed9e
mov dword [ebp - 0x18c], 0
jmp 0x46ede0
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jg 0x46eec5
mov dword [ebp - 0x2ea8], 1
mov dword [ebp - 0x2ea4], 1
mov dword [ebp - 0x2ea0], 1
mov dword [ebp - 0x2e9c], 1
lea ecx, [ebp - 0xb9d]
call fcn.00432204
push eax
lea eax, [ebp - 0x2e98]
push eax
lea eax, [ebp - 0x2ea8]
push eax
lea ecx, [ebp - 0x3ad8]
call fcn.00432207
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2cfc]
call fcn.004321b3
mov dword [ebp - 0x3190], 0xffffffff
push 1
lea ecx, [ebp - 0x2cfc]
call fcn.004321f5
and dword [eax], 0
jmp 0x46ee8a
push 1
lea ecx, [ebp - 0x2cfc]
call fcn.004321f5
mov dword [ebp - 0x1d7c], eax
mov eax, dword [ebp - 0x1d7c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1d7c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x2cfc]
call fcn.004321f5
cmp dword [eax], 0
jg 0x46eeb5
mov dword [ebp - 0xe44], 1
mov eax, dword [ebp - 0xe44]
dec eax
mov dword [ebp - 0xe44], eax
jmp 0x46ee66
lea ecx, [ebp - 0x2cfc]
call fcn.004321d9
jmp 0x46edd3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc80]
mov dword [ebp - 0x3224], eax
cmp dword [ebp - 0x18c], 0
jae 0x46eeed
mov dword [ebp - 0x1d84], 1
jmp 0x46eef4
and dword [ebp - 0x1d84], 0
mov eax, dword [ebp - 0x1d9c]
cmp dword [ebp - 0x1d84], eax
jg 0x46ef0e
mov dword [ebp - 0xe4c], 1
jmp 0x46ef15
and dword [ebp - 0xe4c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc80]
cmp dword [ebp - 0xe4c], eax
jge 0x46ef36
mov dword [ebp - 0x1d8c], 1
jmp 0x46ef3d
and dword [ebp - 0x1d8c], 0
mov eax, dword [ebp - 0x18c]
add eax, dword [ebp - 0x1d8c]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xc80]
cmp dword [ebp - 0x4f4], eax
jl 0x46ef6b
mov dword [ebp - 0xe54], 1
jmp 0x46ef72
and dword [ebp - 0xe54], 0
mov eax, dword [ebp - 0xe54]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x322c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x1d94], eax
mov eax, dword [ebp - 0x1d94]
mov dword [ebp - 0xe5c], eax
mov eax, dword [ebp - 0xe5c]
mov dword [ebp - 0x3234], eax
mov eax, dword [ebp - 0x1d9c]
mov dword [ebp - 0x323c], eax
imul eax, dword [ebp - 0x4f4], 0xfffffffb
cmp eax, dword [ebp - 0x4f4]
jne 0x46efd5
mov dword [ebp - 0xe64], 1
jmp 0x46efdc
and dword [ebp - 0xe64], 0
mov eax, dword [ebp - 0x4f4]
cmp eax, dword [ebp - 0xe64]
jg 0x46eff6
mov dword [ebp - 0x1da4], 1
jmp 0x46effd
and dword [ebp - 0x1da4], 0
mov eax, dword [ebp - 0x29b4]
cmp dword [ebp - 0x1da4], eax
jl 0x46f017
mov dword [ebp - 0xe6c], 1
jmp 0x46f01e
and dword [ebp - 0xe6c], 0
mov eax, dword [ebp - 0xe6c]
mov dword [ebp - 0x4f4], eax
mov dword [ebp - 0x3244], 0x9d9d
mov dword [ebp - 0x324c], 8
mov dword [ebp - 0x3254], 0xd29be1d9
mov dword [ebp - 0x325c], 0x46df37d4
push 3
lea ecx, [ebp - 0x3674]
call fcn.00432107
mov dword [ebp - 0x1dac], 0xfffffffa
mov dword [ebp - 0x3264], 0
mov dword [ebp - 0x5ec], 0
jmp 0x46f08c
mov eax, dword [ebp - 0x5ec]
inc eax
mov dword [ebp - 0x5ec], eax
cmp dword [ebp - 0x5ec], 3
jge 0x46f0ae
push dword [ebp - 0x5ec]
lea ecx, [ebp - 0x3674]
call fcn.004321f5
mov dword [eax], 0x4f2887cf
jmp 0x46f07f
mov eax, dword [ebp - 0x1dac]
dec eax
mov dword [ebp - 0x1dac], eax
lea ecx, [ebp - 0x3674]
call fcn.004321d9
mov dword [ebp - 0x326c], 0xd37137c2
mov dword [ebp - 0x2c68], 0x451af001
mov dword [ebp - 0x3274], 0xe2db58e4
mov dword [ebp - 0x327c], 0x57ad95e1
mov dword [ebp - 0x3284], 0
mov dword [ebp - 0x328c], 0xbe4438be
mov dword [ebp - 0x3294], 0
mov dword [ebp - 0x329c], 0xb8ee41b
mov dword [ebp - 0x32a4], 0
mov dword [ebp - 0x2e6c], 0xad8530de
mov dword [ebp - 0x2e68], 0xad8530de
mov dword [ebp - 0x2e64], 0xad8530de
mov dword [ebp - 0x2e60], 0xad8530de
lea ecx, [ebp - 0xc75]
call fcn.00432204
push eax
lea eax, [ebp - 0x2e5c]
push eax
lea eax, [ebp - 0x2e6c]
push eax
lea ecx, [ebp - 0x3ae8]
call fcn.00432207
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x39c8]
call fcn.004321b3
mov dword [ebp - 0xe74], 0xfffa
mov dword [ebp - 0x868], 0
jmp 0x46f1a0
mov eax, dword [ebp - 0x868]
inc eax
mov dword [ebp - 0x868], eax
cmp dword [ebp - 0x868], 2
jge 0x46f1bc
mov eax, dword [ebp - 0x868]
mov dword [ebp + eax*4 - 0x3b30], 0x3c57643
jmp 0x46f193
mov eax, dword [ebp - 0xe74]
dec eax
mov dword [ebp - 0xe74], eax
mov byte [ebp - 0x2c8], 0
movzx eax, byte [ebp - 0x2c8]
test eax, eax
je 0x46f1ed
push 0x2287
push 0x412
push 0
call dword [0xabc4ac]
lea ecx, [ebp - 0x39c8]
call fcn.004321d9
mov dword [ebp - 0x4dc], 0xfffffffc
mov dword [ebp - 0x1db4], 0x10977a12
mov dword [ebp - 0x32ac], 0xfff8
mov dword [ebp - 0x5f4], 0
jmp 0x46f22f
mov eax, dword [ebp - 0x5f4]
inc eax
mov dword [ebp - 0x5f4], eax
cmp dword [ebp - 0x5f4], 2
jge 0x46f24b
mov eax, dword [ebp - 0x5f4]
mov dword [ebp + eax*4 - 0x2ddc], 0xfffffff9
jmp 0x46f222
mov byte [ebp - 0x2ca], 0
movzx eax, byte [ebp - 0x2ca]
test eax, eax
je 0x46f26a
push 0
push 0x1c5c
call dword [0xabc350]
cmp dword [ebp - 0x4dc], 0
jne 0x46f27c
mov eax, 0xb3e90a62
test eax, eax
je 0x46f2e0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2ddc], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ddc]
mov dword [ebp - 0x32b4], eax
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x32bc], eax
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x32c4], eax
mov dword [ebp - 0x1db4], 2
cmp dword [ebp - 0x1db4], 0xffffffff
jl 0x46f2e0
cmp dword [ebp - 0x4dc], 0
je 0x46f2e0
mov dword [ebp - 0xe7c], 1
jmp 0x46f2e7
and dword [ebp - 0xe7c], 0
mov eax, dword [ebp - 0x4dc]
cmp eax, dword [ebp - 0xe7c]
jl 0x46f301
mov dword [ebp - 0x1dbc], 1
jmp 0x46f308
and dword [ebp - 0x1dbc], 0
mov eax, dword [ebp - 0x1dbc]
mov dword [ebp - 0x4dc], eax
mov dword [ebp - 0x870], 0
jmp 0x46f32d
mov eax, dword [ebp - 0x870]
inc eax
mov dword [ebp - 0x870], eax
cmp dword [ebp - 0x870], 3
jge 0x46f349
mov eax, dword [ebp - 0x870]
mov dword [ebp + eax*4 - 0x36b4], 0
jmp 0x46f320
mov dword [ebp - 0x294], 0xac64a684
mov dword [ebp - 0x27c], 0xfffffffd
mov byte [ebp - 0x2cc], 0
movzx eax, byte [ebp - 0x2cc]
test eax, eax
je 0x46f394
push 0xdad
push 0
push 0x300
push 0x1d05
call dword [0xabc4bc]
push eax
call dword [0xabc48c]
push eax
call dword [0xabc13c]
mov dword [ebp - 0x294], 0xffffffe3
jmp 0x46f3ad
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0xfffffffd
jle 0x46f756
mov dword [ebp - 0x244], 1
push 4
lea ecx, [ebp - 0x262c]
call fcn.00432107
mov dword [ebp - 0x1dd4], 0x59c3f908
mov dword [ebp - 0x29cc], 0xadbefc71
mov dword [ebp - 0x5fc], 0
jmp 0x46f3fe
mov eax, dword [ebp - 0x5fc]
inc eax
mov dword [ebp - 0x5fc], eax
cmp dword [ebp - 0x5fc], 4
jge 0x46f41d
push dword [ebp - 0x5fc]
lea ecx, [ebp - 0x262c]
call fcn.004321f5
or dword [eax], 0xffffffff
jmp 0x46f3f1
cmp dword [ebp - 0x244], 9
je 0x46f450
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x32cc], eax
cmp dword [ebp - 0x244], 0
jne 0x46f450
cmp dword [ebp - 0x294], 0
jne 0x46f450
mov dword [ebp - 0xe84], 1
jmp 0x46f457
and dword [ebp - 0xe84], 0
cmp dword [ebp - 0xe84], 9
jbe 0x46f46c
mov dword [ebp - 0xc88], 1
jmp 0x46f473
and dword [ebp - 0xc88], 0
push 0
lea ecx, [ebp - 0x262c]
call fcn.004321f5
mov ecx, dword [ebp - 0xc88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x294]
imul eax, dword [ebp - 0xc88]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x27c]
cmp dword [ebp - 0x294], eax
jl 0x46f4f6
mov dword [ebp - 0x29bc], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x29bc], eax
mov byte [ebp - 0x2ce], 0
movzx eax, byte [ebp - 0x2ce]
test eax, eax
je 0x46f4f1
push 0
push 0x21f4
push 0x22a2
call dword [0xabc4bc]
push eax
call dword [0xabc48c]
push eax
call dword [0xabc114]
jmp 0x46f746
mov dword [ebp - 0xc90], 0xf738f585
mov esi, dword [ebp - 0x294]
push 0
lea ecx, [ebp - 0x262c]
call fcn.004321f5
mov eax, dword [eax]
sub eax, 0xfffa
cmp esi, eax
jl 0x46f52a
mov dword [ebp - 0x1dc4], 1
jmp 0x46f531
and dword [ebp - 0x1dc4], 0
mov eax, dword [ebp - 0x1dc4]
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x244], 0
jmp 0x46f556
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 8
jl 0x46f746
mov dword [ebp - 0xeb4], 0xfffffff8
mov dword [ebp - 0x27c], 0
jmp 0x46f586
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 3
jg 0x46f741
mov dword [ebp - 0x304], 1
mov dword [ebp - 0x29c4], 9
mov dword [ebp - 0x304], 0
jmp 0x46f5c0
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 3
jg 0x46f72f
cmp dword [ebp - 0x304], 0
jne 0x46f65a
mov eax, 0xd42
test eax, eax
jne 0x46f65a
cmp dword [ebp - 0x29c4], 0
jb 0x46f5f8
mov dword [ebp - 0xe8c], 1
jmp 0x46f5ff
and dword [ebp - 0xe8c], 0
cmp dword [ebp - 0xe8c], 1
jbe 0x46f614
mov dword [ebp - 0x1dcc], 1
jmp 0x46f61b
and dword [ebp - 0x1dcc], 0
mov eax, dword [ebp - 0xc90]
cmp dword [ebp - 0x1dcc], eax
je 0x46f635
mov dword [ebp - 0xe94], 1
jmp 0x46f63c
and dword [ebp - 0xe94], 0
mov eax, dword [ebp - 0xe94]
mov dword [ebp - 0x1dd4], eax
cmp dword [ebp - 0x1dd4], 0
jne 0x46f65a
and dword [ebp - 0xe9c], 0
jmp 0x46f664
mov dword [ebp - 0xe9c], 1
cmp dword [ebp - 0xe9c], 0x4f8d36fb
jge 0x46f67c
mov dword [ebp - 0x1ddc], 1
jmp 0x46f683
and dword [ebp - 0x1ddc], 0
mov eax, dword [ebp - 0x304]
cmp dword [ebp - 0x1ddc], eax
jne 0x46f69d
mov dword [ebp - 0x1de4], 1
jmp 0x46f6a4
and dword [ebp - 0x1de4], 0
push dword [ebp - 0x27c]
lea ecx, [ebp - 0x262c]
call fcn.004321f5
mov eax, dword [eax]
add eax, dword [ebp - 0xc90]
mov dword [ebp - 0xea4], eax
push dword [ebp - 0x304]
lea ecx, [ebp - 0x262c]
call fcn.004321f5
mov ecx, dword [ebp - 0xea4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xea4]
cmp eax, dword [ebp - 0x1de4]
je 0x46f6f6
mov dword [ebp - 0xeac], 1
jmp 0x46f6fd
and dword [ebp - 0xeac], 0
mov eax, dword [ebp - 0xc90]
cmp dword [ebp - 0xeac], eax
jl 0x46f717
mov dword [ebp - 0x1dec], 1
jmp 0x46f71e
and dword [ebp - 0x1dec], 0
mov eax, dword [ebp - 0x1dec]
mov dword [ebp - 0x29cc], eax
jmp 0x46f5b3
mov eax, dword [ebp - 0xeb4]
dec eax
mov dword [ebp - 0xeb4], eax
jmp 0x46f579
jmp 0x46f549
lea ecx, [ebp - 0x262c]
call fcn.004321d9
jmp 0x46f3a0
mov dword [ebp - 0x38], 0x12
jmp 0x46f766
cmp dword [ebp - 0x38], 0xffffffe2
jl 0x473575
mov dword [ebp - 0x44], 6
push 2
lea ecx, [ebp - 0x2f40]
call fcn.00432107
mov dword [ebp - 0x32d4], 0x7c86
mov dword [ebp - 0x204], 0
jmp 0x46f7a7
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 4
jge 0x46f7c3
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0xd40], 0xa136951a
jmp 0x46f79a
mov dword [ebp - 0x204], 0
jmp 0x46f7dc
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 2
jge 0x46f7fe
push dword [ebp - 0x204]
lea ecx, [ebp - 0x2f40]
call fcn.004321f5
mov dword [eax], 1
jmp 0x46f7cf
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x44], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x44]
mov dword [ebp + eax - 0xd40], ecx
mov dword [ebp - 0x44], 3
jmp 0x46f824
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x46f95f
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0xd40]
mov dword [ebp + ecx*4 - 0xd40], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0xd40]
mov dword [ebp - 0x32dc], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0xd40]
mov dword [ebp - 0x32e4], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0xd40]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xd40]
add ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
sub ecx, dword [ebp + edx*4 - 0xd40]
sub eax, ecx
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0xd40]
test eax, eax
je 0x46f8b6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd40], 0
je 0x46f8b6
mov dword [ebp - 0x1df4], 1
jmp 0x46f8bd
and dword [ebp - 0x1df4], 0
mov eax, dword [ebp - 0x1df4]
shl eax, 2
cmp eax, 0x885dc1b6
jne 0x46f8d9
mov dword [ebp - 0xebc], 1
jmp 0x46f8e0
and dword [ebp - 0xebc], 0
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xebc]
sub ecx, dword [ebp + eax*4 - 0xd40]
imul ecx, dword [ebp - 0x44]
mov dword [ebp - 0x1dfc], ecx
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x1dfc]
mov dword [ebp + eax*4 - 0xd40], ecx
cmp dword [ebp - 0x1dfc], 0xffffffff
jb 0x46f91f
mov dword [ebp - 0xec4], 1
jmp 0x46f926
and dword [ebp - 0xec4], 0
cmp dword [ebp - 0xec4], 0x3e2f
je 0x46f93e
mov dword [ebp - 0x1e04], 1
jmp 0x46f945
and dword [ebp - 0x1e04], 0
push 0
lea ecx, [ebp - 0x2f40]
call fcn.004321f5
mov ecx, dword [ebp - 0x1e04]
mov dword [eax], ecx
jmp 0x46f81d
lea ecx, [ebp - 0x2f40]
call fcn.004321d9
mov dword [ebp - 0x254], 0x22a149ce
mov dword [ebp - 0x878], 0xfffffff8
mov dword [ebp - 0x878], 0
jmp 0x46f997
mov eax, dword [ebp - 0x878]
inc eax
mov dword [ebp - 0x878], eax
cmp dword [ebp - 0x878], 0xd
jg 0x46f9de
mov byte [ebp - 0x2d0], 0
movzx eax, byte [ebp - 0x2d0]
test eax, eax
je 0x46f9bf
push 0x11e9
push 0
call dword [0xabc31c]
mov byte [ebp - 0x2d2], 0
movzx eax, byte [ebp - 0x2d2]
test eax, eax
je 0x46f9dc
push 0x91d
call dword [0xabc4a0]
jmp 0x46f98a
mov dword [ebp - 0x54], 0x9cf1813f
mov dword [ebp - 0x1e14], 0xc017f215
mov dword [ebp - 0xc44], 4
mov dword [ebp - 0x1e2c], 0xc795c380
mov dword [ebp - 0x30e8], 0x7716e311
mov dword [ebp - 0x30e4], 0x7716e311
mov dword [ebp - 0x30e0], 0x7716e311
mov dword [ebp - 0x30dc], 0x7716e311
push 2
lea ecx, [ebp - 0x2f58]
call fcn.00432107
mov dword [ebp - 0x604], 0
jmp 0x46fa51
mov eax, dword [ebp - 0x604]
inc eax
mov dword [ebp - 0x604], eax
cmp dword [ebp - 0x604], 2
jge 0x46fa73
push dword [ebp - 0x604]
lea ecx, [ebp - 0x2f58]
call fcn.004321f5
mov dword [eax], 1
jmp 0x46fa44
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x32ec], eax
cmp dword [ebp - 0x54], 0
jne 0x46faf6
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x54], eax
jle 0x46fa96
mov dword [ebp - 0xecc], 1
jmp 0x46fa9d
and dword [ebp - 0xecc], 0
cmp dword [ebp - 0xecc], 0xffffffff
jle 0x46fab2
mov dword [ebp - 0x1e0c], 1
jmp 0x46fab9
and dword [ebp - 0x1e0c], 0
cmp dword [ebp - 0x1e0c], 0xf780
jg 0x46fad1
mov dword [ebp - 0xed4], 1
jmp 0x46fad8
and dword [ebp - 0xed4], 0
mov eax, dword [ebp - 0xed4]
mov dword [ebp - 0x1e14], eax
cmp dword [ebp - 0x1e14], 0
jne 0x46faf6
and dword [ebp - 0xedc], 0
jmp 0x46fb00
mov dword [ebp - 0xedc], 1
mov eax, dword [ebp - 0xedc]
add eax, 0x915bb00
je 0x46fb20
push 9
pop eax
test eax, eax
je 0x46fb20
mov dword [ebp - 0x1e1c], 1
jmp 0x46fb27
and dword [ebp - 0x1e1c], 0
mov eax, dword [ebp - 0x1e1c]
mov dword [ebp - 0xc44], eax
imul eax, dword [ebp - 0xc44], 0x3bd3
add eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x54]
jne 0x46fb54
mov dword [ebp - 0xee4], 1
jmp 0x46fb5b
and dword [ebp - 0xee4], 0
mov eax, dword [ebp - 0xee4]
sub eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x54]
jg 0x46fb78
mov dword [ebp - 0x29d4], 1
jmp 0x46fb7f
and dword [ebp - 0x29d4], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x32f4], eax
mov eax, dword [ebp - 0xc44]
mov dword [ebp - 0x32fc], eax
cmp dword [ebp - 0x54], 3
jne 0x46fba6
mov dword [ebp - 0x1e24], 1
jmp 0x46fbad
and dword [ebp - 0x1e24], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x1e24]
jne 0x46fbc4
mov dword [ebp - 0xeec], 1
jmp 0x46fbcb
and dword [ebp - 0xeec], 0
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0xeec]
mov dword [ebp - 0x1e2c], eax
mov eax, dword [ebp - 0x1e2c]
mov ecx, dword [ebp - 0x54]
lea eax, [eax + ecx + 6]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x30e8]
je 0x46fc02
mov dword [ebp - 0xef4], 1
jmp 0x46fc09
and dword [ebp - 0xef4], 0
cmp dword [ebp - 0xef4], 0xfffffffb
jg 0x46fc1e
mov dword [ebp - 0x1e34], 1
jmp 0x46fc25
and dword [ebp - 0x1e34], 0
mov eax, dword [ebp - 0x1e34]
inc eax
cmp eax, dword [ebp - 0x54]
jl 0x46fc3d
mov dword [ebp - 0xefc], 1
jmp 0x46fc44
and dword [ebp - 0xefc], 0
push 1
lea ecx, [ebp - 0x2f58]
call fcn.004321f5
mov ecx, dword [ebp - 0xefc]
mov dword [eax], ecx
lea ecx, [ebp - 0x2f58]
call fcn.004321d9
mov dword [ebp - 0x194], 0x58e92eda
mov dword [ebp - 0x440], 0xf59ec134
mov dword [ebp - 0xe8], 0x97f6af11
mov dword [ebp - 0x888], 0xa41449c9
push 1
lea ecx, [ebp - 0x2d38]
call fcn.00432107
mov dword [ebp - 0x880], 0
jmp 0x46fcb2
mov eax, dword [ebp - 0x880]
inc eax
mov dword [ebp - 0x880], eax
cmp dword [ebp - 0x880], 1
jge 0x46fcd4
push dword [ebp - 0x880]
lea ecx, [ebp - 0x2d38]
call fcn.004321f5
mov dword [eax], 0xec32
jmp 0x46fca5
mov dword [ebp - 0xe8], 0xffffffea
jmp 0x46fced
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x15
jge 0x47027b
push 2
lea ecx, [ebp - 0x9ec]
call fcn.00432107
mov dword [ebp - 0x14c], 1
mov dword [ebp - 0x61c], 0x3e821d2a
mov dword [ebp - 0x60c], 0
jmp 0x46fd34
mov eax, dword [ebp - 0x60c]
inc eax
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x60c], 2
jge 0x46fd53
push dword [ebp - 0x60c]
lea ecx, [ebp - 0x9ec]
call fcn.004321f5
and dword [eax], 0
jmp 0x46fd27
push 1
lea ecx, [ebp - 0x9ec]
call fcn.004321f5
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp - 0xbf4]
xor ecx, ecx
sub ecx, dword [eax]
mov dword [ebp - 0x888], ecx
mov eax, dword [ebp - 0xbf4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xbf4]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x9ec]
call fcn.004321f5
cmp dword [eax], 1
jne 0x46fda5
mov dword [ebp - 0x29dc], 1
jmp 0x46fdac
and dword [ebp - 0x29dc], 0
push 0
lea ecx, [ebp - 0x9ec]
call fcn.004321f5
push 1
lea ecx, [ebp - 0x9ec]
call fcn.004321f5
mov ecx, dword [ebp - 0x888]
cmp dword [eax], ecx
jl 0x46fddc
mov dword [ebp - 0x1e3c], 1
jmp 0x46fde3
and dword [ebp - 0x1e3c], 0
mov eax, dword [ebp - 0x1e3c]
mov dword [ebp - 0x888], eax
mov esi, dword [ebp - 0x888]
push 1
lea ecx, [ebp - 0x9ec]
call fcn.004321f5
cmp esi, dword [eax]
jg 0x46fe24
mov eax, 0x5d64f689
test eax, eax
je 0x46fe24
cmp dword [ebp - 0xe8], 0
je 0x46fe24
mov dword [ebp - 0xf04], 1
jmp 0x46fe2b
and dword [ebp - 0xf04], 0
mov eax, dword [ebp - 0xf04]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x14c], eax
je 0x46fe51
mov dword [ebp - 0x1e44], 1
jmp 0x46fe58
and dword [ebp - 0x1e44], 0
push 0
lea ecx, [ebp - 0x9ec]
call fcn.004321f5
mov ecx, dword [ebp - 0x1e44]
cmp ecx, dword [eax]
jg 0x46fe7b
mov dword [ebp - 0xf0c], 1
jmp 0x46fe82
and dword [ebp - 0xf0c], 0
cmp dword [ebp - 0xf0c], 0
je 0x46fe97
mov dword [ebp - 0x1e4c], 1
jmp 0x46fe9e
and dword [ebp - 0x1e4c], 0
cmp dword [ebp - 0x1e4c], 0xc6ea3d88
jae 0x46feb6
mov dword [ebp - 0x29e4], 1
jmp 0x46febd
and dword [ebp - 0x29e4], 0
push 0
lea ecx, [ebp - 0x2d38]
call fcn.004321f5
mov dword [eax], 1
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x3304], eax
push 0
lea ecx, [ebp - 0x9ec]
call fcn.004321f5
cmp dword [eax], 0
jne 0x46ff00
mov eax, 0xa8629342
test eax, eax
jne 0x46ff00
and dword [ebp - 0xf14], 0
jmp 0x46ff0a
mov dword [ebp - 0xf14], 1
push 0
lea ecx, [ebp - 0x9ec]
call fcn.004321f5
mov ecx, dword [ebp - 0xf14]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0xe8]
jne 0x46ff33
mov dword [ebp - 0x29ec], 1
jmp 0x46ff3a
and dword [ebp - 0x29ec], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x330c], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x3314], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x331c], eax
mov esi, dword [ebp - 0x14c]
push 1
lea ecx, [ebp - 0x9ec]
call fcn.004321f5
imul esi, dword [eax]
test esi, esi
je 0x4700c1
push 1
lea ecx, [ebp - 0x25a8]
call fcn.00432107
mov dword [ebp - 0x614], 0
jmp 0x46ffa2
mov eax, dword [ebp - 0x614]
inc eax
mov dword [ebp - 0x614], eax
cmp dword [ebp - 0x614], 1
jge 0x46ffc4
push dword [ebp - 0x614]
lea ecx, [ebp - 0x25a8]
call fcn.004321f5
mov dword [eax], 1
jmp 0x46ff95
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x3324], eax
push 0
lea ecx, [ebp - 0x25a8]
call fcn.004321f5
push 0
lea ecx, [ebp - 0x25a8]
call fcn.004321f5
cmp dword [eax], 0
jne 0x46fffd
or eax, 0xffffffff
jne 0x46fffd
and dword [ebp - 0x1e54], 0
jmp 0x470007
mov dword [ebp - 0x1e54], 1
cmp dword [ebp - 0x1e54], 1
jge 0x47001c
mov dword [ebp - 0xf1c], 1
jmp 0x470023
and dword [ebp - 0xf1c], 0
cmp dword [ebp - 0xf1c], 0xc0
jne 0x47003b
mov dword [ebp - 0x1e5c], 1
jmp 0x470042
and dword [ebp - 0x1e5c], 0
push 0
lea ecx, [ebp - 0x25a8]
call fcn.004321f5
mov esi, dword [eax]
sub esi, dword [ebp - 0x1e5c]
push 0
lea ecx, [ebp - 0x25a8]
call fcn.004321f5
cmp esi, dword [eax]
jg 0x470074
mov dword [ebp - 0xf24], 1
jmp 0x47007b
and dword [ebp - 0xf24], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0xf24], eax
jg 0x47009e
mov eax, 0xf121adf5
test eax, eax
je 0x47009e
and dword [ebp - 0x1e64], 0
mov eax, dword [ebp - 0x1e64]
mov dword [ebp - 0x14c], eax
lea ecx, [ebp - 0x25a8]
call fcn.004321d9
jmp 0x47026b
mov dword [ebp - 0xf2c], 0
mov dword [ebp - 0x29fc], 0x44351d5e
mov dword [ebp - 0x14c], 0x11
jmp 0x4700ee
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x1a
jg 0x47026b
mov dword [ebp - 0x890], 0
jmp 0x470114
mov eax, dword [ebp - 0x890]
inc eax
mov dword [ebp - 0x890], eax
cmp dword [ebp - 0x890], 3
jge 0x470130
mov eax, dword [ebp - 0x890]
mov dword [ebp + eax*4 - 0x2f70], 0x79c94d23
jmp 0x470107
cmp dword [ebp - 0xf2c], 0
je 0x470253
mov eax, dword [ebp - 0xf2c]
mov dword [ebp - 0x332c], eax
push 1
lea ecx, [ebp - 0x9ec]
call fcn.004321f5
cmp dword [ebp - 0x61c], 0xffffffff
jbe 0x47016b
mov dword [ebp - 0x1e6c], 1
jmp 0x470172
and dword [ebp - 0x1e6c], 0
push 0
lea ecx, [ebp - 0x2d38]
call fcn.004321f5
mov ecx, dword [ebp - 0x1e6c]
cmp ecx, dword [eax]
je 0x470195
mov dword [ebp - 0xf34], 1
jmp 0x47019c
and dword [ebp - 0xf34], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f70]
cmp eax, dword [ebp - 0xf34]
jle 0x4701bc
and dword [ebp - 0x1e7c], 0
mov eax, dword [ebp - 0x1e7c]
mov dword [ebp - 0x29fc], eax
jmp 0x4700e1
lea ecx, [ebp - 0x9ec]
call fcn.004321d9
jmp 0x46fce0
lea ecx, [ebp - 0x2d38]
call fcn.004321d9
mov dword [ebp - 0x333c], 7
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x24c], 0
jmp 0x4702b3
mov eax, dword [ebp - 0x24c]
dec eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0xffffffe4
jle 0x4702d8
mov byte [ebp - 0x2d4], 0
movzx eax, byte [ebp - 0x2d4]
test eax, eax
je 0x4702d6
push 0
call dword [0xabc330]
jmp 0x4702a6
mov dword [ebp - 0x24c], 0
jmp 0x4702f1
mov eax, dword [ebp - 0x24c]
dec eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0xffffffe3
je 0x47031a
mov byte [ebp - 0x2d6], 0
movzx eax, byte [ebp - 0x2d6]
test eax, eax
je 0x470318
push 0
push 0
push 0
call dword [0xabc02c]
jmp 0x4702e4
mov dword [ebp - 0x2c4c], 1
push 3
lea ecx, [ebp - 0x2584]
call fcn.00432107
push 4
lea ecx, [ebp - 0x2590]
call fcn.00432107
mov dword [ebp - 0x7c], 0
jmp 0x47034e
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x470364
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x3a58], 0xae35
jmp 0x470347
mov dword [ebp - 0x7c], 0
jmp 0x470374
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x470390
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x2584]
call fcn.004321f5
mov dword [eax], 0xcd453606
jmp 0x47036d
mov dword [ebp - 0x7c], 0
jmp 0x4703a0
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 4
jge 0x4703bc
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x2590]
call fcn.004321f5
mov dword [eax], 7
jmp 0x470399
push 1
lea ecx, [ebp - 0x2584]
call fcn.004321f5
and dword [eax], 0
jmp 0x4703f2
push 1
lea ecx, [ebp - 0x2584]
call fcn.004321f5
mov dword [ebp - 0xf44], eax
mov eax, dword [ebp - 0xf44]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xf44]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x2584]
call fcn.004321f5
cmp dword [eax], 2
jg 0x47042c
mov byte [ebp - 0x2d8], 0
movzx eax, byte [ebp - 0x2d8]
test eax, eax
je 0x47042a
push 0x1b4e
push 0
call dword [0xabc4bc]
push eax
call dword [0xabc49c]
jmp 0x4703ce
push 2
lea ecx, [ebp - 0x2590]
call fcn.004321f5
mov dword [eax], 0xfffffff0
jmp 0x470465
push 2
lea ecx, [ebp - 0x2590]
call fcn.004321f5
cmp dword [eax], 0xffffffe3
jl 0x4705eb
mov dword [ebp - 0xa44], 0x1c17
mov dword [ebp - 0x898], 0
jmp 0x47049e
mov eax, dword [ebp - 0x898]
inc eax
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0x898], 3
jge 0x4704ba
mov eax, dword [ebp - 0x898]
mov dword [ebp + eax*4 - 0x3684], 0x9973063d
jmp 0x470491
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3a58], 0xfe81720d
ja 0x4704d9
mov dword [ebp - 0xf4c], 1
jmp 0x4704e0
and dword [ebp - 0xf4c], 0
cmp dword [ebp - 0xf4c], 0x6acb8f2b
jg 0x4704f8
mov dword [ebp - 0x1e8c], 1
jmp 0x4704ff
and dword [ebp - 0x1e8c], 0
mov eax, dword [ebp - 0xa44]
cmp dword [ebp - 0x1e8c], eax
jne 0x470519
mov dword [ebp - 0xf54], 1
jmp 0x470520
and dword [ebp - 0xf54], 0
imul eax, dword [ebp - 0xa44], 0
mov ecx, dword [ebp - 0xf54]
inc ecx
inc ecx
sub eax, ecx
mov dword [ebp - 0x1e94], eax
push 1
lea ecx, [ebp - 0x2584]
call fcn.004321f5
mov ecx, dword [ebp - 0x1e94]
mov dword [eax], ecx
cmp dword [ebp - 0x1e94], 0xf78d
je 0x470564
lea ecx, [ebp - 0x2590]
call fcn.004321d9
lea ecx, [ebp - 0x2584]
call fcn.004321d9
mov dword [ebp - 0x2c78], 5
mov dword [ebp - 0x2e44], 0xbdde
mov dword [ebp - 0x2e40], 0xbdde
mov dword [ebp - 0x2e3c], 0xbdde
mov dword [ebp - 0x2e38], 0xbdde
mov dword [ebp - 0x134], 1
mov dword [ebp - 0xf74], 0x20b2455f
mov dword [ebp - 0xf7c], 0xfffffffa
mov dword [ebp - 0x624], 0
jmp 0x47066a
mov eax, dword [ebp - 0x624]
inc eax
mov dword [ebp - 0x624], eax
cmp dword [ebp - 0x624], 4
jge 0x470686
mov eax, dword [ebp - 0x624]
mov dword [ebp + eax*4 - 0x394c], 0x5ea28c7f
jmp 0x47065d
mov dword [ebp - 0x134], 3
jmp 0x47069f
cmp dword [ebp - 0x134], 0
jl 0x47091a
mov dword [ebp - 0xf84], 0xe5a82a6f
mov dword [ebp - 0xb7c], 0x52ded145
mov dword [ebp - 0x2a0c], 0
mov dword [ebp - 0x8a0], 0
jmp 0x4706e3
cmp dword [ebp - 0x8a0], 4
jge 0x4706ff
mov dword [ebp - 0x134], 3
jmp 0x470933
cmp dword [ebp - 0x134], 0
jl 0x47096f
mov dword [ebp - 0x8c], 0x99841b3c
mov dword [ebp - 0x910], 0xffffffff
mov dword [ebp - 0x11dc], 0xa6ff609d
mov dword [ebp - 0x2c90], 0xce96f8f
mov dword [ebp - 0x212c], 0xffffffff
push 1
lea ecx, [ebp - 0x303c]
call fcn.00432107
mov dword [ebp - 0x1a4], 0
jmp 0x4735cd
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x4735e9
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x319c], 0xffffffff
jmp 0x4735c0
mov dword [ebp - 0x1a4], 0
jmp 0x473602
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x473624
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x303c]
call fcn.004321f5
mov dword [eax], 0xfffffff8
jmp 0x4735f5
mov dword [ebp - 0x8c], 0
jmp 0x47363d
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x13
jle 0x473662
mov byte [ebp - 0x2b3], 0
movzx eax, byte [ebp - 0x2b3]
test eax, eax
je 0x473660
push 0
call dword [0xabc490]
jmp 0x473630
mov eax, dword [ebp - 0x910]
mov dword [ebp - 0x34f4], eax
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x8c], eax
jge 0x473691
cmp dword [ebp - 0x8c], 0
je 0x473691
mov dword [ebp - 0x11d4], 1
jmp 0x473698
and dword [ebp - 0x11d4], 0
cmp dword [ebp - 0x11d4], 0
jne 0x4736b3
cmp dword [ebp - 0x8c], 0
jne 0x4736b3
and dword [ebp - 0x2114], 0
jmp 0x4736bd
mov dword [ebp - 0x2114], 1
mov eax, dword [ebp - 0x2114]
mov dword [ebp - 0x11dc], eax
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x11dc], eax
je 0x4736e3
mov dword [ebp - 0x211c], 1
jmp 0x4736ea
and dword [ebp - 0x211c], 0
mov eax, dword [ebp - 0x211c]
mov dword [ebp - 0x2c90], eax
mov eax, 0xf2f
cmp eax, 0xc002
je 0x47370e
mov dword [ebp - 0x11e4], 1
jmp 0x473715
and dword [ebp - 0x11e4], 0
cmp dword [ebp - 0x11e4], 0xfffffff9
je 0x47372a
mov dword [ebp - 0x2124], 1
jmp 0x473731
and dword [ebp - 0x2124], 0
mov eax, dword [ebp - 0x910]
cmp eax, dword [ebp - 0x2124]
je 0x47374b
mov dword [ebp - 0x11ec], 1
jmp 0x473752
and dword [ebp - 0x11ec], 0
mov eax, dword [ebp - 0x11ec]
mov dword [ebp - 0x212c], eax
mov eax, dword [ebp - 0x212c]
mov dword [ebp - 0x11f4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x11f4]
mov dword [ebp + eax - 0x319c], ecx
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x11f4]
lea eax, [ecx + eax - 0x6feae916]
sub eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x910]
cmp eax, dword [ebp - 0x8c]
jg 0x4737b0
mov dword [ebp - 0x2134], 1
jmp 0x4737b7
and dword [ebp - 0x2134], 0
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x2134]
jle 0x4737e3
push 0
lea ecx, [ebp - 0x303c]
call fcn.004321f5
cmp dword [eax], 0
je 0x4737e3
mov dword [ebp - 0x2c98], 1
jmp 0x4737ea
and dword [ebp - 0x2c98], 0
mov eax, dword [ebp - 0x910]
mov dword [ebp - 0x34fc], eax
mov dword [ebp - 0x8c], 0xf9611ca4
lea ecx, [ebp - 0x303c]
call fcn.004321d9
mov dword [ebp - 0x2bf4], 0xab1bbc
push 3
lea ecx, [ebp - 0x2fdc]
call fcn.00432107
mov dword [ebp - 0x2770], 0xd534
mov dword [ebp - 0x266c], 0x96bc712b
mov dword [ebp - 0x30], 0
jmp 0x473846
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x47385c
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x2664], 0x4b733c63
jmp 0x47383f
mov dword [ebp - 0x30], 0
jmp 0x47386c
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x473882
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x590], 0x7182abbf
jmp 0x473865
mov dword [ebp - 0x30], 0
jmp 0x473892
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x4738ab
push dword [ebp - 0x30]
lea ecx, [ebp - 0x2fdc]
call fcn.004321f5
or dword [eax], 0xffffffff
jmp 0x47388b
mov dword [ebp - 0x30], 0
jmp 0x4738bb
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x4738d1
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x2a20], 0xb72b416c
jmp 0x4738b4
mov eax, 0x2d1
test eax, eax
je 0x473b30
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x590]
mov dword [ebp - 0x3504], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x590]
mov dword [ebp - 0x350c], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x590]
cmp dword [ebp + eax - 0x590], ecx
jle 0x47392a
mov dword [ebp - 0x2ca0], 1
jmp 0x473931
and dword [ebp - 0x2ca0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x590]
mov dword [ebp - 0x3514], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x590]
mov dword [ebp - 0x351c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x590]
cmp dword [ebp - 0x2770], eax
jg 0x473977
mov dword [ebp - 0x11fc], 1
jmp 0x47397e
and dword [ebp - 0x11fc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x590]
cmp dword [ebp - 0x11fc], eax
jge 0x47399e
mov dword [ebp - 0x213c], 1
jmp 0x4739a5
and dword [ebp - 0x213c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x590]
cmp dword [ebp - 0x213c], eax
jl 0x4739c5
mov dword [ebp - 0x1204], 1
jmp 0x4739cc
and dword [ebp - 0x1204], 0
cmp dword [ebp - 0x1204], 0xffffffff
jg 0x4739e1
mov dword [ebp - 0x2144], 1
jmp 0x4739e8
and dword [ebp - 0x2144], 0
cmp dword [ebp - 0x2144], 0xd3624b67
jne 0x473a00
mov dword [ebp - 0x120c], 1
jmp 0x473a07
and dword [ebp - 0x120c], 0
cmp dword [ebp - 0x120c], 0
jne 0x473a22
mov eax, 0xc87a
test eax, eax
jne 0x473a22
and dword [ebp - 0x214c], 0
jmp 0x473a2c
mov dword [ebp - 0x214c], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x590]
cmp dword [ebp - 0x214c], eax
jle 0x473a4c
mov dword [ebp - 0x265c], 1
jmp 0x473a53
and dword [ebp - 0x265c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x590]
mov dword [ebp - 0x2b84], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2b84]
mov dword [ebp + eax - 0x2664], ecx
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x590]
cmp dword [ebp + eax - 0x590], ecx
jge 0x473a9e
mov dword [ebp - 0x1214], 1
jmp 0x473aa5
and dword [ebp - 0x1214], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x590]
cmp dword [ebp - 0x1214], eax
jg 0x473ac5
mov dword [ebp - 0x2154], 1
jmp 0x473acc
and dword [ebp - 0x2154], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2154]
mov dword [ebp + eax - 0x2a20], ecx
push 0
lea ecx, [ebp - 0x2fdc]
call fcn.004321f5
mov dword [ebp - 0xa94], eax
mov eax, dword [ebp - 0xa94]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xa94]
mov dword [ecx], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x590]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x590]
mov ecx, dword [ebp - 0xa94]
cmp dword [ecx], eax
jne 0x473b30
and dword [ebp - 0x121c], 0
jmp 0x473b3a
mov dword [ebp - 0x121c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x590]
add eax, dword [ebp - 0x121c]
mov dword [ebp - 0x266c], eax
lea ecx, [ebp - 0x2fdc]
call fcn.004321d9
mov dword [ebp - 0x14], 0x2cf415d7
mov dword [ebp - 0x514], 0xab551fa4
mov dword [ebp - 0x54c], 0x4ab10079
push 1
lea ecx, [ebp - 0x2b60]
call fcn.00432107
mov dword [ebp - 0x21c], 0
jmp 0x473b9f
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 2
jge 0x473bbb
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x24dc], 0xffffffff
jmp 0x473b92
mov dword [ebp - 0x21c], 0
jmp 0x473bd4
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 1
jge 0x473bf6
push dword [ebp - 0x21c]
lea ecx, [ebp - 0x2b60]
call fcn.004321f5
mov dword [eax], 0xc0642926
jmp 0x473bc7
cmp dword [ebp - 0x14], 0
jne 0x473d41
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jne 0x473c14
mov dword [ebp - 0x123c], 1
jmp 0x473c1b
and dword [ebp - 0x123c], 0
cmp dword [ebp - 0x14], 0
je 0x473c33
cmp dword [ebp - 0x14], 0
je 0x473c33
mov dword [ebp - 0x215c], 1
jmp 0x473c3a
and dword [ebp - 0x215c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x215c], eax
jne 0x473c51
mov dword [ebp - 0x1224], 1
jmp 0x473c58
and dword [ebp - 0x1224], 0
cmp dword [ebp - 0x1224], 0xfffffffb
jl 0x473c6d
mov dword [ebp - 0x2164], 1
jmp 0x473c74
and dword [ebp - 0x2164], 0
mov eax, dword [ebp - 0x2164]
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x514], eax
jl 0x473c97
mov dword [ebp - 0x122c], 1
jmp 0x473c9e
and dword [ebp - 0x122c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x122c], eax
jg 0x473cb9
push 9
pop eax
test eax, eax
jne 0x473cb9
and dword [ebp - 0x216c], 0
jmp 0x473cc3
mov dword [ebp - 0x216c], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x216c], eax
jl 0x473ce3
cmp dword [ebp - 0x514], 0
je 0x473ce3
mov dword [ebp - 0x1234], 1
jmp 0x473cea
and dword [ebp - 0x1234], 0
mov eax, dword [ebp - 0x1234]
sub eax, dword [ebp - 0x14]
je 0x473d08
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x473d08
mov dword [ebp - 0x2174], 1
jmp 0x473d0f
and dword [ebp - 0x2174], 0
mov eax, dword [ebp - 0x2174]
neg eax
cmp eax, dword [ebp - 0x14]
jle 0x473d28
mov dword [ebp - 0x217c], 1
jmp 0x473d2f
and dword [ebp - 0x217c], 0
mov eax, dword [ebp - 0x123c]
cmp eax, dword [ebp - 0x217c]
jl 0x473d41
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
je 0x473d55
mov dword [ebp - 0x2c04], 1
jmp 0x473d5c
and dword [ebp - 0x2c04], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3524], eax
mov eax, 0xef13
cmp eax, 0x3526
je 0x473d7d
mov dword [ebp - 0x1244], 1
jmp 0x473d84
and dword [ebp - 0x1244], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x1244]
cmp eax, dword [ebp - 0x14]
jg 0x473d9f
mov dword [ebp - 0x2674], 1
jmp 0x473da6
and dword [ebp - 0x2674], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x352c], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x514], eax
jne 0x473dc6
mov dword [ebp - 0xba4], 1
jmp 0x473dcd
and dword [ebp - 0xba4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xba4]
mov dword [ebp + eax - 0x24dc], ecx
mov eax, dword [ebp - 0xba4]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x54c], eax
jns 0x473dfd
mov dword [ebp - 0x2a28], 1
jmp 0x473e04
and dword [ebp - 0x2a28], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24dc]
mov dword [ebp - 0x3534], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x353c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24dc]
cmp dword [ebp - 0x54c], eax
jge 0x473e41
mov dword [ebp - 0xa9c], 1
jmp 0x473e48
and dword [ebp - 0xa9c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa9c]
mov dword [ebp + eax - 0x24dc], ecx
cmp dword [ebp - 0xa9c], 3
jne 0x473e70
mov dword [ebp - 0x2184], 1
jmp 0x473e77
and dword [ebp - 0x2184], 0
push 0
lea ecx, [ebp - 0x2b60]
call fcn.004321f5
mov ecx, dword [ebp - 0x2184]
cmp ecx, dword [eax]
jg 0x473e9a
mov dword [ebp - 0x124c], 1
jmp 0x473ea1
and dword [ebp - 0x124c], 0
mov eax, dword [ebp - 0x124c]
dec eax
cmp eax, dword [ebp - 0x14]
jle 0x473eb9
mov dword [ebp - 0x218c], 1
jmp 0x473ec0
and dword [ebp - 0x218c], 0
push 0
lea ecx, [ebp - 0x2b60]
call fcn.004321f5
mov ecx, dword [ebp - 0x218c]
cmp ecx, dword [eax]
jne 0x473ee0
mov eax, 0x520f
test eax, eax
jne 0x473efb
push 0
lea ecx, [ebp - 0x2b60]
call fcn.004321f5
cmp dword [eax], 0
jne 0x473efb
and dword [ebp - 0x1254], 0
jmp 0x473f05
mov dword [ebp - 0x1254], 1
mov eax, dword [ebp - 0x1254]
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x54c]
mov dword [ebp - 0x514], eax
lea ecx, [ebp - 0x2b60]
call fcn.004321d9
mov dword [ebp - 0xc8], 0xfffffff7
mov dword [ebp - 0xc70], 0x255ebda1
mov dword [ebp - 0x127c], 7
mov dword [ebp - 0xaa4], 8
mov dword [ebp - 0x69c], 0
jmp 0x473f69
mov eax, dword [ebp - 0x69c]
inc eax
mov dword [ebp - 0x69c], eax
cmp dword [ebp - 0x69c], 1
jge 0x473f85
mov eax, dword [ebp - 0x69c]
mov dword [ebp + eax*4 - 0x2b94], 0xdc87778e
jmp 0x473f5c
mov dword [ebp - 0xc8], 0x3b4e1a36
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xc8], eax
jg 0x473fa9
mov dword [ebp - 0x2194], 1
jmp 0x473fb0
and dword [ebp - 0x2194], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x2194], eax
jne 0x473fca