Function at 0x4927da
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4be121
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2628
call fcn.004b9ae0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x4a519f
lea eax, [ebp + 0x20]
mov dword [ebp - 0x170c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x14bc], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x14c4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x14cc], eax
mov eax, dword [ebp - 0x170c]
movzx eax, byte [eax]
test eax, eax
je 0x4a5185
mov eax, dword [ebp - 0x14bc]
mov dword [ebp - 0x147c], eax
mov eax, dword [ebp - 0x14c4]
mov dword [ebp - 0x14d4], eax
mov eax, dword [ebp - 0x14cc]
mov dword [ebp - 0x1474], eax
mov eax, dword [ebp - 0x14d4]
movzx eax, byte [eax]
test eax, eax
je 0x4a510e
push 1
push 0x63eb
push 1
push 0x5d20
push 1
push 1
push 0x7994
push 0
push 0x7029
push 0x6d1
push 0x760
push 0x6e1d
push 0x1b97
push 0x38d6
call fcn.00490ad9
add esp, 0x38
or dword [ebp - 0x1a44], 0xffffffff
or dword [ebp - 0x1a40], 0xffffffff
or dword [ebp - 0x1a3c], 0xffffffff
or dword [ebp - 0x1a38], 0xffffffff
lea ecx, [ebp - 0x7cd]
call fcn.0044d226
push eax
lea eax, [ebp - 0x1a34]
push eax
lea eax, [ebp - 0x1a44]
push eax
lea ecx, [ebp - 0x23c0]
call fcn.0044d229
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2014]
call fcn.0044d1d5
mov dword [ebp - 0x350], 0xfffffffa
mov dword [ebp - 0x14dc], 1
mov dword [ebp - 0x350], 0
jmp 0x492936
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 3
jg 0x4929d8
mov dword [ebp - 0x1ae4], 0x2a2c7c8a
mov dword [ebp - 0x1ae0], 0x2a2c7c8a
mov dword [ebp - 0x1adc], 0x2a2c7c8a
mov dword [ebp - 0x1ad8], 0x2a2c7c8a
lea ecx, [ebp - 0x7d5]
call fcn.0044d226
push eax
lea eax, [ebp - 0x1ad4]
push eax
lea eax, [ebp - 0x1ae4]
push eax
lea ecx, [ebp - 0x2350]
call fcn.0044d229
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2004]
call fcn.0044d1d5
push 0
push 0x7d7
lea eax, [ebp - 0x2014]
push eax
lea eax, [ebp - 0x2004]
push eax
push 1
push 0
lea eax, [ebp - 0x14dc]
push eax
call fcn.0047ce09
add esp, 0x1c
lea ecx, [ebp - 0x2004]
call fcn.0044d1fb
jmp 0x492929
lea ecx, [ebp - 0x2014]
call fcn.0044d1fb
push 1
lea ecx, [ebp - 0x1808]
call fcn.0044d129
mov dword [ebp - 0xbb0], 0x87a
mov dword [ebp - 0x14e4], 0xaa6b68
cmp dword [ebp - 0xbb0], 0xb79
jle 0x492a87
and dword [ebp - 0x354], 0
jmp 0x492a26
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0x424e
jge 0x492a87
and dword [ebp - 0x4f0], 0
jmp 0x492a48
mov eax, dword [ebp - 0x4f0]
inc eax
mov dword [ebp - 0x4f0], eax
cmp dword [ebp - 0x4f0], 0x7a8e
jge 0x492a85
mov eax, dword [ebp - 0x354]
or eax, dword [ebp - 0x4f0]
cdq
mov dword [ebp - 0x1508], eax
mov dword [ebp - 0x1504], edx
push dword [ebp - 0x1504]
push dword [ebp - 0x1508]
mov ecx, 0xab2718
call fcn.0044d014
jmp 0x492a3b
jmp 0x492a19
mov dword [ebp - 0x14f4], 0x62c4df8e
and dword [ebp - 4], 0
cmp dword [ebp - 0xbb0], 0x6e8
jge 0x492ab1
mov edx, dword [ebp - 0x14e4]
mov ecx, 0xab2718
call fcn.0044e9ba
jmp 0x492acd
or dword [ebp - 4], 0xffffffff
jmp 0x492ad7
mov dword [ebp - 0x2e0], 0
jmp 0x492af0
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 4
jge 0x492b0c
mov eax, dword [ebp - 0x2e0]
mov dword [ebp + eax*4 - 0x19e8], 0
jmp 0x492ae3
lea eax, [ebp - 0x2e0]
push eax
push 0
lea eax, [ebp - 0x1808]
push eax
push 1
push 0
push 0x4d5e
call fcn.0047afc3
add esp, 0x18
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x19e8], 0
jmp 0x492b58
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x19e8]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x19e8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x19e8], 0xffffffe7
jne 0x492f80
mov dword [ebp - 0x6e4], 0x1fc4
mov dword [ebp - 0x77c], 0xf6082f4e
mov dword [ebp - 0x1264], 0xfffffffa
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x19e8], 0
je 0x492bbf
push 0
push 0x753c
push 0x1b5b
push 0x2e6b
push 1
push 1
push 0x1c6f
call fcn.0047ce09
add esp, 0x1c
jmp 0x492f7b
push 4
lea ecx, [ebp - 0x820]
call fcn.0044d129
mov dword [ebp - 0x11f0], 0x54
mov dword [ebp - 0x14ec], 0xaa6ba8
cmp dword [ebp - 0x11f0], 0x19e
jle 0x492c9d
and dword [ebp - 0x35c], 0
jmp 0x492c06
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0x14ad
jge 0x492c9d
and dword [ebp - 0x5b8], 0
jmp 0x492c2c
mov eax, dword [ebp - 0x5b8]
inc eax
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 0xf83
jge 0x492c98
and dword [ebp - 0x364], 0
jmp 0x492c4e
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0x496b
jge 0x492c96
mov eax, dword [ebp - 0x35c]
cdq
idiv dword [ebp - 0x5b8]
mov ecx, dword [ebp - 0x364]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x1514], eax
mov dword [ebp - 0x1510], edx
push dword [ebp - 0x1510]
push dword [ebp - 0x1514]
mov ecx, 0xab2718
call fcn.0044d014
jmp 0x492c41
jmp 0x492c1f
jmp 0x492bf9
mov dword [ebp - 4], 2
cmp dword [ebp - 0x11f0], 0xfffffecd
jge 0x492cc0
mov edx, dword [ebp - 0x14ec]
mov ecx, 0xab2718
call fcn.0044e9ba
jmp 0x492cdc
or dword [ebp - 4], 0xffffffff
jmp 0x492ce6
mov dword [ebp - 0x1788], 0xb137d370
mov dword [ebp - 0xb4], 0
jmp 0x492d09
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 4
jge 0x492d2b
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x820]
call fcn.0044d217
mov dword [eax], 0xfff7
jmp 0x492cfc
mov dword [ebp - 0xb4], 0
jmp 0x492d44
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x492d60
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x14fc], 0x966c4779
jmp 0x492d37
push 0
lea ecx, [ebp - 0x1808]
call fcn.0044d217
cmp dword [eax], 0
je 0x492dce
push 2
lea ecx, [ebp - 0x820]
call fcn.0044d217
cmp dword [eax], 0
je 0x492d99
mov eax, 0xfffa
test eax, eax
je 0x492d99
mov dword [ebp - 0x11f8], 1
jmp 0x492da0
and dword [ebp - 0x11f8], 0
mov eax, dword [ebp - 0x6e4]
sub eax, dword [ebp - 0x11f8]
je 0x492dce
push 2
lea ecx, [ebp - 0x820]
call fcn.0044d217
cmp dword [eax], 0
je 0x492dce
xor eax, eax
inc eax
je 0x492dce
and dword [ebp - 0x1200], 0
jmp 0x492dd8
mov dword [ebp - 0x1200], 1
push 2
lea ecx, [ebp - 0x820]
call fcn.0044d217
mov eax, dword [eax]
neg eax
cmp eax, dword [ebp - 0x1200]
jge 0x492dfd
mov dword [ebp - 0x1208], 1
jmp 0x492e04
and dword [ebp - 0x1208], 0
mov eax, dword [ebp - 0x1208]
mov dword [ebp - 0x14f4], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x14fc], 3
push 0
lea ecx, [ebp - 0x1808]
call fcn.0044d217
cmp dword [eax], 3
je 0x492e3f
mov dword [ebp - 0x1778], 1
jmp 0x492e46
and dword [ebp - 0x1778], 0
push 2
lea ecx, [ebp - 0x820]
call fcn.0044d217
push 0
lea ecx, [ebp - 0x1808]
call fcn.0044d217
mov dword [ebp - 0x77c], 1
cmp dword [ebp - 0x77c], 0
jne 0x492e7f
mov dword [ebp - 0x124c], 1
jmp 0x492e86
and dword [ebp - 0x124c], 0
push 2
lea ecx, [ebp - 0x820]
call fcn.0044d217
mov ecx, dword [ebp - 0x124c]
cmp ecx, dword [eax]
jle 0x492ea9
mov dword [ebp - 0x1254], 1
jmp 0x492eb0
and dword [ebp - 0x1254], 0
push 3
lea ecx, [ebp - 0x820]
call fcn.0044d217
mov ecx, dword [ebp - 0x1254]
cmp ecx, dword [eax]
jl 0x492ed3
mov dword [ebp - 0x125c], 1
jmp 0x492eda
and dword [ebp - 0x125c], 0
mov eax, dword [ebp - 0x125c]
sub eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x1264], eax
mov eax, dword [ebp - 0x1264]
neg eax
je 0x492f0b
cmp dword [ebp - 0x77c], 0
je 0x492f0b
mov dword [ebp - 0x1780], 1
jmp 0x492f12
and dword [ebp - 0x1780], 0
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x22f4], eax
mov eax, 0xebc5f93b
test eax, eax
jne 0x492f33
mov dword [ebp - 0x126c], 1
jmp 0x492f3a
and dword [ebp - 0x126c], 0
push 2
lea ecx, [ebp - 0x820]
call fcn.0044d217
mov ecx, dword [ebp - 0x126c]
cmp ecx, dword [eax]
jg 0x492f5d
mov dword [ebp - 0x1274], 1
jmp 0x492f64
and dword [ebp - 0x1274], 0
mov eax, dword [ebp - 0x1274]
mov dword [ebp - 0x1788], eax
lea ecx, [ebp - 0x820]
call fcn.0044d1fb
jmp 0x492b3f
lea ecx, [ebp - 0x1808]
call fcn.0044d1fb
mov dword [ebp - 0x3c8], 8
mov dword [ebp - 0x1790], 0
mov dword [ebp - 0x2118], 0x11151c3
mov dword [ebp - 0x36c], 3
mov dword [ebp - 0x4f8], 0
jmp 0x492fcc
mov eax, dword [ebp - 0x4f8]
inc eax
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x4f8], 2
jge 0x492fe8
mov eax, dword [ebp - 0x4f8]
mov dword [ebp + eax*4 - 0x2378], 0x477862fd
jmp 0x492fbf
push 1
push 0
push 0x1215
push 1
push 1
lea eax, [ebp - 0x1790]
push eax
call fcn.004856e9
add esp, 0x18
mov dword [ebp - 0x36c], 0
jmp 0x49301d
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0xf
jge 0x493095
mov dword [ebp - 0x1798], 0xbfb66feb
mov byte [ebp - 0x179], 0
push 0x28c0
push 0x3328
push 0x36f5
lea eax, [ebp - 0x179]
push eax
push 1
push 1
push 0x3928
push 1
push 0x6a4e
push 0x739d
push 0x77c0
push 1
push 0
push 0x71ef
push 1
push 0x25d7
push 1
push 0x427f
call fcn.004843a0
add esp, 0x48
mov dword [ebp - 0x1798], 0xfffffffd
jmp 0x493010
mov dword [ebp - 0x127c], 0x53a8
mov dword [ebp - 0x17a0], 0xaa6be4
cmp dword [ebp - 0x127c], 0x577c
jle 0x4931b6
and dword [ebp - 0x678], 0
jmp 0x4930cf
mov eax, dword [ebp - 0x678]
inc eax
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0x678], 0x55f5
jge 0x4931b6
and dword [ebp - 0x374], 0
jmp 0x4930f5
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0x764c
jge 0x4931b1
and dword [ebp - 0x500], 0
jmp 0x49311b
mov eax, dword [ebp - 0x500]
inc eax
mov dword [ebp - 0x500], eax
cmp dword [ebp - 0x500], 0x7342
jge 0x4931ac
and dword [ebp - 0x37c], 0
jmp 0x493141
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0x6723
jge 0x4931a7
mov eax, dword [ebp - 0x678]
imul eax, dword [ebp - 0x374]
xor eax, dword [ebp - 0x500]
or eax, dword [ebp - 0x37c]
cdq
mov dword [ebp - 0x1520], eax
mov dword [ebp - 0x151c], edx
push dword [ebp - 0x151c]
push dword [ebp - 0x1520]
lea ecx, [ebp - 0x251c]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0044d009
push eax
call fcn.004a7c67
pop ecx
lea ecx, [ebp - 0x251c]
call fcn.0044cfff
jmp 0x493134
jmp 0x49310e
jmp 0x4930e8
jmp 0x4930c2
mov dword [ebp - 0x1f18], 0x250e6da5
mov dword [ebp - 4], 4
cmp dword [ebp - 0x127c], 0x51b8
jge 0x4931df
push dword [ebp - 0x17a0]
call fcn.004a7c67
pop ecx
jmp 0x4931fb
or dword [ebp - 4], 0xffffffff
jmp 0x493205
push 2
lea ecx, [ebp - 0x2024]
call fcn.0044d129
mov dword [ebp - 0xe4], 0
jmp 0x49322b
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jge 0x49324d
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x2024]
call fcn.0044d217
mov dword [eax], 0x13dd33a4
jmp 0x49321e
mov dword [ebp - 0xe4], 0
jmp 0x493266
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 4
jge 0x493282
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x1c70], 0xaabecba2
jmp 0x493259
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1c70], 1
jmp 0x4932b0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1c70]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1c70], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1c70], 0
jl 0x4932f1
mov byte [ebp - 0x17b], 0
lea eax, [ebp - 0x17b]
push eax
push 0x6818
push 1
push 0
push 0x362e
push 1
push 0x937
push 1
push 1
call fcn.0047daab
add esp, 0x24
jmp 0x493295
lea ecx, [ebp - 0x2024]
call fcn.0044d1fb
mov dword [ebp - 0x2244], 0xfc4f27d2
mov dword [ebp - 0x1f20], 0xffffffff
push 4
lea ecx, [ebp - 0x1c54]
call fcn.0044d129
mov dword [ebp - 0x314], 0
push 0x6684
push 0x5e2d
push 0x3daa
lea eax, [ebp - 0x1c54]
push eax
push 1
lea eax, [ebp - 0x2128]
push eax
push 0xab1
push 0x69fc
push 0x66f4
push 0xb76
push 0
push 1
push 0x1ea
push 1
push 0x44c1
push 0x4b4b
push 1
call fcn.00481872
add esp, 0x44
mov dword [ebp - 0x314], 3
jmp 0x493392
mov eax, dword [ebp - 0x314]
dec eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0
jl 0x4933f2
mov byte [ebp - 0x17f], 0
push 0x4cb6
push 0
lea eax, [ebp - 0x17f]
push eax
push 0x55ee
push 0x632f
push 1
push 1
push 0x650d
push 0
push 0x772c
push 0x5756
push 0x24fc
push 0x5aeb
push 0x167a
push 0x14aa
push 0x7cdc
call fcn.00488783
add esp, 0x40
jmp 0x493385
push 0x627c
lea eax, [ebp - 0x1c54]
push eax
push 0x109f
push 0x5b28
push 0x7ef7
push 1
push 0x4421
push 0x854
push 0
push 1
lea eax, [ebp - 0x314]
push eax
push 0x7118
push 1
push 0x27cf
push 0x2b39
call fcn.00486122
add esp, 0x3c
lea ecx, [ebp - 0x1c54]
call fcn.0044d1fb
mov dword [ebp - 0x1f28], 0
mov dword [ebp - 0x1ec], 0x9f4288a1
cmp dword [ebp - 0x1ec], 0xce12
jle 0x493474
mov dword [ebp - 0xd7c], 1
jmp 0x49347b
and dword [ebp - 0xd7c], 0
mov eax, dword [ebp - 0xd7c]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1ec], 0
jmp 0x4934a0
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 3
jl 0x4934cf
push 1
push 1
push 1
push 0xf28
push 0x741
push 0x740f
push 0
push 0x4e79
call fcn.00478acb
add esp, 0x20
jmp 0x493493
mov dword [ebp - 0x22b0], 0xecf4a416
mov dword [ebp - 0x5c0], 0
jmp 0x4934f2
mov eax, dword [ebp - 0x5c0]
inc eax
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x5c0], 2
jge 0x49350e
mov eax, dword [ebp - 0x5c0]
mov dword [ebp + eax*4 - 0x12ec], 1
jmp 0x4934e5
mov byte [ebp - 0x181], 0
push 0x23c
push 1
push 0x55a7
push 0x5e71
push 1
push 1
push 0x42fc
push 0x54
push 1
lea eax, [ebp - 0x181]
push eax
call fcn.00474ecd
add esp, 0x28
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x12ec], 0
jmp 0x493570
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12ec]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x12ec], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x12ec], 0x15
jne 0x4935b1
mov byte [ebp - 0x183], 0
lea eax, [ebp - 0x183]
push eax
push 1
push 0
push 0
push 1
push 0x3fd0
push 0
push 0x6b10
push 0x5d95
call fcn.0048f653
add esp, 0x24
jmp 0x493555
push 1
lea ecx, [ebp - 0x2074]
call fcn.0044d129
mov dword [ebp - 0x7c], 0xfffffffd
mov dword [ebp - 0x38c], 0xc20f746e
mov dword [ebp - 0x17c0], 0xffffffff
mov dword [ebp - 0x384], 0
jmp 0x4935f2
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 4
jge 0x49360e
mov eax, dword [ebp - 0x384]
mov dword [ebp + eax*4 - 0x1cc0], 0x4ec2e0cf
jmp 0x4935e5
mov dword [ebp - 0x7c], 3
jmp 0x49361e
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x49363a
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0x1cc0]
mov dword [ebp + ecx*4 - 0x1cc0], eax
jmp 0x493617
mov dword [ebp - 0x7c], 0xb
jmp 0x49364a
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xffffffe8
jge 0x4939d8
mov dword [ebp - 0x1f8], 0xffffffff
mov dword [ebp - 0x6ec], 0
mov dword [ebp - 0x17b8], 0xfffffff9
mov dword [ebp - 0x1f8], 0
jmp 0x49368b
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x11
jle 0x4939d3
mov dword [ebp - 0x134], 0x80d416db
mov dword [ebp - 0x7cc], 0xffffffff
mov dword [ebp - 0x134], 0
jmp 0x4936c5
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0xfffffff7
jne 0x4939a2
mov dword [ebp - 0x508], 0xfffffff9
mov dword [ebp - 0x2c0], 0xcd329b3a
cmp dword [ebp - 0x508], 0
je 0x493806
mov dword [ebp - 0x11e8], 0xfffffffb
mov dword [ebp - 0x17a8], 0xfffffffa
mov dword [ebp - 0x17b0], 0x35a02a90
push 0x590b
push 0x455
lea eax, [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x17a8]
push eax
push 0x2d92
lea eax, [ebp - 0x2c0]
push eax
push 0x5c81
push 0x7a52
push 0x13e8
push 0x596c
push 0
lea eax, [ebp - 0x1f8]
push eax
push 1
push 0x62de
push 1
lea eax, [ebp - 0x11e8]
push eax
push 0x28f7
lea eax, [ebp - 0x134]
push eax
push 0x5ec7
lea eax, [ebp - 0x7cc]
push eax
push 0x2a7a
lea eax, [ebp - 0x508]
push eax
push 0x3db6
push 0x3e7
push 0x17c6
push 1
push 0x5838
push 0xb57
call fcn.004794c2
add esp, 0x70
lea eax, [ebp - 0x7cc]
push eax
push 0x6afb
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x17b0]
push eax
lea eax, [ebp - 0x17b8]
push eax
push 0
lea eax, [ebp - 0x2c0]
push eax
push 0
push 1
push 0x2c4
push 1
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x11e8]
push eax
lea eax, [ebp - 0x7c]
push eax
push 0
lea eax, [ebp - 0x17c0]
push eax
call fcn.0047768e
add esp, 0x40
jmp 0x4938f7
mov dword [ebp - 0x17c8], 0xb4e60d2e
mov dword [ebp - 0x17d0], 0x1f101fbe
cmp dword [ebp - 0x2c0], 0
je 0x493828
jmp 0x4939a2
cmp dword [ebp - 0x1f8], 1
jl 0x49383d
mov dword [ebp - 0x83c], 1
jmp 0x493844
and dword [ebp - 0x83c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1cc0]
imul eax, dword [ebp - 0x83c]
cmp eax, 2
jb 0x493868
mov dword [ebp - 0x84c], 1
jmp 0x49386f
and dword [ebp - 0x84c], 0
cmp dword [ebp - 0x7cc], 0xfffffffd
jg 0x493884
mov dword [ebp - 0x1234], 1
jmp 0x49388b
and dword [ebp - 0x1234], 0
imul eax, dword [ebp - 0x1234], 9
test eax, eax
jne 0x4938a8
cmp dword [ebp - 0x134], 0
jne 0x4938a8
and dword [ebp - 0x844], 0
jmp 0x4938b2
mov dword [ebp - 0x844], 1
mov eax, dword [ebp - 0x844]
add eax, 0xe1ab
cmp eax, dword [ebp - 0x17c8]
jle 0x4938d1
mov dword [ebp - 0xd84], 1
jmp 0x4938d8
and dword [ebp - 0xd84], 0
mov eax, dword [ebp - 0xd84]
mov dword [ebp - 0x6ec], eax
mov eax, dword [ebp - 0x6ec]
imul eax, dword [ebp - 0x84c]
mov dword [ebp - 0x17d0], eax
cmp dword [ebp - 0x38c], 0
je 0x493915
cmp dword [ebp - 0x134], 0
je 0x493915
mov dword [ebp - 0x854], 1
jmp 0x49391c
and dword [ebp - 0x854], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cc0]
mov dword [ebp - 0x1f30], eax
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x2138], eax
cmp dword [ebp - 0x38c], 0x2f7b
je 0x493953
mov dword [ebp - 0x1024], 1
jmp 0x49395a
and dword [ebp - 0x1024], 0
mov eax, dword [ebp - 0x508]
cmp dword [ebp - 0x1024], eax
jle 0x493974
mov dword [ebp - 0x17d8], 1
jmp 0x49397b
and dword [ebp - 0x17d8], 0
mov eax, dword [ebp - 0x854]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x1f38], eax
mov dword [ebp - 0x38c], 0x7cfeb45d
jmp 0x4936b8
mov byte [ebp - 0x185], 0
movzx eax, byte [ebp - 0x185]
test eax, eax
je 0x4939ce
push 0
push 0x1819
push 1
push 1
push 0x60db
push 0
call fcn.00483053
add esp, 0x18
jmp 0x49367e
jmp 0x493643
mov dword [ebp - 0x224c], 1
mov dword [ebp - 0x90], 0x2c70bb74
mov dword [ebp - 0x6f4], 7
mov dword [ebp - 0x124], 0xa644184e
mov dword [ebp - 0xbc], 0
jmp 0x493a19
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x493a35
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x258], 0x8206
jmp 0x493a0c
mov dword [ebp - 0xbc], 0
jmp 0x493a4e
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x493a6a
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x2458], 1
jmp 0x493a41
mov dword [ebp - 0x90], 0
jmp 0x493a83
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jl 0x49402c
mov dword [ebp - 0x1f4], 2
mov dword [ebp - 0x864], 3
mov dword [ebp - 0x17f0], 0xd93cbfb4
mov dword [ebp - 0x1f40], 0xffffffff
mov dword [ebp - 0x2148], 0xffffffff
mov dword [ebp - 0xd8c], 0x6b
mov dword [ebp - 0x17e0], 0xaa6c18
cmp dword [ebp - 0xd8c], 0x163
jle 0x493b93
and dword [ebp - 0x394], 0
jmp 0x493afc
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 0x3cd4
jge 0x493b93
and dword [ebp - 0x628], 0
jmp 0x493b22
mov eax, dword [ebp - 0x628]
inc eax
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 0x1e6a
jge 0x493b8e
and dword [ebp - 0x33c], 0
jmp 0x493b44
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0x695e
jge 0x493b8c
mov eax, dword [ebp - 0x628]
cdq
idiv dword [ebp - 0x33c]
mov eax, dword [ebp - 0x394]
mov ecx, edx
shl eax, cl
cdq
mov dword [ebp - 0x152c], eax
mov dword [ebp - 0x1528], edx
push dword [ebp - 0x1528]
push dword [ebp - 0x152c]
mov ecx, 0xab2718
call fcn.0044d014
jmp 0x493b37
jmp 0x493b15
jmp 0x493aef
push 1
lea ecx, [ebp - 0x2034]
call fcn.0044d129
mov dword [ebp - 4], 6
cmp dword [ebp - 0xd8c], 0xfffffe9e
jge 0x493bc3
mov edx, dword [ebp - 0x17e0]
mov ecx, 0xab2718
call fcn.0044e9ba
jmp 0x493bdf
or dword [ebp - 4], 0xffffffff
jmp 0x493be9
mov dword [ebp - 0x510], 0
jmp 0x493c02
mov eax, dword [ebp - 0x510]
inc eax
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0x510], 1
jge 0x493c24
push dword [ebp - 0x510]
lea ecx, [ebp - 0x2034]
call fcn.0044d217
mov dword [eax], 0xe46ed4d3
jmp 0x493bf5
mov eax, 0xfe
test eax, eax
je 0x493ebd
mov eax, dword [ebp - 0x90]
cmp dword [ebp + eax*4 - 0x258], 0
je 0x493ebd
mov dword [ebp - 0x784], 0x29478c9d
mov dword [ebp - 0x3a8], 0
jmp 0x493c68
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 2
jge 0x493c84
mov eax, dword [ebp - 0x3a8]
mov dword [ebp + eax*4 - 0x1d78], 0x1c2a9118
jmp 0x493c5b
mov dword [ebp - 0x87c], 0x62e2
mov dword [ebp - 0x17e8], 0xaa6c3c
cmp dword [ebp - 0x87c], 0x66ba
jle 0x493d1b
and dword [ebp - 0x5c8], 0
jmp 0x493cba
mov eax, dword [ebp - 0x5c8]
inc eax
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 0x7a7f
jge 0x493d1b
and dword [ebp - 0x3b0], 0
jmp 0x493cdc
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 0x3e89
jge 0x493d19
mov eax, dword [ebp - 0x5c8]
sub eax, dword [ebp - 0x3b0]
cdq
mov dword [ebp - 0x1538], eax
mov dword [ebp - 0x1534], edx
push dword [ebp - 0x1534]
push dword [ebp - 0x1538]
mov ecx, 0xab2718
call fcn.0044d014
jmp 0x493ccf
jmp 0x493cad
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp + eax*4 - 0x258]
mov dword [ebp - 0x1f48], eax
mov eax, 0xc6d0f065
test eax, eax
jbe 0x493d43
mov dword [ebp - 0x85c], 1
jmp 0x493d4a
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x784]
imul eax, dword [ebp - 0x85c]
test eax, eax
je 0x493d77
mov eax, dword [ebp - 0x90]
cmp dword [ebp + eax*4 - 0x258], 0
je 0x493d77
mov dword [ebp - 0x1174], 1
jmp 0x493d7e
and dword [ebp - 0x1174], 0
mov eax, dword [ebp - 0x1174]
add eax, 0x1a81
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp + eax*4 - 0x258]
cmp dword [ebp - 0x864], eax
jge 0x493dbc
mov dword [ebp - 0xd94], 1
jmp 0x493dc3
and dword [ebp - 0xd94], 0
cmp dword [ebp - 0xd94], 0
jne 0x493dde
cmp dword [ebp - 0x784], 0
jne 0x493dde
and dword [ebp - 0x86c], 0
jmp 0x493de8
mov dword [ebp - 0x86c], 1
mov eax, dword [ebp - 0x784]
cmp dword [ebp - 0x86c], eax
jl 0x493e02
mov dword [ebp - 0x102c], 1
jmp 0x493e09
and dword [ebp - 0x102c], 0
mov dword [ebp - 0x1f4], 0xfffffffb
mov eax, dword [ebp - 0x1f4]
cmp eax, dword [ebp - 0x102c]
jge 0x493e2d
mov dword [ebp - 0x874], 1
jmp 0x493e34
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x874]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xffffffff
je 0x493e55
mov dword [ebp - 0xd9c], 1
jmp 0x493e5c
and dword [ebp - 0xd9c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd9c]
mov dword [ebp + eax - 0x1d78], ecx
mov dword [ebp - 4], 8
cmp dword [ebp - 0x87c], 0x6162
jge 0x493e92
mov edx, dword [ebp - 0x17e8]
mov ecx, 0xab2718
call fcn.0044e9ba
jmp 0x493eae
or dword [ebp - 4], 0xffffffff
jmp 0x493eb8
jmp 0x49401c
mov dword [ebp - 0x88c], 0xfffffff9
mov dword [ebp - 0x1904], 0xffff
mov dword [ebp - 0x518], 0
jmp 0x493eea
mov eax, dword [ebp - 0x518]
inc eax
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 1
jge 0x493f06
mov eax, dword [ebp - 0x518]
mov dword [ebp + eax*4 - 0x22d8], 0
jmp 0x493edd
mov dword [ebp - 0x1f4], 0
jmp 0x493f1f
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0
jg 0x493fea
mov dword [ebp - 0x17f8], 4
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x1f50], eax
cmp dword [ebp - 0x17f0], 0
jne 0x493f64
mov eax, dword [ebp - 0x90]
cmp dword [ebp + eax*4 - 0x258], 0
jne 0x493f64
and dword [ebp - 0x1224], 0
jmp 0x493f6e
mov dword [ebp - 0x1224], 1
cmp dword [ebp - 0x1224], 7
jae 0x493f83
mov dword [ebp - 0x884], 1
jmp 0x493f8a
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x2158], eax
mov eax, dword [ebp - 0x17f8]
mov dword [ebp - 0x1f58], eax
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x884], eax
jg 0x493fbc
mov dword [ebp - 0xda4], 1
jmp 0x493fc3
and dword [ebp - 0xda4], 0
mov eax, dword [ebp - 0xda4]
mov dword [ebp - 0x88c], eax
mov eax, dword [ebp - 0x88c]
mov dword [ebp - 0x2254], eax
mov dword [ebp - 0x124], 0x5f8a4198
jmp 0x493f12
push 0x2768
push 0x7704
push 0
push 0x7090
push 1
lea eax, [ebp - 0x1904]
push eax
push 1
push 1
push 0x57bf
push 1
push 0x2bce
call fcn.004881aa
add esp, 0x2c
lea ecx, [ebp - 0x2034]
call fcn.0044d1fb
jmp 0x493a76
mov dword [ebp - 0x124], 0
jmp 0x494045
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xffffffed
jg 0x4940b5
mov byte [ebp - 0x187], 0
push 1
push 0
push 0
push 0x4268
lea eax, [ebp - 0x187]
push eax
push 0x4c7b
push 0x7b46
push 0x1111
push 1
push 0x206a
push 0x60d5
push 0x4ec9
push 1
push 0x29da
call fcn.00483d9f
add esp, 0x38
push 1
push 1
push 0x5dab
push 0
push 0x1a5d
push 0x4be0
call fcn.00489d07
add esp, 0x18
jmp 0x494038
push 0x1a0f
push 1
push 0
push 0x491e
push 0x603d
push 1
push 0x4e43
push 0
push 1
push 0x1581
push 0x4062
lea eax, [ebp - 0x2074]
push eax
push 0x7621
lea eax, [ebp - 0x1f60]
push eax
push 1
call fcn.00489189
add esp, 0x3c
mov dword [ebp - 0x7f4], 0xfffffff8
mov dword [ebp - 0x260], 5
mov dword [ebp - 0x1034], 0x1f9c
mov dword [ebp - 0x16bc], 0xaa6c88
cmp dword [ebp - 0x1034], 0x20e2
jle 0x494230
and dword [ebp - 0x520], 0
jmp 0x494148
mov eax, dword [ebp - 0x520]
inc eax
mov dword [ebp - 0x520], eax
cmp dword [ebp - 0x520], 0x30d5
jge 0x494230
and dword [ebp - 0x3b8], 0
jmp 0x49416e
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0x12ce
jge 0x49422b
and dword [ebp - 0x658], 0
jmp 0x494194
mov eax, dword [ebp - 0x658]
inc eax
mov dword [ebp - 0x658], eax
cmp dword [ebp - 0x658], 0x480a
jge 0x494226
and dword [ebp - 0x3c0], 0
jmp 0x4941ba
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 0x14d0
jge 0x494221
mov eax, dword [ebp - 0x3b8]
mov ecx, dword [ebp - 0x658]
sar eax, cl
and eax, dword [ebp - 0x3c0]
xor eax, dword [ebp - 0x520]
cdq
mov dword [ebp - 0x1544], eax
mov dword [ebp - 0x1540], edx
push dword [ebp - 0x1540]
push dword [ebp - 0x1544]
lea ecx, [ebp - 0x25ac]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0044d009
push eax
call fcn.004a7c67
pop ecx
lea ecx, [ebp - 0x25ac]
call fcn.0044cfff
jmp 0x4941ad
jmp 0x494187
jmp 0x494161
jmp 0x49413b
mov dword [ebp - 0x6fc], 0xffffffff
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x1034], 0x1eae
jge 0x494259
push dword [ebp - 0x16bc]
call fcn.004a7c67
pop ecx
jmp 0x494275
or dword [ebp - 4], 0xffffffff
jmp 0x49427f
mov dword [ebp - 0x17d4], 5
mov dword [ebp - 0xdbc], 0xfffffff8
mov dword [ebp - 0xdd4], 5
mov dword [ebp - 0x8cc], 0xfffffffa
mov dword [ebp - 0x1340], 0x65835a7a
push 3
lea ecx, [ebp - 0x1bac]
call fcn.0044d129
mov dword [ebp - 0x18a8], 1
mov dword [ebp - 0x8c4], 0xd734
mov dword [ebp - 0x1184], 0x1c19cd89
mov dword [ebp - 0x1358], 0xfffffffe
mov dword [ebp - 0x2f8], 0
jmp 0x4942ff
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 1
jge 0x49431b
mov eax, dword [ebp - 0x2f8]
mov dword [ebp + eax*4 - 0xdcc], 0x722ba7b7
jmp 0x4942f2
lea eax, [ebp - 0x1bac]
push eax
push 1
push 1
push 0x2227
push 0x6922
push 1
push 0x1167
push 1
lea eax, [ebp - 0x2f8]
push eax
push 0x66d2
push 0x79e
call fcn.00475255
add esp, 0x2c
cmp dword [ebp - 0x7f4], 0x6c902da
jne 0x49436a
mov dword [ebp - 0x894], 1
jmp 0x494371
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x260]
cmp dword [ebp - 0x894], eax
je 0x49438b
mov dword [ebp - 0xdac], 1
jmp 0x494392
and dword [ebp - 0xdac], 0
mov eax, dword [ebp - 0x260]
imul eax, dword [ebp - 0xdac]
cmp eax, dword [ebp - 0x260]
jge 0x4943b3
mov dword [ebp - 0x14b4], 1
jmp 0x4943ba
and dword [ebp - 0x14b4], 0
mov eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x2168], eax
cmp dword [ebp - 0x7f4], 0
jne 0x4943db
mov dword [ebp - 0x89c], 1
jmp 0x4943e2
and dword [ebp - 0x89c], 0
cmp dword [ebp - 0x89c], 0x8f6c218e
je 0x4943fa
mov dword [ebp - 0x117c], 1
jmp 0x494401
and dword [ebp - 0x117c], 0
cmp dword [ebp - 0x117c], 0xb4ef
jne 0x494419
mov dword [ebp - 0x8a4], 1
jmp 0x494420
and dword [ebp - 0x8a4], 0
cmp dword [ebp - 0x8a4], 0x252c
je 0x494438
mov dword [ebp - 0xdb4], 1
jmp 0x49443f
and dword [ebp - 0xdb4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdb4]
mov dword [ebp + eax - 0xdcc], ecx
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x1f68], eax
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x22b8], eax
mov eax, dword [ebp - 0x6fc]
cmp dword [ebp - 0xdd4], eax
jne 0x494484
mov dword [ebp - 0x8ac], 1
jmp 0x49448b
and dword [ebp - 0x8ac], 0
cmp dword [ebp - 0x8ac], 0xffffffff
jl 0x4944a0
mov dword [ebp - 0x103c], 1
jmp 0x4944a7
and dword [ebp - 0x103c], 0
mov eax, dword [ebp - 0x1340]
cmp dword [ebp - 0x103c], eax
je 0x4944c7
cmp dword [ebp - 0x18a8], 0
jne 0x4944c7
and dword [ebp - 0x8b4], 0
jmp 0x4944d1
mov dword [ebp - 0x8b4], 1
mov eax, dword [ebp - 0x6fc]
cmp dword [ebp - 0x8b4], eax
je 0x4944eb
mov dword [ebp - 0x8bc], 1
jmp 0x4944f2
and dword [ebp - 0x8bc], 0
push 1
lea ecx, [ebp - 0x1bac]
call fcn.0044d217
mov dword [ebp - 0x78c], eax
mov eax, dword [ebp - 0x78c]
mov eax, dword [eax]
mov dword [ebp - 0xdbc], eax
mov eax, dword [ebp - 0xdbc]
mov dword [ebp - 0x1348], eax
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x16c4], eax
mov eax, dword [ebp - 0x78c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x78c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1348]
cmp eax, dword [ebp - 0x16c4]
jne 0x494556
mov dword [ebp - 0x123c], 1
jmp 0x49455d
and dword [ebp - 0x123c], 0
mov eax, dword [ebp - 0x8c4]
add eax, dword [ebp - 0x123c]
cmp eax, dword [ebp - 0x8c4]
jle 0x49457d
mov dword [ebp - 0xdc4], 1
jmp 0x494584
and dword [ebp - 0xdc4], 0
mov eax, dword [ebp - 0xdc4]
mov dword [ebp - 0x8cc], eax
cmp dword [ebp - 0x8cc], 0
jne 0x4945ab
mov eax, 0xd1d9d65f
test eax, eax
jne 0x4945ab
and dword [ebp - 0x1044], 0
jmp 0x4945b5
mov dword [ebp - 0x1044], 1
mov eax, dword [ebp - 0x260]
cmp dword [ebp - 0x1044], eax
jne 0x4945cf
mov dword [ebp - 0x8d4], 1
jmp 0x4945d6
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0x1184]
cmp dword [ebp - 0x8d4], eax
jg 0x4945f0
mov dword [ebp - 0x1350], 1
jmp 0x4945f7
and dword [ebp - 0x1350], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdcc]
mov dword [ebp - 0x1f70], eax
mov eax, 0xe1dc
test eax, eax
je 0x494628
cmp dword [ebp - 0x17d4], 0
je 0x494628
mov dword [ebp - 0x8dc], 1
jmp 0x49462f
and dword [ebp - 0x8dc], 0
mov eax, dword [ebp - 0x8dc]
sub eax, 5
je 0x494658
mov eax, 0xda82
test eax, eax
je 0x494658
cmp dword [ebp - 0x1358], 0
je 0x494658
mov dword [ebp - 0x8e4], 1
jmp 0x49465f
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x1184]
imul eax, dword [ebp - 0x8e4]
mov dword [ebp - 0xdd4], eax
lea ecx, [ebp - 0x1bac]
call fcn.0044d1fb
mov dword [ebp - 0x3c8], 0xffffffec
jmp 0x494696
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0xfffffff2
jge 0x494d3b
mov dword [ebp - 0x104c], 0xffffffff
mov dword [ebp - 0x8ec], 0
push 0x572f
push 0
push 0x5ec1
lea eax, [ebp - 0x104c]
push eax
lea eax, [ebp - 0x8ec]
push eax
push 0x394f
push 1
push 1
push 1
push 0x5038
push 0x5b23
call fcn.00480189
add esp, 0x2c
push 1
push 0
lea eax, [ebp - 0x8ec]
push eax
push 0x25c6
push 1
push 1
push 0x6857
lea eax, [ebp - 0x104c]
push eax
call fcn.004849b5
add esp, 0x20
mov dword [ebp - 0x1cd8], 0xb51dba33
mov dword [ebp - 0x1360], 0xfffffff9
mov dword [ebp - 0x1900], 0xf4c59cdc
mov dword [ebp - 0xddc], 0x6b8d9637
mov dword [ebp - 0x8fc], 0xfffffff6
push 3
lea ecx, [ebp - 0x1910]
call fcn.0044d129
mov dword [ebp - 0x8f4], 0xc4e
mov dword [ebp - 0x16cc], 0x1aa12afd
push 0x3445
push 0x4c3
push 1
lea eax, [ebp - 0x1cdc]
push eax
push 0
lea eax, [ebp - 0x1910]
push eax
push 1
push 0x6e41
push 0x5448
call fcn.004835d5
add esp, 0x24
lea eax, [ebp - 0xddc]
push eax
push 0x6afd
lea eax, [ebp - 0x8f4]
push eax
push 0x270b
lea eax, [ebp - 0x16cc]
push eax
push 0
lea eax, [ebp - 0x8fc]
push eax
push 0x51de
push 0
push 1
push 0x5d6c
lea eax, [ebp - 0x1910]
push eax
push 0
lea eax, [ebp - 0x1360]
push eax
lea eax, [ebp - 0x1900]
push eax
call fcn.00486122
add esp, 0x3c
lea eax, [ebp - 0x8f4]
push eax
lea eax, [ebp - 0x1910]
push eax
lea eax, [ebp - 0xddc]
push eax
push 0
push 1
lea eax, [ebp - 0x8fc]
push eax
push 1
push 1
call fcn.0047e75b
add esp, 0x20
lea ecx, [ebp - 0x1910]
call fcn.0044d1fb
mov dword [ebp - 0x1ce4], 0
push 1
lea ecx, [ebp - 0x1c0c]
call fcn.0044d129
mov dword [ebp - 0x1368], 0xd5feaf86
mov dword [ebp - 0x16d4], 0x215169ff
mov dword [ebp - 0x1cec], 0x32adaa23
lea eax, [ebp - 0x1cf4]
push eax
push 0
push 0x14d1
push 0x5f77
push 1
push 0
lea eax, [ebp - 0x1c0c]
push eax
push 0x1901
push 0x6ad4
call fcn.00484d7f
add esp, 0x24
push 1
lea eax, [ebp - 0x1c0c]
push eax
push 0x742c
lea eax, [ebp - 0x1368]
push eax
push 0x6867
push 0x777d
lea eax, [ebp - 0x16d4]
push eax
push 0x6392
push 0
push 0
call fcn.00483923
add esp, 0x28
mov byte [ebp - 0x189], 0
movzx eax, byte [ebp - 0x189]
test eax, eax
je 0x4948ef
push 0
push 0x2033
push 0x2626
push 0x1585
push 0x1870
call dword [fcn.00ab53b0]
lea ecx, [ebp - 0x1c0c]
call fcn.0044d1fb
push 3
lea ecx, [ebp - 0x2044]
call fcn.0044d129
mov dword [ebp - 0x1378], 0xfffe
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x1cfc], 0x8a1f9496
mov dword [ebp - 0x1370], 0x9ac70c30
mov dword [ebp - 0x105c], 0x2b165808
mov dword [ebp - 0x704], 1
mov dword [ebp - 0x91c], 4
push 2
lea ecx, [ebp - 0x1818]
call fcn.0044d129
mov dword [ebp - 0x92c], 0
mov dword [ebp - 0x2c8], 0
jmp 0x49497d
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 4
jge 0x494999
mov eax, dword [ebp - 0x2c8]
mov dword [ebp + eax*4 - 0x230c], 0xd811f07b
jmp 0x494970
push 0x57cc
push 0x59d6
push 0xad2
push 0x7df0
push 0x36f0
push 0
push 1
push 0x2835
lea eax, [ebp - 0x1818]
push eax
push 0
lea eax, [ebp - 0x2c8]
push eax
push 0
push 0x13a7
call fcn.0048c54b
add esp, 0x34
push 0x6345
push 1
push 1
push 0
push 0
push 0x1cb5
push 1
lea eax, [ebp - 0x91c]
push eax
push 0x3049
call fcn.0048f653
add esp, 0x24
mov eax, 0x6930509b
test eax, eax
je 0x494a20
cmp dword [ebp - 0x1370], 0
je 0x494a20
mov dword [ebp - 0x1244], 1
jmp 0x494a27
and dword [ebp - 0x1244], 0
push 0
lea ecx, [ebp - 0x1818]
call fcn.0044d217
mov ecx, dword [ebp - 0x1244]
cmp ecx, dword [eax]
jne 0x494a4a
mov dword [ebp - 0xde4], 1
jmp 0x494a51
and dword [ebp - 0xde4], 0
push 0
lea ecx, [ebp - 0x1818]
call fcn.0044d217
mov eax, dword [eax]
mov dword [ebp - 0x904], eax
mov eax, dword [ebp - 0x904]
cmp eax, dword [ebp - 0xde4]
jl 0x494a80
mov dword [ebp - 0x90c], 1
jmp 0x494a87
and dword [ebp - 0x90c], 0
push 0
lea ecx, [ebp - 0x1818]
call fcn.0044d217
mov ecx, dword [ebp - 0x90c]
cmp ecx, dword [eax]
je 0x494aaa
mov dword [ebp - 0x1054], 1
jmp 0x494ab1
and dword [ebp - 0x1054], 0
mov eax, dword [ebp - 0x1054]
sub eax, 0x763499f4
cmp eax, 0x199e
je 0x494acf
mov dword [ebp - 0x914], 1
jmp 0x494ad6
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x914]
neg eax
jne 0x494aee
xor eax, eax
inc eax
jne 0x494aee
and dword [ebp - 0x17dc], 0
jmp 0x494af8
mov dword [ebp - 0x17dc], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x230c]
mov dword [ebp - 0x1d04], eax
mov eax, dword [ebp - 0x92c]
cmp dword [ebp - 0x105c], eax
jl 0x494b25
mov dword [ebp - 0xdec], 1
jmp 0x494b2c
and dword [ebp - 0xdec], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x230c]
add eax, dword [ebp - 0xdec]
cmp eax, dword [ebp - 0x91c]
jge 0x494b52
mov dword [ebp - 0x118c], 1
jmp 0x494b59
and dword [ebp - 0x118c], 0
mov eax, dword [ebp - 0x704]
cmp dword [ebp - 0x118c], eax
jge 0x494b73
mov dword [ebp - 0x924], 1
jmp 0x494b7a
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x924]
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x704], 0xfc65
jne 0x494b9e
mov dword [ebp - 0xdf4], 1
jmp 0x494ba5
and dword [ebp - 0xdf4], 0
mov eax, dword [ebp - 0xdf4]
add eax, 0x67d
sub eax, dword [ebp - 0x92c]
mov dword [ebp - 0x105c], eax
lea ecx, [ebp - 0x1818]
call fcn.0044d1fb
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0x5d0], 0
jmp 0x494bea
mov eax, dword [ebp - 0x5d0]
inc eax
mov dword [ebp - 0x5d0], eax
cmp dword [ebp - 0x5d0], 4
jge 0x494c06
mov eax, dword [ebp - 0x5d0]
mov dword [ebp + eax*4 - 0x2420], 0xfffffffb
jmp 0x494bdd
mov dword [ebp - 0xfc], 3
jmp 0x494c1f
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jl 0x494c92
mov byte [ebp - 0x18b], 0
lea eax, [ebp - 0x18b]
push eax
push 0x12db
push 0x7944
push 0x5176
push 0x702e
push 0x40d
push 1
push 1
push 0x214c
push 0xc96
push 0x26eb
push 0
push 1
push 1
push 0x247d
push 1
push 0
push 0x41e0
call fcn.004867d0
add esp, 0x48
mov eax, dword [ebp - 0xfc]
cmp dword [ebp + eax*4 - 0x2420], 0
je 0x494c90
jmp 0x494c12
jmp 0x494c12
mov dword [ebp - 0xfc], 3
jmp 0x494cab
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jl 0x494cc9
push 1
push 0x273f
push 1
push 1
call fcn.00475fcd
add esp, 0x10
jmp 0x494c9e
push 0
push 1
push 1
push 0x5ca5
lea eax, [ebp - 0x2044]
push eax
lea eax, [ebp - 0x1d0c]
push eax
push 1
push 0x4355
call fcn.00478acb
add esp, 0x20
push 1
push 0x51a5
push 0x77a
push 1
push 0x433b
push 0
push 0
lea eax, [ebp - 0x1378]
push eax
push 0x1c35
push 0x2c3a
push 0x2da2
push 0x1d3a
call fcn.0047b8c7
add esp, 0x30
lea ecx, [ebp - 0x2044]
call fcn.0044d1fb
jmp 0x494689
mov dword [ebp - 0xec], 0xfffffff7
push 2
lea ecx, [ebp - 0x1828]
call fcn.0044d129
mov dword [ebp - 0x268], 0x7684abf0
mov dword [ebp - 0x18d4], 2
mov dword [ebp - 0x18d0], 2
mov dword [ebp - 0x18cc], 2
mov dword [ebp - 0x18c8], 2
mov dword [ebp - 0x1380], 0xf0d30663
mov dword [ebp - 0xc4], 0
jmp 0x494da7
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x494dc3
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x1bf4], 0x624039b6
jmp 0x494d9a
mov dword [ebp - 0xc4], 0
jmp 0x494ddc
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jge 0x494dfb
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x1828]
call fcn.0044d217
or dword [eax], 0xffffffff
jmp 0x494dcf
push 0x2cbb
push 0
push 0x5b87
push 0
push 0x141c
push 0x48bc
push 1
push 1
lea eax, [ebp - 0xec]
push eax
call fcn.0047a471
add esp, 0x24
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1bf4]
mov dword [ebp - 0x1d14], eax
cmp dword [ebp - 0xec], 0
je 0x494e5d
mov dword [ebp - 0x934], 0xd1f2e966
mov eax, dword [ebp - 0x934]
inc eax
mov dword [ebp - 0x934], eax
jmp 0x4951ea
mov dword [ebp - 0x70c], 1
mov dword [ebp - 0x324], 0x55f1bb13
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0xec], eax
jge 0x494e8b
mov dword [ebp - 0xdfc], 1
jmp 0x494e92
and dword [ebp - 0xdfc], 0
mov eax, dword [ebp - 0x70c]
cmp dword [ebp - 0xdfc], eax
jg 0x494eac
mov dword [ebp - 0x93c], 1
jmp 0x494eb3
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x93c]
sub eax, 7
jne 0x494eca
mov dword [ebp - 0x1230], 1
jmp 0x494ed1
and dword [ebp - 0x1230], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1bf4]
imul eax, dword [ebp - 0x1230]
imul eax, eax, 0xfffd
cmp eax, dword [ebp - 0xec]
je 0x494f05
cmp dword [ebp - 0x70c], 0
jne 0x494f05
and dword [ebp - 0x7d4], 0
jmp 0x494f0f
mov dword [ebp - 0x7d4], 1
push 1
lea ecx, [ebp - 0x1828]
call fcn.0044d217
mov ecx, dword [ebp - 0x7d4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7d4]
neg eax
cmp eax, 0x4549773c
jle 0x494f3f
mov dword [ebp - 0x944], 1
jmp 0x494f46
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x944]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x1d1c], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x1d24], eax
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x1d2c], eax
mov eax, dword [ebp - 0xec]
push 4
pop ecx
shl ecx, 0
imul ecx, dword [ebp + ecx - 0x1bf4], 0xfffffffa
add eax, ecx
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x18d4]
jg 0x494fa7
mov dword [ebp - 0xe04], 1
jmp 0x494fae
and dword [ebp - 0xe04], 0
cmp dword [ebp - 0xe04], 0xffffffff
jne 0x495084
mov dword [ebp - 0x268], 0
jmp 0x494fd4
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 5
jge 0x49507f
push 0x1a87
push 0x4a84
push 0x2fde
push 0x3aff
push 0x68c7
push 1
push 0x2b33
push 0
push 1
push 0x206f
push 0
push 0x6f93
push 0x319a
push 0x5661
push 1
push 0x7019
call fcn.0047768e
add esp, 0x40
push 0x20ac
push 0x422d
push 1
push 0x51e
push 1
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x324]
push eax
push 0x65ba
push 1
push 0xcd2
push 0x1196
push 0x404f
push 0x3739
push 0x7a4
push 1
push 0x6e8d
call fcn.004763e1
add esp, 0x40
jmp 0x494fc7
jmp 0x4951de
mov dword [ebp - 0x1194], 0xfffffffe
cmp dword [ebp - 0x1194], 1
jae 0x4950a3
mov dword [ebp - 0x16dc], 1
jmp 0x4950aa
and dword [ebp - 0x16dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18d4]
mov dword [ebp - 0x1d34], eax
or eax, 0xffffffff
jne 0x4950d4
cmp dword [ebp - 0x324], 0
jne 0x4950d4
and dword [ebp - 0x94c], 0
jmp 0x4950de
mov dword [ebp - 0x94c], 1
push 1
lea ecx, [ebp - 0x1828]
call fcn.0044d217
mov ecx, dword [ebp - 0x94c]
cmp ecx, dword [eax]
jge 0x495101
mov dword [ebp - 0x1064], 1
jmp 0x495108
and dword [ebp - 0x1064], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x18d4]
cmp eax, dword [ebp - 0x1064]
je 0x495129
mov dword [ebp - 0x954], 1
jmp 0x495130
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x1380]
add eax, dword [ebp - 0x954]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x18d4]
jge 0x495156
mov dword [ebp - 0xe0c], 1
jmp 0x49515d
and dword [ebp - 0xe0c], 0
cmp dword [ebp - 0xe0c], 3
jae 0x495172
mov dword [ebp - 0x95c], 1
jmp 0x495179
and dword [ebp - 0x95c], 0
mov eax, 0xdb81fdf2
sub eax, dword [ebp - 0x95c]
cmp eax, 2
jge 0x495195
mov dword [ebp - 0x964], 1
jmp 0x49519c
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x1194]
cmp dword [ebp - 0x964], eax
jne 0x4951b6
mov dword [ebp - 0x794], 1
jmp 0x4951bd
and dword [ebp - 0x794], 0
push 0
lea ecx, [ebp - 0x1828]
call fcn.0044d217
mov ecx, dword [ebp - 0x794]
mov dword [eax], ecx
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x324], eax
lea ecx, [ebp - 0x1828]
call fcn.0044d1fb
mov dword [ebp - 0x1388], 6
mov dword [ebp - 0xe14], 0x432c
mov dword [ebp - 0x18b0], 0xaa6ca8
cmp dword [ebp - 0xe14], 0x440e
jle 0x495296
and dword [ebp - 0x3d0], 0
jmp 0x495235
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 0x21ca
jge 0x495296
and dword [ebp - 0x528], 0
jmp 0x495257
mov eax, dword [ebp - 0x528]
inc eax
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 0x3de0
jge 0x495294
mov eax, dword [ebp - 0x3d0]
sub eax, dword [ebp - 0x528]
cdq
mov dword [ebp - 0x1550], eax
mov dword [ebp - 0x154c], edx
push dword [ebp - 0x154c]
push dword [ebp - 0x1550]
mov ecx, 0xab2718
call fcn.0044d014
jmp 0x49524a
jmp 0x495228
mov dword [ebp - 0x1a6c], 0x34fda0e6
mov dword [ebp - 0x1a68], 0x34fda0e6
mov dword [ebp - 0x1a64], 0x34fda0e6
mov dword [ebp - 0x1a60], 0x34fda0e6
lea ecx, [ebp - 0x7dd]
call fcn.0044d226
push eax
lea eax, [ebp - 0x1a5c]
push eax
lea eax, [ebp - 0x1a6c]
push eax
lea ecx, [ebp - 0x2390]
call fcn.0044d229
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2054]
call fcn.0044d1d5
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xe14], 0x3fde
jge 0x495316
mov edx, dword [ebp - 0x18b0]
mov ecx, 0xab2718
call fcn.0044e9ba
jmp 0x495332
or dword [ebp - 4], 0xffffffff
jmp 0x49533c
mov dword [ebp - 0x16e4], 0
mov eax, dword [ebp - 0x1388]
mov dword [ebp - 0x1d3c], eax
push 0
lea ecx, [ebp - 0x2054]
call fcn.0044d217
or dword [eax], 0xffffffff
mov dword [ebp - 0x16e4], 0xffffffff
mov byte [ebp - 0x1e2], 0
push 0x7e49
push 0x640d
push 0x4572
push 0x1a46
push 0
push 1
push 0x2b3d
push 1
push 0x1173
push 0x43ed
lea eax, [ebp - 0x1e2]
push eax
push 1
push 1
push 0x3b5e
push 1
push 0x3c1f
push 1
push 0x78c4
call fcn.004843a0
add esp, 0x48
lea ecx, [ebp - 0x2054]
call fcn.0044d1fb
mov byte [ebp - 0x155], 0
mov dword [ebp - 0x1a1c], 0xf99ff606
mov dword [ebp - 0x1a18], 0xf99ff606
mov dword [ebp - 0x1a14], 0xf99ff606
mov dword [ebp - 0x1a10], 0xf99ff606
lea ecx, [ebp - 0x7e5]
call fcn.0044d226
push eax
lea eax, [ebp - 0x1a0c]
push eax
lea eax, [ebp - 0x1a1c]
push eax
lea ecx, [ebp - 0x2408]
call fcn.0044d229
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2064]
call fcn.0044d1d5
mov dword [ebp - 0x270], 0xfffffff9
mov dword [ebp - 0x1d44], 0x485bf25c
mov dword [ebp - 0x3d8], 0
jmp 0x49545e
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 3
jge 0x49547a
mov eax, dword [ebp - 0x3d8]
mov dword [ebp + eax*4 - 0x24e0], 0xbeb7161a
jmp 0x495451
mov dword [ebp - 0x270], 0
jmp 0x495493
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 3
jg 0x4954d5
mov dword [ebp - 0x1390], 0xf1a0734f
lea eax, [ebp - 0x1390]
push eax
push 0
push 1
push 0
call fcn.00487074
add esp, 0x10
push dword [ebp - 0x270]
lea ecx, [ebp - 0x2064]
call fcn.0044d217
cmp dword [eax], 0
je 0x4954d3
jmp 0x495486
jmp 0x495486
lea ecx, [ebp - 0x2064]
call fcn.0044d1fb
movzx eax, byte [ebp - 0x155]
test eax, eax
je 0x495626
mov dword [ebp - 0x2d0], 1
mov dword [ebp - 0x2d0], 0xfffffffe
jmp 0x495512
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x14
jge 0x495615
mov dword [ebp - 0x300], 8
mov dword [ebp - 0x300], 0
jmp 0x495542
mov eax, dword [ebp - 0x300]
dec eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0xffffffee
jge 0x495605
mov dword [ebp - 0x278], 7
mov dword [ebp - 0x278], 0
jmp 0x495572
mov eax, dword [ebp - 0x278]
dec eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0xfffffffc
jle 0x495600
push 3
lea ecx, [ebp - 0x1b10]
call fcn.0044d129
mov dword [ebp - 0x17e4], 0xffffffff
push 1
push 0x65db
lea eax, [ebp - 0x1b10]
push eax
push 1
push 0x4ee0
push 0
push 0x19fd
lea eax, [ebp - 0x1d4c]
push eax
call fcn.00482afa
add esp, 0x20
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x1b10]
push eax
push 1
push 1
lea eax, [ebp - 0x278]
push eax
push 0
push 0x6673
lea eax, [ebp - 0x17e4]
push eax
call fcn.00487f37
add esp, 0x20
lea ecx, [ebp - 0x1b10]
call fcn.0044d1fb
jmp 0x495565
jmp 0x495535
cmp dword [ebp - 0x300], 0
je 0x495610
jmp 0x495615
jmp 0x495505
push 0
push 0
push 0x2478
push 0
call dword [fcn.00ab5400]
lea ecx, [ebp - 0x2074]
call fcn.0044d1fb
mov byte [ebp - 0x2d], 0
mov dword [ebp - 0x2d8], 0xffff
mov dword [ebp - 0x280], 0x8ee1
mov dword [ebp - 0x96c], 1
push 1
lea ecx, [ebp - 0x19b8]
call fcn.0044d129
push 0x748b
lea eax, [ebp - 0x19b8]
push eax
push 0x1fa3
push 1
push 0x73b2
push 1
push 0
push 0x1377
push 1
push 0x355
push 0x2b3f
lea eax, [ebp - 0x1d54]
push eax
push 0xe74
push 0x78bd
push 0x68d2
push 0x777e
call fcn.0048e00a
add esp, 0x40
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x96c], eax
cmp dword [ebp - 0x96c], 1
jne 0x4956ce
cmp dword [ebp - 0x2d8], 0
jne 0x4956e9
cmp dword [ebp - 0x280], 0
jne 0x4956e9
cmp dword [ebp - 0x280], 0
jne 0x4956e9
and dword [ebp - 0x106c], 0
jmp 0x4956f3
mov dword [ebp - 0x106c], 1
mov eax, dword [ebp - 0x2d8]
cmp eax, dword [ebp - 0x106c]
jl 0x49570d
mov dword [ebp - 0x974], 1
jmp 0x495714
and dword [ebp - 0x974], 0
cmp dword [ebp - 0x974], 9
jb 0x495729
mov dword [ebp - 0xe1c], 1
jmp 0x495730
and dword [ebp - 0xe1c], 0
mov eax, dword [ebp - 0xe1c]
sub eax, dword [ebp - 0x2d8]
cmp dword [ebp - 0x2d8], eax
jl 0x495750
mov dword [ebp - 0x97c], 1
jmp 0x495757
and dword [ebp - 0x97c], 0
mov esi, dword [ebp - 0x280]
add esi, dword [ebp - 0x97c]
push 0
lea ecx, [ebp - 0x19b8]
call fcn.0044d217
imul esi, dword [eax]
cmp esi, 9
jle 0x495784
mov dword [ebp - 0x1270], 1
jmp 0x49578b
and dword [ebp - 0x1270], 0
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x1270], eax
jge 0x4957a5
mov dword [ebp - 0x984], 1
jmp 0x4957ac
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x2d8]
cmp dword [ebp - 0x984], eax
jg 0x4957c6
mov dword [ebp - 0xe24], 1
jmp 0x4957cd
and dword [ebp - 0xe24], 0
mov eax, dword [ebp - 0xe24]
sub eax, 8
je 0x495853
mov dword [ebp - 0x630], 0
jmp 0x4957f1
mov eax, dword [ebp - 0x630]
inc eax
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 1
jge 0x49580d
mov eax, dword [ebp - 0x630]
mov dword [ebp + eax*4 - 0x1398], 1
jmp 0x4957e4
mov byte [ebp - 0x1e4], 0
push 1
push 1
lea eax, [ebp - 0x1e4]
push eax
push 0
push 0
push 0x1f9
call fcn.00470489
add esp, 0x18
push 0
lea ecx, [ebp - 0x19b8]
call fcn.0044d217
mov eax, dword [eax]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1398], eax
jmp 0x495a89
mov dword [ebp - 0x1d5c], 0x7bf19931
mov dword [ebp - 0x1d64], 0xfffffff7
mov dword [ebp - 0x1d6c], 0xfffffffa
mov dword [ebp - 0x1dac], 0
mov dword [ebp - 0x1db4], 0xffffffff
mov dword [ebp - 0x1dbc], 0x3d2f5512
mov dword [ebp - 0x98c], 0x8dc
mov dword [ebp - 0x16ec], 0xaa6d30
cmp dword [ebp - 0x98c], 0xa92
jle 0x495989
push 0
push 0x2575
call dword [0xab50b0]
and dword [ebp - 0x3e8], 0
jmp 0x4958d6
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 0x29e7
jge 0x495989
and dword [ebp - 0x3e0], 0
jmp 0x4958fc
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 0x6bbb
jge 0x495984
and dword [ebp - 0x530], 0
jmp 0x49591e
mov eax, dword [ebp - 0x530]
inc eax
mov dword [ebp - 0x530], eax
cmp dword [ebp - 0x530], 0x2035
jge 0x49597f
mov ecx, dword [ebp - 0x3e0]
sub ecx, dword [ebp - 0x530]
mov eax, dword [ebp - 0x3e8]
sar eax, cl
cdq
mov dword [ebp - 0x155c], eax
mov dword [ebp - 0x1558], edx
push dword [ebp - 0x1558]
push dword [ebp - 0x155c]
lea ecx, [ebp - 0x254c]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0044d009
push eax
call fcn.004a7c67
pop ecx
lea ecx, [ebp - 0x254c]
call fcn.0044cfff
jmp 0x495911
jmp 0x4958ef
jmp 0x4958c9
mov dword [ebp - 0x1dc4], 0x1ee01e6e
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x98c], 0x551
jge 0x4959b2
push dword [ebp - 0x16ec]
call fcn.004a7c67
pop ecx
jmp 0x4959ce
or dword [ebp - 4], 0xffffffff
jmp 0x4959d8
push 1
lea ecx, [ebp - 0x2084]
call fcn.0044d129
mov dword [ebp - 0x13a0], 0x1241
push 0x7df
push 1
push 0
push 0x5157
lea eax, [ebp - 0x2084]
push eax
push 0xa0f
push 1
lea eax, [ebp - 0x1dcc]
push eax
call fcn.004927da
add esp, 0x20
mov byte [ebp - 0x15d], 0
push 0x4d0c
lea eax, [ebp - 0x15d]
push eax
push 0x5953
push 1
push 0x4c9b
push 1
push 1
push 0x4371
push 0x6858
push 1
call fcn.00476d26
add esp, 0x28
push 1
push 0xb9a
lea eax, [ebp - 0x13a0]
push eax
push 0x6944
push 1
push 0
push 0x29f8
push 0
push 1
push 0x2612
call fcn.00475834
add esp, 0x28
lea ecx, [ebp - 0x2084]
call fcn.0044d1fb
lea ecx, [ebp - 0x19b8]
call fcn.0044d1fb
mov dword [ebp - 0xcc], 0xfffffff8
mov dword [ebp - 0x5d8], 0
jmp 0x495ab7
mov eax, dword [ebp - 0x5d8]
inc eax
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 3
jge 0x495ad3
mov eax, dword [ebp - 0x5d8]
mov dword [ebp + eax*4 - 0x2318], 2
jmp 0x495aaa
mov dword [ebp - 0xcc], 2
jmp 0x495aec
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x495b98
mov dword [ebp - 0x3f0], 0x137b1891
mov eax, dword [ebp - 0xcc]
cmp dword [ebp + eax*4 - 0x2318], 0
je 0x495b18
jmp 0x495b98
mov dword [ebp - 0x3f0], 0
jmp 0x495b31
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 2
jg 0x495b93
mov byte [ebp - 0x1e6], 0
lea eax, [ebp - 0x1e6]
push eax
push 0x4400
push 0x3315
push 0x55a0
push 0x400f
push 0x6438
push 0x5ba7
push 0
push 1
push 0x3be8
push 1
push 0x57e0
push 1
push 0x20a0
push 1
push 0x7494
push 0x314e
call fcn.004822b2
add esp, 0x44
jmp 0x495b24
jmp 0x495adf
mov dword [ebp - 0xcc], 0
jmp 0x495bb1
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xfffffff6
jg 0x495c0a
mov byte [ebp - 0x1e8], 0
movzx eax, byte [ebp - 0x1e8]
test eax, eax
je 0x495c08
push 1
push 1
push 1
push 0x670a
push 0x14df
push 0x583b
push 1
push 0x233f
push 0xf28
push 0
push 0x29e5
push 1
push 0x18db
push 0x2b47
call fcn.00472589
add esp, 0x38
jmp 0x495ba4
mov dword [ebp - 0x60], 0x5d16df25
mov dword [ebp - 0x714], 0x34caa8e5
push 3
lea ecx, [ebp - 0x6c4]
call fcn.0044d129
mov dword [ebp - 0x238], 9
mov dword [ebp - 0x16f4], 0xfffffffe
mov dword [ebp - 0x17ec], 0x263070b7
mov dword [ebp - 0x1dd4], 0
push 1
push 0xc18
push 0x3740
push 0x440f
push 0
push 1
lea eax, [ebp - 0x6c4]
push eax
lea eax, [ebp - 0x1ddc]
push eax
push 0x4471
call fcn.00479d37
add esp, 0x24
push 0x4cab
push 0x5e91
push 0x48f
lea eax, [ebp - 0x714]
push eax
push 0x2886
push 0x59c8
lea eax, [ebp - 0x238]
push eax
push 1
lea eax, [ebp - 0x60]
push eax
push 0x1ece
push 1
push 1
push 0x5908
push 1
push 0x4f48
push 0
push 1
push 0x602e
lea eax, [ebp - 0x6c4]
push eax
call fcn.0048ac7f
add esp, 0x4c
mov dword [ebp - 0x1074], 0x4b3a
mov dword [ebp - 0x18dc], 0xaa6d80
cmp dword [ebp - 0x1074], 0x4de7
jle 0x495dfe
and dword [ebp - 0x538], 0
jmp 0x495d14
cmp dword [ebp - 0x538], 0x25e
jge 0x495dfe
and dword [ebp - 0x3f8], 0
jmp 0x495d3a
cmp dword [ebp - 0x3f8], 0x4ff9
jge 0x495df9
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x1074], 0x4af5
jge 0x495e1d
push dword [ebp - 0x18dc]
call fcn.004a7c67
pop ecx
jmp 0x495e39
or dword [ebp - 4], 0xffffffff
jmp 0x495e43
mov dword [ebp - 0x60], 0
jmp 0x495e53
mov eax, dword [ebp - 0x1474]
mov dword [ebp - 0x1484], eax
mov eax, dword [ebp - 0x147c]
mov dword [ebp - 0x148c], eax
mov eax, dword [ebp - 0x1484]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x148c]
mov dword [ebp - 0x1494], eax
mov eax, dword [ebp - 0x30c]
mov dword [eax], 0
jmp 0x4a515d
mov eax, dword [ebp - 0x30c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x30c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x30c]
cmp dword [eax], 1
jge 0x4a5183
mov eax, dword [ebp - 0x30c]
push dword [eax]
mov ecx, dword [ebp - 0x1494]
call fcn.0044d217
mov dword [eax], 0xc1543f36
jmp 0x4a514c
jmp 0x4a519d
push 0x4fa6
push 1
push 0
push 1
push 0x6d33
call fcn.0047d387
add esp, 0x14
jmp 0x4a51e7
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x14ac], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x14a4], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x149c], eax
push dword [ebp - 0x149c]
push 0x37d
push 1
push dword [ebp - 0x14a4]
push 0
push 0x1b70
push 0x166
push dword [ebp - 0x14ac]
call fcn.00478f36
add esp, 0x20
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret