Function at 0x4a3ff0
Capabilities:
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c7bfd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1350
call fcn.004c3490
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x30]
test eax, eax
je 0x4acb47
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xd18], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xd08], eax
mov dword [ebp - 0x600], 0x4d19
mov dword [ebp - 0xd04], 0xacab68
cmp dword [ebp - 0x600], 0x4d84
jle 0x4a4117
and dword [ebp - 0x1b0], 0
jmp 0x4a4071
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x32e7
jge 0x4a4105
and dword [ebp - 0x2b0], 0
jmp 0x4a4097
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x3ded
jge 0x4a4100
and dword [ebp - 0x1b8], 0
jmp 0x4a40b9
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x399e
jge 0x4a40fe
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x2b0]
shl eax, cl
and eax, dword [ebp - 0x1b8]
cdq
mov dword [ebp - 0xb48], eax
mov dword [ebp - 0xb44], edx
push dword [ebp - 0xb44]
push dword [ebp - 0xb48]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x4a40ac
jmp 0x4a408a
jmp 0x4a4064
push 0x5c7
push 0xa92
push 0
call dword [0xade09c]
mov eax, dword [ebp + 8]
mov dword [ebp - 0xd00], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x600], 0x4c36
jge 0x4a4140
mov edx, dword [ebp - 0xd04]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x4a415c
or dword [ebp - 4], 0xffffffff
jmp 0x4a4166
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xd10], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xd3c], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0xb2c], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xb68], eax
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0xb3c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xcf8], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x9e0], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xb34], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x9d8], eax
mov eax, dword [ebp - 0xb2c]
movzx eax, byte [eax]
test eax, eax
je 0x4a4530
mov eax, dword [ebp - 0xb34]
mov dword [ebp - 0xd20], eax
mov eax, dword [ebp - 0xb3c]
mov dword [ebp - 0xd28], eax
mov eax, dword [ebp - 0xcf8]
mov dword [ebp - 0xb24], eax
mov eax, dword [ebp - 0xd00]
mov dword [ebp - 0x9f4], eax
mov eax, dword [ebp - 0xd08]
mov dword [ebp - 0x9b8], eax
mov eax, dword [ebp - 0xd10]
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0xd18]
mov dword [ebp - 0x9c0], eax
mov eax, dword [ebp - 0xd20]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0xd28]
mov dword [ebp - 0xc9c], eax
mov eax, dword [ebp - 0xb24]
mov dword [ebp - 0x974], eax
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0x9c8], eax
mov eax, dword [ebp - 0x9b8]
mov dword [ebp - 0xb60], eax
mov eax, dword [ebp - 0xb64]
mov dword [ebp - 0x938], eax
mov eax, dword [ebp - 0x9c0]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x704], 0x5312
mov dword [ebp - 0x9d0], 0xacabb0
cmp dword [ebp - 0x704], 0x5636
jle 0x4a4373
and dword [ebp - 0x330], 0
jmp 0x4a42aa
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0x347d
jge 0x4a4373
and dword [ebp - 0x1c0], 0
jmp 0x4a42d0
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x3707
jge 0x4a436e
and dword [ebp - 0x2b8], 0
jmp 0x4a42f6
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0x1da8
jge 0x4a4369
and dword [ebp - 0x1c8], 0
jmp 0x4a4318
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x5d7e
jge 0x4a4367
mov eax, dword [ebp - 0x330]
mov ecx, dword [ebp - 0x1c0]
sar eax, cl
mov edx, dword [ebp - 0x2b8]
mov ecx, dword [ebp - 0x1c8]
sar edx, cl
or eax, edx
cdq
mov dword [ebp - 0xb54], eax
mov dword [ebp - 0xb50], edx
push dword [ebp - 0xb50]
push dword [ebp - 0xb54]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x4a430b
jmp 0x4a42e9
jmp 0x4a42c3
jmp 0x4a429d
mov eax, dword [ebp - 0x974]
mov eax, dword [eax]
mov dword [ebp - 0xfc4], eax
mov eax, dword [ebp - 0x158]
cmp dword [eax], 0xffff
jbe 0x4a439b
mov dword [ebp - 0x940], 1
jmp 0x4a43a2
and dword [ebp - 0x940], 0
mov eax, dword [ebp - 0x158]
mov eax, dword [eax]
cmp dword [ebp - 0x940], eax
jle 0x4a43b7
or eax, 0xffffffff
jne 0x4a43cb
mov eax, dword [ebp - 0x158]
cmp dword [eax], 0
jne 0x4a43cb
and dword [ebp - 0x948], 0
jmp 0x4a43d5
mov dword [ebp - 0x948], 1
cmp dword [ebp - 0x948], 0xa9bca7b
jg 0x4a43ed
mov dword [ebp - 0x964], 1
jmp 0x4a43f4
and dword [ebp - 0x964], 0
cmp dword [ebp - 0x964], 1
je 0x4a4409
mov dword [ebp - 0x96c], 1
jmp 0x4a4410
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x96c]
add ecx, 0x5720b963
cmp dword [eax], ecx
jl 0x4a4432
mov dword [ebp - 0x3cc], 1
jmp 0x4a4439
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x974]
mov dword [eax], 1
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x3cc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3cc]
inc eax
mov ecx, dword [ebp - 0x938]
cmp eax, dword [ecx]
jge 0x4a4470
mov dword [ebp - 0x370], 1
jmp 0x4a4477
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x938]
mov ecx, dword [ebp - 0x370]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb60]
mov ecx, dword [ebp - 0x370]
mov dword [eax], ecx
cmp dword [ebp - 0x370], 0xfffffff7
je 0x4a44a8
mov dword [ebp - 0x1d0], 1
jmp 0x4a44af
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x9c8]
mov ecx, dword [ebp - 0x1d0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc9c]
mov ecx, dword [ebp - 0x1d0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x484]
mov eax, dword [eax]
imul eax, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x484]
mov dword [ecx], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x704], 0x4fdc
jge 0x4a4505
mov edx, dword [ebp - 0x9d0]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x4a4521
or dword [ebp - 4], 0xffffffff
jmp 0x4a452b
jmp 0x4acb45
mov eax, dword [ebp - 0xb68]
mov dword [ebp - 0xaa0], eax
mov eax, dword [ebp - 0x9d8]
mov dword [ebp - 0xb0c], eax
mov eax, dword [ebp - 0xd3c]
mov dword [ebp - 0x930], eax
mov eax, dword [ebp - 0x9e0]
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x138], 0x91a049fe
mov dword [ebp - 0xb80], 0xf1a969ac
mov dword [ebp - 0x48c], 0x3f3d
mov dword [ebp - 0xb74], 0xacac00
cmp dword [ebp - 0x48c], 0x4054
jle 0x4a4661
and dword [ebp - 0x338], 0
jmp 0x4a45ae
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0x6328
jge 0x4a4661
and dword [ebp - 0x2c0], 0
jmp 0x4a45d4
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x7b30
jge 0x4a465c
and dword [ebp - 0x1d8], 0
jmp 0x4a45f6
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x3cde
jge 0x4a4657
mov eax, dword [ebp - 0x2c0]
mov ecx, dword [ebp - 0x1d8]
shl eax, cl
xor eax, dword [ebp - 0x338]
cdq
mov dword [ebp - 0xb70], eax
mov dword [ebp - 0xb6c], edx
push dword [ebp - 0xb6c]
push dword [ebp - 0xb70]
lea ecx, [ebp - 0x1218]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x1218]
call fcn.004382eb
jmp 0x4a45e9
jmp 0x4a45c7
jmp 0x4a45a1
push 0
push 0
call fcn.004ad0d6
pop ecx
pop ecx
mov dword [ebp - 4], 4
cmp dword [ebp - 0x48c], 0x3d2d
jge 0x4a468b
push dword [ebp - 0xb74]
call fcn.004b1347
pop ecx
jmp 0x4a46a7
or dword [ebp - 4], 0xffffffff
jmp 0x4a46b1
mov dword [ebp - 0x138], 0xffffffe6
jmp 0x4a46ca
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x11
jl 0x4a4889
mov dword [ebp - 0xc90], 0
mov dword [ebp - 0x844], 0x343b
mov dword [ebp - 0x9e8], 0xacac40
cmp dword [ebp - 0x844], 0x35e6
jle 0x4a4803
and dword [ebp - 0x1e0], 0
jmp 0x4a471b
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x1ced
jge 0x4a4803
and dword [ebp - 0x2c8], 0
jmp 0x4a4741
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x5042
jge 0x4a47fe
and dword [ebp - 0x1e8], 0
jmp 0x4a4767
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x6854
jge 0x4a47f9
and dword [ebp - 0x390], 0
jmp 0x4a478d
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 0x1060
jge 0x4a47f4
mov eax, dword [ebp - 0x1e0]
xor eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x1e8]
add ecx, dword [ebp - 0x390]
xor eax, ecx
cdq
mov dword [ebp - 0xb7c], eax
mov dword [ebp - 0xb78], edx
push dword [ebp - 0xb78]
push dword [ebp - 0xb7c]
lea ecx, [ebp - 0x126c]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x126c]
call fcn.004382eb
jmp 0x4a4780
jmp 0x4a475a
jmp 0x4a4734
jmp 0x4a470e
mov dword [ebp - 0x9f0], 0x5d870a32
mov dword [ebp - 4], 6
cmp dword [ebp - 0x844], 0x30d7
jge 0x4a482c
push dword [ebp - 0x9e8]
call fcn.004b1347
pop ecx
jmp 0x4a4848
or dword [ebp - 4], 0xffffffff
jmp 0x4a4852
push 0
push 0
push 0x5c0f
push 0x48dd
lea eax, [ebp - 0xc90]
push eax
lea eax, [ebp - 0x9f0]
push eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0xb80]
push eax
call fcn.004ace66
add esp, 0x20
jmp 0x4a46bd
mov dword [ebp - 0x494], 0xfffc
mov dword [ebp - 0x9f8], 0x51af7f3
mov dword [ebp - 0x1070], 7
mov dword [ebp - 0x3d4], 0x9753589f
mov dword [ebp - 0x2d0], 6
mov dword [ebp - 0xb8c], 0x1f0dfbc4
mov dword [ebp - 0x1f8], 0xe13c
mov dword [ebp - 0x208], 0x6983c17a
mov dword [ebp - 0x1f0], 0
jmp 0x4a48f2
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 1
jge 0x4a490e
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x414], 0xb4956e74
jmp 0x4a48e5
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0xfc0], eax
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x1158], eax
imul eax, dword [ebp - 0x3d4], 0xffffffff
cmp eax, 0xffffffff
ja 0x4a493e
mov dword [ebp - 0x70c], 1
jmp 0x4a4945
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x9f8]
cmp dword [ebp - 0x70c], eax
jle 0x4a495f
mov dword [ebp - 0x49c], 1
jmp 0x4a4966
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0xcfc], eax
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0xa00], eax
mov eax, dword [ebp - 0x1f8]
dec eax
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0xcfc]
cmp eax, dword [ebp - 0xa00]
jge 0x4a49a5
mov dword [ebp - 0x8e4], 1
jmp 0x4a49ac
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x8e4]
sub eax, 0x3782ecc9
cmp eax, dword [ebp - 0x3d4]
jg 0x4a49cb
mov dword [ebp - 0x4a4], 1
jmp 0x4a49d2
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
add eax, 7
cmp eax, dword [ebp - 0x208]
jne 0x4a49ef
mov dword [ebp - 0x714], 1
jmp 0x4a49f6
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0xb8c]
imul eax, dword [ebp - 0x714]
add eax, 0x230b56bf
cmp eax, 0xffff
jbe 0x4a4a1b
mov dword [ebp - 0x4ac], 1
jmp 0x4a4a22
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x4ac], eax
jle 0x4a4a3c
mov dword [ebp - 0x84c], 1
jmp 0x4a4a43
and dword [ebp - 0x84c], 0
cmp dword [ebp - 0x84c], 0x6b78
jl 0x4a4a5b
mov dword [ebp - 0x4b4], 1
jmp 0x4a4a62
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x4b4], eax
jg 0x4a4a7c
mov dword [ebp - 0x71c], 1
jmp 0x4a4a83
and dword [ebp - 0x71c], 0
cmp dword [ebp - 0x71c], 0xd8e181f5
je 0x4a4a9b
mov dword [ebp - 0x4bc], 1
jmp 0x4a4aa2
and dword [ebp - 0x4bc], 0
cmp dword [ebp - 0x4bc], 4
jb 0x4a4ab7
mov dword [ebp - 0x934], 1
jmp 0x4a4abe
and dword [ebp - 0x934], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x934]
mov dword [ebp + eax - 0x414], ecx
mov eax, 0x360e
test eax, eax
jne 0x4a4aee
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x414], 0
je 0x4a4cd5
push 1
lea ecx, [ebp - 0xe70]
call fcn.0043852b
push 1
push 0
push 0x79c7
push 0x2ce0
lea eax, [ebp - 0xfc8]
push eax
push 0xa5c
lea eax, [ebp - 0xe70]
push eax
call fcn.0048e0d6
add esp, 0x1c
mov dword [ebp - 0x2d0], 0x1c
jmp 0x4a4b3d
mov eax, dword [ebp - 0x2d0]
dec eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x12
jl 0x4a4b5b
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f8]
mov dword [ebp + eax - 0x414], ecx
jmp 0x4a4b30
mov dword [ebp - 0x4c4], 0x1069
mov dword [ebp - 0xa08], 0xacac54
cmp dword [ebp - 0x4c4], 0x1331
jle 0x4a4c59
and dword [ebp - 0x2d8], 0
jmp 0x4a4b95
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0x28e8
jge 0x4a4c59
and dword [ebp - 0x340], 0
jmp 0x4a4bbb
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x2828
jge 0x4a4c54
and dword [ebp - 0x1a0], 0
jmp 0x4a4be1
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x32dd
jge 0x4a4c4f
and dword [ebp - 0x200], 0
jmp 0x4a4c03
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x68cf
jge 0x4a4c4d
mov eax, dword [ebp - 0x340]
imul eax, dword [ebp - 0x1a0]
add eax, dword [ebp - 0x200]
xor eax, dword [ebp - 0x2d8]
cdq
mov dword [ebp - 0xb88], eax
mov dword [ebp - 0xb84], edx
push dword [ebp - 0xb84]
push dword [ebp - 0xb88]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x4a4bf6
jmp 0x4a4bd4
jmp 0x4a4bae
jmp 0x4a4b88
lea eax, [ebp - 0xe70]
push eax
lea eax, [ebp - 0x3d4]
push eax
push 0
push 1
lea eax, [ebp - 0x208]
push eax
push 0x1713
call fcn.00499618
add esp, 0x18
mov dword [ebp - 4], 8
cmp dword [ebp - 0x4c4], 0xc8f
jge 0x4a4ca2
mov edx, dword [ebp - 0xa08]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x4a4cbe
or dword [ebp - 4], 0xffffffff
jmp 0x4a4cc8
lea ecx, [ebp - 0xe70]
call fcn.004385fd
jmp 0x4a4d16
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x4a4d16
push 0
push 0x13df
push 0x41aa
push 0x16c8
push 0x7812
push 0x7473
push 0x1c98
push 0x3787
push 0
call fcn.0049511f
add esp, 0x24
mov byte [ebp - 0xfc], 0
push 0
lea eax, [ebp - 0xfc]
push eax
push 0
call fcn.0047d516
add esp, 0xc
mov dword [ebp - 0x188], 0x91a049fe
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x190], 0x62858905
mov dword [ebp - 0x4e4], 0x51978e60
mov dword [ebp - 0x38], 2
jmp 0x4a4d65
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x14
je 0x4a4dc1
mov dword [ebp - 0xa10], 0xf3de0369
mov dword [ebp - 0xc98], 1
push 1
push 1
push 0x2188
lea eax, [ebp - 0xc98]
push eax
lea eax, [ebp - 0x190]
push eax
push 0x514b
push 0
push 0x5f80
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xa10]
push eax
push 0x6c0a
push 0x11ca
call fcn.0048bd3c
add esp, 0x30
jmp 0x4a4d5e
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x190], eax
jle 0x4a4ddb
mov dword [ebp - 0x854], 1
jmp 0x4a4de2
and dword [ebp - 0x854], 0
cmp dword [ebp - 0x190], 0
je 0x4a4dfd
cmp dword [ebp - 0x38], 0
je 0x4a4dfd
mov dword [ebp - 0x724], 1
jmp 0x4a4e04
and dword [ebp - 0x724], 0
cmp dword [ebp - 0x724], 0xfd03b15a
jae 0x4a4e1c
mov dword [ebp - 0x4cc], 1
jmp 0x4a4e23
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jne 0x4a4e45
cmp dword [ebp - 0x38], 0
jne 0x4a4e45
and dword [ebp - 0x4d4], 0
jmp 0x4a4e4f
mov dword [ebp - 0x4d4], 1
mov eax, dword [ebp - 0x190]
add eax, dword [ebp - 0x854]
cmp eax, dword [ebp - 0x4d4]
jle 0x4a4e6f
mov dword [ebp - 0x72c], 1
jmp 0x4a4e76
and dword [ebp - 0x72c], 0
cmp dword [ebp - 0x72c], 0x1540
je 0x4a4e97
cmp dword [ebp - 0x4e4], 0
je 0x4a4e97
mov dword [ebp - 0x4dc], 1
jmp 0x4a4e9e
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 0x998
jg 0x4a4eb6
mov dword [ebp - 0x8ec], 1
jmp 0x4a4ebd
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x4e4], eax
mov dword [ebp - 0xa98], 0xf1a969ac
mov dword [ebp - 0xa20], 0xf8256a9e
mov dword [ebp - 0xa18], 0x373e
mov dword [ebp - 0xb98], 0
mov dword [ebp - 0xd24], 0xfffffffd
push 3
lea ecx, [ebp - 0xe88]
call fcn.0043852b
mov dword [ebp - 0x378], 0
jmp 0x4a4f21
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 3
jge 0x4a4f40
push dword [ebp - 0x378]
lea ecx, [ebp - 0xe88]
call fcn.00438619
and dword [eax], 0
jmp 0x4a4f14
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x4a4f6d
push 0x2793
push 0x2247
push 0
push 1
push 0x1225
call fcn.0048e31b
add esp, 0x14
lea eax, [ebp - 0xb98]
push eax
push 0x4aa7
push 0x7b0c
lea eax, [ebp - 0xe88]
push eax
push 1
lea eax, [ebp - 0xa18]
push eax
push 0
lea eax, [ebp - 0xd24]
push eax
push 0
lea eax, [ebp - 0xa20]
push eax
call fcn.0049a49c
add esp, 0x28
lea ecx, [ebp - 0xe88]
call fcn.004385fd
mov dword [ebp - 0x4f4], 1
mov dword [ebp - 0x454], 0x34d8a94b
mov dword [ebp - 0x140], 0xfffffffa
mov dword [ebp - 0x4fc], 2
mov dword [ebp - 0xba4], 0xfb57a67d
mov dword [ebp - 0xa28], 1
mov dword [ebp - 0x210], 0
jmp 0x4a5008
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 2
jge 0x4a5024
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0xf10], 0xf1d
jmp 0x4a4ffb
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x1078], eax
cmp dword [ebp - 0x140], 0
je 0x4a504e
cmp dword [ebp - 0x140], 0
je 0x4a504e
mov dword [ebp - 0x85c], 1
jmp 0x4a5055
and dword [ebp - 0x85c], 0
cmp dword [ebp - 0x140], 0x3a3dbc56
jl 0x4a506d
mov dword [ebp - 0x734], 1
jmp 0x4a5074
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x734], eax
jne 0x4a508e
mov dword [ebp - 0x4ec], 1
jmp 0x4a5095
and dword [ebp - 0x4ec], 0
imul eax, dword [ebp - 0x4ec], 0x76f
imul eax, eax, 0x8250
cmp dword [ebp - 0x85c], eax
jl 0x4a50b9
mov dword [ebp - 0x73c], 1
jmp 0x4a50c0
and dword [ebp - 0x73c], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xf10], 0x8ada
mov dword [ebp - 0x4f4], 0x8ada
mov eax, dword [ebp - 0x4f4]
imul eax, dword [ebp - 0x73c]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x4fc], eax
jg 0x4a5114
mov dword [ebp - 0x954], 1
jmp 0x4a511b
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x954]
mov dword [ebp - 0xba4], eax
mov dword [ebp - 0xa28], 1
mov byte [ebp - 0xfe], 0
mov dword [ebp - 0xa4], 0x6923607a
mov dword [ebp - 0x54], 0xe3869393
mov dword [ebp - 0x74c], 0xffffffff
mov dword [ebp - 0x2e0], 0
jmp 0x4a516c
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 2
jge 0x4a5188
mov eax, dword [ebp - 0x2e0]
mov dword [ebp + eax*4 - 0x998], 0xffffffff
jmp 0x4a515f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x998]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x998], eax
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0xa4], eax
jge 0x4a51bd
mov dword [ebp - 0x504], 1
jmp 0x4a51c4
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x504]
sub eax, 0xa
cmp eax, dword [ebp - 0xa4]
jle 0x4a51e1
mov dword [ebp - 0x744], 1
jmp 0x4a51e8
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xa4], eax
jg 0x4a51ff
mov dword [ebp - 0x50c], 1
jmp 0x4a5206
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x744]
add eax, dword [ebp - 0x50c]
cmp eax, dword [ebp - 0x54]
jl 0x4a5223
mov dword [ebp - 0x864], 1
jmp 0x4a522a
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0x864]
sub eax, dword [ebp - 0x54]
je 0x4a5382
mov dword [ebp - 0x54], 0
jmp 0x4a5249
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x4a537d
mov dword [ebp - 0x514], 0x5b84
mov dword [ebp - 0xca0], 0xacac94
cmp dword [ebp - 0x514], 0x5d08
jle 0x4a5325
push 0
push 0x2598
push 0x1356
push 0x1dbd
call dword [0xade0c8]
and dword [ebp - 0x218], 0
jmp 0x4a52a4
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x168a
jge 0x4a5325
and dword [ebp - 0x348], 0
jmp 0x4a52c6
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0x7e5c
jge 0x4a5320
mov eax, dword [ebp - 0x218]
imul eax, dword [ebp - 0x348]
cdq
mov dword [ebp - 0xb94], eax
mov dword [ebp - 0xb90], edx
push dword [ebp - 0xb90]
push dword [ebp - 0xb94]
lea ecx, [ebp - 0x1338]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x1338]
call fcn.004382eb
jmp 0x4a52b9
jmp 0x4a5297
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x998], 1
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x514], 0x5ae0
jge 0x4a5352
push dword [ebp - 0xca0]
call fcn.004b1347
pop ecx
jmp 0x4a536e
or dword [ebp - 4], 0xffffffff
jmp 0x4a5378
jmp 0x4a5242
jmp 0x4a54e0
mov dword [ebp - 0x3dc], 0xffffffff
mov dword [ebp - 0xbb0], 0x69d1fe90
cmp dword [ebp - 0x54], 1
jle 0x4a53a8
mov dword [ebp - 0xa30], 1
jmp 0x4a53af
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xfd0], eax
mov eax, 0xfff9
test eax, eax
ja 0x4a53d0
mov dword [ebp - 0x51c], 1
jmp 0x4a53d7
and dword [ebp - 0x51c], 0
mov dword [ebp - 0x74c], 1
mov eax, dword [ebp - 0x74c]
cmp eax, dword [ebp - 0x51c]
jl 0x4a53fb
mov dword [ebp - 0x8f4], 1
jmp 0x4a5402
and dword [ebp - 0x8f4], 0
mov eax, dword [ebp - 0x3dc]
cmp eax, dword [ebp - 0x8f4]
jne 0x4a541c
mov dword [ebp - 0x524], 1
jmp 0x4a5423
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x524]
sub eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0xa4]
jg 0x4a5443
mov dword [ebp - 0x754], 1
jmp 0x4a544a
and dword [ebp - 0x754], 0
cmp dword [ebp - 0x754], 0
jne 0x4a545f
mov dword [ebp - 0x52c], 1
jmp 0x4a5466
and dword [ebp - 0x52c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x998]
add eax, dword [ebp - 0x52c]
cmp eax, dword [ebp - 0x3dc]
jl 0x4a548d
mov dword [ebp - 0x86c], 1
jmp 0x4a5494
and dword [ebp - 0x86c], 0
cmp dword [ebp - 0x86c], 0x6bd76df3
jg 0x4a54ac
mov dword [ebp - 0x534], 1
jmp 0x4a54b3
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x3dc]
cmp dword [ebp - 0x534], eax
jle 0x4a54cd
mov dword [ebp - 0x75c], 1
jmp 0x4a54d4
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0xbb0], eax
movzx eax, byte [ebp - 0xfe]
test eax, eax
je 0x4a54f6
push 0x11d7
call dword [0xade0ac]
mov dword [ebp - 0xe8], 0x7eede0b4
mov dword [ebp - 0x108], 0xffffffff
push 3
lea ecx, [ebp - 0xd38]
call fcn.0043852b
mov dword [ebp - 0x55c], 0
mov dword [ebp - 0x76c], 1
mov dword [ebp - 0xbbc], 0xadca
mov dword [ebp - 0x574], 1
mov dword [ebp - 0x564], 0x4f412f3a
mov dword [ebp - 0x3e4], 1
push 0x1e1
push 0x76b6
push 0x7d27
push 0
push 0
lea eax, [ebp - 0xd38]
push eax
push 0x4bda
push 1
push 0x2eaa
lea eax, [ebp - 0x170]
push eax
push 0x1151
push 0xed1
push 0x54e8
call fcn.0049ad72
add esp, 0x34
mov dword [ebp - 0x53c], 0x209f
mov dword [ebp - 0xa38], 0xacacc8
cmp dword [ebp - 0x53c], 0x216f
jle 0x4a565b
and dword [ebp - 0x220], 0
jmp 0x4a55d1
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x6906
jge 0x4a5653
and dword [ebp - 0x2e8], 0
jmp 0x4a55f3
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x3120
jge 0x4a564e
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0x2e8]
sar eax, cl
cdq
mov dword [ebp - 0xba0], eax
mov dword [ebp - 0xb9c], edx
push dword [ebp - 0xb9c]
push dword [ebp - 0xba0]
lea ecx, [ebp - 0x12b4]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x12b4]
call fcn.004382eb
jmp 0x4a55e6
jmp 0x4a55c4
push 0
call dword [0xade4f4]
mov dword [ebp - 0x170], 0
jmp 0x4a5674
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jge 0x4a5690
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x1118], 0xc425
jmp 0x4a5667
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x53c], 0x1cc6
jge 0x4a56af
push dword [ebp - 0xa38]
call fcn.004b1347
pop ecx
jmp 0x4a56cb
or dword [ebp - 4], 0xffffffff
jmp 0x4a56d5
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xe8]
add ecx, 0x63ab
add eax, ecx
cmp eax, 0x3c6fe23a
jle 0x4a56fc
mov dword [ebp - 0x93c], 1
jmp 0x4a5703
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x93c], eax
jge 0x4a571d
mov dword [ebp - 0x544], 1
jmp 0x4a5724
and dword [ebp - 0x544], 0
cmp dword [ebp - 0x544], 1
jb 0x4a5739
mov dword [ebp - 0x764], 1
jmp 0x4a5740
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0xe8]
imul eax, dword [ebp - 0x764]
cmp eax, 2
jne 0x4a575e
mov dword [ebp - 0x54c], 1
jmp 0x4a5765
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 3
jae 0x4a577a
mov dword [ebp - 0x874], 1
jmp 0x4a5781
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x874]
jle 0x4a57a7
mov dword [ebp - 0x554], 1
jmp 0x4a57ae
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x554], eax
je 0x4a57c8
mov dword [ebp - 0x41c], 1
jmp 0x4a57cf
and dword [ebp - 0x41c], 0
push 0
lea ecx, [ebp - 0xd38]
call fcn.00438619
mov ecx, dword [ebp - 0x41c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x55c], eax
mov eax, dword [ebp - 0x76c]
inc eax
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0xa40], eax
mov eax, dword [ebp - 0x3e4]
dec eax
mov dword [ebp - 0x3e4], eax
mov eax, dword [ebp - 0x9a8]
cmp eax, dword [ebp - 0xa40]
jne 0x4a583c
mov dword [ebp - 0x8fc], 1
jmp 0x4a5843
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x564], eax
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0xfd8], eax
mov dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x1080], eax
cmp dword [ebp - 0x574], 0
jne 0x4a5881
cmp dword [ebp - 0x108], 0
cmp dword [ebp - 0xbbc], 0x7e6e
jge 0x4a5899
mov dword [ebp - 0x774], 1
jmp 0x4a58a0
and dword [ebp - 0x774], 0
mov esi, dword [ebp - 0x774]
neg esi
push 0
lea ecx, [ebp - 0xd38]
call fcn.00438619
cmp esi, dword [eax]
jg 0x4a58c5
mov dword [ebp - 0x56c], 1
jmp 0x4a58cc
and dword [ebp - 0x56c], 0
cmp dword [ebp - 0x56c], 1
ja 0x4a58e3
xor eax, eax
inc eax
jne 0x4a58e3
and dword [ebp - 0x87c], 0
jmp 0x4a58ed
mov dword [ebp - 0x87c], 1
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x87c], eax
je 0x4a5907
mov dword [ebp - 0xa48], 1
jmp 0x4a590e
and dword [ebp - 0xa48], 0
mov eax, dword [ebp - 0x574]
cmp dword [ebp - 0x108], eax
jg 0x4a5928
mov dword [ebp - 0x77c], 1
jmp 0x4a592f
and dword [ebp - 0x77c], 0
cmp dword [ebp - 0x77c], 3
jne 0x4a5944
mov dword [ebp - 0x57c], 1
jmp 0x4a594b
and dword [ebp - 0x57c], 0
push 0
lea ecx, [ebp - 0xd38]
call fcn.00438619
mov ecx, dword [ebp - 0x57c]
mov dword [eax], ecx
lea ecx, [ebp - 0xd38]
call fcn.004385fd
mov dword [ebp - 0x188], 0xffffffe6
jmp 0x4a5984
cmp dword [ebp - 0x188], 0x11
jl 0x4a6d56
mov dword [ebp - 0x9c], 0xfffffff6
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x584], 1
mov dword [ebp - 0x110], 0xab89bdd7
mov dword [ebp - 0xfe0], 5
mov dword [ebp - 0x112c], 0xfffffffe
mov dword [ebp - 0xa68], 0x83a09977
mov dword [ebp - 0xfe8], 0x1771b705
mov dword [ebp - 0x79c], 6
mov dword [ebp - 0x380], 0x9a97a8d1
mov dword [ebp - 0x1088], 0x96f77d90
mov dword [ebp - 0x970], 0x7931
mov dword [ebp - 0xcac], 0xacad20
cmp dword [ebp - 0x970], 0x7b0c
jle 0x4a5a9e
and dword [ebp - 0x228], 0
jmp 0x4a5a35
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0xd15
jge 0x4a5a96
and dword [ebp - 0x3a0], 0
jmp 0x4a5a57
mov eax, dword [ebp - 0x3a0]
inc eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0x78b2
jge 0x4a5a94
mov eax, dword [ebp - 0x228]
sub eax, dword [ebp - 0x3a0]
cdq
mov dword [ebp - 0xbac], eax
mov dword [ebp - 0xba8], edx
push dword [ebp - 0xba8]
push dword [ebp - 0xbac]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x4a5a4a
jmp 0x4a5a28
push 0
call dword [0xade220]
mov dword [ebp - 0xff0], 0xfffffff9
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x970], 0x7577
jge 0x4a5acb
mov edx, dword [ebp - 0xcac]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x4a5ae7
or dword [ebp - 4], 0xffffffff
jmp 0x4a5af1
mov dword [ebp - 0x1128], 0xde2fd17b
mov dword [ebp - 0x248], 5
mov dword [ebp - 0xff8], 0x3dcdcbd5
mov dword [ebp - 0x5ac], 1
mov dword [ebp - 0xd5c], 0xfffb
mov dword [ebp - 0x230], 0
jmp 0x4a5b3c
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 1
jge 0x4a5b58
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0xcb8], 0xfffffffc
jmp 0x4a5b2f
cmp dword [ebp - 0x9c], 0
je 0x4a5b79
cmp dword [ebp - 0x110], 0xb16
jle 0x4a5b79
mov dword [ebp - 0x784], 1
jmp 0x4a5b80
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x584]
cmp eax, dword [ebp - 0x784]
jle 0x4a5bb2
mov dword [ebp - 0x58c], 1
jmp 0x4a5bb9
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x58c]
jne 0x4a5bd9
mov eax, 0x928d
test eax, eax
jne 0x4a5bd9
and dword [ebp - 0x884], 0
jmp 0x4a5be3
mov dword [ebp - 0x884], 1
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x884], eax
jne 0x4a5bfd
mov dword [ebp - 0x594], 1
jmp 0x4a5c04
and dword [ebp - 0x594], 0
cmp dword [ebp - 0x594], 0xa412
jne 0x4a5c1c
mov dword [ebp - 0x78c], 1
jmp 0x4a5c23
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x78c], eax
jge 0x4a5c4f
cmp dword [ebp - 0x9c], 0
je 0x4a5c4f
cmp dword [ebp - 0x9c], 0
je 0x4a5c4f
mov dword [ebp - 0x59c], 1
jmp 0x4a5c56
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x59c]
sub eax, 0x1c77
cmp eax, 0xffff
ja 0x4a5c74
mov dword [ebp - 0x904], 1
jmp 0x4a5c7b
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x904]
cmp eax, 1
je 0x4a5c98
mov dword [ebp - 0x5a4], 1
jmp 0x4a5c9f
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x5a4], eax
jge 0x4a5cb9
mov dword [ebp - 0x794], 1
jmp 0x4a5cc0
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x794], eax
jle 0x4a5cda
mov dword [ebp - 0xa50], 1
jmp 0x4a5ce1
and dword [ebp - 0xa50], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x1098], eax
push 0xfffffffffffffff7
pop eax
cmp eax, 0x23637b30
jne 0x4a5d03
mov dword [ebp - 0xbc8], 1
jmp 0x4a5d0a
and dword [ebp - 0xbc8], 0
mov eax, dword [ebp - 0x110]
add eax, dword [ebp - 0x9c]
je 0x4a5fa1
mov dword [ebp - 0x1000], 1
mov dword [ebp - 0x1130], 0x6d065835
mov dword [ebp - 0x1008], 0xffffffff
mov dword [ebp - 0xe10], 0x40c8e82
mov dword [ebp - 0xe0c], 0x40c8e82
mov dword [ebp - 0xe08], 0x40c8e82
mov dword [ebp - 0xe04], 0x40c8e82
lea ecx, [ebp - 0x3b9]
call fcn.00438628
push eax
lea eax, [ebp - 0xe00]
push eax
lea eax, [ebp - 0xe10]
push eax
lea ecx, [ebp - 0x11a0]
call fcn.0043862b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1180]
call fcn.004385d7
mov dword [ebp - 0x10a8], 0xd02c9aa6
mov dword [ebp - 0x1010], 0xffffffff
mov dword [ebp - 0x1138], 0xf771
mov dword [ebp - 0x1018], 0x4c67
mov dword [ebp - 0x2f0], 0
jmp 0x4a5dd8
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 2
jge 0x4a5df4
mov eax, dword [ebp - 0x2f0]
mov dword [ebp + eax*4 - 0x11e8], 0xfffffff8
jmp 0x4a5dcb
mov eax, dword [ebp - 0x5ac]
inc eax
mov dword [ebp - 0x5ac], eax
mov dword [ebp - 0x88c], 0x2753
mov dword [ebp - 0xa58], 0xacad84
cmp dword [ebp - 0x88c], 0x2a01
jle 0x4a5f24
and dword [ebp - 0x238], 0
jmp 0x4a5e3b
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x1126
jge 0x4a5f24
and dword [ebp - 0x350], 0
jmp 0x4a5e61
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0x54f0
jge 0x4a5f1f
and dword [ebp - 0x240], 0
jmp 0x4a5e87
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x35ae
jge 0x4a5f1a
and dword [ebp - 0x2f8], 0
jmp 0x4a5ead
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0x57d5
jge 0x4a5f15
mov eax, dword [ebp - 0x238]
imul eax, dword [ebp - 0x350]
sub eax, dword [ebp - 0x240]
mov ecx, dword [ebp - 0x2f8]
shl eax, cl
cdq
mov dword [ebp - 0xbb8], eax
mov dword [ebp - 0xbb4], edx
push dword [ebp - 0xbb4]
push dword [ebp - 0xbb8]
lea ecx, [ebp - 0x1308]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x1308]
call fcn.004382eb
jmp 0x4a5ea0
jmp 0x4a5e7a
jmp 0x4a5e54
jmp 0x4a5e2e
mov byte [ebp - 0xbd], 0
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x88c], 0x236e
jge 0x4a5f4a
push dword [ebp - 0xa58]
call fcn.004b1347
pop ecx
jmp 0x4a5f66
or dword [ebp - 4], 0xffffffff
jmp 0x4a5f70
push 0
push 1
push 0xd54
push 1
lea eax, [ebp - 0xbd]
push eax
push 0x4d06
push 0x4bf5
call fcn.004821e2
add esp, 0x1c
lea ecx, [ebp - 0x1180]
call fcn.004385fd
jmp 0x4a5fb7
mov dword [ebp - 0xa60], 1
mov eax, dword [ebp - 0xd5c]
mov dword [ebp - 0xa60], eax
mov dword [ebp - 0x248], 0xc
jmp 0x4a5fd0
mov eax, dword [ebp - 0x248]
dec eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0xffffffe7
jl 0x4a62ec
mov dword [ebp - 0x43c], 0xf543
mov dword [ebp - 0x358], 0xffffffff
push 0x2990
push 0
push 0x7729
push 0
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x358]
push eax
push 0x2c88
call fcn.004959c6
add esp, 0x1c
mov dword [ebp - 0x380], 0x1b
jmp 0x4a6033
cmp dword [ebp - 0x380], 9
jg 0x4a62e7
mov dword [ebp - 0x5b4], 0x19c2
mov dword [ebp - 0xbd4], 0xacada0
cmp dword [ebp - 0x5b4], 0x1c49
jle 0x4a60da
and dword [ebp - 0x250], 0
jmp 0x4a6076
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x7d36
jge 0x4a60da
and dword [ebp - 0x300], 0
jmp 0x4a6098
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0x783f
jge 0x4a60d8
mov eax, dword [ebp - 0x250]
cdq
idiv dword [ebp - 0x300]
mov eax, edx
cdq
mov dword [ebp - 0xbc4], eax
mov dword [ebp - 0xbc0], edx
push dword [ebp - 0xbc0]
push dword [ebp - 0xbc4]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x4a608b
jmp 0x4a6069
mov dword [ebp - 0x148], 0xffff
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x5b4], 0x17bd
jge 0x4a6107
mov edx, dword [ebp - 0xbd4]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x4a6123
or dword [ebp - 4], 0xffffffff
jmp 0x4a612d
mov dword [ebp - 0xa70], 0x1463d90b
cmp dword [ebp - 0x148], 0
jne 0x4a616a
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x79c], eax
cmp dword [ebp - 0x79c], 0
jne 0x4a616a
and dword [ebp - 0x5bc], 0
jmp 0x4a6174
mov dword [ebp - 0x5bc], 1
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0xa68], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcb8], 0xfffffff6
jge 0x4a619c
mov dword [ebp - 0x944], 1
jmp 0x4a61a3
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x358]
cmp dword [ebp - 0x944], eax
jle 0x4a61bd
mov dword [ebp - 0x5c4], 1
jmp 0x4a61c4
and dword [ebp - 0x5c4], 0
cmp dword [ebp - 0x5c4], 0x14d5
jle 0x4a61dc
mov dword [ebp - 0x7a4], 1
jmp 0x4a61e3
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x7a4], eax
jge 0x4a61fd
mov dword [ebp - 0x5cc], 1
jmp 0x4a6204
and dword [ebp - 0x5cc], 0
cmp dword [ebp - 0x5cc], 1
jne 0x4a6219
mov dword [ebp - 0x894], 1
jmp 0x4a6220
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x894], eax
jl 0x4a623a
mov dword [ebp - 0x5d4], 1
jmp 0x4a6241
and dword [ebp - 0x5d4], 0
cmp dword [ebp - 0x5d4], 0x4dcb
jl 0x4a6259
mov dword [ebp - 0x7ac], 1
jmp 0x4a6260
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x43c]
cmp dword [ebp - 0x7ac], eax
jg 0x4a6280
cmp dword [ebp - 0x148], 0
jne 0x4a6280
and dword [ebp - 0x5dc], 0
jmp 0x4a628a
mov dword [ebp - 0x5dc], 1
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - 0xa70], eax
cmp dword [ebp - 0x43c], 0xb87b
je 0x4a62ae
mov dword [ebp - 0x90c], 1
jmp 0x4a62b5
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x90c]
jge 0x4a62cf
jmp 0x4a5fc3
mov dword [ebp - 0xd2c], 0
push 3
lea ecx, [ebp - 0x960]
call fcn.0043852b
push 2
lea ecx, [ebp - 0x984]
call fcn.0043852b
mov dword [ebp - 0x8a4], 1
mov dword [ebp - 0x614], 0x6b43d271
mov dword [ebp - 0xa80], 0xfffffffc
mov dword [ebp - 0x7b4], 0x6ecf
mov dword [ebp - 0xbe0], 0xacadf4
cmp dword [ebp - 0x7b4], 0x7260
jle 0x4a642e
and dword [ebp - 0x260], 0
jmp 0x4a6368
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x790f
jge 0x4a642e
and dword [ebp - 0x308], 0
jmp 0x4a638e
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0x43bc
jge 0x4a6429
and dword [ebp - 0x268], 0
jmp 0x4a63b4
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x2a84
jge 0x4a6424
and dword [ebp - 0x398], 0
jmp 0x4a63d6
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0x5730
jge 0x4a6422
mov eax, dword [ebp - 0x260]
imul eax, dword [ebp - 0x308]
mov ecx, dword [ebp - 0x268]
and ecx, dword [ebp - 0x398]
xor eax, ecx
cdq
mov dword [ebp - 0xbd0], eax
mov dword [ebp - 0xbcc], edx
push dword [ebp - 0xbcc]
push dword [ebp - 0xbd0]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x4a63c9
jmp 0x4a63a7
jmp 0x4a6381
jmp 0x4a635b
lea eax, [ebp - 0xa78]
push eax
lea eax, [ebp - 0x960]
push eax
push 0
push 0x5c0f
push 0x6d76
call fcn.004acd41
add esp, 0x14
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x7b4], 0x6c06
jge 0x4a6473
mov edx, dword [ebp - 0xbe0]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x4a648f
or dword [ebp - 4], 0xffffffff
jmp 0x4a6499
push 0
lea eax, [ebp - 0xa78]
push eax
lea eax, [ebp - 0x984]
push eax
call fcn.004ad423
add esp, 0xc
push 1
lea ecx, [ebp - 0x960]
call fcn.00438619
push 1
lea ecx, [ebp - 0x960]
call fcn.00438619
push 1
lea ecx, [ebp - 0x960]
call fcn.00438619
push 1
lea ecx, [ebp - 0x984]
call fcn.00438619
mov dword [ebp - 0x5ec], eax
push 0
lea ecx, [ebp - 0x960]
call fcn.00438619
mov ecx, dword [ebp - 0x5ec]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x5ec]
cmp dword [eax], 0
je 0x4a6814
mov dword [ebp - 0x278], 1
mov dword [ebp - 0xe24], 0xefa1e1c5
mov dword [ebp - 0xe20], 0xefa1e1c5
mov dword [ebp - 0xe1c], 0xefa1e1c5
mov dword [ebp - 0xe18], 0xefa1e1c5
lea ecx, [ebp - 0x44d]
call fcn.00438628
push eax
lea eax, [ebp - 0xe14]
push eax
lea eax, [ebp - 0xe24]
push eax
lea ecx, [ebp - 0x1200]
call fcn.0043862b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xe94]
call fcn.004385d7
mov dword [ebp - 0x89c], 0x5d5a
mov dword [ebp - 0xd0c], 0xacae30
cmp dword [ebp - 0x89c], 0x60c3
jle 0x4a661e
push 0x408
call dword [0xade45c]
and dword [ebp - 0x270], 0
jmp 0x4a65bd
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x613e
jge 0x4a661e
and dword [ebp - 0x310], 0
jmp 0x4a65df
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x3c70
jge 0x4a661c
mov eax, dword [ebp - 0x270]
or eax, dword [ebp - 0x310]
cdq
mov dword [ebp - 0xbdc], eax
mov dword [ebp - 0xbd8], edx
push dword [ebp - 0xbd8]
push dword [ebp - 0xbdc]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x4a65d2
jmp 0x4a65b0
mov dword [ebp - 0x60c], 0xffffffff
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x89c], 0x5ab9
jge 0x4a664b
mov edx, dword [ebp - 0xd0c]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x4a6667
or dword [ebp - 4], 0xffffffff
jmp 0x4a6671
cmp dword [ebp - 0x278], 0
je 0x4a668f
cmp dword [ebp - 0x278], 0
je 0x4a668f
mov dword [ebp - 0x7bc], 1
jmp 0x4a6696
and dword [ebp - 0x7bc], 0
mov eax, 0xd495
test eax, eax
je 0x4a66b4
cmp dword [ebp - 0x8a4], 0
je 0x4a66b4
mov dword [ebp - 0x5f4], 1
jmp 0x4a66bb
and dword [ebp - 0x5f4], 0
push 1
lea ecx, [ebp - 0xe94]
call fcn.00438619
mov ecx, dword [ebp - 0x5f4]
cmp ecx, dword [eax]
je 0x4a66de
mov dword [ebp - 0x5fc], 1
jmp 0x4a66e5
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x278]
cmp eax, dword [ebp - 0x5fc]
je 0x4a670b
mov dword [ebp - 0x968], 1
jmp 0x4a6712
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x614]
cmp dword [ebp - 0x968], eax
jg 0x4a672c
mov dword [ebp - 0x604], 1
jmp 0x4a6733
and dword [ebp - 0x604], 0
push 1
lea ecx, [ebp - 0x960]
call fcn.00438619
mov ecx, dword [ebp - 0x604]
cmp ecx, dword [eax]
jge 0x4a6756
mov dword [ebp - 0x3ec], 1
jmp 0x4a675d
and dword [ebp - 0x3ec], 0
push 3
lea ecx, [ebp - 0xe94]
call fcn.00438619
mov ecx, dword [ebp - 0x3ec]
mov dword [eax], ecx
cmp dword [ebp - 0x3ec], 0
jne 0x4a678d
mov eax, 0xfffb
test eax, eax
jne 0x4a678d
mov dword [ebp - 0x7c4], 1
push 1
lea ecx, [ebp - 0x984]
call fcn.00438619
mov eax, dword [eax]
add eax, dword [ebp - 0x7c4]
mov dword [ebp - 0x60c], eax
mov esi, dword [ebp - 0x60c]
imul esi, dword [ebp - 0x8a4]
push 1
lea ecx, [ebp - 0x984]
call fcn.00438619
mov dword [eax], esi
push 0
lea eax, [ebp - 0x984]
push eax
lea eax, [ebp - 0xa80]
push eax
push 0x2bf4
push 1
push 0x7285
lea eax, [ebp - 0x614]
push eax
push 0x6190
lea eax, [ebp - 0x960]
push eax
push 0
call fcn.00499f01
add esp, 0x28
lea ecx, [ebp - 0xe94]
call fcn.004385fd
jmp 0x4a6867
mov dword [ebp - 0xbec], 1
push 1
lea ecx, [ebp - 0x984]
call fcn.00438619
cmp dword [eax], 0xca8c
jg 0x4a683f
mov dword [ebp - 0x424], 1
jmp 0x4a6846
and dword [ebp - 0x424], 0
push 1
lea ecx, [ebp - 0x984]
call fcn.00438619
mov ecx, dword [ebp - 0x424]
mov dword [eax], ecx
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0xbec], eax
mov byte [ebp - 0x100], 0
movzx eax, byte [ebp - 0x100]
test eax, eax
je 0x4a6881
push 0
call dword [0xade4bc]
lea ecx, [ebp - 0x984]
call fcn.004385fd
lea ecx, [ebp - 0x960]
call fcn.004385fd
mov dword [ebp - 0xbf8], 0x5d870a32
mov dword [ebp - 0x1c], 0xf2ee
mov dword [ebp - 0x24], 0x7e780ca9
mov dword [ebp - 0x30], 0xb7c7
push 4
lea ecx, [ebp - 0xdb4]
call fcn.0043852b
mov dword [ebp - 0xa90], 0x6802
push 0x199a
lea eax, [ebp - 0xdb4]
push eax
push 0
push 0x62ab
push 0x675
push 0x45d
lea eax, [ebp - 0x10b8]
push eax
push 0x66d6
push 0x62b
push 0x3481
push 0x2cfc
push 0x23c8
push 0
push 0x20d7
call fcn.0047fd96
add esp, 0x38
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1020], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1134], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xf24], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
je 0x4a6948
mov dword [ebp - 0x7cc], 1
jmp 0x4a694f
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xe9e84363
je 0x4a696d
mov dword [ebp - 0x61c], 1
jmp 0x4a6974
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x61c]
sub eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x4a698e
mov dword [ebp - 0x914], 1
jmp 0x4a6995
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x914], eax
jl 0x4a69ac
mov dword [ebp - 0x624], 1
jmp 0x4a69b3
and dword [ebp - 0x624], 0
cmp dword [ebp - 0x624], 0xfadf6285
jbe 0x4a69cb
mov dword [ebp - 0x7d4], 1
jmp 0x4a69d2
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x7d4], eax
jg 0x4a69e9
mov dword [ebp - 0x62c], 1
jmp 0x4a69f0
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x62c]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x4a6bbd
mov dword [ebp - 0x3f4], 1
mov dword [ebp - 0x24], 0
jmp 0x4a6a1d
cmp dword [ebp - 0x24], 3
jg 0x4a6bb8
mov dword [ebp - 0x360], 0xfffffff7
cmp dword [ebp - 0x3f4], 1
jl 0x4a6a46
jmp 0x4a6cd0
push 3
lea ecx, [ebp - 0xea0]
call fcn.0043852b
mov dword [ebp - 0xa88], 0xd55faf23
mov dword [ebp - 0xcc4], 0x9b34
mov dword [ebp - 0x280], 0
jmp 0x4a6bf7
cmp dword [ebp - 0x280], 3
jge 0x4a6c19
push dword [ebp - 0x280]
lea ecx, [ebp - 0xea0]
call fcn.00438619
mov dword [eax], 5
jmp 0x4a6bea
mov dword [ebp - 0x1c], 0x10
jmp 0x4a6c29
mov eax, dword [ebp - 0xaa0]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x388], 0
mov dword [ebp - 0xf2c], 0xcd16652d
mov dword [ebp - 0xf34], 0xedad94e8
mov dword [ebp - 0xf3c], 0xfffffff6
mov dword [ebp - 0xf44], 0xba7c
mov dword [ebp - 0xf4c], 0xe99e855c
mov dword [ebp - 0x6c], 0
jmp 0x4a6db1
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x4a6dc7
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x123c], 0xdf7cd95d
jmp 0x4a6daa
mov dword [ebp - 0x64c], 0x4615
mov dword [ebp - 0xc04], 0xacae88
cmp dword [ebp - 0x64c], 0x4663
jle 0x4a6e61
and dword [ebp - 0x318], 0
jmp 0x4a6dfd
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0x3d2
jge 0x4a6e61
and dword [ebp - 0x288], 0
jmp 0x4a6e1f
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x5c24
jge 0x4a6e5f
mov eax, dword [ebp - 0x318]
cdq
idiv dword [ebp - 0x288]
mov eax, edx
cdq
mov dword [ebp - 0xbe8], eax
mov dword [ebp - 0xbe4], edx
push dword [ebp - 0xbe4]
push dword [ebp - 0xbe8]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x4a6e12
jmp 0x4a6df0
mov dword [ebp - 0x6c], 0
jmp 0x4a6e71
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x4a6e87
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xde8], 8
jmp 0x4a6e6a
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x64c], 0x45aa
jge 0x4a6eaa
mov edx, dword [ebp - 0xc04]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x4a6ec6
or dword [ebp - 4], 0xffffffff
jmp 0x4a6ed0
mov dword [ebp - 0x388], 0xfffffff7
jmp 0x4a6ee9
mov eax, dword [ebp - 0x388]
dec eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 0xfffffff1
jl 0x4a70ec
mov dword [ebp - 0x150], 0xfffffff9
mov dword [ebp - 0xf54], 0x7b7f609b
mov dword [ebp - 0xef0], 9
mov dword [ebp - 0xef4], 0xfffffffe
mov dword [ebp - 0xefc], 0xfffffff9
mov dword [ebp - 0xf04], 0
mov dword [ebp - 0xf94], 0x8cd3bed1
push 1
lea ecx, [ebp - 0x1094]
call fcn.0043852b
mov dword [ebp - 0xf9c], 0xdc9fe9a5
mov dword [ebp - 0xfa4], 0xffffffff
mov dword [ebp - 0xfac], 6
lea eax, [ebp - 0xfb4]
push eax
push 0
lea eax, [ebp - 0x1094]
push eax
push 0x65d2
push 0
call fcn.0049bbf7
add esp, 0x14
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x4a6fae
push 0x6210
push 0
push 1
push 0x6f32
call fcn.0048d093
add esp, 0x10
mov dword [ebp - 0x150], 0xfffffff0
jmp 0x4a6fc7
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xfffffffc
jg 0x4a70dc
mov dword [ebp - 0xcd0], 0xffffffff
mov dword [ebp - 0xfbc], 9
mov dword [ebp - 0xeec], 0xfffffff9
mov dword [ebp - 0xfcc], 0xffffffff
mov dword [ebp - 0x5c], 0
jmp 0x4a700c
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x4a7022
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xaa8], 0xe5e81a7e
jmp 0x4a7005
mov dword [ebp - 0x5c], 0
jmp 0x4a7032
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x4a7048
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x11f8], 0x51ae9a07
jmp 0x4a702b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xde8]
dec eax
mov dword [ebp - 0x8b4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8b4]
mov dword [ebp + eax - 0xde8], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaa8]
sub eax, dword [ebp - 0x8b4]
cmp dword [ebp - 0x150], eax
jl 0x4a7096
mov dword [ebp - 0x44c], 1
jmp 0x4a709d
and dword [ebp - 0x44c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x44c]
mov dword [ebp + eax - 0x11f8], ecx
cmp dword [ebp - 0x44c], 0
jge 0x4a70c4
mov dword [ebp - 0x654], 1
jmp 0x4a70cb
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x654]
mov dword [ebp - 0xcd0], eax
jmp 0x4a6fba
lea ecx, [ebp - 0x1094]
call fcn.004385fd
jmp 0x4a6edc
cmp dword [ebp - 0x438], 0
jle 0x4acb45
mov dword [ebp - 0x120], 0x399841b3
mov dword [ebp - 0x3fc], 0
mov dword [ebp - 0x7ec], 0xe1f
mov dword [ebp - 0xab0], 0xacaedc
cmp dword [ebp - 0x7ec], 0x10fc
jle 0x4a71c8
and dword [ebp - 0x290], 0
jmp 0x4a7147
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0x6f65
jge 0x4a71c8
and dword [ebp - 0x320], 0
jmp 0x4a7169
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0x7a9d
jge 0x4a71c3
mov eax, dword [ebp - 0x290]
imul eax, dword [ebp - 0x320]
cdq
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xbf0], edx
push dword [ebp - 0xbf0]
push dword [ebp - 0xbf4]
lea ecx, [ebp - 0x1230]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x1230]
call fcn.004382eb
jmp 0x4a715c
jmp 0x4a713a
mov dword [ebp - 0x178], 8
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x7ec], 0xb5d
jge 0x4a71f1
push dword [ebp - 0xab0]
call fcn.004b1347
pop ecx
jmp 0x4a720d
or dword [ebp - 4], 0xffffffff
jmp 0x4a7217
mov dword [ebp - 0xc1c], 0x12bad479
push 3
lea ecx, [ebp - 0xd9c]
call fcn.0043852b
mov dword [ebp - 0x804], 0x227283a3
mov dword [ebp - 0x68c], 0x51abe719
mov dword [ebp - 0x7c], 0
jmp 0x4a7252
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x4a7268
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xd48], 0x9ed02e88
jmp 0x4a724b
mov dword [ebp - 0x7c], 0
jmp 0x4a7278
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x4a7294
push dword [ebp - 0x7c]
lea ecx, [ebp - 0xd9c]
call fcn.00438619
mov dword [eax], 0x411e69d0
jmp 0x4a7271
mov dword [ebp - 0x120], 0xffffffec
jmp 0x4a72ad
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0xb
jle 0x4a76a2
mov dword [ebp - 0xf0], 0x57102d14
mov dword [ebp - 0x404], 0x3cc47d1a
mov dword [ebp - 0xf0], 0
jmp 0x4a72e7
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xffffffed
jne 0x4a769d
mov dword [ebp - 0x65c], 0x7983
mov dword [ebp - 0xc10], 0xacaef8
cmp dword [ebp - 0x65c], 0x7b91
jle 0x4a738b
and dword [ebp - 0x298], 0
jmp 0x4a732a
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x350a
jge 0x4a738b
and dword [ebp - 0x368], 0
jmp 0x4a734c
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0xcf7
jge 0x4a7389
mov eax, dword [ebp - 0x298]
and eax, dword [ebp - 0x368]
cdq
mov dword [ebp - 0xc00], eax
mov dword [ebp - 0xbfc], edx
push dword [ebp - 0xbfc]
push dword [ebp - 0xc00]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x4a733f
jmp 0x4a731d
mov dword [ebp - 0xac8], 0xd5a5
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x65c], 0x778f
jge 0x4a73b8
mov edx, dword [ebp - 0xc10]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x4a73d4
or dword [ebp - 4], 0xffffffff
jmp 0x4a73de
mov dword [ebp - 0xd14], 0x79b69b2e
mov dword [ebp - 0xcdc], 0x17473468
mov dword [ebp - 0x664], 0x829ed890
mov dword [ebp - 0xad0], 0xffff
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x3fc]
cmp dword [ebp - 0x178], eax
je 0x4a742d
mov dword [ebp - 0x67c], 1
jmp 0x4a7434
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x91c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x91c]
mov dword [ebp + eax - 0xd48], ecx
cmp dword [ebp - 0x91c], 0
jne 0x4a752a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd48], 0
jne 0x4a752a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd48]
mov dword [ebp - 0x664], eax
cmp dword [ebp - 0x664], 0
jne 0x4a74a2
mov eax, 0xfff9
test eax, eax
jne 0x4a74a2
and dword [ebp - 0x7f4], 0
jmp 0x4a74ac
mov dword [ebp - 0x7f4], 1
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x7f4], eax
jle 0x4a74c6
mov dword [ebp - 0x66c], 1
jmp 0x4a74cd
and dword [ebp - 0x66c], 0
cmp dword [ebp - 0x66c], 0xffffffff
jae 0x4a74e2
mov dword [ebp - 0x8bc], 1
jmp 0x4a74e9
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x8bc]
add eax, 0xdedc87a9
mov dword [ebp - 0x674], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x674]
mov dword [ebp + eax - 0xd48], ecx
mov eax, dword [ebp - 0x404]
cmp dword [ebp - 0x674], eax
je 0x4a752a
push 3
pop eax
test eax, eax
jne 0x4a752a
and dword [ebp - 0x7fc], 0
jmp 0x4a7534
mov dword [ebp - 0x7fc], 1
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x7fc], eax
jne 0x4a754e
mov dword [ebp - 0xab8], 1
jmp 0x4a7555
and dword [ebp - 0xab8], 0
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0xfd4], eax
cmp dword [ebp - 0xd14], 0xb38b4b72
ja 0x4a7585
mov dword [ebp - 0x978], 1
jmp 0x4a758c
and dword [ebp - 0x978], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x978], eax
jl 0x4a75a6
mov dword [ebp - 0x684], 1
jmp 0x4a75ad
and dword [ebp - 0x684], 0
cmp dword [ebp - 0x684], 0
jne 0x4a75c8
cmp dword [ebp - 0x178], 0
jne 0x4a75c8
and dword [ebp - 0xac0], 0
jmp 0x4a75d2
mov dword [ebp - 0xac0], 1
mov eax, dword [ebp - 0xc1c]
mov dword [ebp - 0xfdc], eax
cmp dword [ebp - 0x404], 0
jne 0x4a75ff
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xd48], 0
jne 0x4a75ff
and dword [ebp - 0x42c], 0
jmp 0x4a7609
mov dword [ebp - 0x42c], 1
push 0
lea ecx, [ebp - 0xd9c]
call fcn.00438619
mov ecx, dword [ebp - 0x42c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x804], eax
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x68c], eax
push 0x7686
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0xd9c]
push eax
push 0x79e7
push 1
push 0x3c7e
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0xac8]
push eax
lea eax, [ebp - 0xcdc]
push eax
push 0x38e2
push 0x2b19
push 0
push 0xdc7
lea eax, [ebp - 0xad0]
push eax
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.0047d67b
add esp, 0x40
jmp 0x4a72da
jmp 0x4a72a0
lea ecx, [ebp - 0xd9c]
call fcn.004385fd
mov dword [ebp - 0xc28], 0
mov dword [ebp - 0x2a0], 0
jmp 0x4a76d0
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 4
jge 0x4a76ec
mov eax, dword [ebp - 0x2a0]
mov dword [ebp + eax*4 - 0x1360], 0xdf99
jmp 0x4a76c3
push 0x65c3
push 0x7469
lea eax, [ebp - 0xc28]
push eax
push 0
push 0
call fcn.004ad890
add esp, 0x14
mov dword [ebp - 0x8c4], 0x5933
mov dword [ebp - 0xad8], 0xacaf50
cmp dword [ebp - 0x8c4], 0x5aec
jle 0x4a77fc
and dword [ebp - 0x1a8], 0
jmp 0x4a7743
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x6d2a
jge 0x4a77f6
and dword [ebp - 0x328], 0
jmp 0x4a7769
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0xaf8
jge 0x4a77f1
and dword [ebp - 0x2a8], 0
jmp 0x4a778b
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x2c7b
jge 0x4a77ec
mov eax, dword [ebp - 0x328]
mov ecx, dword [ebp - 0x2a8]
shl eax, cl
and eax, dword [ebp - 0x1a8]
cdq
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], edx
push dword [ebp - 0xc08]
push dword [ebp - 0xc0c]
lea ecx, [ebp - 0x1254]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x1254]
call fcn.004382eb
jmp 0x4a777e
jmp 0x4a775c
jmp 0x4a7736
call dword [0xade3c0]
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x8c4], 0x55d4
jge 0x4a781b
push dword [ebp - 0xad8]
call fcn.004b1347
pop ecx
jmp 0x4a7837
or dword [ebp - 4], 0xffffffff
jmp 0x4a7841
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x6cc], 0x1a76a447
push 1
lea ecx, [ebp - 0xed0]
call fcn.0043852b
mov dword [ebp - 0x64], 0
jmp 0x4a786f
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x4a7885
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x3ac], 0xea75
jmp 0x4a7868
mov dword [ebp - 0x64], 0
jmp 0x4a7895
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x4a78b1
push dword [ebp - 0x64]
lea ecx, [ebp - 0xed0]
call fcn.00438619
mov dword [eax], 0x5662b132
jmp 0x4a788e
mov byte [ebp - 0x104], 0
movzx eax, byte [ebp - 0x104]
test eax, eax
je 0x4a78d4
push 0
push 0x3ef2
push 1
call fcn.0047d516
add esp, 0xc
mov dword [ebp - 0x34], 1
jmp 0x4a78e4
cmp dword [ebp - 0x34], 0
jl 0x4a7d08
mov dword [ebp - 0x130], 0xd4ea6801
mov dword [ebp - 0x444], 0
push 4
lea ecx, [ebp - 0xeb8]
call fcn.0043852b
mov dword [ebp - 0x8cc], 0xfffffff8
mov dword [ebp - 0x6bc], 0xffff
push 0
push 0
lea eax, [ebp - 0xfe4]
push eax
lea eax, [ebp - 0xeb8]
push eax
call fcn.0047f169
add esp, 0x10
mov dword [ebp - 0x130], 1
jmp 0x4a7956
cmp dword [ebp - 0x130], 0
jl 0x4a7bf5
mov dword [ebp - 0xf8], 0xffffffff
mov dword [ebp - 0xd4c], 0x32a831d2
mov dword [ebp - 0x69c], 0x7216709e
mov dword [ebp - 0xf8], 1
jmp 0x4a799a
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x3ac], 0
jne 0x4a7c0f
lea ecx, [ebp - 0xed0]
call fcn.004385fd
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x198], 0x256915a
mov dword [ebp - 0x1ac], 0
jmp 0x4a7d40
cmp dword [ebp - 0x1ac], 1
jge 0x4a7d5c
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x82c], 0
jmp 0x4a7d33
mov byte [ebp - 0xcf], 0
lea eax, [ebp - 0xcf]
push eax
push 1
push 0
call fcn.0048cdc7
add esp, 0xc
mov dword [ebp - 0x198], 0
jmp 0x4a7d8f
jmp 0x4acb55
push 0x79a7
push 1
call fcn.0048cdb2
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret